GitHub CLI previews expiring OAuth credentials
GitHub CLI added an opt-in public preview for expiring OAuth access tokens with rotating refresh tokens. The CLI refreshes credentials automatically, reducing the lifetime of a leaked access token while preserving interactive authentication across developer and agent workflows.
Why it matters: Long-lived CLI credentials are a high-value target in terminals, automation and coding-agent environments; shorter access-token lifetime can reduce exposure if refresh-token storage, revocation and failure behavior are also sound.