Bump the python group with 11 updates

[dependabot]

Bumps the python group with 11 updates:

Package	From	To
flask-security-too	5.7.1	5.8.2
sqlalchemy	2.0.51	2.0.52
python-dotenv	1.2.2	1.2.3
pytz	2026.2	2026.3.post1
orjson	3.11.9	3.12.0
gunicorn	26.0.0	26.1.0
stripe	15.3.0	15.5.1
chargebee	3.25.0	3.28.0
redis	8.0.1	8.1.0
ruff	0.15.21	0.16.4
pre-commit	4.6.0	4.6.2

Updates flask-security-too from 5.7.1 to 5.8.2

Changelog

Sourced from flask-security-too's changelog.

Version 5.8.2

Released August 11, 2026

Fixes +++++

• (:pr:1265) Fix for GHSA-f66q-9rf6-8795 - WebAuthn reauthentication freshness bypass. (tonghuaroot)
• (:issue:1263) :py:data:SECURITY_CACHE_CONTROL directives were added to every application response instead of just responses from Flask-Security endpoints as documented. (Ceirced)
• (:issue:1212) Newly introduced :py:meth:.UserMixin.is_locked logic is inverted.
• (:issue:1244) Fix login form remember me checkbox.

Backwards Compatibility Concerns +++++++++++++++++++++++++++++++++

• The fix for the inverted is_locked logic will require any application using it to invert their logic.

Version 5.8.1

Released May 21, 2026

Fixes +++++

• (:issue:1222) Fix for GHSA-w2j7-f3c6-g8cw - Possible open-redirect with ALLOW_SUBDOMAIN option.
• (:issue:1215) Fix for GHSA-97r5-pg8x-p63p - possible oauth bypass in /verify

Version 5.8.0

Released April 15, 2026

Features & Improvements +++++++++++++++++++++++

• (:pr:1170) Add API :py:meth:.UserMixin.check_tf_required to allow applications to control which users require two-factor authentication.
• (:issue:1178) Add Cache-Control headers.
• (:issue:1165) Add support for using Social Login (OAuth) for verification.
• (:issue:1188) Add tracking of failed authentication attempts via :py:meth:.UserMixin.track_failed_authn and signal :py:data:user_failed_authn
• (:issue:1192) Add API for application to decide if a particular user account is locked.

Fixes +++++

• (:issue:1179) Fix verify_password for bcrypt 5.0 (mephi42)
• (:issue:1200) Fix username_recovery w.r.t. inactive and non-confirmed users
• (:issue:1189) Return additional fields for JSON responses with QR codes

... (truncated)

Commits

• 6fde5dd Release 5.8.2
• c0337ba Backport login remember form checkbox to 5.8.2 (#1268)
• 30e193a Backport #1244 to 5.8.2
• 55e04a0 Fix login form remember checkbox
• 96a68fd Fix inverted is_locked logic - backport to 5.8.2 (#1267)
• 5cda6d8 Fix inverted is_locked logic.
• c8dda27 Backport CACHE_CONTROL fix to 5.8.2 (#1266)
• d21b918 Backport CACHE_CONTROL fix #1263
• 462578e fix(caching): put cache headers only on responses from fs
• 1ca15c4 58webbypass (#1265)
• Additional commits viewable in compare view

Updates sqlalchemy from 2.0.51 to 2.0.52

Release notes

Sourced from sqlalchemy's releases.

2.0.52

Released: August 11, 2026

platform

• [platform] [bug] Python 3.15 support has been added and tested, including minimal changes for full compatibility.

  References: #13477

orm

• [orm] [bug] Fixed a result-column misalignment bug in ORM-enabled UPDATE statements where synchronize_session="fetch" is in use, either explicitly or because the statement uses constructs such as CTEs that implicitly select for it. Columns in rows returned by .returning() could be returned under incorrect keys (e.g. row[SomeClass.a] returning the value of a different column), a problem most likely to manifest under concurrent workloads. ORM DELETE statements were not affected.

