Merge pull request #2364 from conda-forge/news-utoken

beckermr · web-flow · commit 63c625dd772a · 2024-11-08T07:20:15.000-06:00
doc: add news item on unique tokens
diff --git a/news/2024-11-08-unique-feedstock-token-per-provider-migration.md b/news/2024-11-08-unique-feedstock-token-per-provider-migration.md
@@ -0,0 +1,3 @@
+# Migration to Unique Feedstock Tokens per Provider
+
+We will be slowly migrating `conda-forge` to use unique feedstock tokens per provider. The feedstock token is used to allow maintainers to copy packages from our staging area to the main `conda-forge` channel. This change will improve our security posture and help us limit the impact of any leaked tokens. During this migration we will also be using newly implemented feedstock token expiration times to avoid race conditions between token changes and running builds.

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+# Migration to Unique Feedstock Tokens per Provider`
	`2`	`+`
	`3`	+We will be slowly migrating `conda-forge` to use unique feedstock tokens per provider. The feedstock token is used to allow maintainers to copy packages from our staging area to the main `conda-forge` channel. This change will improve our security posture and help us limit the impact of any leaked tokens. During this migration we will also be using newly implemented feedstock token expiration times to avoid race conditions between token changes and running builds.