mercadopago-sdk 3.3.0 → 3.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 518cbc2c53d00de1452bf210afff62915ba381a970d084ca42a848e5604fa582
-  data.tar.gz: 85468b9a03305eb33e4b053a4aae7149cbacd1ceb33df494e25bf63391b2bfea
+  metadata.gz: fb7488c81eb88390ec65887c4f7626f51fabd3a268fec20e37a21c4bcb857551
+  data.tar.gz: 80ffcd3be59f116220171f3b4b053c0b48a5e222a09c22e4e9063ef6d8514826
 SHA512:
-  metadata.gz: 59839cc98cb80e2718b5694f05559b0a73fe23f04b953c0d172bb80b0609c220f673bd88952326eab551bcd52edd0beec0cb2173c188b9ea9cace45c5513b75b
-  data.tar.gz: 4e2e68a2fef69a84eafba9c8fa6b877d214f953e764d26525f48dca5cb812686195fe7fea80085704c8827de1d023fe385c366dede92156a98e680d51ae8dbce
+  metadata.gz: 6fa0b01c59f95ee75586f5685212a899fd717963230cafafd237b2b8d981f7ecb75327446419323f88933e50fcc85850efbddafcb0bdd6b630de1d043b77fd6a
+  data.tar.gz: 101c97f483a49e8317b8ab9748e2433f42a0334969185fa26f21ee61ef0d139883cb22aa80618565dcea6702195868ea886893132b650b4dd2287b5c8c8d59c0

data/.github/workflows/ci.yml

@@ -1,43 +1,45 @@
-name: Ruby
+name: CI
 
 on:
   push:
-    branches: [ master ]
+    branches: ["master"]
   pull_request:
-    branches: [ master ]
+    branches: ["master"]
 
 jobs:
   test:
+    name: Test on Ruby ${{ matrix.ruby-version }}
     runs-on: ubuntu-latest
-    container: ruby:3.4
+    container: ruby:${{ matrix.ruby-version }}
+
+    strategy:
+      fail-fast: false
+      matrix:
+        ruby-version: ["3.3", "3.4"]
 
     steps:
-    - name: Checkout code
-      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      with:
-        ref: ${{ github.event.pull_request.head.ref }}
-        repository: ${{ github.event.pull_request.head.repo.full_name }}
-
-    - name: Cache gems
-      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
-      with:
-        path: vendor/bundle
-        key: ${{ runner.os }}-gems-${{ hashFiles('**/Gemfile.lock') }}
-        restore-keys: |
-          ${{ runner.os }}-gems-
-
-    - name: Install dependencies
-      run: |
-        bundle config set --local path vendor/bundle
-        bundle install
-
-    - name: Rubocop
-      run: bundle exec rubocop lib
-
-    # Integration tests disabled: they require a valid MercadoPago ACCESS_TOKEN
-    # that is not available in the CI environment. To run them locally:
-    #   ACCESS_TOKEN=<your_token> bundle exec rake
-    # - name: Run tests
-    #   run: bundle exec rake
-    #   env:
-    #     ACCESS_TOKEN: ${{ secrets.ACCESS_TOKEN_V2 }}
+      - name: Checkout code
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
+
+      - name: Configure git safe directory
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
+
+      - name: Install dependencies
+        run: bundle install
+
+      - name: Lint with Rubocop
+        run: bundle exec rubocop lib
+
+      - name: Run unit tests
+        run: bundle exec rake test
+
+      - name: Dependency audit
+        run: |
+          gem install bundler-audit --no-document
+          bundle-audit check --update
+
+      - name: Dependency review
+        if: github.event_name == 'pull_request'
+        uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v4
+        with:
+          fail-on-severity: high

data/.github/workflows/release.yml

@@ -2,7 +2,7 @@ name: Release SDK - Publish Gem
 
 on:
   release:
-    types: [created]
+    types: [published]
 
 jobs:
   release:
@@ -16,12 +16,12 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
-      - name: Install dependencies
-        run: bundle install
-
       - name: Configure git safe directory
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
+      - name: Install dependencies
+        run: bundle install
+
       - name: Build gem
         run: gem build *.gemspec
 
