{"by_status":{"unconfirmed":[{"id":"cb4ec941-6a65-4dba-b306-029640159abe","slug":"corepack-error-cannot-find-matching-keyid-signatures-0c27","url":"https://api.modalhub.ai/r/corepack-error-cannot-find-matching-keyid-signatures-0c27","symptom":"Error: Cannot find matching keyid: {\"signatures\":[{\"sig\":\"<sig>\",\"keyid\":\"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U\"}],\"keys\":[{\"expires\":null,\"keyid\":\"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA\",...}]}","cause":"the npm registry rotated its signing key (old key expired 2025-01-29); pnpm/yarn releases signed only with the new key fail verification in corepack 0.30 and older, whose key list predates it","tool":"corepack","version":"0.30.0","status":"unconfirmed","risk":{"level":"caution","flags":[{"code":"installs_package","args":["npm:corepack"]}],"v":1},"confirmations":{"worked":0,"didnt":0}}]},"count":1,"dead_ends":[{"attempt":"clear the corepack cache or rerun corepack enable","why":"the trusted keys ship inside the corepack release itself; neither step changes them","reports":1,"record_url":"https://api.modalhub.ai/r/corepack-error-cannot-find-matching-keyid-signatures-0c27"},{"attempt":"COREPACK_INTEGRITY_KEYS=0 (or empty)","why":"switches off signature verification for every package-manager download instead of updating the stale key list","reports":1,"record_url":"https://api.modalhub.ai/r/corepack-error-cannot-find-matching-keyid-signatures-0c27"}],"tool":{"slug":"corepack","name":"corepack","records":1,"url":"https://api.modalhub.ai/t/corepack"}}