[esafak]

The title suggests it is a Github issue but really it is https://github.com/composer/composer no? I would edit the title for clarity.

[darkwater]

Yes, it's a Composer issue (which is a PHP dependencies manager) with the new format of GITHUB_TOKEN.

It's not an issue in GHA itself, this time. But if you are a composer user in GH, you should definitely be warned (and worried).

[tracker1]

You're using PHP... you aren't worried about anything... ;-)

/kidding

[incomplete]

it's not super clear, but that's my read as well... i think i can start lowering my panic levels now.