VoidhashDocs
DevelopersHelp centerGuidesAPI reference
Dashboard
Essentials
API overview
Authentication
Event capture
Push device API
Webhooks
Webhook delivery
Webhook events
Projects & keys
Projects
API keys
Audit log
Customers & access
Persons
Products
Perks
Sandbox
Paywalls
Paywalls
Paywall locations
Components
Component registry
Assets
Experiments & flags
Experiments
Feature flags
Analytics & events
Analytics
Analytics alerts
Events
Ingest policy
VoidQL
Tracking domains
Ads
Ads
Ad accounts
Meta measurement
Payments & stores
Payment providers
Payment provider products
Purchase history imports
Payment sources
Webhooks & notifications
Webhooks
Push notifications
Push configurations
Automations
Organization & team
Organizations
Members
Invitations
Billing
Your account
Profile
Session
Notices
Connected apps
Terms of Service
Developer tools
Schema
SDK
Retrieve the registry publisher
Claim a registry namespace
List registry components
Publish a component bundle
Publish a project component
Retrieve a registry component
Update a registry component
List a registry component's versions
Retrieve a registry component version
Update a registry component version
Retrieve a version's file
Review an install
List installed components
Install a registry component
Retrieve an install
Update an install
Uninstall a registry component

Update an install

Moves an install to the newest ready version in its range, or in a new versionRange.

Placed instances keep their version until they are moved.

Guide: Publishing

PATCH
/api/v1/projects/{projectId}/component-installs/{installId}

Authorization

AuthorizationBearer <token>

A project secret key: vh_sk_... for production, vh_sk_test_... for test. Keep it on your servers.

In: header

Path parameters

projectId*string

The project's id, proj_.... A secret key works only in the project it belongs to.

installId*string

The install's id, cmp_inst_....

Request body

application/json

TypeScript definitions

Use the request body type in TypeScript.

versionRange?|

A new range to follow: *, an exact version such as 1.2.0, ^1.2.0 (same major version) or ~1.2.0 (same minor version). Defaults to the install's range.

consent?|

Acceptance of the reviewed version, required when the install review needs consent.

Examples

curl -X PATCH "https://api.voidhash.com/api/v1/projects/proj_tz4a98xxat96iws9zmbrgj3a/component-installs/cmp_inst_b9n4m7q2w5e8r1t6y3u0i5o8" \  -H "Authorization: Bearer vh_sk_..." \  -H "Content-Type: application/json" \  -d '{    "consent": {      "version": "1.3.0",      "capabilities": [        "commerce",        "analytics"      ]    }  }'
{  "id": "cmp_inst_b9n4m7q2w5e8r1t6y3u0i5o8",  "projectId": "proj_tz4a98xxat96iws9zmbrgj3a",  "registryComponentId": "cmp_pkg_h2j7k4l9z1x6c3v8b5n0m4q7",  "slug": "acme/plan-picker",  "versionRange": "^1.2.0",  "versionId": "cmp_pkg_ver_e5r8t2y6u0i3o7p1a4s9d2f6",  "version": "1.3.0",  "versionStatus": "ready",  "consentedCapabilities": [    "commerce",    "analytics"  ],  "availableUpdate": null,  "installedBy": "user_k3m8q1z6v9c2x5b7n4w0e8r1",  "createdAt": "2026-03-12T09:00:00.000Z",  "updatedAt": "2026-03-20T15:00:00.000Z"}
{  "error": {    "type": "invalid_request",    "code": "invalid_version_range",    "message": "The version range is invalid. \"1.x\" is not a version range: use *, an exact version (1.2.3), ^1.2.3 or ~1.2.3.",    "param": "versionRange"  }}
{  "error": {    "type": "unauthenticated",    "code": "invalid_api_key",    "message": "This secret key is not valid."  }}
{  "error": {    "type": "permission_denied",    "code": "permission_denied",    "message": "Insufficient permissions."  }}

{  "error": {    "type": "not_found",    "code": "component_install_not_found",    "message": "This project has no component install cmp_inst_b9n4m7q2w5e8r1t6y3u0i5o8.",    "param": "installId"  }}

{  "error": {    "type": "conflict",    "code": "consent_required",    "message": "acme/plan-picker 1.3.0 needs your review: it asks for analytics. Accept it to continue.",    "param": "consent"  }}

{  "error": {    "type": "internal",    "code": "internal_error",    "message": "Something went wrong on our side. Try again, and contact support with the Request-Id header if it keeps failing."  }}

Response body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

Errors

StatustypecodeWhen
400invalid_requestinvalid_version_range—
404not_foundcomponent_install_not_foundAnd like installing with.
409conflictconsent_required—
409conflictno_matching_version—
409conflictno_installable_version—

It can also fail with the errors every operation shares, such as unauthenticated; see Errors.

More in Component registry

  • Retrieve the registry publisher GET
  • Claim a registry namespace PUT
  • List registry components GET
  • Publish a component bundle POST
  • Publish a project component POST
  • Retrieve a registry component GET
  • Update a registry component PATCH
  • List a registry component's versions GET
  • Retrieve a registry component version GET
  • Update a registry component version PATCH
  • Retrieve a version's file GET
  • Review an install GET
  • List installed components GET
  • Install a registry component POST
  • Retrieve an install GET
  • Uninstall a registry component DELETE

Something wrong or missing on this page? Tell us by email or on Discord.

PreviousRetrieve an installNextUninstall a registry component

On this page

AuthorizationPath parametersRequest bodyExamplesResponse bodyErrorsMore in Component registry