diff --git a/CHANGELOG.md b/CHANGELOG.md
index 92f719ca54..835afb0f19 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,7 @@
 ### Fixed
 * Cache notification callback JNI references at startup to ensure that symbols can be resolved in core callbacks. (Issue [#1577](https://github.com/realm/realm-kotlin/issues/1577))
 * Using `Realm.asFlow()` could miss an update if a write was started right after opening the Realm. (Issue [#1582](https://github.com/realm/realm-kotlin/issues/1582)) 
+* Snapshot publishing with Github Action. (Issue [#1654](https://github.com/realm/realm-kotlin/issues/1654) [JIRA](https://jira.mongodb.org/browse/RKOTLIN-1018))
 
 ### Compatibility
 * File format: Generates Realms with file format v23.
diff --git a/tools/publish_snapshots.main.kts b/tools/publish_snapshots.main.kts
index 5ba4e80697..28ffafc496 100644
--- a/tools/publish_snapshots.main.kts
+++ b/tools/publish_snapshots.main.kts
@@ -242,7 +242,10 @@ fun uploadFiles(files: PackageData) {
     args.run {
         // See https://maven.apache.org/plugins/maven-gpg-plugin/sign-and-deploy-file-mojo.html
         add("mvn")
-        add("gpg:sign-and-deploy-file")
+        // TODO upgrade to latest sign-and-deploy once https://issues.apache.org/jira/browse/MGPG-85 is fixed
+        //      context https://github.com/eclipse-lsp4j/lsp4j/issues/610
+        add("org.apache.maven.plugins:maven-gpg-plugin:1.6:sign-and-deploy-file")
+        add("-Daether.checksums.algorithms=SHA-512,SHA-256,SHA-1,MD5")
         add("-Durl=https://oss.sonatype.org/content/repositories/snapshots")
         add("-DrepositoryId=ossrh")
         add("-DpomFile=${files.fullPathToPackage}/${files.pomFile.fileName}")