Skip to content

Conversation

@nerdy-tech-com-gitub
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade stripe from 15.8.0 to 19.1.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 79 versions ahead of your current version.

  • The recommended version was released 24 days ago.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Insecure Randomness
SNYK-JS-UNDICI-8641354
69 Proof of Concept
high severity Incorrect Authorization
SNYK-JS-VITE-9512410
69 Mature
high severity Incorrect Authorization
SNYK-JS-VITE-9653016
69 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574
69 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230
69 Proof of Concept
high severity Improper Neutralization of Special Elements in Data Query Logic
SNYK-JS-MONGOOSE-8446504
69 No Known Exploit
high severity Improper Neutralization of Special Elements in Data Query Logic
SNYK-JS-MONGOOSE-8623536
69 Proof of Concept
high severity Remote Code Execution (RCE)
SNYK-JS-NUXT-7640974
69 No Known Exploit
high severity Acceptance of Extraneous Untrusted Data With Trusted Data
SNYK-JS-NUXT-9486043
69 No Known Exploit
high severity Directory Traversal
SNYK-JS-NUXTDEVTOOLS-7640977
69 Proof of Concept
medium severity Directory Traversal
SNYK-JS-SUPABASEAUTHJS-10255365
69 No Known Exploit
medium severity Improper Validation of Specified Type of Input
SNYK-JS-VALIDATOR-13395830
69 No Known Exploit
medium severity Information Exposure
SNYK-JS-VITE-8023174
69 Proof of Concept
medium severity Origin Validation Error
SNYK-JS-VITE-8648411
69 Proof of Concept
medium severity Access Control Bypass
SNYK-JS-VITE-9576207
69 Proof of Concept
medium severity Information Exposure
SNYK-JS-VITE-9685035
69 Proof of Concept
medium severity Directory Traversal
SNYK-JS-VITE-9919777
69 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-VUETEMPLATECOMPILER-7554675
69 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELHELPERS-9397697
69 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BABELRUNTIME-10044504
69 Proof of Concept
medium severity Open Redirect
SNYK-JS-KOA-10944994
69 Proof of Concept
medium severity Open Redirect
SNYK-JS-KOA-12143256
69 No Known Exploit
medium severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
69 No Known Exploit
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085
69 No Known Exploit
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085
69 No Known Exploit
medium severity Cross-site Scripting (XSS)
SNYK-JS-NUXT-7640972
69 Proof of Concept
medium severity Origin Validation Error
SNYK-JS-NUXTVITEBUILDER-8663232
69 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-PARSEGITCONFIG-9403763
69 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106
69 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-ROLLUP-8073097
69 Proof of Concept
low severity Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865
69 No Known Exploit
low severity Directory Traversal
SNYK-JS-SIRV-12558119
69 Proof of Concept
low severity Missing Release of Memory after Effective Lifetime
SNYK-JS-UNDICI-10176064
69 Proof of Concept
low severity Relative Path Traversal
SNYK-JS-VITE-12558116
69 Proof of Concept
low severity Cross-site Scripting (XSS)
SNYK-JS-VITE-8022916
69 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-VUETEMPLATECOMPILER-8219888
69 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073
69 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073
69 Proof of Concept
critical severity Prototype Pollution
SNYK-JS-DEVALUE-12205530
69 Proof of Concept
critical severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-KOA-8720152
69 No Known Exploit
low severity Cross-site Scripting (XSS)
SNYK-JS-KOA-9679272
69 Proof of Concept
low severity Directory Traversal
SNYK-JS-NUXT-12878602
69 Proof of Concept
low severity Cross-site Scripting
SNYK-JS-SEND-7926862
69 No Known Exploit
Release notes
Package name: stripe
  • 19.1.0 - 2025-10-03
    • #2453 add missing fetchEvent type for UnknownEventNotification

      • Add missing fetchEvent() declaration to the Stripe.Events.UnknownEventNotification interface
      • Tweak Stripe.Events.fetchRelatedObject so that it's always defined and returns null if there's no related_object. This fixes the situation where the UnknownEventNotification says that fetchRelatedObject() is defined, but calling it throws an error.
    • #2447 Update param in deprecation docs link

    • #2444 Update CHANGELOG.md to point to right API version

    See the changelog for more details.

  • 19.1.0-beta.1 - 2025-10-01

    This release changes the pinned API version to 2025-09-30.preview. It is built on top of SDK version 19.0.0 which contains breaking changes. Please review the changelog for 19.0.0 if upgrading from older SDK versions.

