API Change Radar

The Supabase Management API `logs.all` analytics endpoint is being removed on 2026-09-23. Scripts must migrate to the new ClickHouse-backed `logs` endpoint, which only accepts ClickHouse SQL.

A new changelog entry '09.16 Updates to Events payloads and subscription configuration' has been added under the Events & Webhooks surface, marked as Action Required. This is the only net-new item added in this diff compared to the previous version.

Three new changelog entries were added on Sep 16, 2026: automation of SSO authorization for classic PATs and SSH keys, SCIM user responses now including a `profileUrl` attribute, and Copilot budget increase requests becoming generally available.

Multiple breaking changes including: the Assistants API shut down on August 26, 2026; DALL·E 2/3 model snapshots and Realtime API Beta were removed on May 12, 2026; whisper-1, gpt-4o-transcribe, gpt-4o-mini-transcribe, and gpt-4o-transcribe-diarize are deprecated with shutdown on February 26, 2027. Additionally, GPT-6 Astra does not support `none` reasoning effort, custom temperature/top_p, or logprobs, and requires the Responses API for tool calling.

OpenAI has added new Webhooks endpoints to the API reference navigation, including Create, Retrieve, Update, Delete, List webhooks, Rotate Secret, and Test operations. These appear under a new 'Webhooks Events' section in the sidebar.

The Supabase Management API `logs.all` analytics endpoint is being removed on 2026-09-23. Scripts must migrate to the new ClickHouse-backed `logs` endpoint, which only accepts ClickHouse SQL.

A new changelog entry dated Sep 16 was added: 'Code scanning AI Scan no longer requires CodeQL default setup' under application security improvements. No existing entries were removed or modified.

Slack system notifications previously delivered via Slackbot are now delivered from a new 'Slack' system user (USLACK). Apps that filter events or messages by Slackbot's user ID or username to identify system notifications must be updated to handle the new USLACK sender.

A new 'Catalog' surface/category has been added to Shopify's changelog navigation and API surfaces, along with a new changelog entry 'Filter Catalog search results by media type' dated 09.15.

Two new changelog entries were added on September 15, 2026: 'Enforce GitHub Advanced Security configurations' (an improvement for application security) and 'GitHub Copilot suggests custom properties definitions' (a new release for Copilot/platform governance). All other entries remain unchanged.

Twilio's changelog page now surfaces multiple significant updates including: Java Helper Library 13.0.0 (critical fix for unknown field deserialization crashes), Functions Classic deprecation with migration timeline, new Webhook Configuration API in Public Beta, ElevenLabs voices in Public Beta for TwiML <Say>, SendGrid Link Branding auto SSL provisioning with a new `auto_ssl` API parameter, Bulk Messaging WhatsApp Content Templates support, Consent Management API Toll-Free opt-out overrides, and Verify geo permission tightening for Italy and Argentina.

Several new entries were added to Shopify's developer changelog for September 15, 2026, including dynamic complexity cost for the metafieldsSet mutation, optional family_name for B2B orders in Payments Apps API, delivery option metafields in Functions input, and a new Polaris admin look preparation guide.

Multiple breaking changes detected in this Supabase changelog dump, including the removal of the Management API `logs.all` endpoint on 2026-09-23, deprecation of extension version pinning, Envoy replacing Kong as the default API gateway for self-hosted, Realtime schema lockdown, OAuth token endpoint returning HTTP 200 instead of 201, tables no longer auto-exposed to Data/GraphQL API, and several others. The most immediately impactful is the `logs.all` endpoint removal with a hard cutover date.

HubSpot announced at Fall Spotlight 2026 the end of support for v1-v3 APIs, legacy public apps, and legacy private apps, all with a September 2027 enforcement date. This is a sweeping deprecation affecting a large portion of the HubSpot API surface.

Multiple Twilio changelog entries spanning Aug–Sep 2026, including new features (ElevenLabs TTS voices in Public Beta, Webhook Configuration API in Public Beta, Bulk Messaging WhatsApp Content Templates, Consent Management API Toll-Free opt-out overrides, Verify Custom Templates GA, SendGrid auto SSL link branding), a behavioral/compliance change (Verify geo permissions tightened for Italy and Argentina), a deprecation (Functions Classic retiring with migration to new Functions), and a critical Java Helper Library bug fix (v13.0.0 resolving deserialization crashes on unknown fields).

