Merry Christmas!
I am able to verify the source .tar.gz importing colombanw-pubkey.txt but I can't verify the .exe because, when I import eht16-pubkey.txt only this key is imported 4579 90C8 6F91 F33D E05E BF1B CC03 633F 7009 90F2 while when I verify the .exe another key is required: 51A0918FEF3439066BEB87F4579347E6C71A77FA. What's the problem?
Sorry, https://download.geany.org/eht16-pubkey.txt was pointing to my old but still valid GPG key. I recently created a new one which is better and which I used to sign.
Please re-download my key from https://download.geany.org/eht16-pubkey.txt or from a common key server to verify.
Sorry for the confusion.
Regards, Enrico