Skip to content

Debian repository needs a new key, SHA1 no longer accepted #4127

@DavidGoodenough

Description

@DavidGoodenough

Version(s)
N/a

Describe the bug

Current version of apt on sid no longer accepts SHA1 PGP keys so scala-cli is no longer installable.

OpenPGP signature verification failed: https://virtuslab.github.io/scala-cli-packages/debian ./ InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on E77ADC545062908539D5DBD61B92C29C942DFC9B is not bound: No binding signature at time 2026-02-06T11:10:41Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z

Metadata

Metadata

Labels

bugSomething isn't workinginstallationEverything related to installing the CLI itself

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions