stripe 19.6.1 → 19.6.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2658d175c0e9668ca5effb73396f22b9f19a3df059558de5ae56912db9e9547a
-  data.tar.gz: 29e5fb8e31fa57e3011a24117be58d99eb0f06d1385014ba135df1a936abe7db
+  metadata.gz: 310e2209501ef945d302084ec788e94effc1d49d7b28ae696f96c72ba8b16352
+  data.tar.gz: 8b6c08b64f0f314f69a276b37c251079b19b17fff9b36e362751096a3896fac3
 SHA512:
-  metadata.gz: 2a55bcb93a02feb6f0f766bf10ef9fde2a30be1535bead833583cbb24e49e9ca791ab0910a02d957f66bb2b1bec5e701ba8e330554a0a9536036cbed79e516e7
-  data.tar.gz: e992a203be967077d537facef9323182a643d6004197b7d563a93a98c79fb745283d6b8c23526fae44b0067f5f9f994e5e26e8ff17ac3228cd883a93393aedbf
+  metadata.gz: 5fa01da68c76512fb633bd82c8c36010cfd5b6d85ea38d1ba71acc6464859c5093514d9b8bb3c68b71616dfbdc238f286f436a2726d887066f173e1363b899c4
+  data.tar.gz: 79467cd47cd0712f1c95605a89ac2790b06c865c47d8dc438031479a1d5d72713bce5872fa9c38fc5d110b73adacb5457074fd3e92f7769858fc2d9a405dcb4e

data/lib/stripe/stripe_context.rb

@@ -13,7 +13,7 @@ module Stripe
 
     # Creates a new StripeContext with the given segments.
     def initialize(segments = nil)
-      @segments = (segments || []).map(&:to_s).freeze
+      @segments = (segments || []).map { |segment| (segment.is_a?(String) ? segment.dup : segment.to_s).freeze }.freeze
     end
 
     # Parses a context string into a StripeContext instance.
@@ -54,6 +54,12 @@ module Stripe
     # Alias for == to support eql? method
     alias eql? ==
 
+    # As with equality in #== and #eql?, contexts with equivalent segments
+    # hash to the same value.
+    def hash
+      @segments.hash
+    end
+
     # Returns a human-readable representation for debugging.
     def inspect
       "#<#{self.class}:0x#{object_id.to_s(16)} segments=#{@segments.inspect}>"

data/lib/stripe/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Stripe
-  VERSION = "19.6.1"
+  VERSION = "19.6.2"
 end

data/lib/stripe/webhook.rb

@@ -135,6 +135,14 @@ module Stripe
           )
         end
 
+        if secret.nil? || secret.empty?
+          raise SignatureVerificationError.new(
+            "No webhook secret value was provided. It should start with " \
+            "`whsec_`",
+            header, http_body: payload
+          )
+        end
+
         expected_sig = compute_signature(timestamp, payload, secret)
         unless signatures.any? { |s| Util.secure_compare(expected_sig, s) }
           raise SignatureVerificationError.new(

data/rbi/stripe/stripe_client.rbi

@@ -16,7 +16,7 @@ module Stripe
       )
         .returns(::Stripe::V2::Core::EventNotification)
     end
-    def parse_event_notification(payload, sig_header, secret, tolerance: Webhook::DEFAULT_TOLERANCE); end
+    def parse_event_notification(payload, sig_header, secret, tolerance: ::Stripe::Webhook::DEFAULT_TOLERANCE); end
 
     # Constructs a [thin event notification](https://docs.stripe.com/event-destinations#thin-payload) from
     # an incoming webhook without first verifying its authenticity. Should be used after calling

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: stripe
 version: !ruby/object:Gem::Version
-  version: 19.6.1
+  version: 19.6.2
 platform: ruby
 authors:
 - Stripe
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-09-01 00:00:00.000000000 Z
+date: 2026-09-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bigdecimal