Switch from GitHub to Your product
GitHub Apps that send the stateless token header: a change is due by November 30. You can stay on GitHub. If you would rather leave, here is how to move to Your product.
What changes at GitHub
GitHub App tokens now have a new, longer format. They are about 520 characters, not 40. A test header, X-GitHub-Stateless-S2S-Token, let apps ask for the old kind. From November 30, 2026, GitHub ignores it. Then apps get only the new tokens.
- Header no longer respected: November 30, 2026 (GitHub)
- New installation token: Starts with ghs_, about 520 characters long instead of 40 (GitHub)
- Header: X-GitHub-Stateless-S2S-Token on POST /app/installations/:installation_id/access_tokens (GitHub)
- What the disabled value did: Returned a classic opaque token, even after the rollout reached the app (GitHub)
- Pattern GitHub suggests for both formats: ghs_[A-Za-z0-9\.\-_]{36,} (GitHub)
- Storage: Database columns and header settings must accept at least 520 characters (GitHub)
- Tokens made before: Keep working until they expire (GitHub)
- GitHub Enterprise Server: Not affected (GitHub)
- Announced: October 2, 2026 (GitHub)
- Apps that send the header: Get stateless tokens after November 30, 2026 (GitHub)
You can stay on GitHub if you make the change. This page is for people who would rather leave.
What Your product gives you
Write two or three short lines here. Say what Your product does, who it is for, and what it costs. Use only facts you can show.
How to move from GitHub to Your product
- Save what you need from GitHub. Keep a copy before you cancel anything.
- Import into Your product. Say which files you accept and how long an import takes.
Tell readers the key date: November 30, 2026.
Questions people ask
If Your product has a direct answer to one of these, add it here. Keep it short and true.
How to help new users settle in
Send one short email. Say what changed, where to find you now, and what they need to do. Put the most important line first.
If there is a date, send a short reminder a few days before it. Keep a copy of the list you sent it to.
Sources
- Stateless GitHub App installation tokens rolled out — GitHub (primary), checked 2026-10-17
- GitHub App installation tokens: Per-request override header — GitHub (primary), checked 2026-10-17