GitHub has sunset SHA-1 in HTTPS connections, effective September 15, 2026. This is a permanent removal with no fallback, meaning clients relying on SHA-1 cipher suites for HTTPS communication with GitHub will be unable to connect.

The Supabase Management API `logs.all` analytics endpoint is being removed on 2026-09-23 and must be replaced with the new ClickHouse-backed `logs` endpoint, which only accepts ClickHouse SQL. Multiple other breaking changes are also present in this changelog, including removal of the `realtime` schema modification rights, deprecation of extension version pinning, and self-hosted gateway changes.

A new `paymentInstrumentSendAddEmail` mutation was added to the Admin GraphQL API that emails customers a link to add a payment method for a subscription, order, or draft order.

A new changelog entry was added on September 14, 2026 for 'Configure cost and quality in Copilot auto model selection', a release feature for GitHub Copilot. No existing endpoints or parameters were removed or changed.

Multiple breaking changes detected in this Supabase changelog diff, most critically the removal of the Management API `logs.all` analytics endpoint on 2026-09-23, which requires migration to the new ClickHouse-backed logs endpoint using ClickHouse SQL. Additional high-severity breaking changes include: Envoy replacing Kong as default API gateway for self-hosted (week of 2026-08-09), the `realtime` schema being fully locked down, `API_EXTERNAL_URL` path change for self-hosted auth, tables no longer auto-exposed to Data/GraphQL API, and the OAuth token endpoint returning HTTP 200 instead of 201.

Plaid's September 2026 changelog introduces numerous new endpoints, features, and deprecations across multiple products including CRA Servicing (replacing Cash Flow Updates), new Income User APIs, Identity Verification enhancements, and Signal/Investments/Transactions updates. Notable breaking-adjacent changes include Chase consent expiration behavior and the upcoming enforcement of required product declarations in /link/token/create for Plaid Check.

Multiple breaking changes announced: (1) Channel obfuscation for bots lacking VIEW_CHANNEL permission rolls out on Nov 16, 2026 via HTTP and is testable now via Gateway; (2) Battle.net connections will be removed from GET /users/@me/connections starting September 22, 2026 with no replacement; (3) Channel application_id field is now nullable; (4) Prune endpoints now require ADMINISTRATOR permission for guilds with PRUNE_REQUIRES_ADMIN feature; (5) Message forwarding now requires message content access.

Two new changelog entries were added on September 11, 2026: 'Add VS Code Agents to Copilot usage metrics' (account management/copilot/enterprise) and 'Auto-resolution and analysis updates in Copilot code review' (copilot). These are incremental improvements to Copilot tooling and metrics.

Starting September 15, 2026, the `privacy_policy_url` and `terms_and_conditions_url` fields will become required on all new Toll-Free verification submissions; submissions missing either field will be rejected. Existing verified numbers are unaffected.

OpenAI released multiple major API features including GPT-6 Astra (most capable model), GPT-Live-1 for full-duplex voice, the Agents API in public beta, new transcription models, and numerous platform improvements. Additionally, several significant deprecations were announced including Assistants API shutdown (Aug 26, 2026), whisper-1 and gpt-4o transcription model deprecations (shutdown Feb 26, 2027), and DALL·E model snapshots already removed.

The Assistants API shut down on August 26, 2026, and multiple audio transcription models (whisper-1, gpt-4o-transcribe, gpt-4o-mini-transcribe, gpt-4o-transcribe-diarize) were deprecated with a shutdown date of February 26, 2027. Additionally, DALL·E model snapshots (dall-e-2, dall-e-3) and the Realtime API Beta were removed on May 12, 2026.

The Assistants API was permanently shut down on August 26, 2026, with no further access. Additionally, whisper-1, gpt-4o-transcribe, gpt-4o-mini-transcribe, and gpt-4o-transcribe-diarize have been deprecated and will shut down on February 26, 2027. DALL·E model snapshots (dall-e-2, dall-e-3) and the Realtime API Beta were also removed on May 12, 2026.

