SMALL DECKS. THOUGHTFUL PRACTICE.THE PRACTICE DESK / 2026

Practice

Record the number before you repeat it

Amount, source, and date go on the card before the sentence you would say out loud.

Awesome Patel

Better by Practice · Published by Awesome Patel · Chicago · Published Updated

github.blog published this account (2026-10-02): Newly minted GitHub App installation tokens now use the stateless ghs_APPID_JWT format, about 520 characters instead of 40. One-hour expiration, permissions, and the REST issuance endpoint are unchanged. The temporary X-GitHub-Stateless-S2S-Token header will be deprecated on November 30, 2026.

This guide uses that public page as the example. This site did not run the test, close the deal, or measure the product.

Write only what the page says

The page's claim is: Newly minted GitHub App installation tokens now use the stateless ghs_APPID_JWT format, about 520 characters instead of 40. One-hour expiration, permissions, and the REST issuance endpoint are unchanged. The temporary X-GitHub-Stateless-S2S-Token header will be deprecated on November 30, 2026.

Put the URL under that sentence. If a later recap adds a number or a date, keep the original page as the record.

Amount, source, and date go on the card before the sentence you would say out loud.

Do the site's check on this one page. Fill a line only when the page supports it. Where the page is silent, write Not stated.

A finished note names the page, the date, and the limit of the claim. It does not borrow a result from a different story.

Stop at the untested line

Anything you did not open, install, or count stays untested. Leave that line visible.

Source page: GitHub App installation tokens are stateless by default.

Sources: GitHub App installation tokens are stateless by default

Related guides

Primary references