Rotate runner credentials to a runner-generated token so a lost response cannot lock the runner out or let a leaked old credential mint a new one; keep in-flight old-credential requests working briefly.
3 files changed+43−45
Rendering diff…
Rendering diff…