Personal reminder: Jonny Heggheim, maintainer of electrum, implemented a very nice way to automatize upstream code signature verification. https://src.fedoraproject.org/rpms/electrum/blob/master/f/electrum.spec#_49 This should be implemented in darktable too, to avoid doing that manually at every release.
This bug appears to have been reported against 'rawhide' during the Fedora 28 development cycle. Changing version to '28'.
*** This bug has been marked as a duplicate of bug 1514249 ***