@@ -29,6 +29,3 @@ jobs:
         env:
           GEM_HOST_API_KEY: ${{ secrets.RUBYGEMS_API_KEY }}
         run: gem push *.gem
-
-      - name: Wait for release to propagate
-        run: gem install rubygems-await

data/.gitignore

@@ -2,5 +2,6 @@
 bin/
 config/*yml
 pkg/
+vendor/
 *.log
 *.gem

data/.rubocop_todo.yml

@@ -48,8 +48,14 @@ Metrics/MethodLength:
 
 # Offense count: 3
 # Configuration parameters: CountKeywordArgs, MaxOptionalParameters.
+Metrics/ModuleLength:
+  Exclude:
+    - 'lib/mercadopago/resources/order/request.rb'
+
 Metrics/ParameterLists:
   Max: 7
+  Exclude:
+    - 'lib/mercadopago/resources/order/request.rb'
 
 # Offense count: 1
 Naming/AccessorMethodName:

data/CHANGELOG.md

@@ -5,6 +5,22 @@ All notable changes to this project will be documented in this file.
 This project follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 and [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.4.0] - 2026-08-11
+
+### Added
+- **Automatic Payments example**: two-step recurring flow ([#156](https://github.com/mercadopago/sdk-ruby/pull/156))
+- **Pagination**: support `data` key for Orders v2 API and string paging totals ([#156](https://github.com/mercadopago/sdk-ruby/pull/156))
+
+### Fixed
+- **Stored credential**: rename `prev_transaction_ref` to `previous_transaction_reference` ([#156](https://github.com/mercadopago/sdk-ruby/pull/156))
+- **`Iterator#call`**: use keyword args for Ruby 4.0 strict kwarg separation ([#156](https://github.com/mercadopago/sdk-ruby/pull/156))
+
+### CI
+- Standardize CI/CD workflows ([#166](https://github.com/mercadopago/sdk-ruby/pull/166))
+- Migrate tests to mock-based unit tests ([#166](https://github.com/mercadopago/sdk-ruby/pull/166))
+- Fix SDK bugs discovered during mock test migration ([#166](https://github.com/mercadopago/sdk-ruby/pull/166))
+- Fix Ruby CI: drop 3.2 matrix (gemspec requires >=3.3), add `safe.directory` ([#166](https://github.com/mercadopago/sdk-ruby/pull/166))
+
 ## [3.3.0] - 2026-08-04
 
 ### Added

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    mercadopago-sdk (3.3.0)
+    mercadopago-sdk (3.4.0)
       faraday (~> 2.0)
       json (~> 2.5)
 

