feat(stripe-projects): integrate plugin 0.30.0 → 0.31.0 - #100
Open
cursor[bot] wants to merge 1 commit into
Open
Conversation
Re-bless plugin-version, catalog, and command-surface against latest. Sync STRIPE_PROJECTS_PINNED and surface TRAVERSAL verification note.
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
snowmead
marked this pull request as ready for review
August 4, 2026 12:29
Contributor
Author
Bugbot couldn't run - usage limit reachedBugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit. A user or team admin can review and increase usage limits in the Cursor dashboard. (requestId: serverGenReqId_1e82dd1d-aa7c-4249-b086-6d6d624f6925) |
Contributor
Author
There was a problem hiding this comment.
Thermos review (security + code quality)
NO MEDIUM+ FINDINGS
Both thermo-nuclear passes agree: this is a pin/fixture-only bump of Stripe Projects 0.30.0 → 0.31.0. No runtime logic, adapters, authz, secret handling, or TRAVERSAL structural changes.
Validated
- Pins synced:
STRIPE_PROJECTS_PINNED,plugin-version.txt, surface header, and banner all report0.31.0 - Catalog: 198 services, 0 add/remove; 2 description-only edits; no
configuration_schemacontent changes - New
spend --duration/--since/--untilflags are optional; help default remains last 6 months;spend_summarystill correctly uses barespend(explicit skip) - Hermetic CI green (fmt/clippy/test/supply-chain). Live render/vercel smoke failures are unrelated Render API 201 handling, not this pin
No prior automation review threads. Bugbot hit a usage limit (no Bugbot findings to incorporate).
Sent by Cursor Automation: Find vulnerabilities
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.


Daily Stripe Projects upgrade. Pin moves from 0.30.0 to 0.31.0.
Version delta
stripe projects(0.31.0) against main pin 0.30.0.plugin-version.txt,catalog.json, andcommand-surface.txtviamise run stripe-refresh.STRIPE_PROJECTS_PINNEDand the surface TRAVERSAL verification note.bot/stripe-projects-0.31.0. Left stale remotebot/stripe-projects-updatealone (fixtures-only tip, no PR).Fixture changelog
Catalog (198 services, unchanged set)
configuration_schemaedits.posthog/analytics(wording),chatbase/hobbyplan (500 → 700 message credits).drift_reportstayed empty withoutcatalog.rschanges.Command surface
spendgained optional--duration,--since, and--untildate-range flags. Default remains last 6 months.Landed integrations
CatalogResourceadapters.Explicit skips
spend_summarystill calls barespend/spend <provider>for up/down reporting. Stackless has no CLI that needs duration windows.chatbase/hobby) stays out of scope with other plan tiers.createos/project, domains, containers stay out of scope.--onsubstrates (needs humanstripe projects link+ live smoke).discoverskipped (no linked project / OAuth here).Predicate evidence
mise run checkgreen (fmt, clippy, taplo, catalog-orphans, provisional-check).-p stackless-stripe-projects -p stackless --all-features: 117/117, including fixture coherence andspend_summary_*.Note
Low Risk
Fixture and version-pin updates only; no runtime logic changes beyond aligning snapshots with plugin 0.31.0.
Overview
Bumps the Stripe Projects plugin pin from 0.30.0 to 0.31.0 in
STRIPE_PROJECTS_PINNED, the surfaceTRAVERSALverification note, andplugin-version.txt, and re-blessescatalog.jsonandcommand-surface.txtvia the usual refresh path.The catalog snapshot keeps the same service set; changes are mostly reordered
allowed_updates/updateable_tolists plus minor copy (e.g. PostHog analytics description, Chatbase hobby 500 → 700 message credits). No new commands inTRAVERSAL.The notable CLI delta in the command surface is
stripe projects spend: new optional--duration,--since, and--untilfor charge date ranges (default still last 6 months). Stacklessspend_summaryis unchanged and still invokes barespend/spend <provider>.Reviewed by Cursor Bugbot for commit 89a2b80. Bugbot is set up for automated code reviews on this repo. Configure here.