    • #2422 Update generated code for beta
      • Add support for attach_cadence method on resource Subscription
      • Add support for billing_cadence on InvoiceCreatePreviewParams, SubscriptionCreateParams, SubscriptionUpdateParams, and Subscription
      • Add support for billing_cadence_details on Invoice.parent and QuotePreviewInvoice.parent
      • Add support for new value billing_cadence_details on enums Invoice.parent.type and QuotePreviewInvoice.parent.type
    • #2410 Update generated code for beta
      • Add support for new resources V2.Billing.BillSettingVersion, V2.Billing.BillSetting, V2.Billing.Cadence, V2.Billing.CollectionSettingVersion, V2.Billing.CollectionSetting, and V2.Billing.Profile
      • Add support for create, list, retrieve, and update methods on resources V2.Billing.BillSetting, V2.Billing.CollectionSetting, and V2.Billing.Profile
      • Add support for list and retrieve methods on resources V2.Billing.BillSettingVersion and V2.Billing.CollectionSettingVersion
      • Add support for cancel, create, list, retrieve, and update methods on resource V2.Billing.Cadence
      • Add support for new value crypto_wallet on enum V2.Core.Account.configuration.recipient.default_outbound_destination.type
      • Add support for profile on V2.Core.Account.defaults, V2.Core.AccountCreateParams.defaults, and V2.Core.AccountUpdateParams.defaults
      • Add support for i_p on V2.Core.Account.identity.attestations.directorship_declaration, V2.Core.Account.identity.attestations.ownership_declaration, V2.Core.Account.identity.attestations.terms_of_service.account, V2.Core.Account.identity.attestations.terms_of_service.storer, V2.Core.Account.identity.individual.additional_terms_of_service.account, V2.Core.AccountCreateParams.identity.attestations.terms_of_service.account, V2.Core.AccountCreateParams.identity.attestations.terms_of_service.storer, V2.Core.AccountUpdateParams.identity.attestations.terms_of_service.account, V2.Core.AccountUpdateParams.identity.attestations.terms_of_service.storer, V2.Core.Person.additional_terms_of_service.account, V2.Core.PersonCreateParams.additional_terms_of_service.account, and V2.Core.PersonUpdateParams.additional_terms_of_service.account
      • Remove support for ip on V2.Core.Account.identity.attestations.directorship_declaration, V2.Core.Account.identity.attestations.ownership_declaration, V2.Core.Account.identity.attestations.terms_of_service.account, V2.Core.Account.identity.attestations.terms_of_service.storer, V2.Core.Account.identity.individual.additional_terms_of_service.account, V2.Core.AccountCreateParams.identity.attestations.terms_of_service.account, V2.Core.AccountCreateParams.identity.attestations.terms_of_service.storer, V2.Core.AccountUpdateParams.identity.attestations.terms_of_service.account, V2.Core.AccountUpdateParams.identity.attestations.terms_of_service.storer, V2.Core.Person.additional_terms_of_service.account, V2.Core.PersonCreateParams.additional_terms_of_service.account, and V2.Core.PersonUpdateParams.additional_terms_of_service.account
      • Remove support for doing_business_as, product_description, and url on V2.Core.Account.identity.business_details, V2.Core.AccountCreateParams.identity.business_details, and V2.Core.AccountUpdateParams.identity.business_details
      • Add support for settlement_currency on V2.MoneyManagement.FinancialAddress
      • Add support for sepa_bank_account on V2.MoneyManagement.FinancialAddress.credentials and V2.MoneyManagement.ReceivedCredit.bank_transfer
      • Add support for new value sepa_bank_account on enum V2.MoneyManagement.FinancialAddress.credentials.type
      • Add support for amount_details and payments_orchestration on V2.Payments.OffSessionPaymentCreateParams and V2.Payments.OffSessionPayment
      • Add support for new value authorization_expired on enum V2.Payments.OffSessionPayment.failure_reason
      • Add support for retry_policy on V2.Payments.OffSessionPayment.retry_details and V2.Payments.OffSessionPaymentCreateParams.retry_details
      • Add support for new values heuristic and scheduled on enums V2.Payments.OffSessionPayment.retry_details.retry_strategy and V2.Payments.OffSessionPaymentCreateParams.retry_details.retry_strategy
      • Change type of V2.MoneyManagement.OutboundPaymentQuote.fx_quote.lock_duration from literal('five_minutes') to enum('five_minutes'|'none')
      • Change type of V2.MoneyManagement.OutboundPaymentQuote.fx_quote.lock_expires_at from DateTime to DateTime | null
      • Add support for new value none on enum V2.MoneyManagement.OutboundPaymentQuote.fx_quote.lock_status
