March 2021
Personal access tokens are available for authenticating to API
Personal access tokens provide a simpler alternative to OAuth for authenticating API requests, ideal for server-to-server integrations and testing.
Webhook signing keys supported for webhook subscriptions created with personal access tokens
Webhook subscriptions created with personal access tokens now support signing keys, enabling you to verify webhook payload authenticity.