chore: pull Releaser keys from keyring instead of README

Author: nschonni

.github/workflows/node-keys.yml

@@ -4,6 +4,7 @@ on:
   pull_request:
     paths:
       - keys/node.keys
+      - update-keys.sh
       - .github/workflows/node-keys.yml
 
 permissions:

update-keys.sh

@@ -1,3 +1,7 @@
 #!/bin/sh -ex
 
-curl -fsSLo- --compressed https://github.com/nodejs/node/raw/main/README.md | awk '/--recv-keys.*#/{ gsub(/^.*--recv-keys\s+/,"");gsub(/\s+#.*$/,""); print }' > keys/node.keys
+curl -fsSLO --compressed "https://github.com/nodejs/release-keys/raw/refs/heads/main/gpg-only-active-keys/pubring.kbx"
+
+gpg --no-default-keyring --keyring "./pubring.kbx" --keyid-format long --with-colons --fingerprint | awk -F: '/^pub:.*/ { getline; print $10}' > keys/node.keys
+
+rm pubring.kbx