Feat/swagger changelog sync 2026 04

[armando-rodriguez-cko]

Summary

Sync the Java SDK with the Checkout.com swagger spec (changelog up to 2026-04-08). Adds missing fields, classes and enum values across payments, payment-setups, payment-sessions, payment-contexts, disputes, instruments and issuing. Includes serialization tests for every new or modified class. No public API is removed — older fields that the API retired are kept with @Deprecated.

Changes

Grouped per commit for review:

• feat(disputes): add missing fields from swagger review
  • Dispute — added resolvedReason, isCeCandidate, processingChannel, segmentId.
  • CompellingEvidence — added deviceId.
  • DisputeRelevantEvidence — added PROOF_OF_DELIVERY_OR_SERVICE_DATE, COMPELLING_EVIDENCE.
• feat(issuing): update card shipping instruction fields
  • ShippingInstruction — aligned with current /issuing/cards schema.
• feat(payment-contexts): add metadata and accommodation phone fields
  • PaymentContexts / PaymentContextsRequest — added metadata (Map<String, Object>).
  • PaymentContextsAccommodationData — added propertyPhone, customerServicePhone (List<Phone>).
• feat(payment-sessions): sync flow entities and requests with swagger
  • Updates across handlepaymentsandpayouts/flow/** (entities, requests, responses) to match current /payment-sessions schemas.
• feat(payment-setups): add full payment methods coverage and billing
  • Extended PaymentMethods from 5 to the full 34 payment methods in the spec.
  • New classes per method: ach, alipay (CN/HK), alma, applepay (+ token data), bancontact, benefit, card, dana, eps, gcash, googlepay (+ token data), ideal, instrument, kakaopay, knet (+ KnetLanguage), mbway, mobilepay, multibanco, octopus, p24 (+ account holder), paynow, qpay, sepa (+ account holder, mandate, types), sequra, swish (+ account holder), tamara, tng, truemoney, twint, vipps, wechatpay.
  • New shared enums: TerminalType, OsType, CardAccountHolderType, CardAccountHolder.
  • PaymentSetupsRequest / PaymentSetupsResponse — added billing (new PaymentSetupBilling) and availablePaymentMethods (readOnly) on the response.
  • PaymentSetupSource, PaymentSetupsConfirmResponse, PaymentMethodAction, PaymentMethodBase updated.
• feat(instruments): add SEPA/ACH update and card network token
  • InstrumentType — added ACH.
  • New UpdateInstrumentSepaRequest / UpdateInstrumentSepaResponse (with SepaInstrumentData, accountHolder).
  • New UpdateInstrumentAchRequest / UpdateInstrumentAchResponse (with AchInstrumentData, accountHolder).
  • CreateInstrumentSepaRequest — added customer.
  • GetCardInstrumentResponse — added encrypted_card_number, network_token (new InstrumentNetworkToken + NetworkTokenState), card_wallet_type, regulated_indicator.
  • UpdatePaymentInstrumentRequest — aligned with swagger.
  • GsonSerializer — registered UpdateInstrumentSepaResponse and UpdateInstrumentAchResponse subtypes.
  • Serialization tests for CreateInstrumentSepaRequest and GetCardInstrumentResponse.
• feat(payments): sync processing, sources and responses with swagger
  • PaymentProcessing — added reconciliationId, aggregator (new Aggregator type).
  • ProcessingSettings — added surchargeAmount, accommodationData, serviceType (new AchServiceType), foreignRetailerAmount, reconciliationId, aggregator.
  • New AccommodationData / AccommodationRoom / AccommodationGuest.
  • ThreeDSData — added eci, authenticationStatusReason, trustedListing (new TrustedListing).
  • PaymentRetryRequest — refactored to nest dunning/downtime; old flat fields kept with @Deprecated. New DunningRetryRequest / DowntimeRetryRequest.
  • RequestIdSource, RequestCustomerSource — added billingAddress, phone, allowUpdate.
  • PaymentRequest, HostedPaymentRequest, PaymentLinkRequest — paymentIp deprecated.
  • PayoutRequest — added segment (PaymentSegment) per BankPayoutRequest schema.
  • New PayPalResponseSource (registered in GsonSerializer).
  • Link — added mobile (new MobileRedirectLink), qrCode (new QrCode) for 202 responses.
  • Product — added url.
  • PaymentIndividualSender.dob — deprecated, use dateOfBirth.
  • APM sources — aligned with current swagger (new MandateType, deprecations for RequestBizumSource.mobileNumber, RequestSofortSource, RequestTrustlySource, field additions across sources).
  • Serialization tests added for all new and changed classes.
• chore: ignore IDE tooling files and directories — add .claude/, CLAUDE.md, .github/copilot-instructions.md to .gitignore.

API Reference

• POST /payments, POST /payments/{id}/retry, POST /payments/{id}/payouts
• POST /hosted-payments, POST /payment-links
• POST /payment-contexts, GET /payment-contexts/{id}
• POST /payment-sessions, POST /payment-sessions/{id}/submit, POST /payment-sessions/{id}/complete
• POST /payment-setups
• GET /disputes/{id}, dispute evidence endpoints
• POST /instruments, PATCH /instruments/{id}, GET /instruments/{id}
• POST /issuing/cards

Breaking changes

None. All removals from the API are kept as @Deprecated with the current behavior preserved (paymentIp, dob, RequestBizumSource.mobileNumber, RequestSofortSource, RequestTrustlySource, flat fields on PaymentRetryRequest).

README

No README changes required — this PR aligns with existing usage patterns; no new endpoint groups or configuration surface is introduced.

[github-advanced-security]

CodeQL found more than 20 potential problems in the proposed changes. Check the Files changed tab for more details.

[sonarqubecloud]

Quality Gate passed

Issues
60 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.3% Duplication on New Code

See analysis details on SonarQube Cloud