      • Add support for new value crypto_wallet on enums V2.MoneyManagement.OutboundSetupIntentCreateParams.payout_method_data.type, V2.MoneyManagement.OutboundSetupIntentUpdateParams.payout_method_data.type, and V2.MoneyManagement.PayoutMethod.type
      • Add support for origin_type on V2.MoneyManagement.ReceivedCredit.bank_transfer
      • Remove support for payment_method_type on V2.MoneyManagement.ReceivedCredit.bank_transfer
      • Add support for new value prevented on enum Dispute.status
      • Add support for mandate_data and payment_method_options on V2.Payments.OffSessionPaymentCreateParams
      • Add support for type on V2.MoneyManagement.FinancialAddressCreateParams
      • Remove support for currency on V2.MoneyManagement.FinancialAddressCreateParams
      • Add support for new values financial_addressses.crypto_wallets, holds_currencies.usdc, outbound_payments.crypto_wallets, and outbound_transfers.crypto_wallets on enum EventsV2CoreAccountIncludingConfigurationStorerCapabilityStatusUpdatedEvent.updated_capability
      • Add support for thin event V2BillingBillSettingUpdatedEvent with related object V2.Billing.BillSetting
      • Add support for error type RateLimitError
      • Add support for error code invalid_payout_method_crypto_wallet on InvalidPayoutMethodError
    • #2397 Update generated code for beta
      • Add support for new resources Billing.Analytics.MeterUsageRow and Billing.Analytics.MeterUsage
      • Remove support for resources Billing.MeterUsageRow and Billing.MeterUsage
      • Add support for retrieve method on resource Billing.Analytics.MeterUsage
      • Remove support for retrieve method on resource Billing.MeterUsage
      • Add support for report_payment_attempt_informational method on resource PaymentRecord
      • Add support for minimum_balance_by_currency on BalanceSettingUpdateParams.payments.payouts and BalanceSettings.payments.payouts
      • Remove support for values saturday and sunday from enums BalanceSettingUpdateParams.payments.payouts.schedule.weekly_payout_days and BalanceSettings.payments.payouts.schedule.weekly_payout_days
      • Change type of BalanceSettingUpdateParams.payments.settlement_timing.delay_days_override from longInteger to emptyable(longInteger)
      • Change BalanceSettingUpdateParams.payments to be optional
      • Add support for delay_days_override on BalanceSettings.payments.settlement_timing
      • Add support for automatic_tax and invoice_creation on Checkout.SessionUpdateParams
      • Add support for unit_label on Checkout.SessionUpdateParams.line_items[].price_data.product_data
      • Add support for invoice_settings on Checkout.SessionUpdateParams.subscription_data
      • Change Checkout.Session.collected_information.business_name to be required
      • Add support for intended_submission_method on DisputeUpdateParams and Dispute
      • Change type of Dispute.smart_disputes.recommended_evidence from string to array(string)
      • Add support for pix on Invoice.payment_settings.payment_method_options, InvoiceCreateParams.payment_settings.payment_method_options, InvoiceUpdateParams.payment_settings.payment_method_options, QuotePreviewInvoice.payment_settings.payment_method_options, Subscription.payment_settings.payment_method_options, SubscriptionCreateParams.payment_settings.payment_method_options, and SubscriptionUpdateParams.payment_settings.payment_method_options
      • Add support for new value pix on enums Invoice.payment_settings.payment_method_types, InvoiceCreateParams.payment_settings.payment_method_types, InvoiceUpdateParams.payment_settings.payment_method_types, QuotePreviewInvoice.payment_settings.payment_method_types, Subscription.payment_settings.payment_method_types, SubscriptionCreateParams.payment_settings.payment_method_types, and SubscriptionUpdateParams.payment_settings.payment_method_types
      • Add support for billing_schedules on InvoiceCreatePreviewParams.subscription_details, SubscriptionCreateParams, SubscriptionUpdateParams, and Subscription
      • Add support for paypay on PaymentAttemptRecord.payment_method_details and PaymentRecord.payment_method_details
      • Add support for wallet on PaymentAttemptRecord.payment_method_details.card and PaymentRecord.payment_method_details.card
      • Change type of PaymentAttemptRecord.processor_details.custom.payment_reference and PaymentRecord.processor_details.custom.payment_reference from string to string | null
      • Add support for flexible on QuotePreviewSubscriptionSchedule.billing_mode
      • Add support for billed_until on SubscriptionItem
      • Add support for error codes financial_connections_account_pending_account_numbers and financial_connections_account_unavailable_account_numbers on QuotePreviewInvoice.last_finalization_error