  References: #13439

• [orm] [bug] Fixed bug where a failed _orm.Session.bulk_insert_mappings(), _orm.Session.bulk_update_mappings() or _orm.Session.bulk_save_objects() call could leave the _orm.Session permanently in a "flushing" state, such as when the transaction could not be begun because a previous flush had left it needing a rollback. Unlike _orm.Session.flush(), the bulk methods set the internal flushing flag and began the transaction outside of the try/finally block that resets it, so that neither _orm.Session.rollback() nor _orm.Session.close() would clear it, and every subsequent flush would raise InvalidRequestError: Session is already flushing. Pull request courtesy Hamody We.

  References: #13485

• [orm] [bug] Fixed issue where unpickling an ORM object that were loaded using loader options making use of wildcard tokens, such as _orm.load_only() or _orm.raiseload() with "*", would fail with KeyError or IndexError if the process doing the unpickling had not yet constructed a loader path making use of that same token. This would typically be observed when the object were unpickled in a separate process, such as with the spawn or forkserver multiprocessing start methods, the latter of which became the default on POSIX platforms as of Python 3.14. The internal collection of these tokens is now established up front, so that it is identical in every process.

... (truncated)

Commits

• See full diff in compare view

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

Commits

• 49515af Bump version: 1.2.2 → 1.2.3
• 8ac846f chore: add release runbook (RELEASING.md) and make release target
• bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
• f7b18d9 fix: round-trip backslashes through set_key (#680)
• 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
• f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
• 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
• 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
• 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
• 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
• Additional commits viewable in compare view

Updates pytz from 2026.2 to 2026.3.post1

Commits

• 661bca9 Bump version numbers to 2026.3.post1 for python2 fix
• 1e31a16 Log python version running tests, force python2
• b3ca7c3 Unix line endings
• b55039a Replace non-ASCII character in comment to fix build with Python 2
• 5420ee2 Replace non-ASCII character in comment
• 2c139e8 Merge branch 'fix/localize-overflow-at-datetime-extremes' of https://github.c...
• c843864 Run zdump tests quietly
• 518500c Reduce noise when collecting zdump info dumps
• 081f935 Merge branch 'kytta-fix-dst' into 2026c
• 8c9d69b Merge branch 'master' into 2026c
• Additional commits viewable in compare view

Updates orjson from 3.11.9 to 3.12.0

Release notes

Sourced from orjson's releases.

3.12.0

Changed

• Serialization implementation substantially rewritten.
• Publish PyPI wheels for Python 3.15. For Python 3.15 and later, manylinux_2_39 (2024) is targeted instead of manylinux_2_17 (2012).
• No longer publish PyPI wheels for ppc64le and s390x.

Changelog

Sourced from orjson's changelog.

3.12.0 - 2026-08-14

Changed

• Serialization implementation substantially rewritten.
• Publish PyPI wheels for Python 3.15. For Python 3.15 and later, manylinux_2_39 (2024) is targeted instead of manylinux_2_17 (2012).
• No longer publish PyPI wheels for ppc64le and s390x.

Commits

• 6737895 3.12.0
• c2a6e8f JsonWriter, iterators
• 6a2d7a7 yyjson 1ea2fb0
• 97bf170 build update
• See full diff in compare view

Updates gunicorn from 26.0.0 to 26.1.0

Release notes

Sourced from gunicorn's releases.

gunicorn 26.1.0

New Features

• Glob patterns in reload_extra_files: entries containing *, ? or [ are treated as patterns, so ui/*/config.json watches every view's config without listing them one by one. Patterns are re-expanded on every reload check rather than once at startup, so a file created later starts being watched without restarting gunicorn, and ** recurses. A pattern matching nothing warns instead of failing, since with live expansion it may match later (#1643, #3662).

