HashiCorp change history: Hashicorp Linux packages GPG key rotation

HashiCorp reported a major Linux package verification issue during GPG key rotation: the published fingerprint was outdated and might not match the active signing key. The incident ran from 2026-09-10 13:24 UTC to 2026-09-10 20:40 UTC (7 h 16 min). HashiCorp updated apt/rpm repository keys and documentation, worked on re-signing older-key packages, and reported resolution.