Debian repository needs a new key, SHA1 no longer accepted

[DavidGoodenough]

Version(s)
N/a

Describe the bug

Current version of apt on sid no longer accepts SHA1 PGP keys so scala-cli is no longer installable.

OpenPGP signature verification failed: https://virtuslab.github.io/scala-cli-packages/debian ./ InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on E77ADC545062908539D5DBD61B92C29C942DFC9B is not bound: No binding signature at time 2026-02-06T11:10:41Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z

[DavidGoodenough]

If you are visiting the deb building process could you also address the issue I raised a while ago about the missing change log?

[DavidGoodenough]

See #3501

[Gedochao]

If you are visiting the deb building process could you also address the issue I raised a while ago about the missing change log?

good call, thanks for the reminder.