---
title: "stripe-node 23.0.0, a new major version: 2026-10-01 | Harbyn"
description: "stripe-node 23.0.0, a new major version, announced Oct 1, 2026."
canonical: "https://harbyn.com/changes/stripe/2026-10-01-stripe-node-23-0-0"
last-updated: 2026-10-02
---

# stripe-node 23.0.0, a new major version

Markdown version of <https://harbyn.com/changes/stripe/2026-10-01-stripe-node-23-0-0>.

Breaking change - Stripe. medium severity. In effect.

stripe-node 23.0.0 pins API version 2026-09-30.endive and drops Node.js 18 (Node 20 is the minimum). It removes Stripe.constructEventWithoutVerification and the ErrorType export, removes payment\_method\_types from Checkout Session, PaymentIntent and SetupIntent params, makes verifyHeader enforce DEFAULT\_TOLERANCE by default, and throws StripeConnectionError on incomplete responses.

## Facts

| Fact | Value |
| --- | --- |
| Vendor | [Stripe](https://harbyn.com/vendors/stripe.md) |
| Kind | Breaking change |
| Severity | medium |
| Status | In effect |
| Announced | Oct 1, 2026 |
| Added to Harbyn | Oct 2, 2026 |
| Lead time | No dated deadline |
| Packages | `npm: stripe <23.0.0` |
| API versions | `2026-09-30.endive` |
| Vendor page | <https://github.com/stripe/stripe-node/releases/tag/v23.0.0> |
| Review | Reviewed by a person, extracted by a deterministic parser |

## Find it in your code

```sh
npx harbyn scan
```

The scanner reads your repository on your machine and reports every file and line that uses the identifiers above. Nothing leaves your machine.

## Sources

Where this event comes from: the page we read, when we read it, and the hash of that snapshot.

- <https://api.github.com/repos/stripe/stripe-node/releases?per_page=20> (release, fetched 2026-10-02 01:24 UTC, sha256 `c22fd81fcc5956cf15bb161452518d6db95002c761e3a9d3004056c63c39ebca`)

## Related changes

### More from Stripe

- [2026-09-30.endive adds data\_share\_only to three\_d\_secure.result](https://harbyn.com/changes/stripe/2026-09-30-adds-support-for-data-share-only-for-3d-secure-authentication.md) (Breaking change, announced Sep 30, 2026)
- [Stripe 2026-09-30.endive: Adds address validation errors for CMRAs and registered agents to Accounts v1 and Accounts v2](https://harbyn.com/changes/stripe/2026-09-30-endive-adds-address-validation-errors-for-cmras-and-registered-agents-to-account.md) (Breaking change, effective Sep 30, 2026)
- [Stripe 2026-09-30.endive: Adds destination property and new enum values to Reserve Plans, Holds and Releases](https://harbyn.com/changes/stripe/2026-09-30-endive-adds-destination-property-and-new-enum-values-to-reserve-plans-holds-and.md) (Breaking change, effective Sep 30, 2026)
- [Stripe 2026-09-30.endive: Adds Failed Tax Calculation error](https://harbyn.com/changes/stripe/2026-09-30-endive-adds-failed-tax-calculation-error.md) (Breaking change, effective Sep 30, 2026)

### Changes at other vendors

- [Amazon Selling Partner API: October listing attribute usage and enumeration value updates](https://harbyn.com/changes/amazon-sp-api/2026-10-14-sp-api-updates-new-listings-items-api-ivp-values-in-eu5-jp-and-ca-stores-oct-2.md) (effective Oct 26, 2026)
- [Supabase: four CBC-mode TLS 1.2 cipher suites will be removed from project HTTP APIs](https://harbyn.com/changes/supabase/2026-10-12-an-outdated-subset-of-tls-1-2-ciphers-will-be-disabled-on-project-http-apis.md) (effective Nov 10, 2026)
- [Google Workspace APIs: OAuth clients must be marked as agentic to call Google Workspace MCP servers](https://harbyn.com/changes/google-workspace/2026-10-12-oauth-clients-must-be-marked-as-agentic-to-call-google-workspace-mcp-servers.md) (effective Nov 11, 2026)
- [Bitbucket Cloud API: Git Credential Manager upgrade required for OAuth 2.0 Git authentication](https://harbyn.com/changes/bitbucket/2026-10-13-git-credential-manager-upgrade-required-for-oauth-2-0-git-authentication.md) (effective Nov 30, 2026)

[All upcoming deadlines](https://harbyn.com/deadlines.md)