Merge pull request #2168 from coreosbot-releng/repo-templates

Sync repo templates ⚙

Author: prestist

.github/ISSUE_TEMPLATE/release-checklist.md

@@ -30,13 +30,13 @@ Fedora packaging:
  - [ ] Run `kinit your_fas_account@FEDORAPROJECT.ORG`
  - [ ] Run `fedpkg new-sources $(spectool -S ignition.spec | sed 's:.*/::')`
  - [ ] PR the changes in [Fedora](https://src.fedoraproject.org/rpms/ignition)
- - [ ] Once the PR merges to rawhide, merge rawhide into the other relevant branches (e.g. f42) then push those, for example:
+ - [ ] Once the PR merges to rawhide, merge rawhide into the other relevant branches (e.g. f43) then push those, for example:
    ```bash
    git checkout rawhide
    git pull --ff-only
-   git checkout f42
+   git checkout f43
    git merge --ff-only rawhide
-   git push origin f42
+   git push origin f43
    ```
  - [ ] On each of those branches run `fedpkg build` including rawhide.
  - [ ] Once the builds have finished, submit them to [bodhi](https://bodhi.fedoraproject.org/updates/new), filling in:

docs/release-notes.md

@@ -6,6 +6,9 @@ nav_order: 9
 
 ## Upcoming Ignition 2.25.0 (unreleased)
 
+Starting with this release, ignition-validate binaries are signed with the
+[Fedora 43 key](https://getfedora.org/security/).
+
 ### Breaking changes
 
 ### Features

signing-ticket.sh

@@ -15,11 +15,11 @@ make_script() {
 #!/bin/bash
 set -eux -o pipefail
 
-# Use the Fedora 42 key for the detached signatures
-KEYTOSIGNWITH='fedora-42'
+# Use the Fedora 43 key for the detached signatures
+KEYTOSIGNWITH='fedora-43'
 
-VR='@@VERSION@@-@@RELEASE@@.fc42'
-RPMKEY='105ef944' # Fedora 42 key
+VR='@@VERSION@@-@@RELEASE@@.fc43'
+RPMKEY='31645531' # Fedora 43 key
 
 do_sign() {
     # Sign with sigul unless FAKESIGN=1