Security

• Dependency floors raised past known advisories: every declared floor was checked against the advisory database. tornado, h2, setuptools and pymdown-extensions permitted vulnerable versions and now require the first clean release; pytest and httpx were unpinned and now carry floors. The tornado example pinned tornado<6, which was both the source of several advisories and older than the >=6.5.0 the tornado worker needs, so the example could not run as pinned.

Bug Fixes

• SIGHUP did not reload the logger configuration: Arbiter.reload() re-read the configuration file but kept using the logger built at startup, calling only reopen_files() on its existing handlers. Changes to logconfig, logconfig_dict, logconfig_json and loglevel were ignored until a full restart, which in containers meant replacing the pod. The existing logger now re-runs its setup on reload, so new handlers, formats and levels take effect while the process identity and its listeners are preserved, and re-running the setup no longer stacks duplicate syslog handlers. An invalid log configuration on reload is not fatal either: the error is reported on stderr, the previous working configuration is restored and the master keeps running with it (#3353).

• Truncated chunked bodies accepted: RFC 9112 section 7.1.2 ends a chunked body with 0 CRLF CRLF, the second CRLF being the mandatory empty trailer section. ChunkedReader.parse_chunk_size() swallowed the NoMoreData raised while scanning for it, so a body cut short right after the last chunk line was treated as complete instead of rejected. It now raises ChunkMissingTerminator (#3382, #3685).

• --spew crashed on dynamically generated code: the trace hook indexed the 2-tuple returned by inspect.getsourcelines() by line number rather than indexing the list of lines, so a frame with no __file__ raised AttributeError: 'int' object has no attribute 'rstrip' on line 1 and

... (truncated)

Commits

• 71b59a7 Merge pull request #3698 from benoitc/fix/docker-health-check-readerror
• 48287de test: catch every transport error in the docker health check
• 3110e8c Merge pull request #3696 from benoitc/docs/roadmap
• cc56c41 Merge pull request #3693 from benoitc/release/26.1.0
• 5cf1f16 docs: surface the roadmap on the site home page
• 7e35f72 docs: add FastCGI to the roadmap and point items at Ideas
• 18ddc58 docs: drop the framework and reverse-proxy non-goals from the roadmap
• 1ecae56 docs: add a roadmap and make the chat easy to find
• ca412e3 docs: sync the Latest changelog page with 26.1.0
• 640936f docs: note the dependency security work in 26.1.0
• Additional commits viewable in compare view

Updates stripe from 15.3.0 to 15.5.1

Release notes

Sourced from stripe's releases.

v15.5.1

• #1879 better document StripeObject's to_dict behavior

See the changelog for more details.

v15.5.0

• #1874 Add async iteration to v2 list auto-pagination

  • Adds async for support to v2 ListObject.auto_paging_iter().

• #1869 Surface object property on EventNotification

• #1867 Emit Claude Code plugin hint at module load time

  • Emits new Claude Code plugin hint when CLAUDECODE or CLAUDE_CODE_CHILD_SESSION environment variables are detected.

• #1855 add/adjust event parsing helpers

  • Added methods that return their respective Event/EventNotification class instances without verifying authenticity. Use them when you've previously verified an event (e.g. you verified, put the event in a queue, and are now processing). Supports events from AWS EventBridge and Azure Event Grid natively.
    • Webhook.construct_event_without_verification(payload)
    • StripeClient.construct_event_without_verification(payload)
    • StripeClient.parse_event_notification_without_verification(payload)
  • Added WebhookSignature.generate_signature_header(payload, secret, timestamp=None), which computes a full Stripe-Signature header for the given payload. Useful for unit tests!

• #1863 Add stripe.major_api_version constant

See the changelog for more details.

v15.5.0b1

This release changes the pinned API version to 2026-07-29.preview.

