This indicates that the GPG signature used by the Steam repository is based on outdated cryptographic standards (likely SHA1). Starting February 2026, APT will reject such signatures by default.
I expected the repository to use a secure signature algorithm (e.g. SHA256 or SHA512) compatible with current Debian policies.
Please consider updating the GPG key and repository signature to comply with Debian's new APT security requirements.
Steps for reproducing this issue:
Install Debian 13 (Trixie)
Add the official Steam repository
Run sudo apt update
Note: This report was written with the help of a translator. Please excuse any language inaccuracies.
Your system information
Please describe your issue in as much detail as possible:
When running
sudo apt updateon Debian 13, I receive the following warning:Warning: https://repo.steampowered.com/steam/dists/stable/InRelease: Policy will reject signature within a year, see --audit for details
This indicates that the GPG signature used by the Steam repository is based on outdated cryptographic standards (likely SHA1). Starting February 2026, APT will reject such signatures by default.
I expected the repository to use a secure signature algorithm (e.g. SHA256 or SHA512) compatible with current Debian policies.
Please consider updating the GPG key and repository signature to comply with Debian's new APT security requirements.
Steps for reproducing this issue:
sudo apt updateNote: This report was written with the help of a translator. Please excuse any language inaccuracies.