Skip to content

chore(deps): bump the polar-stripe group with 2 updates - #6300

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/polar-stripe-73d3230dd7
Closed

chore(deps): bump the polar-stripe group with 2 updates#6300
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/polar-stripe-73d3230dd7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the polar-stripe group with 2 updates: @stripe/react-stripe-js and @stripe/stripe-js.

Updates @stripe/react-stripe-js from 5.6.1 to 6.9.0

Release notes

Sourced from @​stripe/react-stripe-js's releases.

v6.9.0

Changed

  • Bump fast-uri from 3.1.5 to 3.1.7 (#707)
  • Bump browserslist from 4.16.6 to 4.28.8 (#706)
  • Bump stripe js peer floor 9.10.0 (#702)

v6.8.2

  • Strengthen Checkout Sessions README guidance (#698)

New features

Fixes

Changed

v6.8.1

Changed

  • Bump postcss from 8.5.22 to 8.5.26 (#696)
  • Bump fast-uri from 3.1.4 to 3.1.5 (#697)
  • Upgrade storybook to v10 (#694)
  • Update Demos to move from Payment Intents -> Checkout Sessions emphasis (#695)
  • bump prettier version (#693)

v6.8.0

Changed

  • Add Terms Element (#691)

v6.7.0

Changed

  • Bump stripe.js version to 9.9.0 (#690)
  • Bump js-yaml from 3.14.2 to 3.15.0 (#689)
  • Bump @​babel/core from 7.14.3 to 7.29.6 (#688)
  • Close project to external pull requests (#687)

v6.6.0

New features

  • AP for EwPI: Add CSE to base types in react-stripe-js (#682)

v6.5.0

New features

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by alaycock-stripe, a new releaser for @​stripe/react-stripe-js since your current version.


Updates @stripe/stripe-js from 8.11.0 to 9.15.0

Release notes

Sourced from @​stripe/stripe-js's releases.

v9.15.0

New features

  • Add types for stripe.createConfirmationToken params.metadata (#963)
  • Add buttonBoxShadow appearance variable type (#964)

v9.14.0

  • CPM in ECE - Update API types (#959)
  • Add types for new walletOptions top-level parameter for PE create/update (#952)
  • Add deprecation tag to onShippingDetailsChange for Embedded Checkout (#960)
  • Bump js-yaml from 3.15.0 to 3.15.1 (#958)

New features

Fixes

Changed

v9.13.0

New features

  • Add promo code config (#956)
  • Add StripePaymentElementUpdateOptions (#955)

v9.12.1

Changed

  • Bump brace-expansion from 1.1.11 to 1.1.16 in /examples/parcel (#953)

v9.12.0

New features

  • Bump js-yaml from 3.14.2 to 3.15.0 (#950)
  • Bump ws from 5.2.3 to 5.2.7 (#951)
  • Add optional line item types to Checkout SDK (#949)

v9.10.0

Changed

  • Terms element types (#948)
  • Update Checkout Form change event types (#946)
  • Add fields.name types to AE (#947)
  • Add validateElements type to StripeCheckoutLoadActionsSuccess (#945)

v9.9.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by alaycock-stripe, a new releaser for @​stripe/stripe-js since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Bumps @stripe/react-stripe-js from 5.6.1 to 6.9.0 and @stripe/stripe-js from 8.11.0 to 9.15.0 in the polar-stripe group. @stripe/react-stripe-js 6.9.0 now requires @stripe/stripe-js 9.10.0+ as a peer dependency; the bumped version satisfies that.

Written for commit 3fc8631. Summary will update on new commits.

Review in cubic

Bumps the polar-stripe group with 2 updates: [@stripe/react-stripe-js](https://github.com/stripe/react-stripe-js) and [@stripe/stripe-js](https://github.com/stripe/stripe-js).


Updates `@stripe/react-stripe-js` from 5.6.1 to 6.9.0
- [Release notes](https://github.com/stripe/react-stripe-js/releases)
- [Changelog](https://github.com/stripe/react-stripe-js/blob/master/CHANGELOG.md)
- [Commits](stripe/react-stripe-js@v5.6.1...v6.9.0)

Updates `@stripe/stripe-js` from 8.11.0 to 9.15.0
- [Release notes](https://github.com/stripe/stripe-js/releases)
- [Commits](stripe/stripe-js@v8.11.0...v9.15.0)

---
updated-dependencies:
- dependency-name: "@stripe/react-stripe-js"
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: polar-stripe
- dependency-name: "@stripe/stripe-js"
  dependency-version: 9.15.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: polar-stripe
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 11, 2026
@dependabot
dependabot Bot requested review from a team as code owners September 11, 2026 01:10
@changeset-bot

changeset-bot Bot commented Sep 11, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 3fc8631

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@alx-xo

alx-xo commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

@dependabot ignore @stripe/stripe-js major version
@dependabot ignore @stripe/react-stripe-js major version

@dependabot @github

dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you about version 9.x.x of @stripe/stripe-js again, unless you unignore it.

@alx-xo

alx-xo commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

https://github.com/dependabot ignore @stripe/react-stripe-js major version

@dependabot @github

dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you about version 6.x.x of @stripe/react-stripe-js again, unless you unignore it.

@dependabot @github

dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 11, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/polar-stripe-73d3230dd7 branch September 11, 2026 15:50
@github-actions github-actions Bot locked and limited conversation to collaborators Sep 11, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant