Driftwatch

Stripe / Stripe API /

Breakingdirection flip: their tools call this safe

Response field card_reference_id is no longer guaranteed

What changed

Producer-side tools call this non-breaking. For a consumer it is a null dereference on an unknown future date.

Affects card_reference_id on issuing_network_token_visa reachable from 147 operations. Nothing fails at the call; it fails wherever the value is finally used, which is usually somewhere else entirely.

no longer guaranteed present; can now be null

Who is affected

Code that reads Stripe's issuing_network_token_visa objects, used by 147 Stripe operations.

Before and after

WhereBeforeAfter
issuing_network_token_visa.card_reference_idalways presentmay be missingno longer guaranteed present
issuing_network_token_visa.card_reference_idstringnull|stringcan now be null

Code that breaks

// response.card_reference_id may now be absent or null
const card_reference_id = response.card_reference_id ?? fallback;

Based on Stripe’s published API specification. How severity is decided.