    See the changelog for more details.

  • 19.1.0-alpha.1 - 2025-10-01

    This release changes the pinned API version to 2025-09-30.preview. It is built on top of SDK version 19.0.0 and 19.1.0-beta.1 which contain breaking changes. Please review the changelog for these versions if upgrading from older SDK versions.

    • #2417 parseThinEvent__experimental is no longer needed
      • ⚠️ Remove the StripeClient.parseThinEvent__experimental and PushedThinEvent classes. They've been replaced with StripeClient.parseEventNotification and the *EventNotification classes respectively.
    • #2409 Update generated code for private-preview
      • Add support for new resource V2.MoneyManagement.RecipientVerification
      • Add support for acknowledge, create, recipient_verifications, and retrieve methods on resource V2.MoneyManagement.RecipientVerification
      • Add support for update method on resources V2.Billing.PricingPlanSubscription and V2.Billing.ServiceAction
      • Add support for crypto_wallets on V2.Account.configuration.recipient_data.features, V2.AccountCreateParams.configuration.recipient_data.features, V2.AccountUpdateParams.configuration.recipient_data.features, V2.Core.Account.configuration.recipient.capabilities, V2.Core.AccountCreateParams.configuration.recipient.capabilities, and V2.Core.AccountUpdateParams.configuration.recipient.capabilities
      • Add support for new value crypto on enum V2.Core.Account.requirements.entries[].impact.restricts_capabilities[].capability
      • Add support for new value crypto_wallet on enum V2.Account.configuration.recipient_data.default_outbound_destination.type
      • Add support for new value crypto_wallets on enum V2.Account.configuration.supportable_features.recipient_data
      • Add support for new value crypto_wallets on enum V2.Account.requirements[].impact.required_for_features
      • Add support for lookup_key on V2.Billing.CadenceCreateParams, V2.Billing.CadenceUpdateParams, and V2.Billing.Cadence
      • Add support for settings_data on V2.Billing.Cadence
      • Change type of V2.Billing.Cadence.payer.billing_profile from string | null to string
      • Add support for v1_event_id on V2.Core.Event
      • Add support for recipient_verification on V2.MoneyManagement.OutboundPaymentCreateParams, V2.MoneyManagement.OutboundPayment, V2.MoneyManagement.OutboundTransferCreateParams, and V2.MoneyManagement.OutboundTransfer
      • Add support for crypto_wallet on V2.MoneyManagement.OutboundSetupIntentCreateParams.payout_method_data and V2.MoneyManagement.PayoutMethod
      • Add support for custom_pricing_unit_details on V2.Billing.RateCardRate.custom_pricing_unit_amount, V2.Billing.ServiceAction.credit_grant.amount.custom_pricing_unit, and V2.Billing.ServiceAction.credit_grant_per_tenant.amount.custom_pricing_unit
      • Add support for origin_type on V2.MoneyManagement.ReceivedDebit.bank_transfer
      • Add support for new value sepa_credit_transfer on enum V2.FinancialAddressCreditSimulationCreditParams.network
      • Add support for new value credentials.sepa_bank_account.iban on enums V2.MoneyManagement.FinancialAddressListParams.include and V2.MoneyManagement.FinancialAddressRetrieveParams.include
      • Add support for sepa_bank_account on V2.MoneyManagement.FinancialAddressCreateParams
      • Remove support for price on V2.Billing.RateCardRateCreateParams
      • Change V2.Billing.LicenseFeeUpdateParams.display_name to be optional
      • Add support for lookup_keys on V2.Billing.CadenceListParams
      • Change type of V2.Billing.CadenceCancelParams.include, V2.Billing.CadenceCreateParams.include, V2.Billing.CadenceListParams.include, V2.Billing.CadenceRetrieveParams.include, and V2.Billing.CadenceUpdateParams.include from literal('invoice_discount_rules') to enum('invoice_discount_rules'|'settings_data')
      • Remove support for customer and type on V2.Billing.CadenceCreateParams.payer
      • Change V2.Billing.CadenceCreateParams.payer.billing_profile to be required
      • Add support for new value crypto_wallets on enum EventsAccountConfigurationRecipientDataFeatureStatusUpdatedEvent.feature_name
      • Add support for new value crypto_wallets_v2 on enum EventsV2CoreAccountIncludingConfigurationRecipientCapabilityStatusUpdatedEvent.updated_capability
      • Remove support for alert_id on EventsV2CoreHealthApiErrorResolvedEvent, EventsV2CoreHealthApiLatencyResolvedEvent, EventsV2CoreHealthAuthorizationRateDropResolvedEvent, EventsV2CoreHealthIssuingAuthorizationRequestTimeoutResolvedEvent, EventsV2CoreHealthPaymentMethodErrorResolvedEvent, EventsV2CoreHealthTrafficVolumeDropResolvedEvent, and EventsV2CoreHealthWebhookLatencyResolvedEvent
      • Add support for thin event V1AccountUpdatedEvent with related object V2.Account
