April 9, 2026

Core API

• Breaking: Removed customer deduplication API — customers are no longer merged automatically
• Breaking: Removed support for legacy non-encrypted gateway configurations
• Made currency optional on payment creation when a cart is provided (inferred from cart items)
• Fixed currentPassword incorrectly marked as required when updating user profile
• Fixed recurring payment retries not being scheduled correctly in some cases

Dashboard

• Added payment type filter (one-time, recurring, trial) to the payments list
• Webhook shared secret is now displayed after creation for easy copying

Checkout SDK

• Fixed potential ReDoS vulnerability in email field validation