[dependabot]

Bumps stripe from 23.0.0 to 23.0.1.

Release notes

Sourced from stripe's releases.

v23.0.1

See the changelog for the full release notes.

Changelog

Sourced from stripe's changelog.

23.0.1 - 2026-10-22

• #2885 Reject ASCII-whitespace-only webhook secrets

  • Reject webhook signing secrets made entirely of ASCII whitespace instead of using them as HMAC keys.

• #2884 Add API v2 Search support

  Adds V2SearchResult<T> and support for auto pagination of search results.

• #2895 Fix notification handling and discarded fetch retries

  • Fix EventNotificationHandler.handle() to verify signatures asynchronously, so it works with async crypto providers (e.g. the web platform).
  • Fall back to the full EventNotification union type for on() callbacks when a specific notification type can't be narrowed, instead of resolving to never.
  • Dispose discarded fetch responses before retrying a request, aborting the fetch and closing the unread body.

• Fix lastResponse.statusCode for fetch responses

  • Populate lastResponse.statusCode with the HTTP status for successful JSON responses when using the fetch HTTP client.

Commits

• 3af59f7 Bump version to 23.0.1
• 62458fe Fix lastResponse.statusCode for fetch responses 🪿✨ (#2905)
• 308c948 Reject blank webhook secrets 🪿✨ (#2885)
• 48d190c Fix notification handling and discarded fetch retries (#2895)
• ae674ed Hand-write V2List/V2SearchResult namespace exports in stripe.cjs.node.ts (#2900)
• cfc897d Require release environment for npm publishing (#2899)
• b7b25f6 Add API v2 Search support (#2884)
• bcefafa Increase timeout limit for integration tests (#2891)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: pierreb-devkit/Node
• Branch: master
• File: .coderabbit.yaml
• Commit: 92f8f0f
• Layers: Repository YAML
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 7428f70c-972e-41be-a4e8-7265df079163

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}