Version Packages

[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@paypal/paypal-js@10.1.0

Minor Changes

• d9c0200: Narrow PayPalMessagesSession.fetchContent to return Promise<MessageContent> (previously Promise<MessageContent | null>). The evergreen SDK never resolves to null — on an API error it returns an empty sentinel MessageContent (empty messageItems) so the <paypal-message> element recognizes the error state and collapses. Existing === null checks against the result become dead code but continue to compile.

Patch Changes

• 09f2994: Fix incomplete prototype-pollution protection in processOptions. The environment option was still read via destructuring, which reads through the prototype chain, so Object.prototype.environment = "sandbox" could downgrade a production checkout to the sandbox SDK URL. environment is now read with a hasOwnProperty guard, matching the existing sdkBaseUrl protection.

@paypal/react-paypal-js@10.2.0

Minor Changes

• d9c0200: Add useBraintreePayPalMessages, a v6 hook for rendering PayPal promotional / BNPL messaging (<paypal-message>) via Braintree.
  • Wraps BraintreePayPalCheckoutInstance.createMessages on the shared instance from useBraintreePayPal. Because Braintree's createMessages is asynchronous (unlike the PayPal SDK's synchronous createPayPalMessages), the instance is created in an effect that awaits the Promise and guards against unmount / instance change before storing it.
  • Returns error, isReady, isLoading, and handleFetchContent(options), which fetches message content for a <paypal-message> element and resolves to a content object exposing update({ amount }) so the displayed amount can change without re-fetching.
  • Provider-level failures are surfaced separately and labeled (Braintree PayPal context error: …), distinct from instance/fetch errors, so consumers can tell which layer failed.
  • Adds BraintreeMessagesOptions, BraintreeMessagesInstance, BraintreeMessageContent, and BraintreeFetchMessageContentOptions types, plus createMessages on BraintreePayPalCheckoutInstance.

Patch Changes

• e3bb955: Stop shipping the TypeScript incremental-build cache (dist/tsconfig.lib.tsbuildinfo) in the published npm package. The build-info file is now written to node_modules/.cache/tsc/ instead of dist/, trimming ~72 kB unpacked (~25 kB gzipped) from the tarball. No functional or API change — the library output is byte-identical.
• Updated dependencies [09f2994]
• Updated dependencies [d9c0200]
  • @paypal/paypal-js@10.1.0