Bump plaid from 18.3.0 to 44.0.0

[dependabot]

Bumps plaid from 18.3.0 to 44.0.0.

Changelog

Sourced from plaid's changelog.

44.0.0

• Updating to OAS 2020-09-14_1.706.1

Breaking changes in this version

• [BREAKING] For /cra/check_report/create, replace CraCheckReportCashflowInsightsGetOptions, CraCheckReportIncomeInsightsGetOptions, CraCheckReportLendScoreGetOptions, CraCheckReportNetworkInsightsGetOptions, and CraCheckReportVerificationGetEmploymentRefreshOptions with the corresponding CraCheckReportCreate*Options interfaces. The old interfaces remain available for the deprecated /get options, and request JSON is unchanged. (OAS 2020-09-14_1.700.0)
• [BREAKING] Use ProductsTerminateReasonCode for both Item and user product termination; ItemProductsTerminateReasonCode and UserProductsTerminateReasonCode were removed. Accepted wire values are unchanged. (OAS 2020-09-14_1.701.1)
• [BREAKING] Object-literal fixtures for BankTransferEvent, CreditSessionDocumentIncomeResult, LinkEventsWebhook, PayrollIncomeObject, or Security must now include the required receiver_details, num_i20s_uploaded, environment, i20s, or figi property, respectively. Ordinary API response consumption is unchanged. (OAS 2020-09-14_1.699.0, 1.699.5, 1.701.0, 1.701.1, and 1.703.0)
• [BREAKING] FDXInitiatorFiAttribute.value is now a string instead of FDXPartyType. This schema is not referenced by an endpoint. (OAS 2020-09-14_1.703.0)
• [BREAKING] StudentRepaymentPlanType.InterestOnly now serializes as "interest only" instead of "interest-only", matching the value returned by the API. (OAS 2020-09-14_1.699.1)

OpenAPI Schema Changes

2020-09-14_1.706.1

• Make product metadata and attributes nullable when unavailable in /cra/report/get responses.

2020-09-14_1.706.0

• Add the /transfer/return/recover endpoint, which lets clients report that they have recovered some or all of the loss on a returned guaranteed transfer.
• Add the guarantee_reimbursed, client_return_recovered, and plaid_return_recovered transfer event types, and add a nullable signed event_amount field to the transfer event object.

2020-09-14_1.705.4

• Mark superseded products, endpoints, and fields as deprecated: the Beacon product (/beacon/* endpoints and webhooks, plus the beacon_user_id field on Identity Verification responses); Bank Transfer (except the /bank_transfer/event/* endpoints, still used for Auth micro-deposits); /employers/search; the legacy Cash Flow Updates webhooks superseded by CASH_FLOW_INSIGHTS_UPDATED; and the PaymentInitiationConsentScope, TransferCreditFundsSource, and RiskReason schemas.
• Quote type: string certain enum values (Prism version number strings, Freddie Mac "yes/no" API string responses) that YAML parsers were coercing to numbers or booleans.
• Expose /cra/report/get and its request/response schemas in generated client libraries. The endpoint remains hidden from public documentation.

2020-09-14_1.705.3

• Document the ip_address field on the /identity_verification/create user object: accepted only here (not via /link/token/create) and captured automatically by the Link SDK, for backend-only integrations that need IP-based risk checks.

2020-09-14_1.705.2

• Clarified the /oauth/token response token_type description (it is Bearer for OAuth access tokens); dropped the inaccurate "always Bearer" wording.

2020-09-14_1.705.1

• internal changes only

2020-09-14_1.705.0

• Type the product field of the CraReportUpdatedWebhook (CRA_REPORT/CRA_REPORT_UPDATED) successful_products/failed_products entries against the Products enum instead of a free-form string, matching the sibling /cra/report/get product schemas.

2020-09-14_1.704.2

• internal changes only

2020-09-14_1.704.1

• internal changes only

2020-09-14_1.704.0

• internal changes only

2020-09-14_1.703.0

• Add the environment field to the LinkEventsWebhook (LINK/EVENTS) schema, matching actual behavior.
• Change FDXInitiatorFiAttribute.value from the FDXPartyType enum to a string, matching the sibling FDXFiAttribute (this schema is not referenced by any endpoint).
• Fixed a TransactionsRuleDetails.query description that referenced a nonexistent NAME field (the enum value is MERCHANT_NAME), and a /cra/encompass/get_reports example whose report_status was not a valid value and whose generated_at key should be created_at.
• Fixed additional example/consistency issues: /transactions/get and /processor/transactions/get examples now report the correct total_transactions; the Identity Verification Strategy note references the watchlist_screening step; the US_SDN watchlist code label is consistent; SelfieCapture examples reflect that only one of image_url/video_url is populated; the /institutions/get_by_id example nests liabilities correctly; the /oauth/token scope description calls urn:plaid:params:oauth:user-token a subject token type; and a /cra/encompass/load/existing example was corrected to match its schema.

... (truncated)

Commits

• dfbba8a Merge pull request #718 from plaid/generated_20260722T174500Z
• f479709 OpenAPI generated code at 2026-07-22T23:38:21Z
• 974ff76 Merge pull request #717 from plaid/generated_20260625T191121Z
• a1a34bb OpenAPI generated code at 2026-06-25T19:11:21Z
• 49270ba Merge pull request #714 from plaid/generated_20260427T175144Z
• 2a7b9c4 OpenAPI generated code at 2026-04-27T17:51:44Z
• a233b45 Merge pull request #713 from plaid/generated_20260417T202631Z
• b943511 OpenAPI generated code at 2026-04-17T20:26:31Z
• 819b58a Merge pull request #711 from plaid/generated_20260402T213808Z
• 6219fee OpenAPI generated code at 2026-04-02T21:38:08Z
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by plaid-devx, a new releaser for plaid since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	plaid@​18.3.0 ⏵ 44.0.0				+7

View full report

[dependabot]

Superseded by #32.