[fingerprint-dx-team-actions-runner]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

openapi@3.10.0

Minor Changes

• events-search: Add compromised_device_integrity filter query parameter (b2fa5bf)
• events: Add compromised_device_integrity to Event (b2fa5bf)

Patch Changes

• Set the Server API v3 deprecation date to October 31, 2026 and the end-of-life date to October 31, 2027 in the endpoint descriptions (9790b00)

[github-actions]

Schema Diff vs Published Schemas

• Generated at: 2026-10-26T16:38:26.861Z
• Published source: https://fingerprintjs.github.io/openapi/schemas
• Compared schemas: 8
• Changed schemas: 3

fingerprint-server-api-v4-normalized.yaml

Published URL: https://fingerprintjs.github.io/openapi/schemas/fingerprint-server-api-v4-normalized.yaml
Summary: +3 added, -0 removed, ~2 modified

Added elements (3)

• /components/schemas/CompromisedDeviceIntegrity
• /components/schemas/Event/properties/compromised_device_integrity
• /paths/~1events/get/parameters/54

Removed elements (0)

None

Modified elements (2)

• /paths/~1events~1{event_id}/patch/description
• /paths/~1events~1{event_id}/patch/responses/400/description

Changed lines patch

--- a/schemas/fingerprint-server-api-v4-normalized.yaml
+++ b/schemas/fingerprint-server-api-v4-normalized.yaml
@@ -143,11 +143,18 @@
 
         This information might not have been available on the client initially,
         so the Server API permits updating these attributes after the fact.
 
 
-        **Warning** It's not possible to update events older than one month. 
+        **Warning** You can only update events created within the last 10 days.
+        Updating an older event returns HTTP 400 with the message `event is too
+        old to be updated (> 10 days)`, even if your plan retains events for
+        longer.
+
+
+        **Warning** Events created by the Automation Intelligence API (`POST
+        /edge`) cannot be updated. Updating them returns HTTP 400.
 
 
         **Warning** Trying to update an event immediately after creation may
         temporarily result in an 
 
@@ -174,11 +181,13 @@
               $ref: '#/components/schemas/EventUpdate'
       responses:
         '200':
           description: OK.
         '400':
-          description: Bad request. The request payload is not valid.
+          description: >-
+            Bad request. The request payload is not valid, the event is older
+            than 10 days, or the event cannot be updated.
           content:
             application/json:
               schema:
                 $ref: '#/components/schemas/ErrorResponse'
         '403':
@@ -987,10 +996,23 @@
 
             > Note: When using this parameter, only events with the
             `active_call` property set to `true` or `false` are returned. Events
             without an `active_call` Smart Signal result are left out of the
             response.
+        - name: compromised_device_integrity
+          in: query
+          schema:
+            type: boolean
+          description: >
+            Filter events by Compromised Device Integrity result on Android
+            devices.
+
+
+            > Note: When using this parameter, only events with the
+            `compromised_device_integrity` property set to `true` or `false` are
+            returned. Events without a `compromised_device_integrity` Smart
+            Signal result are left out of the response.
       responses:
         '200':
           description: Events matching the filter(s).
           content:
             application/json:
@@ -2073,10 +2095,17 @@
         application found or launch of it inside of a not main working profile
         detected).
 
         * `false` - No signs of cloned application detected or the client is not
         Android.
+    CompromisedDeviceIntegrity:
+      type: boolean
+      description: >
+        `true` if the Android device's boot or system integrity is compromised
+        (e.g., an unlocked bootloader or a failed verified boot), so the device
+        cannot be trusted. `false` if no integrity issue was detected. Available
+        from Android SDK 2.6.0+.
     DeveloperTools:
       type: boolean
       description: >
         `true` if the browser has DevTools open (Chrome, Firefox) or the
         Android/iOS device has Developer Tools enabled, `false` otherwise.
@@ -3302,10 +3331,14 @@
             - browser
         cloned_app:
           $ref: '#/components/schemas/ClonedApp'
           x-platforms:
             - android
+        compromised_device_integrity:
+          $ref: '#/components/schemas/CompromisedDeviceIntegrity'
+          x-platforms:
+            - android
         developer_tools:
           $ref: '#/components/schemas/DeveloperTools'
           x-platforms:
             - browser
             - android

fingerprint-server-api-v4-with-examples.yaml

Published URL: https://fingerprintjs.github.io/openapi/schemas/fingerprint-server-api-v4-with-examples.yaml
Summary: +8 added, -0 removed, ~2 modified

Added elements (8)

