What changed
No action needed unless you validate responses against a closed schema.
Affects POST /v1/projects/{idOrName}/avatar.
Who is affected
Code that reads POST /v1/projects/{idOrName}/avatar (security.rulesets[key].rateLimit.action).
Before and after
| Where | Before | After |
|---|---|---|
| POST /v1/projects/{idOrName}/avatar · security.rulesets[key].rateLimit.action | absent | present |
| DELETE /v1/projects/{idOrName}/avatar · security.rulesets[key].rateLimit.action | absent | present |
| PATCH /v1/projects/{projectId}/microfrontends · security.rulesets[key].rateLimit.action | absent | present |
| GET /v10/projects · security.rulesets[key].rateLimit.action | absent | present |
| POST /v11/projects · security.rulesets[key].rateLimit.action | absent | present |
| GET /v9/projects/{idOrName} · security.rulesets[key].rateLimit.action | absent | present |
| PATCH /v9/projects/{idOrName} · security.rulesets[key].rateLimit.action | absent | present |
Based on Vercel’s published API specification. How severity is decided.