What changed
No action needed unless you validate responses against a closed schema.
Affects POST /v1/projects/{idOrName}/avatar.
Who is affected
Code that reads POST /v1/projects/{idOrName}/avatar (permissions.emaSetup).
Before and after
| Where | Before | After |
|---|---|---|
| POST /v1/projects/{idOrName}/avatar · permissions.emaSetup | absent | present |
| DELETE /v1/projects/{idOrName}/avatar · permissions.emaSetup | absent | present |
| PATCH /v1/projects/{projectId}/microfrontends · permissions.emaSetup | absent | present |
| POST /v11/projects · permissions.emaSetup | absent | present |
| GET /v9/projects/{idOrName} · permissions.emaSetup | absent | present |
| PATCH /v9/projects/{idOrName} · permissions.emaSetup | absent | present |
Based on Vercel’s published API specification. How severity is decided.