Stripe CLI

Removed the legacy plugins.toml manifest in favor of local plugin metadata, and cleaned up the stripe agent setup --json output.

New stripe agent setup CLI command is available with telemetry and skills status visibility in setup flows. Also added query runs v2 API and plugin resolution source telemetry.

Fixed large file uploads to VirusTotal by including the API key header in upload requests.

Improved VirusTotal upload uses v3 API for large files and computes SHA256 locally instead of relying on server-side hashing.

Stripe CLI now handles VirusTotal large file uploads that exceed the 32 MB limit.

Plugin help output now includes a Description field, and stripe resources help works as an alias for stripe resources --help. Also added a docs subcommand to browse docs.stripe.com.

Keychain credential lookup now uses a best-effort live key probe, improving detection of valid credentials.

Fixed plugin subcommand stubs to pass the executing command instead of the parent command.

The credential store is replaced with a timeout plus file fallback, and the insecure-storage warning now includes the credentials file path.

Reverts the removal of the legacy plugins.toml manifest, restoring support for the old plugin metadata format.

Removed the legacy plugins.toml manifest in favor of local plugin metadata. Added curl-based install scripts for macOS and Linux, and post-install tips for plugins starting with the directory plugin. Fixed bin declarations in npm platform packages causing double-listing in npm10, and steered agents toward stripe sandbox create in guidance.

Fixed the winget release process and improved the user experience for the 'make release' command.

The Stripe CLI now supports macOS code signing and notarization, and an experimental UAT login flow. Also fixed PagerDuty not working on Windows and minimal Docker containers, and updated the release workflow to use GitHub App tokens instead of PATs.

Requires approval before releasing to production. Includes deduped PagerDuty alerts, improved install-tests with dryrun mode and winget support, keyring isolation in sandbox command tests, and runs the package manager test every 10 minutes.

Changelog

• 7c98c546afddeed2f5e1a39e318067ac21771f09 [npm] Removing registry-url from our actions/setup-node config (#1653)

Changelog

• 7c98c546afddeed2f5e1a39e318067ac21771f09 [npm] Removing registry-url from our actions/setup-node config (#1653)

Changelog

• 7c98c546afddeed2f5e1a39e318067ac21771f09 [npm] Removing registry-url from our actions/setup-node config (#1653)

Changelog

• 7c98c546afddeed2f5e1a39e318067ac21771f09 [npm] Removing registry-url from our actions/setup-node config (#1653)

New stripe plugin list subcommand shows available plugins, and a key permissions subcommand is now available. Stripe CLI is now distributed via npm as npx @stripe/cli. Also fixed a misleading error when installing non-existent plugins and avoided keychain password prompts in stripe whoami.

Node version bumped to 24 in the release workflow.