      • Add support for thin events V1ApplicationFeeCreatedEvent, V1ApplicationFeeRefundedEvent, V1BillingPortalConfigurationCreatedEvent, V1BillingPortalConfigurationUpdatedEvent, V1CapabilityUpdatedEvent, V1ChargeCapturedEvent, V1ChargeDisputeClosedEvent, V1ChargeDisputeCreatedEvent, V1ChargeDisputeFundsReinstatedEvent, V1ChargeDisputeFundsWithdrawnEvent, V1ChargeDisputeUpdatedEvent, V1ChargeExpiredEvent, V1ChargeFailedEvent, V1ChargePendingEvent, V1ChargeRefundUpdatedEvent, V1ChargeRefundedEvent, V1ChargeSucceededEvent, V1ChargeUpdatedEvent, V1CheckoutSessionAsyncPaymentFailedEvent, V1CheckoutSessionAsyncPaymentSucceededEvent, V1CheckoutSessionCompletedEvent, V1CheckoutSessionExpiredEvent, V1ClimateOrderCanceledEvent, V1ClimateOrderCreatedEvent, V1ClimateOrderDelayedEvent, V1ClimateOrderDeliveredEvent, V1ClimateOrderProductSubstitutedEvent, V1ClimateProductCreatedEvent, V1ClimateProductPricingUpdatedEvent, V1CouponCreatedEvent, V1CouponDeletedEvent, V1CouponUpdatedEvent, V1CreditNoteCreatedEvent, V1CreditNoteUpdatedEvent, V1CreditNoteVoidedEvent, V1CustomerCreatedEvent, V1CustomerDeletedEvent, V1CustomerDiscountCreatedEvent, V1CustomerDiscountDeletedEvent, V1CustomerDiscountUpdatedEvent, V1CustomerSubscriptionCreatedEvent, V1CustomerSubscriptionDeletedEvent, V1CustomerSubscriptionPausedEvent, V1CustomerSubscriptionPendingUpdateAppliedEvent, V1CustomerSubscriptionPendingUpdateExpiredEvent, V1CustomerSubscriptionResumedEvent, V1CustomerSubscriptionTrialWillEndEvent, V1CustomerSubscriptionUpdatedEvent, V1CustomerTaxIdCreatedEvent, V1CustomerTaxIdDeletedEvent, V1CustomerTaxIdUpdatedEvent, V1CustomerUpdatedEvent, V1FileCreatedEvent, V1FinancialConnectionsAccountCreatedEvent, V1FinancialConnectionsAccountDeactivatedEvent, V1FinancialConnectionsAccountDisconnectedEvent, V1FinancialConnectionsAccountReactivatedEvent, V1FinancialConnectionsAccountRefreshedBalanceEvent, V1FinancialConnectionsAccountRefreshedOwnershipEvent, V1FinancialConnectionsAccountRefreshedTransactionsEvent, V1IdentityVerificationSessionCanceledEvent, V1IdentityVerificationSessionCreatedEvent, V1IdentityVerificationSessionProcessingEvent, V1IdentityVerificationSessionRedactedEvent, V1IdentityVerificationSessionRequiresInputEvent, V1IdentityVerificationSessionVerifiedEvent, V1InvoiceCreatedEvent, V1InvoiceDeletedEvent, V1InvoiceFinalizationFailedEvent, V1InvoiceFinalizedEvent, V1InvoiceMarkedUncollectibleEvent, V1InvoiceOverdueEvent, V1InvoiceOverpaidEvent, V1InvoicePaidEvent, V1InvoicePaymentActionRequiredEvent, V1InvoicePaymentFailedEvent, V1InvoicePaymentPaidEvent, V1InvoicePaymentSucceededEvent, V1InvoiceSentEvent, V1InvoiceUpcomingEvent, V1InvoiceUpdatedEvent, V1InvoiceVoidedEvent, V1InvoiceWillBeDueEvent, V1InvoiceitemCreatedEvent, V1InvoiceitemDeletedEvent, V1IssuingAuthorizationCreatedEvent, V1IssuingAuthorizationRequestEvent, V1IssuingAuthorizationUpdatedEvent, V1IssuingCardCreatedEvent, V1IssuingCardUpdatedEvent, V1IssuingCardholderCreatedEvent, V1IssuingCardholderUpdatedEvent, V1IssuingDisputeClosedEvent, V1IssuingDisputeCreatedEvent, V1IssuingDisputeFundsReinstatedEvent, V1IssuingDisputeFundsRescindedEvent, V1IssuingDisputeSubmittedEvent, V1IssuingDisputeUpdatedEvent, V1IssuingPersonalizationDesignActivatedEvent, V1IssuingPersonalizationDesignDeactivatedEvent, V1IssuingPersonalizationDesignRejectedEvent, V1IssuingPersonalizationDesignUpdatedEvent, V1IssuingTokenCreatedEvent, V1IssuingTokenUpdatedEvent, V1IssuingTransactionCreatedEvent, V1IssuingTransactionPurchaseDetailsReceiptUpdatedEvent, V1IssuingTransactionUpdatedEvent, V1MandateUpdatedEvent, V1PaymentIntentAmountCapturableUpdatedEvent, V1PaymentIntentCanceledEvent, V1PaymentIntentCreatedEvent, V1PaymentIntentPartiallyFundedEvent, V1PaymentIntentPaymentFailedEvent, V1PaymentIntentProcessingEvent, V1PaymentIntentRequiresActionEvent, V1PaymentIntentSucceededEvent, V1PaymentLinkCreatedEvent, V1PaymentLinkUpdatedEvent, V1PaymentMethodAttachedEvent, V1PaymentMethodAutomaticallyUpdatedEvent, V1PaymentMethodDetachedEvent, V1PaymentMethodUpdatedEvent, V1PayoutCanceledEvent, V1PayoutCreatedEvent, V1PayoutFailedEvent, V1PayoutPaidEvent, V1PayoutReconciliationCompletedEvent, V1PayoutUpdatedEvent, V1PersonCreatedEvent, V1PersonDeletedEvent, V1PersonUpdatedEvent, V1PlanCreatedEvent, V1PlanDeletedEvent, V1PlanUpdatedEvent, V1PriceCreatedEvent, V1PriceDeletedEvent, V1PriceUpdatedEvent, V1ProductCreatedEvent, V1ProductDeletedEvent, V1ProductUpdatedEvent, V1PromotionCodeCreatedEvent, V1PromotionCodeUpdatedEvent, V1QuoteAcceptedEvent, V1QuoteCanceledEvent, V1QuoteCreatedEvent, V1QuoteFinalizedEvent, V1RadarEarlyFraudWarningCreatedEvent, V1RadarEarlyFraudWarningUpdatedEvent, V1RefundCreatedEvent, V1RefundFailedEvent, V1RefundUpdatedEvent, V1ReviewClosedEvent, V1ReviewOpenedEvent, V1SetupIntentCanceledEvent, V1SetupIntentCreatedEvent, V1SetupIntentRequiresActionEvent, V1SetupIntentSetupFailedEvent, V1SetupIntentSucceededEvent, V1SigmaScheduledQueryRunCreatedEvent, V1SourceCanceledEvent, V1SourceChargeableEvent, V1SourceFailedEvent, V1SourceRefundAttributesRequiredEvent, V1SubscriptionScheduleAbortedEvent, V1SubscriptionScheduleCanceledEvent, V1SubscriptionScheduleCompletedEvent, V1SubscriptionScheduleCreatedEvent, V1SubscriptionScheduleExpiringEvent, V1SubscriptionScheduleReleasedEvent, V1SubscriptionScheduleUpdatedEvent, V1TaxRateCreatedEvent, V1TaxRateUpdatedEvent, V1TerminalReaderActionFailedEvent, V1TerminalReaderActionSucceededEvent, V1TerminalReaderActionUpdatedEvent, V1TestHelpersTestClockAdvancingEvent, V1TestHelpersTestClockCreatedEvent, V1TestHelpersTestClockDeletedEvent, V1TestHelpersTestClockInternalFailureEvent, V1TestHelpersTestClockReadyEvent, V1TopupCanceledEvent, V1TopupCreatedEvent, V1TopupFailedEvent, V1TopupReversedEvent, V1TopupSucceededEvent, V1TransferCreatedEvent, V1TransferReversedEvent, V1TransferUpdatedEvent, V2CoreHealthIssuingAuthorizationRequestErrorsFiringEvent, and V2CoreHealthIssuingAuthorizationRequestErrorsResolvedEvent
      • Add support for thin event V2CoreClaimableSandboxCreatedEvent with related object V2.Core.ClaimableSandbox
      • Add support for thin events V2MoneyManagementRecipientVerificationCreatedEvent and V2MoneyManagementRecipientVerificationUpdatedEvent with related object V2.MoneyManagement.RecipientVerification
      • Add support for error code account_rate_limit_exceeded on RateLimitError

