Node feature fails on Debian 13 (trixie) - Yarn GPG key verification error after key rotation

[superironpanda]

Description

The node feature fails on Debian 13 (trixie) with the following error during apt-get update:

Missing key FF7CB5667B542092084BBDC562D54FD4003F6525, which is needed to verify signature.
E: The repository 'https://dl.yarnpkg.com/debian stable InRelease' is not signed.

This affects all Debian 13 users of the node feature.

Root Cause

• Yarn's old RSA signing subkeys expired on 2026-01-23
• Yarn created a new ed25519 key on 2026-01-28 and started signing with it
• PR [node] - Fixing issue due to expired GPG key for yarn. #1546 introduced a trixie-specific code path that fetches the key from keys.openpgp.org, which only has the old key, not the new one

Fix

PR #1547

[Kaniska244]

Hi @superironpanda
Thank you so much for bringing this to our notice and for the PR. Due to this update , the issue with node feature has resurfaced it seems as the repo has been signed with a brand new key now.

[mk80]

awesome to see node updated so quickly but I am still seeing the same issue in common-utils.. should we expect a new build there as well?

[superironpanda]

This issue is resolved by #1547 for node feature.

[superironpanda]

awesome to see node updated so quickly but I am still seeing the same issue in common-utils.. should we expect a new build there as well?

Hi! I just tried it on my end without using common utils. it is ok for node feature but not sure on the common-utils one though.