---
title: "Bitbucket Cloud API Git Credential Manager upgrade required for OAuth 2.0 Git authentication: 2026-11-30 | Harbyn"
description: "Bitbucket Cloud API Git Credential Manager upgrade required for OAuth 2.0 Git authentication, effective Nov 30, 2026."
canonical: "https://harbyn.com/changes/bitbucket/2026-10-13-git-credential-manager-upgrade-required-for-oauth-2-0-git-authentication"
last-updated: 2026-10-13
---

# Bitbucket Cloud API Git Credential Manager upgrade required for OAuth 2.0 Git authentication

Markdown version of <https://harbyn.com/changes/bitbucket/2026-10-13-git-credential-manager-upgrade-required-for-oauth-2-0-git-authentication>.

Breaking change - Bitbucket Cloud API. high severity. Announced. Upcoming.

On Nov 30, 2026, Git requests authenticated using OAuth 2.0 via Git Credential Manager versions prior to 3.0.0 will be blocked. Upgrade to version 3.0.0 or higher to continue using this authentication mechanism.

36 days left: the deadline is Nov 30, 2026.

## Facts

| Fact | Value |
| --- | --- |
| Vendor | [Bitbucket Cloud API](https://harbyn.com/vendors/bitbucket.md) |
| Kind | Breaking change |
| Severity | high |
| Status | Announced |
| Announced | Oct 13, 2026 |
| Effective | Nov 30, 2026 |
| Added to Harbyn | Oct 13, 2026 |
| Lead time | 48 days of warning |
| Review | Reviewed by a person, extracted by a model |

## Find it in your code

```sh
npx harbyn scan
```

This change names no identifier the scanner can match line by line, so the scan tells you whether your repository uses Bitbucket Cloud API, from its packages and API hosts. Nothing leaves your machine.

## Sources

Where this event comes from: the page we read, when we read it, and the hash of that snapshot.

- <https://developer.atlassian.com/cloud/bitbucket/changelog/> (changelog, fetched 2026-10-13 06:52 UTC, sha256 `8b6e833e0e458d2dd7bcbda6260a9b64ce608d2d5000dfe13d926353e33da869`)

## Related changes

### More from Bitbucket Cloud API

- [Diff APIs stop supporting the merge parameter](https://harbyn.com/changes/bitbucket/2026-08-24-diff-apis-stop-supporting-the-merge-parameter.md) (Retirement, effective Sep 4, 2026)

### Changes at other vendors

- [Amazon Selling Partner API: October listing attribute usage and enumeration value updates](https://harbyn.com/changes/amazon-sp-api/2026-10-14-sp-api-updates-new-listings-items-api-ivp-values-in-eu5-jp-and-ca-stores-oct-2.md) (effective Oct 26, 2026)
- [Supabase: four CBC-mode TLS 1.2 cipher suites will be removed from project HTTP APIs](https://harbyn.com/changes/supabase/2026-10-12-an-outdated-subset-of-tls-1-2-ciphers-will-be-disabled-on-project-http-apis.md) (effective Nov 10, 2026)
- [Google Workspace APIs: OAuth clients must be marked as agentic to call Google Workspace MCP servers](https://harbyn.com/changes/google-workspace/2026-10-12-oauth-clients-must-be-marked-as-agentic-to-call-google-workspace-mcp-servers.md) (effective Nov 11, 2026)
- [LinkedIn Marketing API: Publisher lists require a surface field](https://harbyn.com/changes/linkedin/2026-10-14-publisher-lists-require-a-surface-field.md) (effective Dec 15, 2026)

[All upcoming deadlines](https://harbyn.com/deadlines.md)
