ROS repo key expired

[christianrauch]

Description

The action is still using the old, now expired, repo signing key.

Expected Behavior

The action should add the new "repo package" with the new signing key.

Actual Behavior

   Err:4 http://packages.ros.org/ros2/ubuntu noble InRelease
    The following signatures were invalid: EXPKEYSIG F42ED6FBAB17C654 Open Robotics <info@osrfoundation.org>

To Reproduce

Run the action.

System (please complete the following information)

• OS: Ubuntu 24.04
• ROS 2 Distro: jazzy

** For ROS 2 bugs - please attach a VCS.repos or Dockerfile if possible to help us reproduce the environment **

Additional context

See: https://discourse.ros.org/t/ros-signing-key-migration-guide/43937.

[christophebedard]

Thanks for reporting this. It did cross my mind at one point over the last week, but I guess I got distracted by something else 😅.

I've opened #816 to update the public key. It would be helpful if you could check that the new public key I used (since setup-ros has a copy of the public key) matches the official one, just to have someone else validate. See the PR description.

[facontidavide]

[christophebedard]

This is fixed. Update to ros-tooling/setup-ros@0.7.13 or @v0.7 to use the new version with the new key.

[facontidavide]

Does it take time to take effects?

I still see the error:

https://github.com/PlotJuggler/plotjuggler-ros-plugins/actions/runs/15388193278/job/43329754641

[christophebedard]

No, it takes effect immediately.

  E: Unable to locate package ros-jazzy-desktop

I believe this is because you're trying to use Jazzy in an ubuntu-22.04 container. You just need to bump these to ubuntu-24.04:

1. https://github.com/PlotJuggler/plotjuggler-ros-plugins/blob/c086e5720388b007d16c2786d96c3ba621de5dcb/.github/workflows/ros-jazzy.yaml#L12
2. https://github.com/PlotJuggler/plotjuggler-ros-plugins/blob/c086e5720388b007d16c2786d96c3ba621de5dcb/.github/workflows/ros-rolling.yaml#L12

[facontidavide]

thanks!!!!!1