A new changelog entry 'GitHub Copilot weekly releases — September 7' was added to the GitHub Changelog page on Sep 10. This diff reflects the addition of a weekly Copilot release summary entry compared to the previous snapshot.

Twilio's changelog page shows multiple updates including: ElevenLabs voices in Public Beta for TwiML <Say>, a new Webhook Configuration API in Public Beta (supporting OAuth 2.0 and Shared Key auth), a critical Java Helper Library 13.0.0 fix for unknown field deserialization, SendGrid Link Branding automatic SSL provisioning with a new `auto_ssl` API parameter, Bulk Messaging support for WhatsApp Content Templates, Functions Classic deprecation/migration, and Consent Management API support for Toll-Free network-level opt-out overrides.

The Assistants API was permanently shut down on August 26, 2026, with no further access. Additionally, whisper-1, gpt-4o-transcribe, gpt-4o-mini-transcribe, and gpt-4o-transcribe-diarize have been deprecated with a shutdown date of February 26, 2027. Multiple other removals occurred including DALL·E model snapshots and the Realtime API Beta (removed May 12, 2026).

Three new changelog entries were added on Sep 10, 2026: a refreshed repository pull requests page in public preview, AI Scan for pull request APIs in public preview, and a new GitHub Actions cache-mode control for cache access. The rest of the changelog content is unchanged.

OpenAI has released numerous significant API changes including new models (GPT-6 Astra, GPT-5.6 family, GPT Image 2.5, GPT Transcribe, GPT-Live-1), new endpoints and capabilities (Agents API, GPT-Live sessions, Prompt Cache Diagnostics, mTLS, Terraform provider), and critical deprecations/removals (Assistants API shutdown, whisper-1 and transcription model deprecations, DALL-E snapshots removed). The Assistants API was permanently shut down on August 26, 2026, requiring immediate migration.

The Assistants API was permanently shut down on August 26, 2026, with no further access. Additionally, DALL·E 2/3 model snapshots and the Realtime API Beta were removed on May 12, 2026, and multiple transcription models (whisper-1, gpt-4o-transcribe, gpt-4o-mini-transcribe, gpt-4o-transcribe-diarize) have been deprecated with a shutdown date of February 26, 2027.

The Assistants API shut down on August 26, 2026, and multiple transcription models (whisper-1, gpt-4o-transcribe, gpt-4o-mini-transcribe, gpt-4o-transcribe-diarize) have been deprecated with a shutdown date of February 26, 2027. Additionally, DALL·E 2 and DALL·E 3 model snapshots and the Realtime API Beta were removed on May 12, 2026.

OpenAI's API reference navigation added a new 'Live' section under Platform APIs, containing endpoints for session management (Create session, Primary WebSocket, Sideband WebSocket, Fork WebSocket, Sessions Accept/Download Recording/Fork/Hangup/Refer/Reject). Additionally, the navigation label 'Voice & Audio' was renamed to 'Audio & voice'.

A new changelog entry dated 09.10 was added: 'Discounts Allocator Function API developer preview has ended' (Action required, Admin GraphQL API). This is the primary diff between the two versions of the changelog page.

Twilio's changelog page now lists multiple product updates including new Public Beta features (ElevenLabs voices for TwiML Say, Webhook Configuration API), a critical Java Helper Library fix (v13.0.0), a new Link Branding auto_ssl parameter for SendGrid, Functions Classic deprecation, and enhancements to Bulk Messaging and Consent Management APIs.

MAI-Code-1-Flash model has been deprecated in GitHub Copilot as of September 10, 2026. Additionally, a new Xcode 27 runner image on macOS 27 and an npm security hold improvement were added.

Two new changelog entries were added on Sep 9, 2026: 'CodeQL 2.27.0 adds support for Linux ARM64' and 'Enterprise managed permissions for GitHub Copilot agent operations'. These represent new capabilities rather than breaking or behavioral changes.

