>>> [!note] Migrated issue <!-- Drupal.org comment --> <!-- Migrated from issue #3569469. --> Reported by: [phenaproxima](https://www.drupal.org/user/205645) Related to !780 >>> <h3 id="summary-problem-motivation">Problem/Motivation</h3> <p>Drupal CMS 2's stable release is blocked because the CI job that generates release tarballs is broken. The break is due to Yarn 1's GPG key expiring, and it's not clear if the DA will be able to fix this in time.</p> <p>We would not normally be affected by this except for the fact that we need to install the <code>zip</code> utility from apt for the job to work. That means we need to run <code>apt update</code>, which brings in the broken key and breaks the job.</p> <h3 id="summary-proposed-resolution">Proposed resolution</h3> <p>Don't use the <code>zip</code> utility at all, just write a simple home-grown script to create the archive using PHP's very handy built-in <code>PharData</code> class.</p>