The release process says I need a PAT for GitHub, but not which flavor, how to configure it, or how it's used. Is SSH or password-based authentication also OK? Where is this used in the process? 🙂

I think gh auth is now managed via the gh CLI rather than via that, so potentially not necessary vs just authing that, however than needs to happen. (I may be wrong, though…)

Fun stuff; I don't think this works with modern fine-grained API tokens. I'd have to give it permissions against pantsbuild/pants, but that isn't an option when configuring the token. I can only select repos I'm an owner on.