gh installed via APT or RPM on Linux needs the new signing key
Updating gh on Linux and suddenly getting a signature verification failure? The signing key most likely changed. GitHub CLI's APT and RPM repositories, along with individual RPM packages, are now signed only with the new PGP key, fingerprint 7F38BBB59D064DBCB3D84D725612B36462313325. If you installed gh from the official APT or RPM repositories before April 8, 2026 and haven't refreshed your keyring, installs and updates may fail.
Follow the official PGP signing key rotation guidance to check and update your keyring. Users on Windows or macOS, and anyone who installed through Homebrew, GitHub Releases, another package manager, or from source, are not affected.