> On Sun, 30 Oct 2022 11:52:57 -0400 =?UTF-8?Q?Louis-Philippe_V=c3=a9ronneau?= > <[email protected]> wrote: > The latest upstream version of python-mediafile (10.0.1)[1] switched > from signing the git tag with an OpenPGP key to doing it an SSH key.
Dear Maintainers, The same happened with python-argon2 and python-argon2-cffi-bindings: upstream switched from GPG keys to SSH keys for signing tags. Since uscan only supports GPG verification, we currently lose automatic authenticity checks for new releases. Best, -- Carl
signature.asc
Description: PGP signature
