{
  "schemaVersion": "bitshovel-editorial-review-v1",
  "id": "reader-service-7-20260906",
  "signalId": "feed-story-github-blog-changelog-2026-09-03-github-cli-linux-pa-36fb2206399fd4d1",
  "originalUrl": "https://github.blog/changelog/2026-09-03-github-cli-linux-package-signing-key-expires-september-5",
  "kind": "evidence-review",
  "reviewedAt": "2026-09-06T03:48:28.407Z",
  "before": {
    "id": "feed-story-github-blog-changelog-2026-09-03-github-cli-linux-pa-36fb2206399fd4d1",
    "state": "new",
    "lane": "platformShift",
    "publishedAt": "2026-09-03T19:05:40.000Z",
    "observedAt": "2026-09-05T10:03:05.417Z",
    "originalUrl": "https://github.blog/changelog/2026-09-03-github-cli-linux-package-signing-key-expires-september-5",
    "relatedSources": [
      {
        "label": {
          "zh": "GitHub Changelog 频道",
          "en": "GitHub Changelog feed"
        },
        "url": "https://github.blog/changelog/"
      }
    ],
    "source": {
      "zh": "GitHub Changelog 一手发布",
      "en": "GitHub Changelog first-party post"
    },
    "title": {
      "zh": "GitHub CLI 旧密钥 9 月 5 日到期：核对 APT/RPM 环境",
      "en": "GitHub CLI's old key expires September 5: check APT/RPM environments"
    },
    "summary": {
      "zh": "GitHub CLI 官方 Linux 仓库的旧 PGP 密钥到期日为 2026 年 9 月 5 日。到期后首个版本起，APT/RPM 元数据及新 RPM 包只用替换密钥签名；4 月 8 日已发布含新旧密钥的 keyring。",
      "en": "The old PGP key for GitHub CLI’s official Linux repositories expires September 5, 2026. From the first release after that date, APT/RPM metadata and new RPM packages use only its replacement; a dual-key keyring was published April 8."
    },
    "why": {
      "zh": "通过官方 APT/RPM 安装 gh 的开发者应检查本机、基础镜像和 CI，尤其是 4 月 8 日前配置且未更新的环境。按官方完整公告核对新密钥，再更新对应安装配置，可避免后续安装或更新受阻。",
      "en": "Developers using official APT/RPM repositories should check machines, base images and CI, especially unchanged pre-April 8 setups. Verify the replacement key and update the matching installation configuration using the official instructions."
    },
    "caveat": {
      "zh": "Windows/macOS、源码构建、Homebrew/Conda/社区包和直接下载二进制不在该影响范围。这里没有观察到你的环境故障，也未执行修复；代价是配置检查和镜像维护时间。",
      "en": "Windows/macOS, source builds, Homebrew/Conda/community packages and direct binaries are outside this scope. No failure in your environment was observed and no repair was run; allow configuration and image-maintenance time."
    },
    "timeline": [
      {
        "date": {
          "zh": "9 月 5 日",
          "en": "Sep 5"
        },
        "kind": "record-added",
        "datetime": "2026-09-05T10:03:05.417Z",
        "summary": {
          "zh": "进入 BitShovel 雷达：GitHub Changelog 一手发布（收录时各源可见 10 条）。",
          "en": "Entered the BitShovel radar: first-party on GitHub Changelog (10 entries visible at collection)."
        },
        "source": {
          "zh": "GitHub Changelog 快照",
          "en": "GitHub Changelog snapshot"
        }
      }
    ],
    "followTarget": {
      "id": "page:github-blog-changelog-2026-09-03-github-cli-linux-pa-36fb2206399fd4d1",
      "label": {
        "zh": "GitHub CLI 的 Linux 包签名密钥于 9 月 5 日到期",
        "en": "GitHub CLI Linux package signing key expires September 5"
      },
      "scope": {
        "zh": "原文页面的后续实质变化：内容修订、数据更新或官方回应",
        "en": "Material follow-up changes on the original page: revisions, data updates, or an official response"
      },
      "url": "https://github.blog/changelog/2026-09-03-github-cli-linux-package-signing-key-expires-september-5",
      "updateMode": "editorial-watch"
    },
    "ingestion": {
      "mode": "editorial",
      "adapter": "syndication-corroborated",
      "evidenceClass": "official-statement",
      "editorialReadiness": "decision-brief"
    },
    "editorialReview": {
      "id": "r131-github-cli-signing-key-decision-20260905",
      "reviewedAt": "2026-09-05T14:39:14.930Z",
      "kind": "evidence-review",
      "note": {
        "zh": "已核对留存的官方正文，补充适用对象、实际变化、行动与限制，形成具体决策解读。发布日期与发现时钟分开保留；核验时间不作为产品新事件，未运行迁移、修复或集成测试。",
        "en": "Retained official pages were reviewed for audience, changes, actions and limits to form a decision brief. Publication and discovery clocks remain distinct; review time is not a new product event. No migration, repair or integration test was run."
