feat: change Jenkins GPG key from 2023 to 2026 - jenkins-infra/helpdesk#4922

Signed-off-by: Damien Duportal <damien.duportal@gmail.com>

Author: dduportal

Jenkinsfile.d/core/package

@@ -91,7 +91,7 @@ pipeline {
     AZURE_VAULT_CLIENT_SECRET = credentials('azure-vault-client-secret')
     AZURE_VAULT_TENANT_ID     = credentials('azure-vault-tenant-id')
     GPG_FILE                  = 'jenkins-release.gpg'
-    GPG_PASSPHRASE            = credentials('release-gpg-passphrase-2023')
+    GPG_PASSPHRASE            = credentials('release-gpg-passphrase-2026')
     // Using HTTPS with no credentials - https://github.com/jenkins-infra/helpdesk/issues/4909 - need a GH app if rate limited or need to write things to git
     PACKAGING_GIT_REPOSITORY  = 'https://github.com/jenkinsci/packaging.git'
     PACKAGING_GIT_BRANCH      = 'master'

Jenkinsfile.d/core/release

@@ -54,7 +54,7 @@ pipeline {
     AZURE_VAULT_CLIENT_ID         = credentials('azure-vault-client-id')
     AZURE_VAULT_CLIENT_SECRET     = credentials('azure-vault-client-secret')
     AZURE_VAULT_TENANT_ID         = credentials('azure-vault-tenant-id')
-    GPG_PASSPHRASE                = credentials('release-gpg-passphrase-2023')
+    GPG_PASSPHRASE                = credentials('release-gpg-passphrase-2026')
     GPG_FILE                      = 'jenkins-release.gpg'
     MAVEN_REPOSITORY_USERNAME     = credentials('maven-repository-username')
     MAVEN_REPOSITORY_PASSWORD     = credentials('maven-repository-password')

env/package.mk

@@ -17,3 +17,6 @@ export DEB_WEBDIR=${BASE_PKG_DIR}/debian${RELEASELINE}
 WEBSERVER=https://pkg.jenkins.io
 export RPM_URL=${WEBSERVER}/rpm${RELEASELINE}
 export DEB_URL=${WEBSERVER}/debian${RELEASELINE}
+
+# Exposed GPG public key
+export GPG_PUBLIC_KEY_FILE="jenkins.io-2026.key"

profile.d/experimental

@@ -3,8 +3,8 @@ RELEASE_GIT_REPOSITORY=git@github.com:olblak/jenkins.git
 JENKINS_VERSION=latest
 GIT_EMAIL=66998184+jenkins-release-bot@users.noreply.github.com
 GIT_NAME="Jenkins Release Bot"
-GPG_KEYNAME="63667EE74BBA1F0A08A698725BA31D57EF5975CA"
-GPG_VAULT_NAME="jenkins-release-pgp-2023"
+GPG_KEYNAME="5E386EADB55F01504CAE8BCF7198F4B714ABFC68"
+GPG_VAULT_NAME="jenkins-release-pgp-2026"
 MAVEN_REPOSITORY_URL='https://repo.jenkins-ci.org'
 MAVEN_REPOSITORY_NAME=olblak-sandbox
 MAVEN_PUBLIC_JENKINS_REPOSITORY_MIRROR_URL='https://repo.jenkins-ci.org/public/'

profile.d/security

@@ -9,8 +9,8 @@ RELEASE_GIT_REPOSITORY=git@github.com:jenkinsci-cert/jenkins.git
 #
 GIT_EMAIL=66998184+jenkins-release-bot@users.noreply.github.com
 GIT_NAME="Jenkins Release Bot"
-GPG_KEYNAME="63667EE74BBA1F0A08A698725BA31D57EF5975CA"
-GPG_VAULT_NAME="jenkins-release-pgp-2023"
+GPG_KEYNAME="5E386EADB55F01504CAE8BCF7198F4B714ABFC68"
+GPG_VAULT_NAME="jenkins-release-pgp-2026"
 MAVEN_REPOSITORY_URL=https://repo.jenkins-ci.org
 MAVEN_PUBLIC_JENKINS_REPOSITORY_MIRROR_URL='https://repo.jenkins-ci.org/public/'
 SIGN_ALIAS=jenkins

profile.d/stable

@@ -6,8 +6,8 @@ RELEASE_GIT_BRANCH=master
 RELEASE_GIT_REPOSITORY=git@github.com:jenkinsci/jenkins.git
 GIT_EMAIL=66998184+jenkins-release-bot@users.noreply.github.com
 GIT_NAME="Jenkins Release Bot"
-GPG_KEYNAME="63667EE74BBA1F0A08A698725BA31D57EF5975CA"
-GPG_VAULT_NAME="jenkins-release-pgp-2023"
+GPG_KEYNAME="5E386EADB55F01504CAE8BCF7198F4B714ABFC68"
+GPG_VAULT_NAME="jenkins-release-pgp-2026"
 MAVEN_REPOSITORY_URL='https://repo.jenkins-ci.org'
 MAVEN_REPOSITORY_NAME=releases
 MAVEN_PUBLIC_JENKINS_REPOSITORY_MIRROR_URL='https://repo.jenkins-ci.org/public/'

profile.d/stable-rc

@@ -6,8 +6,8 @@ RELEASE_GIT_BRANCH=master
 RELEASE_GIT_REPOSITORY=git@github.com:jenkinsci/jenkins.git
 GIT_EMAIL=66998184+jenkins-release-bot@users.noreply.github.com
 GIT_NAME="Jenkins Release Bot"
-GPG_KEYNAME="63667EE74BBA1F0A08A698725BA31D57EF5975CA"
-GPG_VAULT_NAME="jenkins-release-pgp-2023"
+GPG_KEYNAME="5E386EADB55F01504CAE8BCF7198F4B714ABFC68"
+GPG_VAULT_NAME="jenkins-release-pgp-2026"
 MAVEN_REPOSITORY_URL='https://repo.jenkins-ci.org'
 MAVEN_REPOSITORY_NAME=snapshots
 SIGN_ALIAS=jenkins
@@ -16,7 +16,7 @@ SIGN_ALIAS=jenkins
 # but instead looking at the value for metadata.versioning.latest from the maven-metadata.xml
 # this approach doesn't allow to use the same maven-repository than weekly releases.
 #
-JENKINS_VERSION=latest 
+JENKINS_VERSION=latest
 
 # Used by jenkinsci/packaging
 RELEASELINE=-stable-rc

profile.d/weekly

@@ -6,8 +6,8 @@ RELEASE_GIT_BRANCH=master
 RELEASE_GIT_REPOSITORY=git@github.com:jenkinsci/jenkins.git
 GIT_EMAIL=66998184+jenkins-release-bot@users.noreply.github.com
 GIT_NAME="Jenkins Release Bot"
-GPG_KEYNAME="63667EE74BBA1F0A08A698725BA31D57EF5975CA"
-GPG_VAULT_NAME="jenkins-release-pgp-2023"
+GPG_KEYNAME="5E386EADB55F01504CAE8BCF7198F4B714ABFC68"
+GPG_VAULT_NAME="jenkins-release-pgp-2026"
 MAVEN_REPOSITORY_URL='https://repo.jenkins-ci.org'
 MAVEN_REPOSITORY_NAME=releases
 MAVEN_PUBLIC_JENKINS_REPOSITORY_MIRROR_URL='https://repo.jenkins-ci.org/public/'