GPG key used for deb.sury.org in DDEV v1.24.10 expired on February 4, 2026:

• E: The repository 'https://packages.sury.org/php bookworm InRelease' is not signed.

Some of you may see errors when running ddev start using DDEV v1.24.10:

#18 2.535 W: GPG error: https://packages.sury.org/php bookworm InRelease: The following signatures were invalid: EXPKEYSIG B188E2B695BD4743 DEB.SURY.ORG Automatic Signing Key <[email protected]>
#18 2.535 E: The repository 'https://packages.sury.org/php bookworm InRelease' is not signed.

We recommend upgrading to DDEV v1.25, which resolves this issue:

• DDEV v1.25.0: Improved Windows Support, Faster Debugging, and Modern Defaults

If you're not ready to upgrade, you can use this workaround in DDEV v1.24.10:

ddev poweroff
ddev utility download-images

Then start your projects as usual.

rm -r $HOME/.ddev/traefik

As a bonus for the inconvenience, PHP versions for v1.24.10 are updated:

• PHP 8.2.29 -> 8.2.30
• PHP 8.3.27 -> 8.3.30
• PHP 8.4.14 -> 8.4.17
• PHP 8.5.0RC3 -> 8.5.2 (including Xdebug and other previously missing extensions)

Thanks to everyone who reported this, we're working to make your experience smooth and reliable.