release: 0.140.0

.github/workflows/ci.yml

@@ -21,10 +21,10 @@ jobs:
     runs-on: ${{ github.repository == 'stainless-sdks/lithic-typescript' && 'depot-ubuntu-24.04' || 'ubuntu-latest' }}
     if: (github.event_name == 'push' || github.event.pull_request.head.repo.fork) && (github.event_name != 'push' || github.event.head_commit.message != 'codegen metadata')
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: '22'
 
@@ -43,10 +43,10 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: '22'
 
@@ -61,7 +61,7 @@ jobs:
           github.repository == 'stainless-sdks/lithic-typescript' &&
           !startsWith(github.ref, 'refs/heads/stl/')
         id: github-oidc
-        uses: actions/github-script@v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: core.setOutput('github_token', await core.getIDToken());
 
@@ -91,10 +91,10 @@ jobs:
     runs-on: ${{ github.repository == 'stainless-sdks/lithic-typescript' && 'depot-ubuntu-24.04' || 'ubuntu-latest' }}
     if: github.event_name == 'push' || github.event.pull_request.head.repo.fork
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: '22'
 

.github/workflows/publish-npm.yml

@@ -21,10 +21,10 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1
         with:
           node-version: '20'
 

.github/workflows/release-doctor.yml

@@ -12,7 +12,7 @@ jobs:
     if: github.repository == 'lithic-com/lithic-node' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch' || startsWith(github.head_ref, 'release-please') || github.head_ref == 'next')
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Check release environment
         run: |

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.139.0"
+  ".": "0.140.0"
 }

.stats.yml

@@ -1,4 +1,4 @@
-configured_endpoints: 193
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/lithic/lithic-00f07b0edcc0c3c5ef79920ced7f58dac2434df5e4c27ff6041783e8228315f9.yml
-openapi_spec_hash: 963688b09480159a06865075c94a2577
-config_hash: 265a2b679964f4ad5706de101ad2a942
+configured_endpoints: 195
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/lithic/lithic-efe780032e44b3cf0f6914407e43bce6aa7176fa50aa6ec018f93c1f28af8490.yml
+openapi_spec_hash: fcb4ca53ca59978f23f21d7c74fcc0b0
+config_hash: a0a579b0564a5c18568a78f5ba2b6653

CHANGELOG.md

@@ -1,5 +1,36 @@
 # Changelog
 
+## 0.140.0 (2026-05-26)
+
+Full Changelog: [v0.139.0...v0.140.0](https://github.com/lithic-com/lithic-node/compare/v0.139.0...v0.140.0)
+
+### Features
+
+* **api:** add card_authorization.challenge webhook event ([aa5e447](https://github.com/lithic-com/lithic-node/commit/aa5e44751b46b22055da3691529cae688f6d6ce5))
+* **api:** add INVALID_PAN decline reason to tokenizations ([f0eb327](https://github.com/lithic-com/lithic-node/commit/f0eb327cd86e7c7e30a638c21730ae8b66702462))
+* **api:** add method field, DECLINED status, OUT_OF_BAND support to card authorization challenges ([79c9536](https://github.com/lithic-com/lithic-node/commit/79c953636648586dfb86bec7af468ae36ca52a51))
+* **api:** add pause method to external_bank_accounts ([5f3dea5](https://github.com/lithic-com/lithic-node/commit/5f3dea57b07b6262adf87eb6e216e98f21b0cabf))
+* **api:** Add schemas for authorization adjustment rules ([d439bf0](https://github.com/lithic-com/lithic-node/commit/d439bf0501982f64dfcd3419e75397f2f7b0e6d3))
+
+
+### Bug Fixes
+
+* **api:** Change conditional value numeric type from integer to number ([6e86c29](https://github.com/lithic-com/lithic-node/commit/6e86c2959478dae721d835a3816b7cc599927131))
+* **types:** add null to parent_company, external_id, naics_code in account-holders ([4ef1a13](https://github.com/lithic-com/lithic-node/commit/4ef1a1308569bd8f1e6edb24ea7bb2a403a0edf6))
+* **typescript:** upgrade tsc-multi so that it works with Node 26 ([560e785](https://github.com/lithic-com/lithic-node/commit/560e785352d9abad5a580d4645330c77c23dad75))
+* **types:** expand enums and add nullability across balance/statement/report types ([cfdea1a](https://github.com/lithic-com/lithic-node/commit/cfdea1a9a1766656214a5ac8ed3e50ef50a497df))
+* **types:** make cardholder_currency nullable in CardProgram ([4367c8f](https://github.com/lithic-com/lithic-node/commit/4367c8f57b78dde57ce1524795629bd25584c111))
+
+
+### Chores
+
+* **tests:** remove redundant File import ([71e2edc](https://github.com/lithic-com/lithic-node/commit/71e2edcacfb63a0ecfb12ad7a953caffc1dd891c))
+
+
+### Documentation
+
+* **api:** clarify ACCOUNT_AGE attribute in auth rules v2 ([a492725](https://github.com/lithic-com/lithic-node/commit/a492725ac836e570ede0091904b38040d0b44446))
+
 ## 0.139.0 (2026-05-08)
 
