doc: add news item on unique tokens

beckermr · beckermr · commit cccfd2541804 · 2024-11-08T07:16:04.000-06:00
diff --git a/news/2024-11-08-unique-feedstock-token-per-provider-migration.md b/news/2024-11-08-unique-feedstock-token-per-provider-migration.md
@@ -0,0 +1,3 @@
+# Migration to Unique Feedstock Tokens per Provider
+
+We will be slowly migrating `conda-forge` to use unique feedstock tokens per provider. The feedstock token is used to allow maintainers to copy packages from our staging area to the main `conda-forge` channel. This change will improve our security posture and help us limit the impact of any leaked tokens. During this migration we will also be using newly implemented feedstock token expiration times to avoid race conditions between token changes and running builds.

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+# Migration to Unique Feedstock Tokens per Provider`
	`2`	`+`
	`3`	+We will be slowly migrating `conda-forge` to use unique feedstock tokens per provider. The feedstock token is used to allow maintainers to copy packages from our staging area to the main `conda-forge` channel. This change will improve our security posture and help us limit the impact of any leaked tokens. During this migration we will also be using newly implemented feedstock token expiration times to avoid race conditions between token changes and running builds.