An issue with hardware security key is currently preventing builds from
being signed with our GPG key. This affects both direct uploads and
builds performed on Flathub infra. Since no builds can be signed thus
published, the build service including test builds are also
disrupted.
(13:56 UTC — Feb 17)
We are in contact with the data center staff to investigate the
issue physically.
(17:49 UTC — Feb 19)
Data centre staff attempted reseating the signing key across available
USB ports without success. We are now arranging delivery and
installation of a replacement key.
(16:46 UTC — Feb 20)
What’s the impact here? Obviously no updates until new key, but will the new key trigger security warnings on future updates?