Give an API token a new secret without creating a new one

You can now give an existing token a new secret value instead of setting up a new one: a token's menu under "API Tokens" on your profile page now offers "Rotate". You keep the name, description and permission level, and pick a new expiry. The old value stops working immediately, so update whatever uses it.

• The new value is shown once, so copy it before you close the dialog.
• You must be signed in to the web app; a token cannot rotate itself.