Install on GitHub

Stripe 2026-09-30.endive removes payment_method_types from Payment Intent create, update and confirm ​

Provider
Stripe
Endpoint
POST /v1/payment_intents/**
Effective
2026-09-30
Severity
high
Change
required-field
Status
unverified (secondary reports only; SHAPI does not open fix PRs for it)

What changed ​

From API version 2026-09-30.endive, payment_method_types is no longer writable on Payment Intents: create, update and confirm requests that send it return a 400 error. It stays a read-only property on the Payment Intent, listing the computed payment methods.

What to do ​

Before moving to 2026-09-30.endive, stop sending payment_method_types when creating, updating or confirming Payment Intents. Use dynamic payment methods, excluded_payment_method_types, or allowed_payment_method_types (incompatible types are filtered out instead of failing). Reading payment_method_types from the returned object still works.

Sources ​

Check your code ​

bash
npx shapi-cli scan .

shapi scan lists the call sites this change affects; shapi fix repairs them test-first when the advisory has an automatic fix. All advisories · Markdown · OSV · JSON