Vercel API breaking change: response-prop-removed on GET /v1/query/web-analytics/events/aggregate
What changed
According to the OpenAPI spec diff (vercel/vercel-oas-v1.28.8-to-v1.28.9), the following surface changed:
response-prop-removed: GET /v1/query/web-analytics/events/aggregate -> 200 data[].dheCipherSuite
Who is affected
The dheCipherSuite dimension was dropped from all web-analytics query responses with no successor field.
To find out whether your repo is hit — file and line number, no code leaving your machine:
npx mendapi scan --repo .
How to fix it
mendapi ships a deterministic migration pack for this change (vercel-web-analytics-dhe-cipher-suite-removal). Preview the patch locally (dry-run is the default; nothing is modified without --apply):
npx mendapi fix --repo . --migration vercel-web-analytics-dhe-cipher-suite-removal
The pack is idempotent, gold-regression tested, and safe on partially migrated code.
What the migration does:
The dheCipherSuite dimension was dropped from all web-analytics query responses with no successor field. The upstream simply stopped reporting this TLS telemetry dimension. Consumers that read or group by dheCipherSuite must delete the field access; the read now yields undefined and any aggregation keyed on it collapses into a single undefined bucket. The safe mechanical migration is to remove the field from response destructuring, group-by keys, and any downstream display logic. There is no way to recover the data from another endpoint.
Before:
const { dheCipherSuite, browser } = row;
stats[dheCipherSuite] = (stats[dheCipherSuite] || 0) + 1;
After:
const { browser } = row;
// dheCipherSuite dimension discontinued upstream (v1.28.9); grouping removed.
Detected and tracked by mendapi — Dependabot for every API you depend on. Scans run locally; your code never leaves your machine.
Related
- All monitored providers — live change counts for vercel and 19 others.
- Migration pack catalog — every deterministic fix mendapi ships.
- Getting started — scan your repo in 30 seconds, no code leaves your machine.