gpg key used to sign releases has expired

[fenrus75]

• gpg --homedir .gnupg --status-fd 1 --verify /builddir/build/SOURCES/bemenu-0.6.21.tar.gz.asc /builddir/build/SOURCES/bemenu-0.6.21.tar.gz
  gpg: Signature made Wed 13 Mar 2024 02:28:36 AM UTC
  gpg: using RSA key 16B6B7CACAF339DECE9F154729317348D687B86B
  gpg: Good signature from "Bemenu Upstream" [expired]
  gpg: Note: This key has expired!
  Primary key fingerprint: 16B6 B7CA CAF3 39DE CE9F 1547 2931 7348 D687 B86B

our distro buildsystem doesn't like us to build packages with "bad" keys for obvious reasons, and in light of all the recent paranoia it might be a good idea to refresh the key/etc

[Cloudef]

Thanks for notifying, I'll try to get it renewed soon.

[fenrus75]

(oh and thank you for signing your releases, it's appreciated)

[Cloudef]

Should be updated now, might take time to populate

[rieje]

Is it expired again? I get:

bemenu-0.6.22.tar.gz ... Passed (WARNING: the key has expired.) from Arch's PKGBUILD.

[Cloudef]

Expiration date should be 2027-04-12