chore(deps): bump stripe from 8.4.0 to 15.6.0

[dependabot]

Bumps stripe from 8.4.0 to 15.6.0.

Release notes

Sourced from stripe's releases.

v15.6.0

This release changes the pinned API version to 2026-08-26.dahlia.

• #1881 Add new EventNotificationHandler class for better thin event management

  • We've been putting a lot of time into rethinking the event handling experience in the SDKs. This new class is the culmination of that effort.
  • They're designed for a tight coupling with both StripeClient and the fully-typed nature of thin events. This delivers painless event destination upgrades, in-editor checks for common mistakes, and better code modularity.
  • Now that we've released thin event notifications for v1 objects, these new handlers are our recommended path for all integrations using thin event notifications.
  • See more detailed docs here: https://docs.stripe.com/webhooks/event-notification-handlers
  • As part of this work, we've widened some of the types our webhook-related methods take so they play more nicely with the types commonly returned by popular web frameworks (#1888)

• #1876 Update generated code

  • Add support for new resource billing.FeedbackOption
  • Add support for create, deactivate, list, modify, and retrieve methods on resource billing.FeedbackOption
  • Add support for payment_method_settings on AccountSession.Component and AccountSessionCreateParamsComponent
  • Add support for feedback_options on BillingPortal.Configuration.Feature.SubscriptionCancel.CancellationReason, billing_portal.ConfigurationCreateParamsFeatureSubscriptionCancelCancellationReason, and billing_portal.ConfigurationModifyParamsFeatureSubscriptionCancelCancellationReason
  • Add support for new value customer_update on enums BillingPortal.Session.Flow.type and billing_portal.SessionCreateParamsFlowDatum.type
  • Add support for customer_update on BillingPortal.Session.Flow
  • Add support for funding_source_group on Charge.PaymentMethodDetail.Card.Wallet.Link and Charge.PaymentMethodDetail.Link
  • Add support for funding_types_blocked on Checkout.Session.PaymentMethodOption.Card.Restriction and checkout.SessionCreateParamsPaymentMethodOptionCardRestriction
  • Add support for metadata on ConfirmationToken
  • Add support for active_entitlements and customer_portal on CustomerSession.Component and CustomerSessionCreateParamsComponent
  • Add support for country on FinancialConnections.Session.Filter
  • Add support for frozen_fields on InvoiceItem
  • Add support for billie on Invoice.PaymentSetting.PaymentMethodOption, InvoiceCreateParamsPaymentSettingPaymentMethodOption, InvoiceModifyParamsPaymentSettingPaymentMethodOption, Subscription.PaymentSetting.PaymentMethodOption, SubscriptionCreateParamsPaymentSettingPaymentMethodOption, and SubscriptionModifyParamsPaymentSettingPaymentMethodOption
  • Add support for new value billie on enums Invoice.PaymentSetting.payment_method_types, InvoiceCreateParamsPaymentSetting.payment_method_types, InvoiceModifyParamsPaymentSetting.payment_method_types, Subscription.PaymentSetting.payment_method_types, SubscriptionCreateParamsPaymentSetting.payment_method_types, and SubscriptionModifyParamsPaymentSetting.payment_method_types
  • ⚠️ Remove support for cryptogram on PaymentAttemptRecord.PaymentMethodDetail.Card.ThreeDSecure and PaymentRecord.PaymentMethodDetail.Card.ThreeDSecure
  • Add support for new value touch_n_go on enums PaymentIntent.allowed_payment_method_types, PaymentIntentConfirmParams.allowed_payment_method_types, PaymentIntentCreateParams.allowed_payment_method_types, PaymentIntentModifyParams.allowed_payment_method_types, SetupIntent.allowed_payment_method_types, SetupIntentConfirmParams.allowed_payment_method_types, SetupIntentCreateParams.allowed_payment_method_types, and SetupIntentModifyParams.allowed_payment_method_types
  • Change PaymentIntent.allowed_payment_method_types and SetupIntent.allowed_payment_method_types to be required
  • Add support for application_fee_amount, application_fee_percent, on_behalf_of, and transfer_data on PaymentLinkModifyParams
  • Add support for feedback_option on Subscription.CancellationDetail, SubscriptionCancelParamsCancellationDetail, and SubscriptionModifyParamsCancellationDetail
  • Add support for igic on Tax.Registration.CountryOption.At, Tax.Registration.CountryOption.Be, Tax.Registration.CountryOption.Bg, Tax.Registration.CountryOption.Cy, Tax.Registration.CountryOption.Cz, Tax.Registration.CountryOption.De, Tax.Registration.CountryOption.Dk, Tax.Registration.CountryOption.E, Tax.Registration.CountryOption.Ee, Tax.Registration.CountryOption.Fi, Tax.Registration.CountryOption.Fr, Tax.Registration.CountryOption.Gr, Tax.Registration.CountryOption.Hr, Tax.Registration.CountryOption.Hu, Tax.Registration.CountryOption.Ie, Tax.Registration.CountryOption.It, Tax.Registration.CountryOption.Lt, Tax.Registration.CountryOption.Lu, Tax.Registration.CountryOption.Lv, Tax.Registration.CountryOption.Mt, Tax.Registration.CountryOption.Nl, Tax.Registration.CountryOption.Pl, Tax.Registration.CountryOption.Pt, Tax.Registration.CountryOption.Ro, Tax.Registration.CountryOption.Se, Tax.Registration.CountryOption.Si, Tax.Registration.CountryOption.Sk, tax.RegistrationCreateParamsCountryOptionAt, tax.RegistrationCreateParamsCountryOptionBe, tax.RegistrationCreateParamsCountryOptionBg, tax.RegistrationCreateParamsCountryOptionCy, tax.RegistrationCreateParamsCountryOptionCz, tax.RegistrationCreateParamsCountryOptionDe, tax.RegistrationCreateParamsCountryOptionDk, tax.RegistrationCreateParamsCountryOptionE, tax.RegistrationCreateParamsCountryOptionEe, tax.RegistrationCreateParamsCountryOptionFi, tax.RegistrationCreateParamsCountryOptionFr, tax.RegistrationCreateParamsCountryOptionGr, tax.RegistrationCreateParamsCountryOptionHr, tax.RegistrationCreateParamsCountryOptionHu, tax.RegistrationCreateParamsCountryOptionIe, tax.RegistrationCreateParamsCountryOptionIt, tax.RegistrationCreateParamsCountryOptionLt, tax.RegistrationCreateParamsCountryOptionLu, tax.RegistrationCreateParamsCountryOptionLv, tax.RegistrationCreateParamsCountryOptionMt, tax.RegistrationCreateParamsCountryOptionNl, tax.RegistrationCreateParamsCountryOptionPl, tax.RegistrationCreateParamsCountryOptionPt, tax.RegistrationCreateParamsCountryOptionRo, tax.RegistrationCreateParamsCountryOptionSe, tax.RegistrationCreateParamsCountryOptionSi, and tax.RegistrationCreateParamsCountryOptionSk
  • Add support for new value 2026-08-26.dahlia on enum WebhookEndpointCreateParams.api_version
  • Add support for error codes authentication_failure, capability_not_active, expired_payment_method, incorrect_postal_code, invalid_canceled_subscription_fields, and payment_method_restricted on Invoice.LastFinalizationError, PaymentIntent.LastPaymentError, SetupAttempt.SetupError, SetupIntent.LastSetupError, StripeError, and Terminal.Reader.Action.ApiError

