chore: release 0.2.0

[maxktz]

This PR was generated by Changesets for the paykitjs@0.2.0 release.\n\nMerging it will publish paykitjs@0.2.0 to npm and create GitHub release v0.2.0.

---

Summary by cubic

Releases paykitjs 0.2.0 with safer Stripe billing flows and stronger consistency guarantees. Compared with 0.1.6, it hardens browser return URLs and customer mutations, rejects test clocks with live Stripe keys, makes customer deletion and billing upserts race-safe, and enforces webhook claim ownership.

Migration

• Deduplicates existing Stripe billing rows before adding unique indexes.
• Merging publishes paykitjs@0.2.0 to npm and creates the v0.2.0 GitHub release.

^{Written for commit 3c6d533. Summary will update on new commits.}

Summary by CodeRabbit

• New Features
  • Released PaykitJS version 0.2.0.
  • Improved protection for browser return URLs and customer updates.
  • Added safeguards preventing test clocks from being used with live payment keys.
  • Improved reliability for customer deletion and billing updates during concurrent operations.
  • Strengthened webhook claim ownership handling.
  • Added migration support to clean up duplicate billing records and enforce uniqueness.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
paykit	Ready	Preview	Sep 17, 2026 4:02pm UTC

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Advanced

Run ID: 1450bfd9-0eb1-4a6c-bec4-56aef384b262

📥 Commits

Reviewing files that changed from the base of the PR and between bfe89ae and 3c6d533.

📒 Files selected for processing (3)

• .changeset/secure-billing-state.md
• packages/paykit/CHANGELOG.md
• packages/paykit/package.json

💤 Files with no reviewable changes (1)

• .changeset/secure-billing-state.md

Included review availability: Your plan provides up to 4 included reviews per hour; 1 remains after this review.

---

📝 Walkthrough

Walkthrough

The pull request prepares paykitjs version 0.2.0. It adds release notes and a changeset that document URL hardening, Stripe test-clock validation, race-safe billing mutations, webhook claim ownership, and billing-row deduplication.

Changes

Release metadata

Layer / File(s)	Summary
Versioned release record .changeset/secure-billing-state.md, packages/paykit/CHANGELOG.md, packages/paykit/package.json	The package version changes from 0.1.6 to 0.2.0. The changelog and changeset document the billing-state changes included in the release.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to 3c6d5

The package version and release notes are aligned, with no identified merge-blocking risk in the changed metadata.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely identifies the main change: releasing paykitjs version 0.2.0.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit stamps the release note bright
With billing locks secured just right
The version hops to two-oh
While safer return paths glow
And webhook claims hold tight}

_{Comment @coderabbitai help to get the list of available commands.}

[cubic-dev-ai]

No issues found across 3 files

_{Re-trigger cubic}