From cbb70fe349272017af3fdf9b6930a369ac80ed41 Mon Sep 17 00:00:00 2001
From: "mintlify[bot]" <109931778+mintlify[bot]@users.noreply.github.com>
Date: Mon, 14 Sep 2026 23:06:45 +0000
Subject: [PATCH] docs: add Sep 9, 2026 changelog entries for shipped API
 updates

---
 changelog.mdx | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/changelog.mdx b/changelog.mdx
index b965396ee..b76ef5bc7 100644
--- a/changelog.mdx
+++ b/changelog.mdx
@@ -7,6 +7,34 @@ keywords: ["changelog", "API updates", "release notes", "what's new", "API chang
 
 To subscribe to updates, please [**“Turn on notifications”**](https://help.x.com/en/managing-your-account/notifications-on-mobile-devices#:~:text=In%20the%20top%20menu,%20you,you%20would%20like%20to%20receive) for [**@API**](https://x.com/api). You can also follow this changelog in your feed reader via the [**RSS feed**](https://docs.x.com/changelog/rss.xml).
 
+<Update label="Sep 9, 2026" description="X API v2 (Enterprise)">
+  ### Block and Unblock user endpoints
+
+  We added Enterprise-only endpoints for blocking and unblocking users:
+
+  - [`POST /2/users/{id}/blocking`](/x-api/users/block-user) blocks a target user on behalf of the authenticated user.
+  - [`DELETE /2/users/{source_user_id}/blocking/{target_user_id}`](/x-api/users/unblock-user) removes an existing block.
+
+  Both endpoints require user-context (OAuth 2.0) authentication with the `block.write` scope and are available on the Enterprise plan.
+</Update>
+
+<Update label="Sep 9, 2026" description="X API v2">
+  ### Subscription events for X Activity API
+
+  Today, we added `subscriptions.subscribe` and `subscriptions.unsubscribe` events to the [X Activity API](/x-api/activity/introduction). You can now subscribe by User ID to receive real-time notifications when a user subscribes to or unsubscribes from another user.
+
+  These are private events: they require user-context (OAuth 2.0) authentication with the `follows.read` scope, and the `user_id` filter matches the user performing the action. The `direction` qualifier (`inbound` / `outbound`) is supported.
+</Update>
+
+<Update label="Sep 9, 2026" description="X API v2">
+  ### New `broadcast.read` and `broadcast.write` OAuth 2.0 scopes
+
+  We added two new scopes for live broadcasts to the [OAuth 2.0 Authorization Code Flow with PKCE](/fundamentals/authentication/oauth-2-0/authorization-code):
+
+  - `broadcast.read` — view your live broadcasts and their chat.
+  - `broadcast.write` — manage your live broadcasts and send chat messages on your behalf.
+</Update>
+
 <Update label="Sep 1, 2026" description="X API v2">
   ### Media upload and Post-create size and duration limits