What changed
Producer-side tools call this non-breaking. For a consumer it is a null dereference on an unknown future date.
Affects messages on smartshield_api-response-common-failure reachable from 10 operations. Nothing fails at the call; it fails wherever the value is finally used, which is usually somewhere else entirely.
no longer guaranteed present
Who is affected
Code that reads Cloudflare's smartshield_api-response-common-failure objects, used by 10 Cloudflare operations.
Before and after
| Where | Before | After |
|---|---|---|
| smartshield_api-response-common-failure.messages | always present | may be missing |
Code that breaks
// response.messages may now be absent or null const messages = response.messages ?? fallback;
Based on Cloudflare’s published API specification. How severity is decided.