Deadlines

Upcoming API deadlines

Dates when a verified API or platform change starts breaking code: a removal, a shutdown, or a forced upgrade. Soonest first, each with the fix. Open a trap for its sources. The list updates when the weekly check adds or retires a trap.

Add these dates to your calendar

Subscribe once and new deadlines appear on their own. The Subscribe button opens your calendar app, such as Apple Calendar. In Google Calendar on a computer, click Add other calendars next to Other calendars, choose From URL, and paste the link.

Subscribehttps://getfootgun.com/deadlines.ics

Coming up

December 31, 2026in 59 days
Supabasefg-0569
A Supabase service_role or secret key in browser code lets anyone skip every RLS policy
Fix
Use only the publishable key (or the legacy anon key) in browser and mobile code, and keep secret keys in server-only environment variables without the NEXT_PUBLIC_ prefix. If a secret key was ever shipped or committed, fix the cause of the leak first, then create a new secret key, replace it everywhere, confirm every component uses it, and delete the old one.
January 1, 2027in 60 days
Shopifyfg-0333
Shopify offline access token stops working after an hour, or on January 1 2027 if it never expires
Fix
Request expiring=1 in token exchange, store the rotating refresh token, and refresh from one place per shop before expires_in runs out. Apps on the official templates refresh automatically.
January 16, 2027in 75 days
Shopifyfg-0334
Shopify responses change shape without a deploy because the pinned API version was retired and Shopify fell forward
Fix
Read the X-Shopify-API-Version header on responses and webhooks, alert when it differs from what you pinned, and move the pin plus the shopify.app.toml webhooks api_version forward every quarter.
January 25, 2027in 84 days
Cloudflarefg-0548
Tunnel path-based ingress rules may match differently once URL normalization becomes default on 2027-01-25
Fix
Turn normalization on now in a test environment and verify path routing before the default flips. You can also set TUNNEL_DISABLE_PATH_NORMALIZATION=false on each replica and restart it.
April 1, 2027in 150 days
Firebasefg-0192
functions.config() throws has been removed in firebase-functions v7 after upgrading
Fix
Move values to params: defineString or defineInt for plain config, defineSecret for secrets, and defineJsonSecret for a whole JSON blob. Pin firebase-functions below 7 only as a short stopgap.

Passed in the last 90 days

If your code still uses any of these, it is already affected.

October 23, 202610 days ago
OpenAI APIfg-0138
Image generation with dall-e-3 or gpt-image-1 fails after their shutdown dates
Fix
Switch to gpt-image-2.5-sunburst or gpt-image-2.5-flare, and keep the model id in configuration.
October 23, 202610 days ago
OpenAI APIfg-0137
Code calling gpt-3.5-turbo, gpt-4, gpt-4-turbo, o1, o3-mini or o4-mini breaks on 2026-10-23
Fix
Replace each model with its listed substitute: gpt-3.5-turbo and o4-mini move to gpt-5.6-terra; gpt-4, gpt-4-turbo, gpt-4o-2024-05-13, o1 and o3-mini move to gpt-5.6-sol; o1-pro moves to gpt-5.6-sol with reasoning.mode pro; gpt-4.1-nano moves to gpt-5.6-luna. Keep the model id in configuration so the next retirement is a one line change.

Loading deadlines...