      },
      "sources": [
        {
          "label": {
            "zh": "GitHub CLI 官方密钥到期公告",
            "en": "Official GitHub CLI signing-key expiry notice"
          },
          "url": "https://github.blog/changelog/2026-09-03-github-cli-linux-package-signing-key-expires-september-5"
        },
        {
          "label": {
            "zh": "GitHub CLI 官方完整维护说明",
            "en": "GitHub CLI's full official maintenance instructions"
          },
          "url": "https://github.com/cli/cli/issues/13118"
        },
        {
          "label": {
            "zh": "保留的原始发布与发现记录",
            "en": "Retained publication and discovery entry"
          },
          "url": "https://github.blog/changelog/2026-09-03-github-cli-linux-package-signing-key-expires-september-5"
        }
      ],
      "sourceAssessments": [
        {
          "url": "https://github.blog/changelog/2026-09-03-github-cli-linux-package-signing-key-expires-september-5",
          "role": "direct-support",
          "scope": {
            "zh": "旧密钥日期、签名切换规则及受影响安装方式。",
            "en": "Old-key expiry, signing switch and affected installation methods."
          },
          "limitations": {
            "zh": "不能证明任何特定机器已经出错。",
            "en": "Does not show that a particular machine has failed."
          },
          "evidenceUrls": [
            "https://github.blog/changelog/2026-09-03-github-cli-linux-package-signing-key-expires-september-5"
          ]
        },
        {
          "url": "https://github.com/cli/cli/issues/13118",
          "role": "direct-support",
          "scope": {
            "zh": "新旧指纹、发行版核对和更新步骤，以及早期公告日期。",
            "en": "Fingerprints, distribution-specific verification and update steps, and earlier announcement date."
          },
          "limitations": {
            "zh": "示例错误不是实测事故；未在本机运行这些步骤。",
            "en": "Example errors are not observed incidents; these steps were not run locally."
          },
          "evidenceUrls": [
            "https://github.com/cli/cli/issues/13118"
          ]
        }
      ]
    }
  },
  "after": {
    "title": {
      "zh": "GitHub CLI 旧签名密钥已到期",
      "en": "GitHub CLI’s old Linux signing key has expired"
    },
    "summary": {
      "zh": "GitHub CLI 官方 Linux 软件仓库的旧密钥于 9 月 5 日到期。若 APT/RPM 环境在 4 月 8 日前配置且未更新，需确认系统信任替换密钥，尤其是 CI 和旧基础镜像。",
      "en": "The old key for GitHub CLI’s official Linux repositories expired on September 5. APT/RPM setups configured before April 8 and left unchanged should verify the replacement key, including CI environments and older base images."
    },
    "digest": {
      "zh": "使用官方 APT/RPM 仓库的旧环境，应检查替换密钥是否已经安装。",
      "en": "Older setups using the official APT or RPM repositories should check that the replacement key is installed."
    },
    "why": {
      "zh": "如果 gh 通过官方 APT/RPM 仓库安装，检查较早配置的服务器、CI 和基础镜像是否信任新密钥。它可能影响后续安装或更新，官方公告提供了各发行版的检查和修复步骤。",
      "en": "If gh is installed from its official APT or RPM repository, check older servers, CI setups and base images for the new key. It may affect future installs or updates; the announcement provides distribution-specific checks and fixes."
    },
    "caveat": {
      "zh": "不是所有 GitHub CLI 安装都受影响：Windows、macOS、Homebrew、Conda 等不在此次范围。到期不等于所有旧客户端立即失效，签名切换从到期后的首个新版本起；本站未检查读者环境。",
      "en": "Not all GitHub CLI installations are affected: Windows, macOS, Homebrew and Conda are outside this change. Expiry does not mean every old client immediately fails; new signatures start with the first release after expiry. We have not checked reader environments."
