NuGet.org has started Trusted Publishing, which lets people publish packages with short-lived tokens instead of long-lasting API keys. This change improves security for package uploads.