Skip to content

feat(payments): payment integration types without webhook secrets; in-app webhook ids required - #100

Merged
Domantas merged 2 commits into
mainfrom
fix/payments-integration-secrets
Oct 21, 2026
Merged

Domantas merged 2 commits into
mainfrom
fix/payments-integration-secrets

Conversation

@Domantas

@Domantas Domantas commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Regenerated the Hub types (src/types/hub2.dtos.ts, src/types/hub2.contract.json) from gateway refactoringV2 fc5f424b5 (payments security fix: Get payment integration returned stored webhook secrets).

Payments contract changes

  • Worldpay/Shopify/WooCommerce/Magento/Braintree/CheckOutComPaymentIntegrationDto: webhookSecret removed; AuthorizeNetPaymentIntegrationDto: webhookSignatureKey removed.
  • AppleInAppPaymentIntegrationRequest: webhookBundleId required; merchant identifier / domain / display name and the two certificate + password fields optional. AppleInAppPaymentIntegrationDto: all optional, adds webhookBundleId.
  • GoogleInAppPaymentIntegrationRequest: webhookPackageName required; merchantId, merchantName, gateway, privateKeyOrToken optional. GoogleInAppPaymentIntegrationDto: all optional, adds webhookPackageName.
  • WorldpayPaymentIntegrationRequest.webhookSecret required.

Also picked up (already on refactoringV2): team member / invitation management (UpdateTeamMember, RemoveTeamMember, SetTeamMemberRoleEnvironmentsRequest, GetAccountTeamInvitations, CancelTeamInvitation), promotion preview and integration choices (PromotionResultDto summary/items/integrations, confirmRecordLoss, integrationChoices), RepairEnvironmentBuiltInsRequest, EndUserOwnRecordsReportRequest, GetPushDevicesResponse.teamDevices. Types only; no SDK methods added in this PR.

No SDK source, test or doc referenced the removed fields. Checks: npm run typecheck, npm run typecheck:dist, npx vitest run (65 files, 1068 tests), npm run lint, npx prettier --check . all green.

Second commit: chore(deps-dev) bumps vite 8.3.2 → 8.3.4 in the lockfile (same change as Dependabot #99) because the CI OSV scan fails on vite 8.3.2 advisories (GHSA-587h-7wmj-h5pm and two others). Dev-only.

Breaking: Get payment integration no longer returns webhookSecret / webhookSignatureKey; Apple/Google in-app saves need webhookBundleId / webhookPackageName, the Apple Pay / Google Pay fields are optional.

🤖 Generated with Claude Code

…-app webhook ids required

Regenerated the Hub types (hub2.dtos.ts, hub2.contract.json) from gateway
refactoringV2 fc5f424b5. Get payment integration no longer returns stored
webhook secrets. The Apple / Google in-app requests now need only the
webhook identity; the Apple Pay / Google Pay merchant fields are optional.
Also picks up Hub types already on refactoringV2: team member and
invitation management, environment promotion preview / integration
choices, built-in repair, endUserOwnRecords report, team push devices.

Breaking: Get payment integration no longer returns webhookSecret /
webhookSignatureKey; Apple/Google in-app saves need webhookBundleId /
webhookPackageName, the Apple Pay / Google Pay fields are optional.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@github-actions

github-actions Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

🚀 Release preview

Next version on merge to main: none

semantic-release dry-run output
[9:51:41 AM] [semantic-release] › ℹ  Running semantic-release version 25.0.9
[9:51:41 AM] [semantic-release] › ✔  Loaded plugin "verifyConditions" from "@semantic-release/npm"
[9:51:41 AM] [semantic-release] › ✔  Loaded plugin "verifyConditions" from "@semantic-release/github"
[9:51:41 AM] [semantic-release] › ✔  Loaded plugin "analyzeCommits" from "@semantic-release/commit-analyzer"
[9:51:41 AM] [semantic-release] › ✔  Loaded plugin "generateNotes" from "@semantic-release/release-notes-generator"
[9:51:41 AM] [semantic-release] › ✔  Loaded plugin "prepare" from "@semantic-release/npm"
[9:51:41 AM] [semantic-release] › ✔  Loaded plugin "publish" from "@semantic-release/npm"
[9:51:41 AM] [semantic-release] › ✔  Loaded plugin "publish" from "@semantic-release/github"
[9:51:41 AM] [semantic-release] › ✔  Loaded plugin "addChannel" from "@semantic-release/npm"
[9:51:41 AM] [semantic-release] › ✔  Loaded plugin "addChannel" from "@semantic-release/github"
[9:51:41 AM] [semantic-release] › ✔  Loaded plugin "success" from "@semantic-release/github"
[9:51:41 AM] [semantic-release] › ✔  Loaded plugin "fail" from "@semantic-release/github"
[9:51:43 AM] [semantic-release] › ℹ  This test run was triggered on the branch refs/pull/100/merge, while semantic-release is configured to only publish from main, therefore a new version won’t be published.

If next_version is none, your commits don't trigger a release. Use feat: for minor (breaking changes too, until launch), fix: / perf: for patch.

vite 8.3.2 has GHSA-587h-7wmj-h5pm (high), GHSA-698v-4r3x-3vcv and
GHSA-r825-w8mm-5pxw; the OSV scan in CI fails on them. Same lockfile
change as Dependabot #99. Dev-only, not shipped in @norbix.ai/ts.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@Domantas
Domantas merged commit 3ace2ba into main Oct 21, 2026
9 checks passed
@Domantas
Domantas deleted the fix/payments-integration-secrets branch October 21, 2026 09:53
@github-actions

Copy link
Copy Markdown

🎉 This PR is included in version 4.30.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant