Build failure during the 2026-07-07 “build all packages for x86_64”
private-repo release pass (see repo_release_logs/maintained_arduino.log).
Source signature verification fails on multiple bundled sources
(libastylej-2.05.1-5.zip, liblistSerials-1.4.2-2.zip, etc.): unknown
public key 95FA6F43E21188C4. Same key ID as memory/arduino-builder.md
– this GPG key just isn’t present in the build box’s keyring, so any
package validating against it will fail identically no matter what else
is true about the package.
Update 2026-07-07 later same day: imported the missing key
(gpg --recv-keys 95FA6F43E21188C4, fine to do on the host for
source-verification purposes – see memory/feedback_no_host_installs.md)
and retried. Got past signature verification, but hit intra-tree
dependency resolution next: error: target not found: arduino-builder
(custom package from this tree, same class as
memory/kdstatemachineeditor.md) plus possibly-also-missing
java-runtime=8 (not checked further – masked by the arduino-builder
failure in the same transaction). Not fixed further as part of this pass.