See the changelog for more details.

v15.6.0a2

• #1875 Update generated code for private-preview
  • Add support for new resources PaymentPlan and billing.FeedbackOption
  • ⚠️ Remove support for resource billing.FeedbackOptions
  • Add support for create, list, modify, and retrieve methods on resource PaymentPlan
  • Add support for modify method on resource v2.money_management.Transaction
  • Add support for wechat_pay_payments on Account.Setting, AccountCreateParamsSetting, and AccountModifyParamsSetting
  • ⚠️ Change type of BillingPortal.Configuration.Feature.SubscriptionCancel.CancellationReason.feedback_options from $Billing.FeedbackOptions to $Billing.FeedbackOption
  • Change BillingPortal.Configuration.Feature.SubscriptionCancel.CancellationReason.feedback_options to be required
  • Add support for subscription_pause on BillingPortal.Session.Flow
  • Add support for new value subscription_pause on enum BillingPortal.Session.Flow.type
  • Add support for new value usdt on enums Crypto.OnrampSession.TransactionDetail.destination_currency, crypto.OnrampSessionCreateParams.destination_currency, and crypto.OnrampSessionListParams.destination_currency
  • Add support for new value usdt on enums Crypto.OnrampSession.TransactionDetail.destination_currencies and crypto.OnrampSessionCreateParams.destination_currencies

... (truncated)

Changelog

Sourced from stripe's changelog.

15.6.0 - 2026-08-26

This release changes the pinned API version to 2026-08-26.dahlia.

