Improved

Checkout SDK Updates — React Native v1.0.10

React Native — v1.0.10 (2026-07-13)

View on GitHub

Bundled native SDK versions: Android checkout-android 1.1.0, iOS checkout-ios-package 1.4.1.

Added

  • HostedFieldStatePayload.iin: merchant-safe IIN prefix on CARD field snapshots (iframe parity).
  • Braintree APM: optional clientToken; success/cancel payloads may include paymentMethodType, venmoUsername (Android), and a cancel message.
  • SavedCardInfo.cardholderName: optional display name on the recache UI (Android).
  • iFrame → React Native migration support for merchants, with docs updated.
  • Hosted fields and Express: field-state callbacks, PAN display controls, autofill toggle, international ZIP validation, card brand icons, and related Express/recache options.
  • Stripe APM: optional PaymentSheet appearance on both platforms.

Fixed

  • Android SPLTextField: no longer measures the embedded ComposeView before window attach, fixing a Fabric + react-native-screens crash (Cannot locate windowRecomposer).
  • iOS ScreenSecurity: the App Switcher / multitasking card no longer exposes payment UI when protection is active.
  • Dependabot vulnerability fixes.

Changed

  • Default hosted display state is now PRETTY with unmasked PAN/CVV. setNumberFormat('PRETTY') unmasks the PAN only; the CVV mask is preserved. Full mask uses *.
  • Hosted fields: enableAutofill: false no longer clears PAN/CVV; autofill suppression now applies to expiry, name, and address fields, and the SDK handles expiry Wallet autofill and global theme refresh.
  • Package release setup to the distribution repo fixed.
  • Stable-release approval gating added for production publishes.

Breaking

  • showsAutofillToggle removed from paymentBottomSheet() and PaymentBottomSheet; use enableAutofill for PAN/CVC autofill.
  • SPLTextField: removed observeHostedCardDisplayState, cvvDisplayMasked, and cardNumberFormat. CARD/CVV display always follows SpreedlyCore.setNumberFormat / toggleMask; use getHostedCardDisplayState or onFieldStateChange for mask UI.
  • SPLTextField: no keyboardType / textContentType; use formFieldType and enableAutofill.
  • Stripe APM (iOS): a dismissed sheet now returns status: 'canceled' (previously failed).

Documentation

  • Merchant docs updated for hosted fields, recache, 3DS gateway timing, and Stripe APM; iFrame API mapping consolidated into the migration guide.