← All breaking-change reports

PayPal 1.0.0 breaking change: all controller methods renamed (ordersCreate -> createOrder family)

paypal · breaking · 2025-03-24 · upstream source

What changed

all controller methods renamed (ordersCreate -> createOrder family)

From the upstream announcement:

Automated commit message

Who is affected

This is a textbook deterministic rename map: every controller method changed name while keeping its positional signature, so the fix is a per-method token rewrite on ordersController/paymentsController call chains (ordersCreate becomes createOrder, authorizationsCapture becomes captureAuthorizedPayment, and so on for the fifteen verified pairs).

To find out whether your repo is hit — file and line number, no code leaving your machine:

npx mendapi sync  # the one network call: fetch the change feed
npx mendapi scan --repo .  # local scan, nothing leaves your machine

How to fix it

mendapi ships a deterministic migration pack for this change (paypal-server-sdk-v1-controller-renames). Preview the patch locally (dry-run is the default; nothing is modified without --apply):

npx mendapi fix --repo . --migration paypal-server-sdk-v1-controller-renames

The pack is idempotent, gold-regression tested, and safe on partially migrated code.

What the migration does:

This is a textbook deterministic rename map: every controller method changed name while keeping its positional signature, so the fix is a per-method token rewrite on ordersController/paymentsController call chains (ordersCreate becomes createOrder, authorizationsCapture becomes captureAuthorizedPayment, and so on for the fifteen verified pairs). Anchoring the rewrite to the controller member chain prevents collisions with unrelated identifiers. A migration pack is a direct candidate since the map was verified token-by-token against the SDK source diff.

Before:

const { result } = await client.ordersController.ordersCreate({ body: orderRequest });

After:

const { result } = await client.ordersController.createOrder({ body: orderRequest });

Detected and tracked by mendapi — Dependabot for every API you depend on. Scans run locally; your code never leaves your machine.

Related

Change data is recorded from upstream provider releases, changelogs and OpenAPI spec diffs; every article names its source.