risk_level is no longer accepted

What changed

Usually ignored rather than rejected, so the call succeeds and does something subtly different.

Affects risk_assessment.card_testing_risk.risk_level on POST /v1/test_helpers/issuing/authorizations. Grep for it: nothing else will tell you.

Who is affected

Code that sends POST /v1/test_helpers/issuing/authorizations (risk_assessment.card_testing_risk.risk_level).

Before and after

Code that breaks

await client.post("/v1/test_helpers/issuing/authorizations", {
  // risk_level is now ignored, not rejected
  risk_level: value,
});

Based on Stripe’s published API specification. How severity is decided.