    See the changelog for more details.

  • 19.0.0 - 2025-09-30

    This release changes the pinned API version to 2025-09-30.clover and contains breaking changes (prefixed with ⚠️ below)

    • #2427 Move V2.Event API resources to V2.Core.Events

      • ⚠️ Move the below event related interfaces and types from Stripe.V2 to Stripe.V2.Core. This enables us to correctly match the API path to the namespace
        • Stripe.V2.EventDestination -> Stripe.V2.Core.EventDestination
        • Stripe.V2.Event -> Stripe.V2.Core.Event
        • Stripe.V2.EventBase -> Stripe.V2.Core.EventBase
        • Stripe.V2.Events.RelatedObject -> Stripe.V2.Core.Events.RelatedObject
    • #2370 Add strongly typed EventNotifications
      We've overhauled how V2 Events are handled in the SDK! This approach should provide a lot more information at authoring and compile time, leading to more robust integrations. As part of this process, there are a number of changes to be aware of.

      • ⚠️ Rename function StripeClient.parseThinEvent to StripeClient.parseEventNotification and remove the Stripe.ThinEvent interface.
        • This function now returns a Stripe.V2.EventNotification which is a union of all possible event notifications instead of Stripe.ThinEvent. When applicable, these event notifications will have the relatedObject field and a function fetchRelatedObject(). They also have a fetchEvent() method to retrieve their corresponding event.
        • If this union type does not cover a new event notification that you parsed, you can cast it to UnknownEventNotification to then access the relatedObject field and the function fetchRelatedObject()
    • #2432 Drop support for Node < 16 & clarify policy

      • Publish our new language version support policy and add a link to the README.
      • ⚠️ Drop support for Node versions < 16
      • Node 16 support is deprecated and will be removed in the next scheduled major release (March 2026)
    • #2426 Add StripeContext object

      • Add the StripeContext class. It can be used anywhere the context option is supplied and gets serialized to a string when making requests.
      • ⚠️ Change EventNotification (formerly known as ThinEvent)'s context property from string to StripeContext
      • ⚠️ We no longer remove the stripe-context header from /v1 requests and the stripe-account header from /v2 requests. The server may reject a request with both of these headers, so if you're sending both, remove any reference to stripeAccount (since the headers are identical, but context is preferred)
    • #2398 ⚠️ Build SDK w/ V2 OpenAPI spec

      • ⚠️ The delete methods for v2 APIs (the ones in the StripeClient.v2 namespace) now return a V2DeletedObject which has the id of the object that has been deleted and a string representing the type of the object that has been deleted.
      • ⚠️ Change the types of nullable properties in objects returned by v2 APIs (the ones in the StripeClient.v2 namespace) from a null union to optional (e.g. prop: string | null -> prop?: string).
    • #2420 Fixed file uploading in Bun runtimes

      • Fixed issue (#2416) with file uploads in runtimes using FetchHttpClient (e.g. Bun). This bug affected Node SDK versions between 18.1.0 to 18.5.0.
    • #2405 support more npm tags

      • ⚠️ Starting with this release, we'll no longer be tagging releases with beta npm tag. Instead, we'll use latest, public-preview, or private-preview to more closely align with Stripe's release phases
    • #2402, #2413, #2430, #2428 Update generated code based on incoming API changes in the 2025-09-30.clover API version.

