Which artifact should normally determine whether an HTTP API needs a new public version?

Which artifact should normally determine whether an HTTP API needs a new public version?

1. A change to the observable API contract that supported consumers cannot handle
2. Every production deployment identifier
3. Every database schema migration
4. Every internal refactor of a controller