diff --git a/.github/decodekey.sh b/.github/decodekey.sh
new file mode 100755
index 000000000..3f567818b
--- /dev/null
+++ b/.github/decodekey.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+echo $PGP_SECRET | base64 --decode | gpg --import --batch --yes --pinentry-mode loopback --passphrase $PGP_PASSPHRASE
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3d157ab74..daea2937f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -32,5 +32,5 @@ jobs:
         CI_RELEASE: publishSigned
         CI_SONATYPE_RELEASE: version
       run: |
-        echo $PGP_SECRET | base64 --decode | gpg --import --batch --yes --pinentry-mode loopback --passphrase $PGP_PASSPHRASE
+        .github/decodekey.sh
         sbt ci-release
diff --git a/project/plugins.sbt b/project/plugins.sbt
index c78ce2371..277d8ddd5 100644
--- a/project/plugins.sbt
+++ b/project/plugins.sbt
@@ -1,3 +1,3 @@
 addSbtPlugin("org.foundweekends" %% "sbt-bintray" % "0.6.1")
-addSbtPlugin("com.jsuereth" % "sbt-pgp" % "2.1.0-M1")
+addSbtPlugin("com.jsuereth" % "sbt-pgp" % "2.1.1")
 addSbtPlugin("com.geirsson" % "sbt-ci-release" % "1.5.4")