      • ⚠️ Remove support for balance_report and payout_reconciliation_report on AccountSession.components and AccountSessionCreateParams.components
      • ⚠️ Remove support for values saturday and sunday from enums Account.settings.payouts.schedule.weekly_payout_days, AccountCreateParams.settings.payouts.schedule.weekly_payout_days, and AccountUpdateParams.settings.payouts.schedule.weekly_payout_days
        • Add support for new values external_request and unsupported_business_type on enums Account.future_requirements.errors[].code, Account.requirements.errors[].code, BankAccount.future_requirements.errors[].code, BankAccount.requirements.errors[].code, Capability.future_requirements.errors[].code, Capability.requirements.errors[].code, Person.future_requirements.errors[].code, and Person.requirements.errors[].code
        • Remove support for link and pay_by_bank on PaymentMethodUpdateParams
      • ⚠️ Remove support for coupon on Discount, PromotionCodeCreateParams, and PromotionCode. Use Discount.source.coupon, PromotionCodeCreateParams.promotion.coupon and PromotionCode.coupon instead.
      • Change Invoice.id to be required.
      • Add support for new value prevented on enum Dispute.status
      • Add support for new resource BalanceSettings
      • Add support for retrieve and update methods on resource BalanceSettings
      • Add support for mb_way_payments on Account.capabilities, AccountCreateParams.capabilities, and AccountUpdateParams.capabilities
      • Add support for source on Discount
      • Add support for trial_update_behavior on BillingPortal.Configuration.features.subscription_update, BillingPortal.ConfigurationCreateParams.features.subscription_update, and BillingPortal.ConfigurationUpdateParams.features.subscription_update
      • Add support for mb_way on Charge.payment_method_details, ConfirmationToken.payment_method_preview, ConfirmationTokenCreateParams.testHelpers.payment_method_data, PaymentIntent.payment_method_options, PaymentIntentConfirmParams.payment_method_data, PaymentIntentConfirmParams.payment_method_options, PaymentIntentCreateParams.payment_method_data, PaymentIntentCreateParams.payment_method_options, PaymentIntentUpdateParams.payment_method_data, PaymentIntentUpdateParams.payment_method_options, PaymentMethodCreateParams, PaymentMethod, SetupIntentConfirmParams.payment_method_data, SetupIntentCreateParams.payment_method_data, and SetupIntentUpdateParams.payment_method_data
      • Add support for branding_settings and name_collection on Checkout.SessionCreateParams and Checkout.Session
      • Add support for excluded_payment_method_types on Checkout.SessionCreateParams, Checkout.Session, PaymentIntentConfirmParams, and PaymentIntentUpdateParams
      • Add support for unit_label on Checkout.SessionCreateParams.line_items[].price_data.product_data, InvoiceAddLinesParams.lines[].price_data.product_data, InvoiceLineItemUpdateParams.price_data.product_data, InvoiceUpdateLinesParams.lines[].price_data.product_data, and PaymentLinkCreateParams.line_items[].price_data.product_data
      • Add support for alma, billie, and satispay on Checkout.Session.payment_method_options and Checkout.SessionCreateParams.payment_method_options
      • Add support for demo_pay on Checkout.SessionCreateParams.payment_method_options
      • Add support for capture_method on Checkout.Session.payment_method_options.affirm, Checkout.Session.payment_method_options.afterpay_clearpay, Checkout.Session.payment_method_options.amazon_pay, Checkout.Session.payment_method_options.card, Checkout.Session.payment_method_options.cashapp, Checkout.Session.payment_method_options.klarna, Checkout.Session.payment_method_options.link, Checkout.Session.payment_method_options.mobilepay, Checkout.Session.payment_method_options.revolut_pay, Checkout.SessionCreateParams.payment_method_options.affirm, Checkout.SessionCreateParams.payment_method_options.afterpay_clearpay, Checkout.SessionCreateParams.payment_method_options.amazon_pay, Checkout.SessionCreateParams.payment_method_options.card, Checkout.SessionCreateParams.payment_method_options.cashapp, Checkout.SessionCreateParams.payment_method_options.klarna, Checkout.SessionCreateParams.payment_method_options.link, Checkout.SessionCreateParams.payment_method_options.mobilepay, and Checkout.SessionCreateParams.payment_method_options.revolut_pay
      • Add support for flexible on Checkout.SessionCreateParams.subscription_data.billing_mode, InvoiceCreatePreviewParams.schedule_details.billing_mode, InvoiceCreatePreviewParams.subscription_details.billing_mode, Quote.subscription_data.billing_mode, QuoteCreateParams.subscription_data.billing_mode, Subscription.billing_mode, SubscriptionCreateParams.billing_mode, SubscriptionMigrateParams.billing_mode, SubscriptionSchedule.billing_mode, and SubscriptionScheduleCreateParams.billing_mode
      • Add support for business_name and individual_name on Checkout.Session.collected_information, Checkout.Session.customer_details, CustomerCreateParams, CustomerUpdateParams, and Customer
      • Add support for new values mb_way on enums ConfirmationTokenCreateParams.testHelpers.payment_method_data.type, PaymentIntentConfirmParams.payment_method_data.type, PaymentIntentCreateParams.payment_method_data.type, PaymentIntentUpdateParams.payment_method_data.type, SetupIntentConfirmParams.payment_method_data.type, SetupIntentCreateParams.payment_method_data.type, and SetupIntentUpdateParams.payment_method_data.type
      • Add support for new values mb_way on enums ConfirmationToken.payment_method_preview.type and PaymentMethod.type
      • Add support for new values mb_way on enums CustomerListPaymentMethodsParams.type, PaymentMethodCreateParams.type, and PaymentMethodListParams.type
      • Add support for chargeback_loss_reason_code on Dispute.payment_method_details.klarna
      • Add support for net_amount and proration_details on InvoiceItem
      • Remove support for iterations on InvoiceCreatePreviewParams.schedule_details.phases[], SubscriptionScheduleCreateParams.phases[], and SubscriptionScheduleUpdateParams.phases[]
      • Add support for fraud_disputability_likelihood and risk_assessment on Issuing.AuthorizationCreateParams.testHelpers
      • Add support for second_line on Issuing.Card
      • Add support for new values mb_way on enums PaymentIntent.excluded_payment_method_types and PaymentIntentCreateParams.excluded_payment_method_types
      • Add support for fr_meal_voucher_conecs on PaymentMethodConfigurationCreateParams and PaymentMethodConfigurationUpdateParams
      • Add support for promotion on PromotionCodeCreateParams and PromotionCode
      • Add support for new values acknowledged and payment_never_settled on enum Review.closed_reason
      • Add support for provider on Tax.Settings.defaults
      • Add support for bbpos_wisepad3 on Terminal.ConfigurationCreateParams, Terminal.ConfigurationUpdateParams, and Terminal.Configuration
      • Add support for address_kana, address_kanji, display_name_kana, display_name_kanji, and phone on Terminal.LocationCreateParams, Terminal.LocationUpdateParams, and Terminal.Location
      • Change Terminal.LocationCreateParams.address to be optional
      • Change Terminal.LocationCreateParams.display_name to be optional
      • Add support for new value 2025-09-30.clover on enum WebhookEndpointCreateParams.api_version
      • Add support for error codes financial_connections_account_pending_account_numbers and financial_connections_account_unavailable_account_numbers on Invoice.last_finalization_error, PaymentIntent.last_payment_error, SetupAttempt.setup_error, SetupIntent.last_setup_error, and StripeError

