Public API radar

Know when the API changes before your users do.

A public feed of breaking changes on Stripe, OpenAI, Supabase, Vercel, and the rest of the stack indie apps sit on.

polarwarn

New webhook IPs to allowlist

Polar added webhook IPs: 18.117.215.101 (sandbox, already live) and 3.134.178.243 (production, rolling out). If you filter by IP, add both or deliveries fail.

9/1/2026 · source

stripebreaking

Dahlia 2026-08-26 removes payment_method_types

On API version 2026-08-26.dahlia, PaymentIntents and SetupIntents no longer accept payment_method_types. This hits you when you upgrade the account API version, not on the old pinned version.

8/26/2026 · source

openaibreaking

Assistants API shut down

The Assistants API was removed on August 26, 2026. Requests to it fail. Migrate to the Responses API.

8/26/2026 · source

supabasewarn

Extension version pinning ignored

From August 5, 2026 an explicit version in CREATE/ALTER EXTENSION is ignored and the default version installs. Pinning Postgres extensions that way no longer works.

8/5/2026 · source

anthropicbreaking

Claude Opus 4.1 retired on the API

claude-opus-4-1-20250805 was retired on August 5, 2026. Calls to that model ID fail. Anthropic lists claude-opus-4-8 as the replacement.

8/5/2026 · source

vercelwarn

Next.js August 2026 security release

Critical Next.js RCE issues were disclosed in August 2026. Apps on Vercel were patched at the platform. Self-hosted Next.js must upgrade; Vercel-hosted apps did not need a customer deploy.

8/1/2026 · source

openaiwarn

o3 API shutdown December 11

o3-2025-04-16 and related snapshots are scheduled to leave the API on December 11, 2026. OpenAI lists gpt-5.6-sol as the replacement.

6/11/2026 · source

clerkbreaking

API 2026-05-12 drops metadata on user PATCH

Version 2026-05-12 removes public/private/unsafe metadata from PATCH /v1/users and org update. Set metadata on the dedicated metadata endpoints instead.

5/12/2026 · source

twiliobreaking

Regional api.REGION.twilio.com domains deprecated

Domains like api.ie1.twilio.com and api.au1.twilio.com were scheduled to stop on April 28, 2026. Use api.twilio.com (api.us1.twilio.com still valid).

4/28/2026 · source

openaiwarn

Sora 2 / Videos API removal date set

Sora 2 and the Videos API are scheduled for removal on September 24, 2026. Video jobs still on those IDs need a new path before that date.

3/24/2026 · source

twiliowarn

HTTPS required for Functions and Assets webhooks

From September 24, 2026 Twilio requires https:// for Functions and Assets webhooks. http:// will 301 and can break webhook handlers.

1/22/2026 · source

neonbreaking

Managed Better Auth SDK v0.1 APIs removed in v0.2

v0.2 replaces neonAuth(), authApiHandler(), neonAuthMiddleware(), and createAuthServer() with createNeonAuth() and auth.getSession() / handler / middleware. getSession() return shape changed.

1/1/2026 · source

auth0warn

Rules and Hooks end of life November 18

Auth0 Rules and Hooks stop executing and are removed on November 18, 2026. Move those flows to Actions before that date.

5/16/2023 · source