Skip to content

Chore(deps): Bump stripe from 22.6.2 to 23.0.1 - #274

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/stripe-23.0.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/stripe-23.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 4, 2026 •

Copy link
Copy Markdown
Contributor

Bumps stripe from 22.6.2 to 23.0.1.

Release notes

Sourced from stripe's releases.

v23.0.1

See the changelog for the full release notes.

v23.0.0

See the changelog for the full release notes.

v22.7.0-beta.1

This release changes the pinned API version to 2026-08-26.preview.

  • #2807 Update generated code for beta
    • Add support for new resources V2.Core.ApprovalRequest, V2.Signals.AccountActivity, V2.Signals.AccountEvaluation, and V2.Signals.AccountSignal
    • Add support for list and retrieve methods on resource V2.Signals.AccountSignal
    • Add support for create and retrieve methods on resource V2.Signals.AccountEvaluation
    • Add support for create, del, and retrieve methods on resource V2.Signals.AccountActivity
    • Add support for cancel, list, retrieve, and update methods on resource V2.Core.ApprovalRequest
    • Add support for disable method on resource V2.MoneyManagement.PayoutMethod
    • Add support for disable_stripe_user_authentication on AccountSessionCreateParams.components.payment_method_settings.features
    • ⚠️ Remove support for payment_method_types on PaymentIntentConfirmParams, PaymentIntentCreateParams, PaymentIntentUpdateParams, SetupIntentCreateParams, and SetupIntentUpdateParams
    • ⚠️ Change type of ProductCatalog.TrialOffer.end_behavior.transition.price and ProductCatalog.TrialOffer.price from Price to deletable($Price)
    • Add support for billie on QuotePreviewInvoice.payment_settings.payment_method_options
    • Add support for new value billie on enum QuotePreviewInvoice.payment_settings.payment_method_types
    • Add support for payout_methods on V2.Core.Account.defaults and V2.Core.AccountUpdateParams.defaults
    • Add support for restricted on V2.Core.Vault.GbBankAccount and V2.Core.Vault.UsBankAccount
    • Add support for enabled_delivery_schemes on V2.MoneyManagement.PayoutMethod.bank_account
    • ⚠️ Remove support for enabled_delivery_options on V2.MoneyManagement.PayoutMethod.bank_account
    • ⚠️ Add support for new value disabled on enum V2.MoneyManagement.PayoutMethod.usage_status.payments
    • ⚠️ Add support for new value disabled on enum V2.MoneyManagement.PayoutMethod.usage_status.transfers
    • Add support for new value disabled on enum V2.MoneyManagement.PayoutMethodListParams.usage_status.payments
    • Add support for new value disabled on enum V2.MoneyManagement.PayoutMethodListParams.usage_status.transfers
    • Add support for event notifications V2CoreApprovalRequestApprovedEvent, V2CoreApprovalRequestCanceledEvent, V2CoreApprovalRequestCreatedEvent, V2CoreApprovalRequestExpiredEvent, V2CoreApprovalRequestFailedEvent, V2CoreApprovalRequestRejectedEvent, and V2CoreApprovalRequestSucceededEvent with related object V2.Core.ApprovalRequest
    • Add support for event notification V2SignalsAccountEvaluationCompleteEvent with related object V2.Signals.AccountEvaluation
    • Add support for error codes authentication_failure, capability_not_active, expired_payment_method, incorrect_postal_code, invalid_canceled_subscription_fields, and payment_method_restricted on QuotePreviewInvoice.last_finalization_error
    • Add support for error code default_payout_method_cannot_be_disabled on CannotProceedError
  • #2813 Add non-verified methods to managed handlers

See the changelog for more details.

v22.7.0-alpha.5

See the changelog for the full release notes.

v22.7.0-alpha.4

See the changelog for the full release notes.

v22.7.0-alpha.3

  • #2839 Update generated code for private-preview
    • Add support for customer_tax_exemption on Tax.Calculation.shipping_cost.tax_breakdown[], Tax.CalculationLineItem.tax_breakdown[], and Tax.Transaction.shipping_cost.tax_breakdown[]
    • Add support for new value data_share_only on enums Charge.payment_method_details.card.three_d_secure.result, PaymentAttemptRecord.payment_method_details.card.three_d_secure.result, PaymentRecord.payment_method_details.card.three_d_secure.result, and SetupAttempt.payment_method_details.card.three_d_secure.result
    • Add support for backdate_start_date on Checkout.Session.items[].subscription and Checkout.SessionCreateParams.items[].subscription
    • Add support for signals on Identity.VerificationReport
    • Add support for network_response_code on Issuing.Authorization.request_history[]

... (truncated)

Changelog

Sourced from stripe's changelog.

23.0.1 - 2026-10-22

  • #2885 Reject ASCII-whitespace-only webhook secrets

    • Reject webhook signing secrets made entirely of ASCII whitespace instead of using them as HMAC keys.
  • #2884 Add API v2 Search support

    Adds V2SearchResult<T> and support for auto pagination of search results.

