GraphQL API access is enforced through documented token types only

data/deprecations/17-0-graphql-strict-token-enforcement copy.yml

+- title: "GraphQL API access through unsupported methods"
+  # The milestones for the deprecation announcement, and the removal.
+  removal_milestone: "17.0"
+  announcement_milestone: "17.0"
+  # Change breaking_change to false if needed.
+  breaking_change: true
+  # The stage and GitLab username of the person reporting the change,
+  # and a link to the deprecation issue
+  reporter: adil.farrukh
+  stage: govern
+  issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/442520
+  body: |  # (required) Don't change this line.
+   From GitLab 17.0, we limiting access to GraphQL to only through the
+   [already documented supported token types](https://docs.gitlab.com/ee/api/graphql/#token-authentication).
+
+   For customers already using documented and supported token types, there are no breaking changes.

doc/update/deprecations.md

@@ -1234,6 +1234,23 @@ Runners generate provenance metadata and currently defaults to generating statem
 
 <div class="deprecation breaking-change" data-milestone="17.0">
 
+### GraphQL API access through unsupported methods
+
+<div class="deprecation-notes">
+- Announced in GitLab <span class="milestone">17.0</span>
+- Removal in GitLab <span class="milestone">17.0</span> ([breaking change](https://docs.gitlab.com/ee/update/terminology.html#breaking-change))
+- To discuss this change or learn more, see the [deprecation issue](https://gitlab.com/gitlab-org/gitlab/-/issues/442520).
+</div>
+
+From GitLab 17.0, we limiting access to GraphQL to only through the
+[already documented supported token types](https://docs.gitlab.com/ee/api/graphql/#token-authentication).
+
+For customers already using documented and supported token types, there are no breaking changes.
+
+</div>
+
+<div class="deprecation breaking-change" data-milestone="17.0">
+
 ### GraphQL deprecation of `dependencyProxyTotalSizeInBytes` field
 
 <div class="deprecation-notes">