• #1838 Update generated code for beta
  • Add support for list and retrieve methods on resource product_catalog.TrialOffer
  • Add support for tax_items on ChargeCaptureParamsPaymentDetailCarRentalDatumTotalTax, ChargeCaptureParamsPaymentDetailFlightDatumTotalTax, ChargeCaptureParamsPaymentDetailLodgingDatumTotalTax, ChargeModifyParamsPaymentDetailCarRentalDatumTotalTax, ChargeModifyParamsPaymentDetailFlightDatumTotalTax, ChargeModifyParamsPaymentDetailLodgingDatumTotalTax, PaymentIntent.PaymentDetail.CarRentalDatum.Total.Tax, PaymentIntent.PaymentDetail.FlightDatum.Total.Tax, PaymentIntent.PaymentDetail.LodgingDatum.Total.Tax, PaymentIntentCaptureParamsPaymentDetailCarRentalDatumTotalTax, PaymentIntentCaptureParamsPaymentDetailFlightDatumTotalTax, PaymentIntentCaptureParamsPaymentDetailLodgingDatumTotalTax, PaymentIntentConfirmParamsPaymentDetailCarRentalDatumTotalTax, PaymentIntentConfirmParamsPaymentDetailFlightDatumTotalTax, PaymentIntentConfirmParamsPaymentDetailLodgingDatumTotalTax, PaymentIntentCreateParamsPaymentDetailCarRentalDatumTotalTax, PaymentIntentCreateParamsPaymentDetailFlightDatumTotalTax, PaymentIntentCreateParamsPaymentDetailLodgingDatumTotalTax, PaymentIntentModifyParamsPaymentDetailCarRentalDatumTotalTax, PaymentIntentModifyParamsPaymentDetailFlightDatumTotalTax, and PaymentIntentModifyParamsPaymentDetailLodgingDatumTotalTax
  • ⚠️ Remove support for taxes on ChargeCaptureParamsPaymentDetailCarRentalDatumTotalTax, ChargeCaptureParamsPaymentDetailFlightDatumTotalTax, ChargeCaptureParamsPaymentDetailLodgingDatumTotalTax, ChargeModifyParamsPaymentDetailCarRentalDatumTotalTax, ChargeModifyParamsPaymentDetailFlightDatumTotalTax, ChargeModifyParamsPaymentDetailLodgingDatumTotalTax, PaymentIntent.PaymentDetail.CarRentalDatum.Total.Tax, PaymentIntent.PaymentDetail.FlightDatum.Total.Tax, PaymentIntent.PaymentDetail.LodgingDatum.Total.Tax, PaymentIntentCaptureParamsPaymentDetailCarRentalDatumTotalTax, PaymentIntentCaptureParamsPaymentDetailFlightDatumTotalTax, PaymentIntentCaptureParamsPaymentDetailLodgingDatumTotalTax, PaymentIntentConfirmParamsPaymentDetailCarRentalDatumTotalTax, PaymentIntentConfirmParamsPaymentDetailFlightDatumTotalTax, PaymentIntentConfirmParamsPaymentDetailLodgingDatumTotalTax, PaymentIntentCreateParamsPaymentDetailCarRentalDatumTotalTax, PaymentIntentCreateParamsPaymentDetailFlightDatumTotalTax, PaymentIntentCreateParamsPaymentDetailLodgingDatumTotalTax, PaymentIntentModifyParamsPaymentDetailCarRentalDatumTotalTax, PaymentIntentModifyParamsPaymentDetailFlightDatumTotalTax, and PaymentIntentModifyParamsPaymentDetailLodgingDatumTotalTax
  • Add support for tax_id on Checkout.Session.CollectedInformation
  • ⚠️ Remove support for tax_ids on Checkout.Session.CollectedInformation
  • Add support for new value disabled on enum financial_connections.SessionCreateParamsManualEntry.mode
