Implement expiring user tokens for GitHub App User Auth (Expiring user-to-server access tokens for GitHub Apps)

@octokit/oauth-app - create SDK for GitHub OAuth Apps, similar to what @octokit/action is for GitHub Actions. It would include a server and a client component.

Tooling for OAuth Web flow. Goal: help people migrate away from Basic Auth

• OAuth Server: octokit/oauth-app.js#1
• OAuth client
• OAuth Service
• OAuth CLI

Official support for Node's ESM System:
https://nodejs.org/api/esm.html

Migrate from Greenkeeper to Dependabot

Use this setting

version: 2
updates:
  # create PRs for out-of-range updates
  - package-ecosystem: "npm"
    directory: "/"
    schedule:
      interval: "daily"
    versioning-strategy: "increase-if-necessary"

It will only send pull requests for out-of-range updates. Dependabot does not do silent background checks for in-range updates. And it does not send pull requests immediately, but only based on a schedule

Official Electron, React Native, etc. support

Provide tooling for testing GitHub Apps. Record & replay webhooks + requests/responses

First-class ready-to-use libraries for each supported GHE version

@ocotkit/auth-app: implement transparent authentication based on request path

@octokit/app - deprecate the current package and replace it with an SDK for GitHub Apps, similar to what @octokit/action is for GitHub Actions

@octokit/auth-webauthn - see https://webauthn.io/ for demo

@octokit/auth-cli - library to authenticate CLI apps using OAuth

Create SDK for repository-scoped API (.repo({owner, name}) or .repo({id}) method which returns a list of APIs scoped to a repository. This will be particularly useful for GitHub Actions or GitHub App Webhook Event handlers, see https://github.com/maintainers/actions-feedback/issues/35