--- title: "X-GitHub-Stateless-S2S-Token header ignored from 2026-11-30 | Harbyn" description: "X-GitHub-Stateless-S2S-Token header ignored from 2026-11-30." canonical: "https://harbyn.com/changes/github/2026-10-02-x-github-stateless-s2s-token-header-ignored-from-2026-11-30" last-updated: 2026-10-02 --- # X-GitHub-Stateless-S2S-Token header ignored from 2026-11-30 Markdown version of . Deprecation - GitHub. low severity. Announced. Upcoming. The temporary X-GitHub-Stateless-S2S-Token request header, used to opt into stateless installation tokens, is deprecated on November 30, 2026; after that GitHub no longer respects it and eligible apps always receive stateless tokens. Remove the header from production code before that date. 36 days left: the deadline is Nov 30, 2026. ## Facts | Fact | Value | | --- | --- | | Vendor | [GitHub](https://harbyn.com/vendors/github.md) | | Kind | Deprecation | | Severity | low | | Status | Announced | | Announced | Oct 2, 2026 | | Effective | Nov 30, 2026 | | Added to Harbyn | Oct 2, 2026 | | Lead time | 59 days of warning | | Vendor page | | | Review | Reviewed by a person, extracted by a person | ## Find it in your code ```sh npx harbyn scan ``` This change names no identifier the scanner can match line by line, so the scan tells you whether your repository uses GitHub, from its packages and API hosts. Nothing leaves your machine. ## Sources Where this event comes from: the page we read, when we read it, and the hash of that snapshot. - (changelog, fetched 2026-10-02 23:20 UTC, sha256 `0ba86043060773911ff706b42e35bb0957aaa79dfe9d3d97ce54c12594fe5c4b`) ## Related changes ### More from GitHub - [Copilot code review now defaults to the Balanced effort level](https://harbyn.com/changes/github/2026-10-02-copilot-code-review-api-support-and-new-default-effort-level-2.md) (Behavior change, announced Oct 2, 2026) - [GitHub App installation tokens are now about 520 characters long](https://harbyn.com/changes/github/2026-10-02-github-app-installation-tokens-now-about-520-characters.md) (Breaking change, announced Oct 2, 2026) - [Gemini 3.5 Flash deprecated in GitHub Copilot](https://harbyn.com/changes/github/2026-10-02-selected-models-in-github-copilot-deprecated.md) (Deprecation, effective Oct 2, 2026) - [Gemini 3.6 Flash deprecated in GitHub Copilot](https://harbyn.com/changes/github/2026-10-02-selected-models-in-github-copilot-deprecated-2.md) (Deprecation, effective Oct 2, 2026) ### Changes at other vendors - [AWS Lambda: Python 3.10 runtime deprecation](https://harbyn.com/changes/aws-lambda/2026-10-08-python-3-10-runtime-deprecation.md) (effective Oct 31, 2026) - [Jira / Atlassian Cloud: Atlassian Analytics dashboard subscriptions being removed](https://harbyn.com/changes/atlassian-jira/2026-08-10-atlassian-analytics-dashboard-subscriptions-being-removed.md) (effective Nov 2, 2026) - [Google Cloud Run and Functions: .NET 8 runtime deprecation](https://harbyn.com/changes/google-cloud/2026-10-08-net-8-runtime-deprecation.md) (effective Nov 10, 2026) - [Supabase: @supabase/server framework adapters are deprecated and will be removed on December 1, 2026](https://harbyn.com/changes/supabase/2026-10-05-framework-adapters-in-supabase-server-are-deprecated.md) (effective Dec 1, 2026) [All upcoming deadlines](https://harbyn.com/deadlines.md)