• #1881 Add new EventNotificationHandler class for better thin event management

  • We've been putting a lot of time into rethinking the event handling experience in the SDKs. This new class is the culmination of that effort.
  • They're designed for a tight coupling with both StripeClient and the fully-typed nature of thin events. This delivers painless event destination upgrades, in-editor checks for common mistakes, and better code modularity.
  • Now that we've released thin event notifications for v1 objects, these new handlers are our recommended path for all integrations using thin event notifications.
  • See more detailed docs here: https://docs.stripe.com/webhooks/event-notification-handlers
  • As part of this work, we've widened some of the types our webhook-related methods take so they play more nicely with the types commonly returned by popular web frameworks (#1888)

• #1876 Update generated code

  • Add support for new resource billing.FeedbackOption
  • Add support for create, deactivate, list, modify, and retrieve methods on resource billing.FeedbackOption
  • Add support for payment_method_settings on AccountSession.Component and AccountSessionCreateParamsComponent
  • Add support for feedback_options on BillingPortal.Configuration.Feature.SubscriptionCancel.CancellationReason, billing_portal.ConfigurationCreateParamsFeatureSubscriptionCancelCancellationReason, and billing_portal.ConfigurationModifyParamsFeatureSubscriptionCancelCancellationReason
  • Add support for new value customer_update on enums BillingPortal.Session.Flow.type and billing_portal.SessionCreateParamsFlowDatum.type
  • Add support for customer_update on BillingPortal.Session.Flow
  • Add support for funding_source_group on Charge.PaymentMethodDetail.Card.Wallet.Link and Charge.PaymentMethodDetail.Link
  • Add support for funding_types_blocked on Checkout.Session.PaymentMethodOption.Card.Restriction and checkout.SessionCreateParamsPaymentMethodOptionCardRestriction
  • Add support for metadata on ConfirmationToken
  • Add support for active_entitlements and customer_portal on CustomerSession.Component and CustomerSessionCreateParamsComponent
  • Add support for country on FinancialConnections.Session.Filter
  • Add support for frozen_fields on InvoiceItem
  • Add support for billie on Invoice.PaymentSetting.PaymentMethodOption, InvoiceCreateParamsPaymentSettingPaymentMethodOption, InvoiceModifyParamsPaymentSettingPaymentMethodOption, Subscription.PaymentSetting.PaymentMethodOption, SubscriptionCreateParamsPaymentSettingPaymentMethodOption, and SubscriptionModifyParamsPaymentSettingPaymentMethodOption
  • Add support for new value billie on enums Invoice.PaymentSetting.payment_method_types, InvoiceCreateParamsPaymentSetting.payment_method_types, InvoiceModifyParamsPaymentSetting.payment_method_types, Subscription.PaymentSetting.payment_method_types, SubscriptionCreateParamsPaymentSetting.payment_method_types, and SubscriptionModifyParamsPaymentSetting.payment_method_types
  • ⚠️ Remove support for cryptogram on PaymentAttemptRecord.PaymentMethodDetail.Card.ThreeDSecure and PaymentRecord.PaymentMethodDetail.Card.ThreeDSecure
  • Add support for new value touch_n_go on enums PaymentIntent.allowed_payment_method_types, PaymentIntentConfirmParams.allowed_payment_method_types, PaymentIntentCreateParams.allowed_payment_method_types, PaymentIntentModifyParams.allowed_payment_method_types, SetupIntent.allowed_payment_method_types, SetupIntentConfirmParams.allowed_payment_method_types, SetupIntentCreateParams.allowed_payment_method_types, and SetupIntentModifyParams.allowed_payment_method_types
  • Change PaymentIntent.allowed_payment_method_types and SetupIntent.allowed_payment_method_types to be required
  • Add support for application_fee_amount, application_fee_percent, on_behalf_of, and transfer_data on PaymentLinkModifyParams
  • Add support for feedback_option on Subscription.CancellationDetail, SubscriptionCancelParamsCancellationDetail, and SubscriptionModifyParamsCancellationDetail
  • Add support for igic on Tax.Registration.CountryOption.At, Tax.Registration.CountryOption.Be, Tax.Registration.CountryOption.Bg, Tax.Registration.CountryOption.Cy, Tax.Registration.CountryOption.Cz, Tax.Registration.CountryOption.De, Tax.Registration.CountryOption.Dk, Tax.Registration.CountryOption.E, Tax.Registration.CountryOption.Ee, Tax.Registration.CountryOption.Fi, Tax.Registration.CountryOption.Fr, Tax.Registration.CountryOption.Gr, Tax.Registration.CountryOption.Hr, Tax.Registration.CountryOption.Hu, Tax.Registration.CountryOption.Ie, Tax.Registration.CountryOption.It, Tax.Registration.CountryOption.Lt, Tax.Registration.CountryOption.Lu, Tax.Registration.CountryOption.Lv, Tax.Registration.CountryOption.Mt, Tax.Registration.CountryOption.Nl, Tax.Registration.CountryOption.Pl, Tax.Registration.CountryOption.Pt, Tax.Registration.CountryOption.Ro, Tax.Registration.CountryOption.Se, Tax.Registration.CountryOption.Si, Tax.Registration.CountryOption.Sk, tax.RegistrationCreateParamsCountryOptionAt, tax.RegistrationCreateParamsCountryOptionBe, tax.RegistrationCreateParamsCountryOptionBg, tax.RegistrationCreateParamsCountryOptionCy, tax.RegistrationCreateParamsCountryOptionCz, tax.RegistrationCreateParamsCountryOptionDe, tax.RegistrationCreateParamsCountryOptionDk, tax.RegistrationCreateParamsCountryOptionE, tax.RegistrationCreateParamsCountryOptionEe, tax.RegistrationCreateParamsCountryOptionFi, tax.RegistrationCreateParamsCountryOptionFr, tax.RegistrationCreateParamsCountryOptionGr, tax.RegistrationCreateParamsCountryOptionHr, tax.RegistrationCreateParamsCountryOptionHu, tax.RegistrationCreateParamsCountryOptionIe, tax.RegistrationCreateParamsCountryOptionIt, tax.RegistrationCreateParamsCountryOptionLt, tax.RegistrationCreateParamsCountryOptionLu, tax.RegistrationCreateParamsCountryOptionLv, tax.RegistrationCreateParamsCountryOptionMt, tax.RegistrationCreateParamsCountryOptionNl, tax.RegistrationCreateParamsCountryOptionPl, tax.RegistrationCreateParamsCountryOptionPt, tax.RegistrationCreateParamsCountryOptionRo, tax.RegistrationCreateParamsCountryOptionSe, tax.RegistrationCreateParamsCountryOptionSi, and tax.RegistrationCreateParamsCountryOptionSk
  • Add support for new value 2026-08-26.dahlia on enum WebhookEndpointCreateParams.api_version
  • Add support for error codes authentication_failure, capability_not_active, expired_payment_method, incorrect_postal_code, invalid_canceled_subscription_fields, and payment_method_restricted on Invoice.LastFinalizationError, PaymentIntent.LastPaymentError, SetupAttempt.SetupError, SetupIntent.LastSetupError, StripeError, and Terminal.Reader.Action.ApiError

