Greetings.
I'm not that familiar with mailing lists so I hope I'm posting this correctly.
However when I downloaded the GPG Signature (geany-1.37.1.tar.gz.sig) and the GPG Key (colombanw-pubkey.txt) and compared them I got a "This key has expired!" warning.
gpg --verify geany-1.37.1.tar.gz.sig geany-1.37.1.tar.gz
gpg: Signature made Sun 08 Nov 2020 10:20:32 AM MST
gpg: Note: This key has expired!