  • #2895 Fix notification handling and discarded fetch retries

    • Fix EventNotificationHandler.handle() to verify signatures asynchronously, so it works with async crypto providers (e.g. the web platform).
    • Fall back to the full EventNotification union type for on() callbacks when a specific notification type can't be narrowed, instead of resolving to never.
    • Dispose discarded fetch responses before retrying a request, aborting the fetch and closing the unread body.
  • Fix lastResponse.statusCode for fetch responses

    • Populate lastResponse.statusCode with the HTTP status for successful JSON responses when using the fetch HTTP client.

23.0.0 - 2026-09-30

This release changes the pinned API version to 2026-09-30.endive.

  • #2844 Support EventNotifications with singleton related objects

  • #2853 Allow suppressing Stripe notices

    Set the STRIPE_SUPPRESS_NOTICES environment variable to true to suppress Stripe notices in test and sandbox environments when not running under a detected AI agent. Notices remain enabled by default and continue to be shown to AI agents.

  • #2850 Fix account scoping for EventNotificationHandler callback clients

    • Fix callback clients to use the event's Stripe context and preserve client telemetry.
    • Fix 400 errors when using an EventNotificationHandler with a StripeClient configured with stripeAccount.
  • ⚠️ #2856 Remove V1-only fields from V2 list response types

    Remove the V1-only object, has_more, and url fields from Stripe.V2List<T>. These fields were never populated and were added only to maintain type compatibility when correcting the V2 list response type in a minor release.

  • ⚠️ #2862 Remove Stripe.constructEventWithoutVerification

    Removed the function Stripe.constructEventWithoutVerification() that was mistakenly added in version 22.5.0 of this package. The same functionality can be achieved via stripe.webhooks.constructEventWithoutVerification(payload);

  • ⚠️ Generate operation-specific address parameters for V2 requests

    • Change V2 request address properties from shared V1 address parameter types to operation-specific V2 interfaces.
  • ⚠️ #2865 Remove ErrorType export

    Remove the ErrorType interface from the top level client. Users can use .errors instead since it works as both a type and a value

  • ⚠️ #2868 Classify incomplete response bodies as connection errors

    • Responses that stall or are severed before the body is complete now throw StripeConnectionError instead of StripeAPIError.
  • Fix NodeHttpClient compatibility with HTTP request interceptors

    • Fix NodeHttpClient requests hanging when using Nock 14 or MSW interceptors (#2211).
  • ⚠️ Drop support for Node 18

    Drop support for Node.js 18. Node.js 20 is now the minimum supported version.

  • ⚠️ #2876 Update verifyHeader and verifyHeaderAsync methods to use DEFAULT_TOLERANCE

    stripe.webhooks.signature.verifyHeader() and verifyHeaderAsync() previously skipped timestamp tolerance verification when the tolerance argument was omitted. They now default to Webhook.DEFAULT_TOLERANCE

    Passing 0 to stripe.webhooks.constructEvent now properly skips timestamp tolerance verification. Previously, passing 0 would perform verification with the default tolerance Webhook.DEFAULT_TOLERANCE.

  • #2879 Update generated code

    • Release specs are identical.
  • ⚠️ #2832 Update generated code

    • Add support for new resources Apps.Install, ProductCatalog.TrialOffer, Tax.Location, and ThreeDSecure.Authentication

... (truncated)

Commits
  • 3af59f7 Bump version to 23.0.1
  • 62458fe Fix lastResponse.statusCode for fetch responses 🪿✨ (#2905)
  • 308c948 Reject blank webhook secrets 🪿✨ (#2885)
  • 48d190c Fix notification handling and discarded fetch retries (#2895)
  • ae674ed Hand-write V2List/V2SearchResult namespace exports in stripe.cjs.node.ts (#2900)
  • cfc897d Require release environment for npm publishing (#2899)
  • b7b25f6 Add API v2 Search support (#2884)
  • bcefafa Increase timeout limit for integration tests (#2891)
  • fe645f6 Bump version to 23.0.0
  • 14d17e2 Correct v23 migration guidance links (#2880)
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from cheyras as a code owner October 4, 2026 16:50
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 4, 2026
@vercel

vercel Bot commented Oct 4, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
deckpal Error Error Oct 26, 2026 8:49pm UTC

Request Review

Bumps [stripe](https://github.com/stripe/stripe-node) from 22.6.2 to 23.0.1.
- [Release notes](https://github.com/stripe/stripe-node/releases)
- [Changelog](https://github.com/stripe/stripe-node/blob/master/CHANGELOG.md)
- [Commits](stripe/stripe-node@v22.6.2...v23.0.1)

---
updated-dependencies:
- dependency-name: stripe
  dependency-version: 23.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Chore(deps): Bump stripe from 22.6.2 to 23.0.0 Chore(deps): Bump stripe from 22.6.2 to 23.0.1 Oct 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/stripe-23.0.0 branch from fe4ab23 to b4649d8 Compare October 26, 2026 20:49

This branch had an error being deployed

1 failed deployment
Preview — b4649d8b Deployed Oct 26, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants