summaryrefslogtreecommitdiff
path: root/data/deprecations/14-8-enforce-pat-expiration.yml
blob: 37cf4d827d131db8a49798102bcc7fc98442ea28 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
- title: "Optional enforcement of PAT expiration"  # The name of the feature to be deprecated
  announcement_milestone: "14.8"  # The milestone when this feature was first announced as deprecated.
  removal_milestone: "15.0"  # The milestone when this feature is planned to be removed
  breaking_change: true  # If this deprecation is a breaking change, set this value to true
  reporter: djensen  # GitLab username of the person reporting the deprecation
  body: |  # Do not modify this line, instead modify the lines below.
    The feature to disable enforcement of PAT expiration is unusual from a security perspective.
    We have become concerned that this unusual feature could create unexpected behavior for users.
    Unexpected behavior in a security feature is inherently dangerous, so we have decided to remove this feature.
  stage: manage
  issue_url: "https://gitlab.com/gitlab-org/gitlab/-/issues/351962"  # (optional) This is a link to the deprecation issue in GitLab
  documentation_url: "https://docs.gitlab.com/ee/user/admin_area/settings/account_and_limit_settings.html#allow-expired-personal-access-tokens-to-be-used-deprecated"  # (optional) This is a link to the current documentation page