• /components/schemas/CompromisedDeviceIntegrity
• /components/schemas/Event/properties/compromised_device_integrity
• /paths/~1events/get/parameters/52
• /paths/~1events/get/responses/200/content/application~1json/examples/200-ok/value/events/0/compromised_device_integrity
• /paths/~1events~1{event_id}/get/responses/200/content/application~1json/examples/200-ok-with-ruleset/value/compromised_device_integrity
• /paths/~1events~1{event_id}/get/responses/200/content/application~1json/examples/200-ok/value/compromised_device_integrity
• /paths/~1events~1{event_id}/patch/responses/400/content/application~1json/examples/400-edge-event-not-updatable
• /paths/~1events~1{event_id}/patch/responses/400/content/application~1json/examples/400-event-too-old

Removed elements (0)

None

Modified elements (2)

• /paths/~1events~1{event_id}/patch/description
• /paths/~1events~1{event_id}/patch/responses/400/description

Changed lines patch

--- a/schemas/fingerprint-server-api-v4-with-examples.yaml
+++ b/schemas/fingerprint-server-api-v4-with-examples.yaml
@@ -642,10 +642,11 @@
                     labels:
                       - label: fraud
                         prediction: false
                         ml_score: 0.01
                     active_call: false
+                    compromised_device_integrity: false
                 200-ok-with-ruleset:
                   summary: >-
                     Example response with rule_action (when ruleset_id is
                     provided)
                   value:
@@ -912,10 +913,11 @@
                     labels:
                       - label: fraud
                         prediction: false
                         ml_score: 0.01
                     active_call: false
+                    compromised_device_integrity: false
                     rule_action:
                       type: block
                       status_code: 403
                       headers:
                         - name: Content-Type
@@ -1355,11 +1357,18 @@
 
         This information might not have been available on the client initially,
         so the Server API permits updating these attributes after the fact.
 
 
-        **Warning** It's not possible to update events older than one month. 
+        **Warning** You can only update events created within the last 10 days.
+        Updating an older event returns HTTP 400 with the message `event is too
+        old to be updated (> 10 days)`, even if your plan retains events for
+        longer.
+
+
+        **Warning** Events created by the Automation Intelligence API (`POST
+        /edge`) cannot be updated. Updating them returns HTTP 400.
 
 
         **Warning** Trying to update an event immediately after creation may
         temporarily result in an 
 
@@ -1385,11 +1394,13 @@
               $ref: '#/components/schemas/EventUpdate'
       responses:
         '200':
           description: OK.
         '400':
-          description: Bad request. The request payload is not valid.
+          description: >-
+            Bad request. The request payload is not valid, the event is older
+            than 10 days, or the event cannot be updated.
           content:
             application/json:
               schema:
                 $ref: '#/components/schemas/ErrorResponse'
               examples:
@@ -1399,10 +1410,26 @@
                     valid and cannot be parsed.
                   value:
                     error:
                       code: request_cannot_be_parsed
                       message: request body is not valid
+                400-event-too-old:
+                  summary: >-
+                    Error response when the event was created more than 10 days
+                    ago.
+                  value:
+                    error:
+                      code: failed
+                      message: event is too old to be updated (> 10 days)
+                400-edge-event-not-updatable:
+                  summary: >-
+                    Error response when the event was created by the Automation
+                    Intelligence API and cannot be updated.
+                  value:
+                    error:
+                      code: failed
+                      message: edge events cannot be updated
         '403':
           description: Forbidden. Access to this API is denied.
           content:
             application/json:
               schema:
@@ -2371,10 +2398,23 @@
 
             > Note: When using this parameter, only events with the
             `active_call` property set to `true` or `false` are returned. Events
             without an `active_call` Smart Signal result are left out of the
             response.
+        - name: compromised_device_integrity
+          in: query
+          schema:
+            type: boolean
+          description: >
+            Filter events by Compromised Device Integrity result on Android
+            devices.
+
+
+            > Note: When using this parameter, only events with the
+            `compromised_device_integrity` property set to `true` or `false` are
+            returned. Events without a `compromised_device_integrity` Smart
+            Signal result are left out of the response.
       responses:
         '200':
           description: Events matching the filter(s).
           content:
             application/json:
@@ -2648,10 +2688,11 @@
                         labels:
                           - label: fraud
                             prediction: false
                             ml_score: 0.01
                         active_call: false
+                        compromised_device_integrity: false
                     pagination_key: >-
                       S9rgMMUb4z3X5t5pr_tSgoSZlmyF0O8X7kCV2m981-iY1LmRTjraa1rTk3L-hQExnDWCi0RA-zAIjaVSTNO2AN2eqQWgzT0RjbieMxRfSdkM-HmOhdOgdQvYfPG3vqU1DJKh4Q
         '400':
           description: >-
             Bad request. One or more supplied search parameters are invalid, or
@@ -4090,10 +4131,17 @@
         application found or launch of it inside of a not main working profile
         detected).
 
