New webhook IPs to allowlist
Polar added webhook IPs: 18.117.215.101 (sandbox, already live) and 3.134.178.243 (production, rolling out). If you filter by IP, add both or deliveries fail.
Public API radar
A public feed of breaking changes on Stripe, OpenAI, Supabase, Vercel, and the rest of the stack indie apps sit on.
Polar added webhook IPs: 18.117.215.101 (sandbox, already live) and 3.134.178.243 (production, rolling out). If you filter by IP, add both or deliveries fail.
On API version 2026-08-26.dahlia, PaymentIntents and SetupIntents no longer accept payment_method_types. This hits you when you upgrade the account API version, not on the old pinned version.
The Assistants API was removed on August 26, 2026. Requests to it fail. Migrate to the Responses API.
From August 5, 2026 an explicit version in CREATE/ALTER EXTENSION is ignored and the default version installs. Pinning Postgres extensions that way no longer works.
claude-opus-4-1-20250805 was retired on August 5, 2026. Calls to that model ID fail. Anthropic lists claude-opus-4-8 as the replacement.
Critical Next.js RCE issues were disclosed in August 2026. Apps on Vercel were patched at the platform. Self-hosted Next.js must upgrade; Vercel-hosted apps did not need a customer deploy.
o3-2025-04-16 and related snapshots are scheduled to leave the API on December 11, 2026. OpenAI lists gpt-5.6-sol as the replacement.
Version 2026-05-12 removes public/private/unsafe metadata from PATCH /v1/users and org update. Set metadata on the dedicated metadata endpoints instead.
Domains like api.ie1.twilio.com and api.au1.twilio.com were scheduled to stop on April 28, 2026. Use api.twilio.com (api.us1.twilio.com still valid).
Sora 2 and the Videos API are scheduled for removal on September 24, 2026. Video jobs still on those IDs need a new path before that date.
From September 24, 2026 Twilio requires https:// for Functions and Assets webhooks. http:// will 301 and can break webhook handlers.
v0.2 replaces neonAuth(), authApiHandler(), neonAuthMiddleware(), and createAuthServer() with createNeonAuth() and auth.getSession() / handler / middleware. getSession() return shape changed.
Auth0 Rules and Hooks stop executing and are removed on November 18, 2026. Move those flows to Actions before that date.