  • Add support for mode on FinancialConnections.Session.ManualEntry
  • Add support for name on issuing.CardholderModifyParams
  • Add support for new value ic_nif on enums OrderCreateParamsTaxDetailTaxId.type and OrderModifyParamsTaxDetailTaxId.type
  • ⚠️ Add support for new value ic_nif on enums Order.TaxDetail.TaxId.type and QuotePreviewInvoice.CustomerTaxId.type
  • Add support for new values alipay and mb_way on enum QuotePreviewInvoice.PaymentSetting.payment_method_types
  • Add support for custom_fields, description, and footer on QuotePreviewSubscriptionSchedule.DefaultSetting.InvoiceSetting and QuotePreviewSubscriptionSchedule.Phase.InvoiceSetting
  • Add support for trial on QuotePreviewSubscriptionSchedule.Phase
  • ⚠️ Remove support for acss_debit, afterpay_clearpay, alipay, alma, amazon_pay, au_becs_debit, bacs_debit, bancontact, billie, bizum, blik, boleto, card_present, cashapp, crypto, customer_balance, eps, fpx, giropay, gopay, grabpay, id_bank_transfer, ideal, interac_present, kakao_pay, konbini, kr_card, mb_way, mobilepay, multibanco, naver_pay, nz_bank_account, oxxo, p24, pay_by_bank, payco, paynow, paypal, paypay, payto, pix, promptpay, qris, rechnung, revolut_pay, samsung_pay, satispay, scalapay, sepa_debit, shopeepay, sofort, stripe_balance, sunbit, swish, twint, upi, us_bank_account, wechat_pay, and zip on SharedPayment.GrantedToken.PaymentMethodDetail
  • ⚠️ Remove support for values acss_debit, afterpay_clearpay, alipay, alma, amazon_pay, au_becs_debit, bacs_debit, bancontact, billie, bizum, blik, boleto, card_present, cashapp, crypto, custom, customer_balance, eps, fpx, giropay, gopay, grabpay, id_bank_transfer, ideal, interac_present, kakao_pay, konbini, kr_card, mb_way, mobilepay, multibanco, naver_pay, nz_bank_account, oxxo, p24, pay_by_bank, payco, paynow, paypal, paypay, payto, pix, promptpay, qris, rechnung, revolut_pay, samsung_pay, satispay, scalapay, sepa_debit, shopeepay, sofort, stripe_balance, sunbit, swish, twint, upi, us_bank_account, wechat_pay, and zip from enum SharedPayment.GrantedToken.PaymentMethodDetail.type
  • Add support for use_stripe_sdk on SharedPayment.IssuedToken and shared_payment.IssuedTokenCreateParams
  • Add support for redirect_to_url on SharedPayment.IssuedToken.NextAction
  • ⚠️ Change type of SharedPayment.IssuedToken.NextAction.type from literal('use_stripe_sdk') to enum('redirect_to_url'|'use_stripe_sdk')
  • Add support for livemode on Tax.Location
  • Add support for source on V2.Iam.ActivityLog.Detail.UserRole
  • Add support for payout on V2.MoneyManagement.ReceivedCredit.BalanceTransfer
  • ⚠️ Remove support for payout_v1 on V2.MoneyManagement.ReceivedCredit.BalanceTransfer
  • Add support for new value payout on enum V2.MoneyManagement.ReceivedCredit.BalanceTransfer.type

... (truncated)

Changelog

Sourced from stripe's changelog.

15.5.1 - 2026-08-18

• #1879 better document StripeObject's to_dict behavior

15.5.0 - 2026-08-10

• #1874 Add async iteration to v2 list auto-pagination

  • Adds async for support to v2 ListObject.auto_paging_iter().

• #1869 Surface object property on EventNotification

• #1867 Emit Claude Code plugin hint at module load time

  • Emits new Claude Code plugin hint when CLAUDECODE or CLAUDE_CODE_CHILD_SESSION environment variables are detected.

• #1855 add/adjust event parsing helpers

  • Added methods that return their respective Event/EventNotification class instances without verifying authenticity. Use them when you've previously verified an event (e.g. you verified, put the event in a queue, and are now processing). Supports events from AWS EventBridge and Azure Event Grid natively.
    • Webhook.construct_event_without_verification(payload)
    • StripeClient.construct_event_without_verification(payload)
    • StripeClient.parse_event_notification_without_verification(payload)
  • Added WebhookSignature.generate_signature_header(payload, secret, timestamp=None), which computes a full Stripe-Signature header for the given payload. Useful for unit tests!

• #1863 Add stripe.major_api_version constant

15.4.0 - 2026-07-29

This release changes the pinned API version to 2026-07-29.dahlia.

• #1857 Update generated code
  • Add support for new resource financial_connections.Authorization
  • Add support for unreject method on resource Account
  • Add support for list method on resource PaymentRecord
  • Add support for new values mass_transit_parking_tax and parking_tax on enums Tax.Calculation.ShippingCost.TaxBreakdown.TaxRateDetail.tax_type, Tax.Calculation.TaxBreakdown.TaxRateDetail.tax_type, Tax.CalculationLineItem.TaxBreakdown.TaxRateDetail.tax_type, and Tax.Transaction.ShippingCost.TaxBreakdown.TaxRateDetail.tax_type
  • Add support for new value chaps on enums FundingInstructions.BankTransfer.FinancialAddress.supported_networks and PaymentIntent.NextAction.DisplayBankTransferInstruction.FinancialAddress.supported_networks
  • Add support for smart_disputes_management on AccountSession.Component.DisputesList.Feature, AccountSession.Component.Payment.Feature, AccountSession.Component.PaymentDetail.Feature, AccountSession.Component.PaymentDispute.Feature, AccountSessionCreateParamsComponentDisputesListFeature, AccountSessionCreateParamsComponentPaymentDetailFeature, AccountSessionCreateParamsComponentPaymentDisputeFeature, and AccountSessionCreateParamsComponentPaymentFeature
  • Add support for administrative_address and principal_place_of_business on Account.Company, AccountCreateParamsCompany, AccountModifyParamsCompany, and TokenCreateParamsAccountCompany
  • Add support for sepa_debit_payments on AccountModifyParamsSetting
  • Remove support for proof_of_registration on AccountCreateParamsDocument. This field was limited-use and is being deprecated.
  • Add support for payouts_action on AccountRejectParams
  • Add support for new value data_share_only on enums Charge.PaymentMethodDetail.Card.ThreeDSecure.result, PaymentAttemptRecord.PaymentMethodDetail.Card.ThreeDSecure.result, PaymentRecord.PaymentMethodDetail.Card.ThreeDSecure.result, and SetupAttempt.PaymentMethodDetail.Card.ThreeDSecure.result
  • Add support for new values bnp_paribas, citibank, and mbsb_bank on enums Charge.PaymentMethodDetail.Fpx.bank, ConfirmationToken.PaymentMethodPreview.Fpx.bank, PaymentAttemptRecord.PaymentMethodDetail.Fpx.bank, PaymentMethod.Fpx.bank, and PaymentRecord.PaymentMethodDetail.Fpx.bank
  • Remove support for dynamic_tax_rates on checkout.SessionCreateParamsLineItem. This field was limited-use and is being deprecated.
  • Add support for setup_future_usage on Checkout.Session.PaymentMethodOption.Payco, Checkout.Session.PaymentMethodOption.SamsungPay, PaymentIntent.PaymentMethodOption.Payco, PaymentIntent.PaymentMethodOption.SamsungPay, PaymentIntentConfirmParamsPaymentMethodOptionPayco, PaymentIntentConfirmParamsPaymentMethodOptionSamsungPay, PaymentIntentCreateParamsPaymentMethodOptionPayco, PaymentIntentCreateParamsPaymentMethodOptionSamsungPay, PaymentIntentModifyParamsPaymentMethodOptionPayco, PaymentIntentModifyParamsPaymentMethodOptionSamsungPay, PaymentLinkModifyParamsPaymentIntentDatum, checkout.SessionCreateParamsPaymentMethodOptionPayco, and checkout.SessionCreateParamsPaymentMethodOptionSamsungPay
  • Add support for new value ic_nif on enums Checkout.Session.CustomerDetail.TaxId.type, Invoice.CustomerTaxId.type, Tax.Calculation.CustomerDetail.TaxId.type, Tax.Transaction.CustomerDetail.TaxId.type, and TaxId.type
  • Add support for new values bnp_paribas, citibank, and mbsb_bank on enums ConfirmationTokenCreateParamsPaymentMethodDatumFpx.bank, PaymentIntentConfirmParamsPaymentMethodDatumFpx.bank, PaymentIntentCreateParamsPaymentMethodDatumFpx.bank, PaymentIntentModifyParamsPaymentMethodDatumFpx.bank, PaymentMethodCreateParamsFpx.bank, SetupIntentConfirmParamsPaymentMethodDatumFpx.bank, SetupIntentCreateParamsPaymentMethodDatumFpx.bank, and SetupIntentModifyParamsPaymentMethodDatumFpx.bank
  • Add support for new value ic_nif on enums CustomerCreateParamsTaxIdDatum.type, CustomerCreateTaxIdParams.type, InvoiceCreatePreviewParamsCustomerDetailTaxId.type, TaxIdCreateParams.type, and tax.CalculationCreateParamsCustomerDetailTaxId.type
  • Add support for network on Dispute.PaymentMethodDetail.Card
  • Add support for new values financial_connections.account.expected_deactivation_date_updated, financial_connections.account.supported_payment_method_types_updated, financial_connections.account.upcoming_deactivation, financial_connections.authorization.expected_deactivation_date_updated, and financial_connections.authorization.upcoming_deactivation on enum Event.type
  • Add support for limits and manual_entry on FinancialConnections.Session and financial_connections.SessionCreateParams
  • Add support for require_payment_method_support on FinancialConnections.Session.Filter and financial_connections.SessionCreateParamsFilter
  • Add support for bank_account_token on FinancialConnections.Session
  • Add support for new values alipay and mb_way on enums Invoice.PaymentSetting.payment_method_types, InvoiceCreateParamsPaymentSetting.payment_method_types, InvoiceModifyParamsPaymentSetting.payment_method_types, Subscription.PaymentSetting.payment_method_types, SubscriptionCreateParamsPaymentSetting.payment_method_types, and SubscriptionModifyParamsPaymentSetting.payment_method_types
  • Add support for new values mass_transit_parking_tax and parking_tax on enums InvoiceAddLinesParamsLineTaxAmountTaxRateDatum.tax_type, InvoiceLineItemModifyParamsTaxAmountTaxRateDatum.tax_type, InvoiceUpdateLinesParamsLineTaxAmountTaxRateDatum.tax_type, TaxRate.tax_type, TaxRateCreateParams.tax_type, and TaxRateModifyParams.tax_type
  • Add support for metadata on InvoiceCreatePreviewParamsSubscriptionDetail
  • Add support for new value stripe_internal_error on enum Issuing.Authorization.RequestHistory.reason
  • Add support for business_name on Issuing.Card.Shipping, issuing.CardCreateParamsShipping, and issuing.CardModifyParamsShipping

... (truncated)

Commits

• c09975e Bump version to 15.5.1
• 7496611 better document StripeObject's to_dict behavior (#1879)
• 3f562ca Bump version to 15.5.0
• fd2313e Add async iteration to v2 list pagination (#1874)
• 1854c68 reduce timeout (#1868)
• b98a7c6 add "object" to event notification (#1869)
• 5b2260a Emit Claude Code plugin hint at module load time (#1867)
• 5e03051 add/adjust event parsing helpers (#1855)
• 38d30e1 Update changelog with open enum (#1864)
• fb0bf89 added v2-event-imports section to static _event. this matches the (#1861)
• Additional commits viewable in compare view

Updates chargebee from 3.25.0 to 3.28.0

Release notes

Sourced from chargebee's releases.

v3.28.0 (2026-08-19)

New Resources:

• GatewayPaymentMethodToken has been added.
• OmnichannelSubscriptionItemMetric has been added.
• QuoteEntitlement has been added.
• VaultedPaymentMethod has been added.

New Actions:

• update_credit_note_details has been added to CreditNote.
• export_subscription_ramps has been added to Export.
• void_authorizations_before_capture has been added to Invoice.
• list_gateway_payment_method_tokens_for_a_payment_source has been added to PaymentSource.

New Attributes:

• payment_method_options has been added to PaymentIntent.
• vault_token has been added to PaymentSource.
• has_entitlements has been added to Quote.

New Parameters:

• updated_at.on has been added as query parameter to list_omnichannel_subscriptions in OmnichannelSubscription.
• updated_at.between has been added as query parameter to list_omnichannel_subscriptions in OmnichannelSubscription.
• purchased_at.on has been added as query parameter to list_omnichannel_subscriptions in OmnichannelSubscription.
• purchased_at.between has been added as query parameter to list_omnichannel_subscriptions in OmnichannelSubscription.
• limit has been added as query parameter to list_gateway_payment_method_tokens_for_a_payment_source in PaymentSource.
• offset has been added as query parameter to list_gateway_payment_method_tokens_for_a_payment_source in PaymentSource.
• include_deleted has been added as query parameter to list_gateway_payment_method_tokens_for_a_payment_source in PaymentSource.
• comment has been added as request body parameter to update_credit_note_details in CreditNote.
• ramp has been added as request body parameter to export_subscription_ramps in Export.
• export_type has been added as request body parameter to export_subscription_ramps in Export.
• locale has been added as request body parameter to create_a_pre-cancel_hosted_page in HostedPage.
• comment has been added as request body parameter to void_authorizations_before_capture in Invoice.
• void_reason_code has been added as request body parameter to void_authorizations_before_capture in Invoice.
• invoice_action has been added as request body parameter to void_authorizations_before_capture in Invoice.
• payment_method_options has been added as request body parameter to update_a_payment_intent in PaymentIntent.
• payment_method_options has been added as request body parameter to create_a_payment_intent in PaymentIntent.
• subscription_items.description has been added as request body parameter to create_a_quote_for_a_new_subscription_items in Quote.
• entitlement_overrides has been added as request body parameter to create_a_quote_for_a_new_subscription_items in Quote.
• subscription_items.description has been added as request body parameter to edit_update_subscription_quote_for_items in Quote.
• entitlement_overrides has been added as request body parameter to edit_update_subscription_quote_for_items in Quote.
• subscription_items.description has been added as request body parameter to edit_create_subscription_quote_for_items in Quote.
• entitlement_overrides has been added as request body parameter to edit_create_subscription_quote_for_items in Quote.
• subscription_items.description has been added as request body parameter to create_a_quote_for_update_subscription_items in Quote.
• entitlement_overrides has been added as request body parameter to create_a_quote_for_update_subscription_items in Quote.

New Events:

... (truncated)

Changelog

Sourced from chargebee's changelog.

v3.28.0 (2026-08-19)

---

New Resources:

• GatewayPaymentMethodToken has been added.
• OmnichannelSubscriptionItemMetric has been added.
• QuoteEntitlement has been added.
• VaultedPaymentMethod has been added.

New Actions:

• update_credit_note_details has been added to CreditNote.
• export_subscription_ramps has been added to Export.
• void_authorizations_before_capture has been added to Invoice.
• list_gateway_payment_method_tokens_for_a_payment_source has been added to PaymentSource.

New Attributes:

• payment_method_options has been added to PaymentIntent.
• vault_token has been added to PaymentSource.
• has_entitlements has been added to Quote.

New Parameters: