Batch Changes support for GitHub fine-grained access tokens (experimental)
Batch Changes now supports using GitHub fine-grained access tokens as credentials for creating and managing changesets. This support is experimental and is especially useful for customers who prefer not to use GitHub Apps due to their broad repo access, and who also disallow personal access tokens (PATs) because of their wide permissions and lack of expiration controls. Fine-grained access tokens strike a better balance: they’re more secure than PATs and more flexible than GitHub Apps.

They can be used for both user-level and site-admin credentials in Batch Changes. However, note that fine-grained tokens can be more complex to set up and may require admin approval in your GitHub organization.
Read more on how to use fine-grained access tokens in our docs.