    See the changelog for more details.

  • 18.6.0-beta.1 - 2025-08-27

    This release changes the pinned API version to 2025-08-27.preview.

    • #2381 Update generated code for beta
      • Add support for list and retrieve methods on resource InvoicePayment
      • Add support for list method on resource Mandate
      • Add support for applied on V2.Core.Account.configuration.customer, V2.Core.Account.configuration.merchant, V2.Core.Account.configuration.recipient, V2.Core.Account.configuration.storer, V2.Core.AccountUpdateParams.configuration.customer, V2.Core.AccountUpdateParams.configuration.merchant, V2.Core.AccountUpdateParams.configuration.recipient, and V2.Core.AccountUpdateParams.configuration.storer
      • Add support for new values ao_nif, az_tin, bd_etin, cr_cpj, cr_nite, do_rcn, gt_nit, kz_bin, mz_nuit, pe_ruc, pk_ntn, sa_crn, and sa_tin on enums V2.Core.Account.identity.business_details.id_numbers[].type, V2.Core.AccountCreateParams.identity.business_details.id_numbers[].type, and V2.Core.AccountUpdateParams.identity.business_details.id_numbers[].type
      • Add support for new values ao_nif, az_tin, bd_brc, bd_etin, bd_nid, cr_cpf, cr_dimex, cr_nite, do_rcn, gt_nit, kz_iin, mz_nuit, pe_dni, pk_cnic, pk_snic, and sa_tin on enums V2.Core.Account.identity.individual.id_numbers[].type, V2.Core.AccountCreateParams.identity.individual.id_numbers[].type, V2.Core.AccountUpdateParams.identity.individual.id_numbers[].type, V2.Core.Person.id_numbers[].type, V2.Core.PersonCreateParams.id_numbers[].type, and V2.Core.PersonUpdateParams.id_numbers[].type
      • Change type of Billing.AlertTriggered.value from longInteger to decimal_string
      • Add support for display_name on V2.MoneyManagement.FinancialAccountCreateParams and V2.MoneyManagement.FinancialAccount
      • Add support for new value currency_conversion on enums V2.MoneyManagement.Transaction.category and V2.MoneyManagement.TransactionEntry.transaction_details.category
      • Add support for currency_conversion on V2.MoneyManagement.Transaction.flow and V2.MoneyManagement.TransactionEntry.transaction_details.flow
      • Add support for new value currency_conversion on enums V2.MoneyManagement.Transaction.flow.type and V2.MoneyManagement.TransactionEntry.transaction_details.flow.type
      • Add support for payments on BalanceSettingUpdateParams and BalanceSettings
      • Remove support for debit_negative_balances, payouts, and settlement_timing on BalanceSettingUpdateParams and BalanceSettings
      • Add support for mandate on Charge.payment_method_details.pix, PaymentAttemptRecord.payment_method_details.pix, and PaymentRecord.payment_method_details.pix
      • Add support for coupon_data on Checkout.SessionCreateParams.discounts[]
      • Add support for mandate_options on Checkout.Session.payment_method_options.pix, Checkout.SessionCreateParams.payment_method_options.pix, PaymentIntent.payment_method_options.pix, PaymentIntentConfirmParams.payment_method_options.pix, PaymentIntentCreateParams.payment_method_options.pix, and PaymentIntentUpdateParams.payment_method_options.pix
      • Change type of Checkout.Session.payment_method_options.pix.setu...

Snyk has created this PR to upgrade stripe from 15.8.0 to 19.1.0.

See this package in npm:
stripe

See this project in Snyk:
https://app.snyk.io/org/nerds-github/project/ef708957-d107-4807-bb9b-ffb67ea15337?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants