From c44ff7d36f6e4a806c11efcfe0dead9334574dce Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Armando=20Rodr=C3=ADguez?=
 <127134616+armando-rodriguez-cko@users.noreply.github.com>
Date: Tue, 27 Oct 2026 15:39:12 +0100
Subject: [PATCH] Release 5.8.0

* Security: axios 1.20.0 and follow-redirects 1.16.1, which fix the open advisories on the runtime dependencies. `npm audit --omit=dev` reports no vulnerabilities.
* Fix: the default fetch client now sends every HTTP verb in uppercase. Before this, every PATCH operation failed with a 400 when using the default client (axios was not affected).
* Issuing: `revokeCard` and `suspendCard` can be called without a body, since the API makes it optional.
* Issuing: the `headers` parameter of `updateCard` is deprecated, because the API no longer documents the encrypted CVV headers. It is still sent when set and will be removed in the next major version.
* Issuing: documented the card control response shapes and corrected the return types in the docs.
---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 7c70839..693c684 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "checkout-sdk-node",
-  "version": "5.7.0",
+  "version": "5.8.0",
   "description": "Official Node.js SDK for Checkout.com payment gateway - SDK with full API coverage with TypeScript support",
   "type": "module",
   "engines": {