What changes are considered breaking

I agree with what Paras has mentioned.

I had this change where some HTTP and GraphQL APIs would start requiring auth as compared to their previous versions. I think this should be a breaking change as it would force users to update their application code in order to make use of those APIs again.