Bump plaid from 18.3.0 to 43.0.0

[dependabot]

Bumps plaid from 18.3.0 to 43.0.0.

Changelog

Sourced from plaid's changelog.

43.0.0

• Updating to OAS 2020-09-14_1.698.7

Breaking changes in this version

• [BREAKING] Remove protect_results from LinkSessionResults in /link/token/get responses. The API no longer populates this field. (OAS 2020-09-14_1.697.0)
• [BREAKING] Recaptcha_RequiredError: change http_code from string to integer. The API already returns an integer; only the spec was wrong. (OAS 2020-09-14_1.695.0)
• [BREAKING] Replace report_requested field with reports_requested array field in /cra/check_report/verification/pdf/get. (OAS 2020-09-14_1.691.0)
• [BREAKING] Remove /item/handle_fraud_report endpoint and its ItemHandleFraudReportRequest and ItemHandleFraudReportResponse schemas. The endpoint was never wired up for any customer. (OAS 2020-09-14_1.688.9)

OpenAPI Schema Changes

2020-09-14_1.698.7

• Add kanmon to the processor enum on /processor/token/create, for creating processor tokens for the Kanmon integration.

2020-09-14_1.698.6

• Add natural to the processor enum on /processor/token/create, for creating processor tokens for the Natural integration.

2020-09-14_1.698.5

• Add pay to the processor enum on /processor/token/create, for creating processor tokens for the Pay.com integration.

2020-09-14_1.698.4

• Remove the 1024-character maxLength constraint from notes on /protect/report/create.

2020-09-14_1.698.3

• Add FRAUD_TRANSACTION to the reason_code enum (ProductsTerminateReasonCode) accepted by /item/products/terminate and /user/products/terminate, for terminating an Item due to transaction-level fraud (e.g. unauthorized transactions, card testing, chargebacks, ACH returns, or disputes).
• Add /cra/report/get endpoint with CRA report schemas (CraReportGetRequest, CraReportGetResponse, CraReportGetReport, CraReportGetResponseProduct, CraReportGetProductAttributes, CraReportGetProductMetadata).

2020-09-14_1.698.2

• Correct stylization, acronym expansions, and factual errors in schema descriptions: "Bacs" (was "BACS"), "International Bank Account Number", "Business Identifier Code", "Government-Sponsored Enterprise" (was "Government Sponsored Entity"), "Registered Disability Savings Plan (RDSP)" (was "RSDP"), "FATCA" filing requirement (description only; was "FACTA"), "E.164" phone format (was "E. 164"), and "Social Security". Also clarified that balances.available and balances.current may both be null for limited-purpose checking accounts, and corrected an endpoint reference in a description (/processor/stripe/bank_account_token/create), and normalized two endpoint summaries to refer to the product as a singular "Consumer Report", and normalized "realtime" to the hyphenated "real-time" in balance descriptions. No changes to API behavior.

2020-09-14_1.698.1

• Clarify that /protect/report/create requires either user_id or at least one supported incident_event identifier, and that contextual fields alone do not satisfy this requirement.

2020-09-14_1.698.0

• Add guarantee_details (optional) to Transfer and TransferAuthorization schemas to surface adaptive guarantee settlement information. Introduces TransferGuaranteeOutcome enum, AuthorizationGuaranteeScheduleItem and TransferGuaranteeScheduleItem objects, AuthorizationGuaranteeDetails (outcome + schedule), and TransferGuaranteeDetails (guaranteed_amount + schedule). The authorization schedule omits observation_window_expiration_time, which is only meaningful on a created transfer. guarantee_details is null when no guarantee was attempted. The existing guarantee_decision and guarantee_decision_rationale fields are deprecated in favor of guarantee_details.
• Add requested_amount to the proposed_transfer object on the /transfer/authorization/create response. Surfaces the amount the client originally requested, which can differ from the proposed amount when only a partial amount is offered for an adaptive guarantee.

2020-09-14_1.697.5

• Document support for UltraFICO® scores through the CRA Partner Insights product.

2020-09-14_1.697.4

• Correct spec to reflect two missing enum values: add missing in_epic enum value to IDNumberType and add missing IDEMPOTENCY_ERROR enum value to ErrorType schema. No changes to actual API behavior.

2020-09-14_1.697.4

• Update Holding.tax_lots description: remove stale "Absent from the response when the tax lots feature is not yet enabled" clause.

2020-09-14_1.697.3

• Add atomicfi value to the processor enum on /processor/token/create.

2020-09-14_1.697.2

• Add payment and refund values to the transaction_code enum, and update the field description to note that transaction_code is now populated for certain US institutions, in addition to European institutions.

... (truncated)

Commits

• 974ff76 Merge pull request #717 from plaid/generated_20260625T191121Z
• a1a34bb OpenAPI generated code at 2026-06-25T19:11:21Z
• 49270ba Merge pull request #714 from plaid/generated_20260427T175144Z
• 2a7b9c4 OpenAPI generated code at 2026-04-27T17:51:44Z
• a233b45 Merge pull request #713 from plaid/generated_20260417T202631Z
• b943511 OpenAPI generated code at 2026-04-17T20:26:31Z
• 819b58a Merge pull request #711 from plaid/generated_20260402T213808Z
• 6219fee OpenAPI generated code at 2026-04-02T21:38:08Z
• f0a4841 Merge pull request #709 from plaid/generated_20260304T225136Z
• a444587 OpenAPI generated code at 2026-03-04T22:51:36Z
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by plaid-devx, a new releaser for plaid since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	plaid@​18.3.0 ⏵ 43.0.0	-5			+5

View full report