Bump plaid from 18.3.0 to 45.0.0

[dependabot]

Bumps plaid from 18.3.0 to 45.0.0.

Changelog

Sourced from plaid's changelog.

45.0.0

• Updating to OAS 2020-09-14_1.708.0

OpenAPI Schema Changes

2020-09-14_1.708.0

• [Breaking] Preserve arbitrary JSON value types in /cra/report/get product metadata and attributes maps and scalar values in /cra/credit_profile/report/get cash flow and network insight attribute maps generated by client libraries.

2020-09-14_1.707.1

• Add increase to the processor enum on /processor/token/create, for creating processor tokens for the Increase integration.

2020-09-14_1.707.0

• Add hidden user_id request fields to /credit/sessions/get and /credit/bank_statements/uploads/get.

44.0.0

• Updating to OAS 2020-09-14_1.706.1

Breaking changes in this version

• [BREAKING] For /cra/check_report/create, replace CraCheckReportCashflowInsightsGetOptions, CraCheckReportIncomeInsightsGetOptions, CraCheckReportLendScoreGetOptions, CraCheckReportNetworkInsightsGetOptions, and CraCheckReportVerificationGetEmploymentRefreshOptions with the corresponding CraCheckReportCreate*Options interfaces. The old interfaces remain available for the deprecated /get options, and request JSON is unchanged. (OAS 2020-09-14_1.700.0)
• [BREAKING] Use ProductsTerminateReasonCode for both Item and user product termination; ItemProductsTerminateReasonCode and UserProductsTerminateReasonCode were removed. Accepted wire values are unchanged. (OAS 2020-09-14_1.701.1)
• [BREAKING] Object-literal fixtures for BankTransferEvent, CreditSessionDocumentIncomeResult, LinkEventsWebhook, PayrollIncomeObject, or Security must now include the required receiver_details, num_i20s_uploaded, environment, i20s, or figi property, respectively. Ordinary API response consumption is unchanged. (OAS 2020-09-14_1.699.0, 1.699.5, 1.701.0, 1.701.1, and 1.703.0)
• [BREAKING] FDXInitiatorFiAttribute.value is now a string instead of FDXPartyType. This schema is not referenced by an endpoint. (OAS 2020-09-14_1.703.0)
• [BREAKING] StudentRepaymentPlanType.InterestOnly now serializes as "interest only" instead of "interest-only", matching the value returned by the API. (OAS 2020-09-14_1.699.1)

OpenAPI Schema Changes

2020-09-14_1.706.1

• Make product metadata and attributes nullable when unavailable in /cra/report/get responses.

2020-09-14_1.706.0

• Add the /transfer/return/recover endpoint, which lets clients report that they have recovered some or all of the loss on a returned guaranteed transfer.
• Add the guarantee_reimbursed, client_return_recovered, and plaid_return_recovered transfer event types, and add a nullable signed event_amount field to the transfer event object.

2020-09-14_1.705.4

• Mark superseded products, endpoints, and fields as deprecated: the Beacon product (/beacon/* endpoints and webhooks, plus the beacon_user_id field on Identity Verification responses); Bank Transfer (except the /bank_transfer/event/* endpoints, still used for Auth micro-deposits); /employers/search; the legacy Cash Flow Updates webhooks superseded by CASH_FLOW_INSIGHTS_UPDATED; and the PaymentInitiationConsentScope, TransferCreditFundsSource, and RiskReason schemas.
• Quote type: string certain enum values (Prism version number strings, Freddie Mac "yes/no" API string responses) that YAML parsers were coercing to numbers or booleans.
• Expose /cra/report/get and its request/response schemas in generated client libraries. The endpoint remains hidden from public documentation.

2020-09-14_1.705.3

• Document the ip_address field on the /identity_verification/create user object: accepted only here (not via /link/token/create) and captured automatically by the Link SDK, for backend-only integrations that need IP-based risk checks.

2020-09-14_1.705.2

• Clarified the /oauth/token response token_type description (it is Bearer for OAuth access tokens); dropped the inaccurate "always Bearer" wording.

2020-09-14_1.705.1

• internal changes only

2020-09-14_1.705.0

• Type the product field of the CraReportUpdatedWebhook (CRA_REPORT/CRA_REPORT_UPDATED) successful_products/failed_products entries against the Products enum instead of a free-form string, matching the sibling /cra/report/get product schemas.

2020-09-14_1.704.2

• internal changes only

... (truncated)

Commits

• 1d505c3 Merge pull request #719 from plaid/generated_20260724T182359Z
• 0446ab1 OpenAPI generated code at 2026-07-24T18:23:59Z
• dfbba8a Merge pull request #718 from plaid/generated_20260722T174500Z
• f479709 OpenAPI generated code at 2026-07-22T23:38:21Z
• 974ff76 Merge pull request #717 from plaid/generated_20260625T191121Z
• a1a34bb OpenAPI generated code at 2026-06-25T19:11:21Z
• 49270ba Merge pull request #714 from plaid/generated_20260427T175144Z
• 2a7b9c4 OpenAPI generated code at 2026-04-27T17:51:44Z
• a233b45 Merge pull request #713 from plaid/generated_20260417T202631Z
• b943511 OpenAPI generated code at 2026-04-17T20:26:31Z
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by plaid-devx, a new releaser for plaid since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	plaid@​18.3.0 ⏵ 45.0.0				+8

View full report