Bump plaid from 44.1.0 to 49.0.0

[dependabot]

Bumps plaid from 44.1.0 to 49.0.0.

Changelog

Sourced from plaid's changelog.

49.0.0

• Updating to OAS 2020-09-14_1.708.0

OpenAPI Schema Changes

2020-09-14_1.708.0

• [Breaking] Preserve arbitrary JSON value types in /cra/report/get product metadata and attributes maps and scalar values in /cra/credit_profile/report/get cash flow and network insight attribute maps generated by client libraries.

2020-09-14_1.707.1

• Add increase to the processor enum on /processor/token/create, for creating processor tokens for the Increase integration.

2020-09-14_1.707.0

• Add hidden user_id request fields to /credit/sessions/get and /credit/bank_statements/uploads/get.

48.0.0

• Updating to OAS 2020-09-14_1.706.1

Breaking changes in this version

• [BREAKING] For /cra/check_report/create, replace CraCheckReportCashflowInsightsGetOptions, CraCheckReportIncomeInsightsGetOptions, CraCheckReportLendScoreGetOptions, CraCheckReportNetworkInsightsGetOptions, and CraCheckReportVerificationGetEmploymentRefreshOptions with the corresponding CraCheckReportCreate*Options classes. The old classes remain available for the deprecated /get options, and request JSON is unchanged. (OAS 2020-09-14_1.700.0)
• [BREAKING] Use Plaid::ProductsTerminateReasonCode for both Item and user product termination; the two endpoint-specific wrapper classes were removed. Accepted wire values are unchanged. (OAS 2020-09-14_1.701.1)
• [BREAKING] Manually constructed CreditSessionDocumentIncomeResult, LinkEventsWebhook, and PayrollIncomeObject models must now include num_i20s_uploaded, environment, and i20s, respectively, to pass generated validation. (OAS 2020-09-14_1.699.0, 1.699.5, and 1.703.0)
• [BREAKING] Use "interest only" instead of "interest-only" for StudentRepaymentPlan.type, matching the value returned by the API. (OAS 2020-09-14_1.699.1)
• FDXInitiatorFiAttribute.value is now typed as a string. Existing Plaid::FDXPartyType::* constants remain valid because their values are strings. This schema is not referenced by an endpoint. (OAS 2020-09-14_1.703.0)

OpenAPI Schema Changes

2020-09-14_1.706.1

• Make product metadata and attributes nullable when unavailable in /cra/report/get responses.

2020-09-14_1.706.0

• Add the /transfer/return/recover endpoint, which lets clients report that they have recovered some or all of the loss on a returned guaranteed transfer.
• Add the guarantee_reimbursed, client_return_recovered, and plaid_return_recovered transfer event types, and add a nullable signed event_amount field to the transfer event object.

2020-09-14_1.705.4

• Mark superseded products, endpoints, and fields as deprecated: the Beacon product (/beacon/* endpoints and webhooks, plus the beacon_user_id field on Identity Verification responses); Bank Transfer (except the /bank_transfer/event/* endpoints, still used for Auth micro-deposits); /employers/search; the legacy Cash Flow Updates webhooks superseded by CASH_FLOW_INSIGHTS_UPDATED; and the PaymentInitiationConsentScope, TransferCreditFundsSource, and RiskReason schemas.
• Quote type: string certain enum values (Prism version number strings, Freddie Mac "yes/no" API string responses) that YAML parsers were coercing to numbers or booleans.
• Expose /cra/report/get and its request/response schemas in generated client libraries. The endpoint remains hidden from public documentation.

2020-09-14_1.705.3

• Document the ip_address field on the /identity_verification/create user object: accepted only here (not via /link/token/create) and captured automatically by the Link SDK, for backend-only integrations that need IP-based risk checks.

2020-09-14_1.705.2

• Clarified the /oauth/token response token_type description (it is Bearer for OAuth access tokens); dropped the inaccurate "always Bearer" wording.

2020-09-14_1.705.1

• internal changes only

2020-09-14_1.705.0

• Type the product field of the CraReportUpdatedWebhook (CRA_REPORT/CRA_REPORT_UPDATED) successful_products/failed_products entries against the Products enum instead of a free-form string, matching the sibling /cra/report/get product schemas.

2020-09-14_1.704.2

• internal changes only

... (truncated)

Commits

• f4b58a9 OpenAPI generated code at 2026-07-24T18:30:09Z (#542)
• 69a294c OpenAPI generated code at 2026-07-22T23:22:19Z (#541)
• bd0ef5e OpenAPI generated code at 2026-06-25T19:12:04Z (#539)
• 1ff7a66 OpenAPI generated code at 2026-04-27T17:52:12Z (#538)
• 0e4ce48 OpenAPI generated code at 2026-04-17T20:27:08Z (#537)
• fd31c3b OpenAPI generated code at 2026-04-02T21:34:05Z (#536)
• 3784053 OpenAPI generated code at 2026-03-04T22:53:09Z (#535)
• bc6bba3 OpenAPI generated code at 2026-02-18T22:44:20Z (#534)
• e70aff6 OpenAPI generated code at 2026-02-17T19:14:23Z (#533)
• 769d840 OpenAPI generated code at 2026-01-26T16:48:05Z (#532)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)