2026-06-25

GET /v3/* (all list endpoints)

• Changed: Organization-scoped OAuth client applications acting on behalf of a non-service-account user now receive an empty array from every V3 list endpoint instead of the organization's records.

GET /v3/jobs

• Fixed: A bug where an unset private custom field on a job was always included in custom_fields as { value: null }, even for callers without permission to view private job fields; it is now omitted entirely for unauthorized callers.