Twilio's changelog page has been updated with multiple entries including: a new Webhook Configuration API in Public Beta (supporting OAuth 2.0 and Shared Key auth), a critical Java Helper Library 13.0.0 fix for unknown field deserialization crashes, a new `auto_ssl` parameter in the SendGrid Link Branding API, Functions Classic deprecation with migration starting September 13 2026, Consent Management API now supporting Toll-Free network-level opt-out overrides, and a TLS certificate rotation for all REST API endpoints on September 9 2026.

Shopify's changelog page has been updated with a new entry dated 09.09: 'Create and delete dev stores in Shopify CLI' under the new 'Shopify CLI' surface category. The navigation sidebar also gained a new 'Shopify CLI' filter option under the DEV PLATFORM section.

Three new changelog entries were added on Sep 9, 2026: GitHub Advanced Security trial expansion, a new control to block pull requests with exposed secrets from merging, and agentic autofix for Code Quality findings. No existing API endpoints or parameters were removed or altered.

This diff contains multiple breaking changes across the Supabase platform, with the most critical being the removal of the Management API `logs.all` analytics endpoint on 2026-09-23, the deprecation of extension version pinning (ignored from 2026-08-05), the Envoy replacing Kong as default API gateway for self-hosted deployments (week of 2026-08-09), and Realtime schema being fully locked down. Additional breaking changes include OAuth token endpoint returning HTTP 200 instead of 201, tables no longer auto-exposed to Data/GraphQL APIs, pg_graphql disabled by default, and removal of OpenAPI spec access via anon key.

A new changelog entry 'Enterprise-managed sandbox in Copilot for JetBrains' was added to the GitHub Changelog page on Sep 8, 2026. This is the only meaningful diff between the two versions of the page.

Two new changelog entries were added on September 8, 2026: GitHub Enterprise Server 3.22 is generally available, and a new customer portal at help.github.com has launched. No existing API endpoints or contracts were removed or modified.

OpenAI released multiple major API features and models including GPT-6 Astra, GPT-5.6 family, GPT Image 2.5, new transcription models, Realtime API updates, Terraform provider, mTLS/X.509 GA, and numerous platform capabilities. Additionally, several deprecations and removals occurred including DALL·E model snapshots, Realtime API Beta, Assistants API shutdown, and whisper/transcription model deprecations.

OpenAI's changelog covers a large number of changes across many months (February–September 2026), including new model releases (GPT-6 Astra, GPT-5.6 family, GPT Image 2.5, GPT Transcribe, GPT Realtime 2.1), new API capabilities (async tool calling, mid-turn steering, mTLS, Terraform provider, spend limits, regional processing), deprecations (whisper-1, gpt-4o-transcribe variants shutting down Feb 2027, Assistants API shut down Aug 26 2026, DALL·E snapshots removed May 2026), and breaking removals (Assistants API, DALL·E 2/3 snapshots, Realtime API Beta). Multiple significant breaking changes and deprecations are embedded within this single large diff.

OpenAI released multiple major API changes including GPT-6 Astra (their most capable model), new Responses API controls (async tool calling, mid-turn steering), new transcription models (GPT Transcribe, GPT Live Transcribe), GPT-5.6 model family, and numerous other features and deprecations spanning several months. Notable breaking constraints include GPT-6 Astra not supporting 'none' reasoning effort, custom temperature/top_p, or logprobs, and tool calling requiring the Responses API. Additionally, the Assistants API was shut down on August 26, 2026, and DALL·E snapshots and Realtime API Beta were removed.

The Supabase Management API `logs.all` analytics endpoint is being removed on 2026-09-23 and must be migrated to the new ClickHouse-backed `logs` endpoint, which only accepts ClickHouse SQL. Additionally, multiple other breaking changes are present in this diff including self-hosted gateway changes, realtime schema lockdown, OAuth token endpoint status code change, and more.

Two new changelog entries appeared on September 8, 2026: variants now support multiple barcodes (Admin GraphQL API, action required) and Customer Address APIs now support countryCode (Checkout UI, deprecated). These are net-new capabilities and a deprecation notice added to the Shopify changelog.