Advisories
An advisory describes one third-party API behavior change: which endpoint, what changed, when it took (or takes) effect, exactly what code it breaks, how to migrate, and the evidence. SHAPI's advisories are open data in a public repository:
github.com/SriVarshini09/shapi-advisories, licensed under CC BY 4.0.
The CLI ships a copy; the GitHub App syncs the repository every hour.
Format
One JSON file per advisory, validated against a JSON Schema on every pull request.
{
"id": "github-workflow-dispatch-204-to-200",
"provider": "github",
"title": "workflow_dispatch returns 200 with a body instead of 204",
"endpoint": { "method": "POST", "path": "/repos/{owner}/{repo}/actions/workflows/{workflow_id}/dispatches" },
"changeClass": "status-code",
"trigger": { "statusCodes": [204], "newStatusCodes": [200] },
"effectiveDate": "2025-12-19",
"severity": "critical",
"recipeId": "status-code-accept-set",
"status": "verified",
"sources": ["https://github.blog/changelog/2026-02-19-workflow-dispatch-api-now-returns-run-ids"]
}The real files have more fields: a summary, when the change was first observed, the provider's notice if there was one, and a migration note. Key fields:
changeClass:status-code,field-rename,enum-added,required-field,version-sunset,scope-changeorauth.trigger: what a call site must depend on to be affected. Calls that don't depend on it are only exposed.status:verifiedmeans checked against a primary source or two independent ones;unverifiedmeans secondary reports only.recipeId: the deterministic fix SHAPI applies, when there is one.
All advisories
64 advisories: 63 verified, and 11 with a fix SHAPI can apply automatically.
Contribute
Found an API change that broke your code? Open a pull request in the advisory repository. Its contribution guide explains the evidence an advisory needs. Corrections to existing advisories are as welcome as new ones.