← All breaking-change reports

Twilio API breaking change: response-prop-removed on POST /2010-04-01/Accounts/{AccountSid}/SIP/Domains/{DomainSid}/IpAccessControlListMappings.json

twilio · breaking · upstream source

What changed

According to the OpenAPI spec diff (twilio/twilio-api-1.10.0-to-1.20.0), the following surface changed:

response-prop-removed: POST /2010-04-01/Accounts/{AccountSid}/SIP/Domains/{DomainSid}/IpAccessControlListMappings.json -> 201 subresource_uris

Who is affected

The mapping payload no longer includes the subresource_uris map.

To find out whether your repo is hit — file and line number, no code leaving your machine:

npx mendapi scan --repo .

How to fix it

Migration path:

The mapping payload no longer includes the subresource_uris map. Code that followed mapping.subresource_uris to reach the underlying credential list or IP access control list should build the URL locally instead: the mapping still returns the child resource SID, and Twilio 2010-04-01 URLs are a stable deterministic function of account SID plus resource SID. Replace the dynamic URI lookup with a template string; no data is lost because the URI carried no information beyond the SIDs already in hand.

Before:

const listUrl = mapping.subresource_uris.credential_lists;
const list = await fetchJson(`https://api.twilio.com${listUrl}`);

After:

const list = await fetchJson(`https://api.twilio.com/2010-04-01/Accounts/${accountSid}/SIP/CredentialLists/${mapping.sid}.json`);

Replacement data source: Construct the child resource URL locally from the stable REST convention: /2010-04-01/Accounts/{AccountSid}/SIP/CredentialLists/{CredentialListSid}.json (and the IpAccessControlLists equivalent). The SIDs needed are present on the mapping resource itself.

With your own LLM key configured (BYO compute — mendapi never proxies your credentials), npx mendapi llmfix turns this guide into a reviewable draft patch for your repo.

Detected and tracked by mendapi — Dependabot for every API you depend on. Scans run locally; your code never leaves your machine.

Related

Pre-release. Change data is recorded from upstream provider releases, changelogs and OpenAPI spec diffs; every article links its source.