15.5.1 - 2026-08-18

• #1879 better document StripeObject's to_dict behavior

15.5.0 - 2026-08-10

• #1874 Add async iteration to v2 list auto-pagination

  • Adds async for support to v2 ListObject.auto_paging_iter().

• #1869 Surface object property on EventNotification

• #1867 Emit Claude Code plugin hint at module load time

  • Emits new Claude Code plugin hint when CLAUDECODE or CLAUDE_CODE_CHILD_SESSION environment variables are detected.

• #1855 add/adjust event parsing helpers

  • Added methods that return their respective Event/EventNotification class instances without verifying authenticity. Use them when you've previously verified an event (e.g. you verified, put the event in a queue, and are now processing). Supports events from AWS EventBridge and Azure Event Grid natively.
    • Webhook.construct_event_without_verification(payload)
    • StripeClient.construct_event_without_verification(payload)
    • StripeClient.parse_event_notification_without_verification(payload)

... (truncated)

Commits

• 761354d Bump version to 15.6.0
• 1305a7a Update generated code for v2442 and baff58c9d515cdd5f5c3231d101989d588788c6f ...
• 8725fe6 widen some webhook types (#1888)
• 94282c1 add async event handler methods (#1887)
• 87fb85b Add .pre_handle method to EventNotificationHandler (#1885)
• 188dce6 copy eventnotification handler code from beta (#1881)
• c09975e Bump version to 15.5.1
• 7496611 better document StripeObject's to_dict behavior (#1879)
• 3f562ca Bump version to 15.5.0
• fd2313e Add async iteration to v2 list pagination (#1874)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

PR Check Results

✅ Code Formatting: Passed
✅ Linting: Passed
✅ Type Checking: Failed
✅ Tests: Failed

⚠️ Some checks failed. Please review the details above.

[github-actions]

⚠️ WARN Trivy Security Scan Results

Severity	Count
🔴 CRITICAL	0
🟠 HIGH	45
Total	45

Scans performed:

• 📁 Filesystem (vulnerabilities, secrets, misconfigurations)
• 🐳 Backend Docker image
• 🐳 Frontend Docker image
• 🏗️ IaC misconfiguration detection

⚠️ HIGH vulnerabilities should be addressed. Review required.

📋 View detailed SARIF reports

Download artifacts from this workflow run for full SARIF reports.
Results are also available in the GitHub Security tab.

---

Trivy v0.71.0 | aquasecurity/trivy