Driftwatch

GitHub / GitHub REST API /

Breakingdirection flip: their tools call this safe

auth_type can now return "anonymous"

What changed

Producer-side tools call this additive. It breaks exhaustive switches, strict parsers and generated client enums.

Affects auth_type on org-private-registry-configuration reachable from 2 operations.

New value: anonymous.

can now return "anonymous"

Who is affected

Code that reads GitHub's org-private-registry-configuration objects, used by 2 GitHub operations.

Before and after

WhereBeforeAfter
org-private-registry-configuration.auth_type"oidc_aws", "oidc_azure", "oidc_cloudsmith", "oidc_gcp", "oidc_jfrog", "token", "username_password""anonymous", "oidc_aws", "oidc_azure", "oidc_cloudsmith", "oidc_gcp", "oidc_jfrog", "token", "username_password"
org-private-registry-configuration-with-selected-repositories.auth_type"oidc_aws", "oidc_azure", "oidc_cloudsmith", "oidc_gcp", "oidc_jfrog", "token", "username_password""anonymous", "oidc_aws", "oidc_azure", "oidc_cloudsmith", "oidc_gcp", "oidc_jfrog", "token", "username_password"

Code that breaks

switch (response.auth_type) {
  // existing branches …
  // no branch for "anonymous"
  default:
    throw new Error("unexpected auth_type");
}

Based on GitHub’s published API specification. How severity is decided.