    }
  },
  "editorialReadiness": "decision-brief",
  "withdrawnSources": [],
  "withdrawnTimeline": [],
  "evidence": [
    {
      "type": "retained-official-page",
      "label": {
        "zh": "GitHub CLI 官方密钥到期公告",
        "en": "Official GitHub CLI signing-key expiry notice"
      },
      "url": "https://github.blog/changelog/2026-09-03-github-cli-linux-package-signing-key-expires-september-5",
      "path": "app/_content/editorial-reviews/evidence/r131-github-cli-signing-key-page.json",
      "bytes": 1230,
      "sha256": "365dd8cc5297917801f07932ecb799ee4a3565c09e8232bdfc06dab85a573b5f",
      "fetchedAt": "2026-09-05T11:07:07.791402Z"
    },
    {
      "type": "retained-official-page",
      "label": {
        "zh": "GitHub CLI 官方完整维护说明",
        "en": "GitHub CLI's full official maintenance instructions"
      },
      "url": "https://github.com/cli/cli/issues/13118",
      "path": "app/_content/editorial-reviews/evidence/r131-github-cli-full-announcement-page.json",
      "bytes": 1119,
      "sha256": "4819a61f068899741303e7948c2ced60917e24df3ab51eec6ecbddbcb79bb938",
      "fetchedAt": "2026-09-05T11:09:48.596269Z"
    },
    {
      "type": "retained-feed-entry",
      "label": {
        "zh": "保留的原始发布与发现记录",
        "en": "Retained publication and discovery entry"
      },
      "url": "https://github.blog/changelog/2026-09-03-github-cli-linux-package-signing-key-expires-september-5",
      "fetchedAt": "2026-09-05T10:03:05.417Z",
      "path": "app/_content/editorial-reviews/evidence/r131-github-cli-signing-key-feed-entry.json",
      "bytes": 710,
      "sha256": "1ae5294e7e435d8b048719d4327c6094de91c768e67604a4b9e8f1ac07f462c3",
      "retainedRecord": {
        "sourceSnapshot": "app/_content/source-observations/history/syndication-feeds.2026-09-05T10-03-05Z.snapshot.json",
        "sourceSnapshotSha256": "869b43001d3867238f47d14ab45c67974fa62093b6a78eb57344026054e59c00",
        "observedAt": "2026-09-05T10:03:05.417Z",
        "feedSourceKey": "feed:github-changelog",
        "entry": {
          "id": "https://github.blog/changelog/2026-09-03-github-cli-linux-package-signing-key-expires-september-5",
          "title": "GitHub CLI Linux package signing key expires September 5",
          "url": "https://github.blog/changelog/2026-09-03-github-cli-linux-package-signing-key-expires-september-5",
          "publishedAt": "2026-09-03T19:05:40.000Z",
          "updatedAt": null,
          "author": "Allison"
        }
      }
    }
  ],
  "sourceAssessments": [
    {
      "url": "https://github.blog/changelog/2026-09-03-github-cli-linux-package-signing-key-expires-september-5",
      "role": "direct-support",
      "scope": {
        "zh": "阅读 2026-09-03 Changelog 及其完整官方说明 issue #13118，核对 9 月 5 日到期、4 月 8 日分界、受影响仓库、排除安装方式和签名切换时点。",
        "en": "Read the September 3 changelog and full official announcement in issue #13118 for September 5 expiry, the April 8 cutoff, affected repositories, excluded installation methods and the signing transition."
      },
      "limitations": {
        "zh": "按公告日期与本次 9 月 6 日核验时间改用过去时；未确认到期后首个版本已发布，也未执行用户机器修复。",
        "en": "Past tense follows the announced date and the September 6 review date. We did not confirm that the first post-expiry release had shipped or modify any user machine."
      },
      "evidenceUrls": [
        "https://github.blog/changelog/2026-09-03-github-cli-linux-package-signing-key-expires-september-5",
        "https://github.com/cli/cli/issues/13118"
      ]
    },
    {
      "url": "https://github.com/cli/cli/issues/13118",
      "role": "direct-support",
      "scope": {
        "zh": "新旧指纹、发行版核对和更新步骤，以及早期公告日期。",
        "en": "Fingerprints, distribution-specific verification and update steps, and earlier announcement date."
      },
      "limitations": {
        "zh": "示例错误不是实测事故；未在本机运行这些步骤。",
        "en": "Example errors are not observed incidents; these steps were not run locally."
      },
      "evidenceUrls": [
        "https://github.com/cli/cli/issues/13118"
      ]
    }
  ],
  "note": {
    "zh": "根据官方正文补充用途、实际变化与使用条件；区分来源描述与尚未独立测试的效果。原发布日期和收录时间保留，编辑修订不作为新的产品发布。",
    "en": "Reviewed official materials to clarify purpose, changes and usage conditions, distinguishing source descriptions from untested results. Original publication and observation dates are retained; an editorial revision is not a new product release."
  },
  "integrity": "ee3f6114c2bde03c6f80cf8495178e4dd52ea1c928a098dbba1a2ff2eb9bd58f"
}