         * `false` - No signs of cloned application detected or the client is not
         Android.
+    CompromisedDeviceIntegrity:
+      type: boolean
+      description: >
+        `true` if the Android device's boot or system integrity is compromised
+        (e.g., an unlocked bootloader or a failed verified boot), so the device
+        cannot be trusted. `false` if no integrity issue was detected. Available
+        from Android SDK 2.6.0+.
     DeveloperTools:
       type: boolean
       description: >
         `true` if the browser has DevTools open (Chrome, Firefox) or the
         Android/iOS device has Developer Tools enabled, `false` otherwise.
@@ -5337,10 +5385,14 @@
             - browser
         cloned_app:
           $ref: '#/components/schemas/ClonedApp'
           x-platforms:
             - android
+        compromised_device_integrity:
+          $ref: '#/components/schemas/CompromisedDeviceIntegrity'
+          x-platforms:
+            - android
         developer_tools:
           $ref: '#/components/schemas/DeveloperTools'
           x-platforms:
             - browser
             - android

fingerprint-server-api-v4.yaml

Published URL: https://fingerprintjs.github.io/openapi/schemas/fingerprint-server-api-v4.yaml
Summary: +3 added, -0 removed, ~2 modified

Added elements (3)

• /components/schemas/CompromisedDeviceIntegrity
• /components/schemas/Event/properties/compromised_device_integrity
• /paths/~1events/get/parameters/52

Removed elements (0)

None

Modified elements (2)

• /paths/~1events~1{event_id}/patch/description
• /paths/~1events~1{event_id}/patch/responses/400/description

Changed lines patch

--- a/schemas/fingerprint-server-api-v4.yaml
+++ b/schemas/fingerprint-server-api-v4.yaml
@@ -143,11 +143,18 @@
 
         This information might not have been available on the client initially,
         so the Server API permits updating these attributes after the fact.
 
 
-        **Warning** It's not possible to update events older than one month. 
+        **Warning** You can only update events created within the last 10 days.
+        Updating an older event returns HTTP 400 with the message `event is too
+        old to be updated (> 10 days)`, even if your plan retains events for
+        longer.
+
+
+        **Warning** Events created by the Automation Intelligence API (`POST
+        /edge`) cannot be updated. Updating them returns HTTP 400.
 
 
         **Warning** Trying to update an event immediately after creation may
         temporarily result in an 
 
@@ -174,11 +181,13 @@
               $ref: '#/components/schemas/EventUpdate'
       responses:
         '200':
           description: OK.
         '400':
-          description: Bad request. The request payload is not valid.
+          description: >-
+            Bad request. The request payload is not valid, the event is older
+            than 10 days, or the event cannot be updated.
           content:
             application/json:
               schema:
                 $ref: '#/components/schemas/ErrorResponse'
         '403':
@@ -973,10 +982,23 @@
 
             > Note: When using this parameter, only events with the
             `active_call` property set to `true` or `false` are returned. Events
             without an `active_call` Smart Signal result are left out of the
             response.
+        - name: compromised_device_integrity
+          in: query
+          schema:
+            type: boolean
+          description: >
+            Filter events by Compromised Device Integrity result on Android
+            devices.
+
+
+            > Note: When using this parameter, only events with the
+            `compromised_device_integrity` property set to `true` or `false` are
+            returned. Events without a `compromised_device_integrity` Smart
+            Signal result are left out of the response.
       responses:
         '200':
           description: Events matching the filter(s).
           content:
             application/json:
@@ -2059,10 +2081,17 @@
         application found or launch of it inside of a not main working profile
         detected).
 
         * `false` - No signs of cloned application detected or the client is not
         Android.
+    CompromisedDeviceIntegrity:
+      type: boolean
+      description: >
+        `true` if the Android device's boot or system integrity is compromised
+        (e.g., an unlocked bootloader or a failed verified boot), so the device
+        cannot be trusted. `false` if no integrity issue was detected. Available
+        from Android SDK 2.6.0+.
     DeveloperTools:
       type: boolean
       description: >
         `true` if the browser has DevTools open (Chrome, Firefox) or the
         Android/iOS device has Developer Tools enabled, `false` otherwise.
@@ -3288,10 +3317,14 @@
             - browser
         cloned_app:
           $ref: '#/components/schemas/ClonedApp'
           x-platforms:
             - android
+        compromised_device_integrity:
+          $ref: '#/components/schemas/CompromisedDeviceIntegrity'
+          x-platforms:
+            - android
         developer_tools:
           $ref: '#/components/schemas/DeveloperTools'
           x-platforms:
             - browser
             - android

[github-actions]

⚠️ This PR doesn't contain any changesets. If there are user-facing changes, don't forget to run:

pnpm run changeset

to create a changeset.