gistfile1.txt

% sudo apt update --audit
Hit:1 https://mirrors.xmission.com/debian sid InRelease
Hit:2 https://updates.signal.org/desktop/apt xenial InRelease                                                    
Hit:4 https://packages.microsoft.com/repos/code stable InRelease                                                                       
Hit:5 https://brave-browser-apt-release.s3.brave.com stable InRelease            
Hit:3 https://repository.spotify.com stable InRelease
All packages are up to date.    
Warning: https://packages.microsoft.com/repos/code/dists/stable/InRelease: Policy will reject signature within a year, see --audit for details
Audit: https://packages.microsoft.com/repos/code/dists/stable/InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is:
   Signing key on BC528686B50D79E339D3721CEB3E94ADBE1229CF is not bound:
              No binding signature at time 2025-05-23T09:22:15Z
     because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance
     because: SHA1 is not considered secure since 2026-02-01T00:00:00Z