Changes!

Author: lpil

CHANGELOG.md

@@ -58,6 +58,14 @@
   README generated by the `gleam new` command.
   ([Giacomo Cavalieri](https://github.com/giacomocavalieri))
 
+- The build tool now uses OAuth and time-based one-time-passwords for
+  authentication with Hex, improving security.
+
+  Any legacy API tokens previously stored will be revoked after authenticating
+  using OAuth.
+
+  ([Louis Pilfold](https://github.com/lpil))
+
 - The build tool will now refuse to publish any package that has no README, or
   an empty README.
   ([Giacomo Cavalieri](https://github.com/giacomocavalieri))