PHPCSStandards
diff --git a/‎.github/workflows/verify-release.yml‎
Lines changed: 6 additions & 1 deletion b/‎.github/workflows/verify-release.yml‎
Lines changed: 6 additions & 1 deletion
diff --git a/‎README.md‎
Lines changed: 3 additions & 3 deletions b/‎README.md‎
Lines changed: 3 additions & 3 deletions
@@ -141,6 +141,11 @@ jobs:
         env:
           FINGERPRINT: "0xD91D86963AF3A29B6520462297B02DD8E5071466"
         run: gpg --keyserver "hkps://keys.openpgp.org" --recv-keys "$FINGERPRINT"
+
+      - name: Download public key (Aug 2026)
+        env:
+          FINGERPRINT: "0x5CB4F778BF9BC4FB67AE511D96E91A992CF22FF4"
+        run: gpg --keyserver "hkps://keys.openpgp.org" --recv-keys "$FINGERPRINT"
 
       - name: Verify signature of the PHAR file
         run: gpg --verify ${{ steps.source.outputs.FILE }}.asc ${{ steps.source.outputs.FILE }}
@@ -230,7 +235,7 @@ jobs:
       - name: Install
         run: >
           phive install ${{ matrix.pharfile }} --copy
-          --trust-gpg-keys 689DAD778FF08760E046228BA978220305CD5C32,D91D86963AF3A29B6520462297B02DD8E5071466
+          --trust-gpg-keys 689DAD778FF08760E046228BA978220305CD5C32,D91D86963AF3A29B6520462297B02DD8E5071466,5CB4F778BF9BC4FB67AE511D96E91A992CF22FF4
 
       - name: "DEBUG: List files"
         run: ls -R
 
@@ -50,7 +50,7 @@ php phpcbf.phar -h
 ```
 
 These Phars are signed with the official Release key for PHPCS with the
-fingerprint `D91D 8696 3AF3 A29B 6520 4622 97B0 2DD8 E507 1466`.
+fingerprint `5CB4 F778 BF9B C4FB 67AE 511D 96E9 1A99 2CF2 2FF4`.
 
 As of PHP_CodeSniffer 3.10.3, the provenance of PHAR files associated with a release can be verified via [GitHub Artifact Attestations](https://docs.github.com/en/actions/how-tos/secure-your-work/use-artifact-attestations/use-artifact-attestations) using the [GitHub CLI tool](https://cli.github.com/) with the following command: `gh attestation verify [phpcs|phpcbf].phar -o PHPCSStandards`.
 
@@ -80,8 +80,8 @@ You will then be able to run PHP_CodeSniffer from the vendor bin directory:
 ### Phive
 If you use Phive, you can install PHP_CodeSniffer as a project tool using the following commands:
 ```bash
-phive install --trust-gpg-keys D91D86963AF3A29B6520462297B02DD8E5071466 phpcs
-phive install --trust-gpg-keys D91D86963AF3A29B6520462297B02DD8E5071466 phpcbf
+phive install --trust-gpg-keys 5CB4F778BF9BC4FB67AE511D96E91A992CF22FF4 phpcs
+phive install --trust-gpg-keys 5CB4F778BF9BC4FB67AE511D96E91A992CF22FF4 phpcbf
 ```
 You will then be able to run PHP_CodeSniffer from the `tools` directory:
 ```bash