WFLY-20730 moved us to a hoped-to-be-temporary fork of the maven-gpg-plugin. Apache has now released maven-gpg-plugin 3.2.8, which includes the fix that led to the fork. So the fork indeed was temporary and its use can be reverted.

WildFly will need to take direct control of the maven-gpg-plugin version until jboss-parent moves to 3.2.8.