data/examples/order/create_automatic_payment.rb

@@ -0,0 +1,162 @@
+require_relative '../../lib/mercadopago'
+
+# Mercado Pago Create Order — Automatic Payments (recurring charges).
+#
+# Demonstrates the two-step Automatic Payments flow:
+#   1. First payment  — CVV-validated charge that registers the card credential.
+#   2. Recurring charge — subsequent MIT charge without CVV, referencing step 1.
+#
+# Prerequisites:
+#   - A customer created via POST /v1/customers             → customer_id
+#   - A payment profile created via POST /v1/customers/{id}/payment-profiles → payment_profile_id
+
+sdk = Mercadopago::SDK.new('<ACCESS_TOKEN>')
+
+# ── Step 1: First payment ─────────────────────────────────────────────────────
+# Registers the card credential with first_payment: true.
+# No prev_transaction_ref is needed on the first charge.
+def create_first_payment(sdk, customer_id:, payment_profile_id:, payer_email:, card_token:)
+  request = {
+    type: 'online',
+    processing_mode: 'automatic',
+    total_amount: '100.00',
+    external_reference: 'subscription-001-payment-1',
+    payer: {
+      email: payer_email,
+      customer_id: customer_id
+    },
+    transactions: {
+      payments: [
+        {
+          amount: '100.00',
+          payment_method: {
+            id: 'master',
+            type: 'credit_card',
+            token: card_token,
+            installments: 1
+          },
+          automatic_payments: {
+            payment_profile_id: payment_profile_id
+          },
+          stored_credential: {
+            payment_initiator: 'customer',
+            reason: 'recurring',
+            first_payment: true
+          }
+        }
+      ]
+    }
+  }
+
+  custom_headers = { 'X-Idempotency-Key': '<IDEMPOTENCY_KEY_FIRST>' }
+  request_options = Mercadopago::RequestOptions.new(custom_headers: custom_headers)
+
+  sdk.order.create(request, request_options: request_options)
+rescue StandardError => e
+  puts e.message
+  nil
+end
+
+# ── Step 2: Recurring charge ──────────────────────────────────────────────────
+# Subsequent MIT charge — no card token needed, uses the payment profile.
+# prev_transaction_ref links this charge to the original authorization.
+def create_recurring_charge(sdk,
+                             customer_id:,
+                             payment_profile_id:,
+                             payer_email:,
+                             previous_transaction_reference:,
+                             sequence_number:)
+  request = {
+    type: 'online',
+    processing_mode: 'automatic_async',
+    total_amount: '100.00',
+    external_reference: "subscription-001-payment-#{sequence_number}",
+    payer: {
+      email: payer_email,
+      customer_id: customer_id
+    },
+    transactions: {
+      payments: [
+        {
+          amount: '100.00',
+          automatic_payments: {
+            payment_profile_id: payment_profile_id,
+            retries: 3,
+            schedule_date: '2026-09-01T00:00:00.000-04:00',
+            due_date: '2026-09-05T00:00:00.000-04:00'
+          },
+          stored_credential: {
+            payment_initiator: 'merchant',
+            reason: 'recurring',
+            first_payment: false,
+            previous_transaction_reference: previous_transaction_reference
+          },
+          subscription_data: {
+            invoice_id: "INV-00#{sequence_number}",
+            billing_date: '2026-08-01',
+            subscription_sequence: {
+              number: sequence_number,
+              total: 12
+            },
+            invoice_period: {
+              type: 'monthly',
+              period: 1
+            }
+          }
+        }
+      ]
+    }
+  }
+
+  custom_headers = { 'X-Idempotency-Key': "<IDEMPOTENCY_KEY_RECURRING_#{sequence_number}>" }
+  request_options = Mercadopago::RequestOptions.new(custom_headers: custom_headers)
+
+  sdk.order.create(request, request_options: request_options)
+rescue StandardError => e
+  puts e.message
+  nil
+end
+
+# ── Run the flow ──────────────────────────────────────────────────────────────
+customer_id       = '<CUSTOMER_ID>'
+payment_profile_id = '<PAYMENT_PROFILE_ID>'
+payer_email       = '<PAYER_EMAIL>'
+card_token        = '<CARD_TOKEN>'
+
+# First payment
+first_result = create_first_payment(
+  sdk,
+  customer_id: customer_id,
+  payment_profile_id: payment_profile_id,
+  payer_email: payer_email,
+  card_token: card_token
+)
+
+if first_result
+  first_order = first_result[:response]
+  puts "First payment order ID: #{first_order['id']}"
+  puts "Status: #{first_order['status']}"
+
+  # Save the payment ID for the next recurring charge
+  first_payment_id = first_order.dig('transactions', 'payments', 0, 'id')
+  puts "First payment ID (save for next charge): #{first_payment_id}"
+
+  # Recurring charge
+  if first_payment_id
+    recurring_result = create_recurring_charge(
+      sdk,
+      customer_id: customer_id,
+      payment_profile_id: payment_profile_id,
+      payer_email: payer_email,
+      previous_transaction_reference: first_payment_id,
+      sequence_number: 2
+    )
+
+    if recurring_result
+      recurring_order = recurring_result[:response]
+      puts "\nRecurring charge order ID: #{recurring_order['id']}"
+      puts "Status: #{recurring_order['status']}"
+      puts "Status detail: #{recurring_order['status_detail']}"
+    end
+  end
+end

data/lib/mercadopago/resources/disbursement_refund.rb

@@ -23,7 +23,7 @@ module Mercadopago
     # @param request_options [RequestOptions, nil] per-call configuration override
     # @return [Hash{Symbol => Object}] +:status+ and +:response+ with refund details
     def create_all(advanced_payment_id, request_options: nil)
-      _post(uri: "/v1/advanced_payments/#{_path_param(advanced_payment_id)}/refunds", request_options: request_options)
+      _post(uri: "/v1/advanced_payments/#{_path_param(advanced_payment_id)}/refunds", data: nil, request_options: request_options)
     end
 
     # Refunds a single disbursement (full or partial).