← All breaking-change reports

PayPal breaking change: 1.0.0

paypal · breaking · 2025-03-24 · upstream source

What changed

all controller methods renamed (ordersCreate -> createOrder family)

From the upstream announcement:

Automated commit message

Who is affected

This is a textbook deterministic rename map: every controller method changed name while keeping its positional signature, so the fix is a per-method token rewrite on ordersController/paymentsController call chains (ordersCreate becomes createOrder, authorizationsCapture becomes captureAuthorizedPayment, and so on for the fifteen verified pairs).

To find out whether your repo is hit — file and line number, no code leaving your machine:

npx mendapi scan --repo .

How to fix it

mendapi ships a deterministic migration pack for this change (paypal-server-sdk-v1-controller-renames). Preview the patch locally (dry-run is the default; nothing is modified without --apply):

npx mendapi fix --repo . --migration paypal-server-sdk-v1-controller-renames

The pack is idempotent, gold-regression tested, and safe on partially migrated code.

What the migration does:

This is a textbook deterministic rename map: every controller method changed name while keeping its positional signature, so the fix is a per-method token rewrite on ordersController/paymentsController call chains (ordersCreate becomes createOrder, authorizationsCapture becomes captureAuthorizedPayment, and so on for the fifteen verified pairs). Anchoring the rewrite to the controller member chain prevents collisions with unrelated identifiers. A migration pack is a direct candidate since the map was verified token-by-token against the SDK source diff.

Before:

const { result } = await client.ordersController.ordersCreate({ body: orderRequest });

After:

const { result } = await client.ordersController.createOrder({ body: orderRequest });

Detected and tracked by mendapi — Dependabot for every API you depend on. Scans run locally; your code never leaves your machine.

Related

Pre-release. Change data is recorded from upstream provider releases, changelogs and OpenAPI spec diffs; every article links its source.