Git 2.9.0 has been released [0]. There is one notable change for us, commit 66948561 (commit-tree: do not pay attention to commit.gpgsign) [1].
Apparently, it was never intended for the repo option commit.gpgSign to apply to low-level "plumbing" commit operations such as those invoked by `stash`, `rebase`, `filter-branch`, etc. So, `git stash` no longer invokes GPG. The commit text seems to imply that `git rebase` would no longer re-sign commits, but that's not the case from my tests. I didn't test any other commands. [0] https://git.kernel.org/cgit/git/git.git/tag/?h=v2.9.0 [1] https://git.kernel.org/cgit/git/git.git/commit/?id=66948561 Leo Famulari (1): gnu: git: Update to 2.9.0 gnu/packages/version-control.scm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) -- 2.8.4