 Full Changelog: [v0.138.0...v0.139.0](https://github.com/lithic-com/lithic-node/compare/v0.138.0...v0.139.0)

api.md

@@ -96,6 +96,7 @@ Types:
 - <code><a href="./src/resources/auth-rules/v2/v2.ts">ConditionalACHActionParameters</a></code>
 - <code><a href="./src/resources/auth-rules/v2/v2.ts">ConditionalAttribute</a></code>
 - <code><a href="./src/resources/auth-rules/v2/v2.ts">ConditionalAuthorizationActionParameters</a></code>
+- <code><a href="./src/resources/auth-rules/v2/v2.ts">ConditionalAuthorizationAdjustmentParameters</a></code>
 - <code><a href="./src/resources/auth-rules/v2/v2.ts">ConditionalBlockParameters</a></code>
 - <code><a href="./src/resources/auth-rules/v2/v2.ts">ConditionalCardTransactionUpdateActionParameters</a></code>
 - <code><a href="./src/resources/auth-rules/v2/v2.ts">ConditionalOperation</a></code>
@@ -232,6 +233,16 @@ Methods:
 - <code title="get /v1/cards/{card_token}/financial_transactions/{financial_transaction_token}">client.cards.financialTransactions.<a href="./src/resources/cards/financial-transactions.ts">retrieve</a>(financialTransactionToken, { ...params }) -> FinancialTransaction</code>
 - <code title="get /v1/cards/{card_token}/financial_transactions">client.cards.financialTransactions.<a href="./src/resources/cards/financial-transactions.ts">list</a>(cardToken, { ...params }) -> FinancialTransactionsSinglePage</code>
 
+# CardAuthorizations
+
+Types:
+
+- <code><a href="./src/resources/card-authorizations.ts">CardAuthorization</a></code>
+
+Methods:
+
+- <code title="post /v1/card_authorizations/{event_token}/challenge_response">client.cardAuthorizations.<a href="./src/resources/card-authorizations.ts">challengeResponse</a>(eventToken, { ...params }) -> void</code>
+
 # CardBulkOrders
 
 Types:
@@ -534,6 +545,7 @@ Methods:
 - <code title="get /v1/external_bank_accounts/{external_bank_account_token}">client.externalBankAccounts.<a href="./src/resources/external-bank-accounts/external-bank-accounts.ts">retrieve</a>(externalBankAccountToken) -> ExternalBankAccountRetrieveResponse</code>
 - <code title="patch /v1/external_bank_accounts/{external_bank_account_token}">client.externalBankAccounts.<a href="./src/resources/external-bank-accounts/external-bank-accounts.ts">update</a>(externalBankAccountToken, { ...params }) -> ExternalBankAccountUpdateResponse</code>
 - <code title="get /v1/external_bank_accounts">client.externalBankAccounts.<a href="./src/resources/external-bank-accounts/external-bank-accounts.ts">list</a>({ ...params }) -> ExternalBankAccountListResponsesCursorPage</code>
+- <code title="post /v1/external_bank_accounts/{external_bank_account_token}/pause">client.externalBankAccounts.<a href="./src/resources/external-bank-accounts/external-bank-accounts.ts">pause</a>(externalBankAccountToken) -> ExternalBankAccount</code>
 - <code title="post /v1/external_bank_accounts/{external_bank_account_token}/retry_micro_deposits">client.externalBankAccounts.<a href="./src/resources/external-bank-accounts/external-bank-accounts.ts">retryMicroDeposits</a>(externalBankAccountToken, { ...params }) -> ExternalBankAccountRetryMicroDepositsResponse</code>
 - <code title="post /v1/external_bank_accounts/{external_bank_account_token}/retry_prenote">client.externalBankAccounts.<a href="./src/resources/external-bank-accounts/external-bank-accounts.ts">retryPrenote</a>(externalBankAccountToken, { ...params }) -> ExternalBankAccount</code>
 - <code title="post /v1/external_bank_accounts/{external_bank_account_token}/set_verification_method">client.externalBankAccounts.<a href="./src/resources/external-bank-accounts/external-bank-accounts.ts">setVerificationMethod</a>(externalBankAccountToken, { ...params }) -> ExternalBankAccount</code>
@@ -808,6 +820,7 @@ Types:
 - <code><a href="./src/resources/webhooks.ts">AccountHolderVerificationWebhookEvent</a></code>
 - <code><a href="./src/resources/webhooks.ts">AccountHolderDocumentUpdatedWebhookEvent</a></code>
 - <code><a href="./src/resources/webhooks.ts">CardAuthorizationApprovalRequestWebhookEvent</a></code>
+- <code><a href="./src/resources/webhooks.ts">CardAuthorizationChallengeWebhookEvent</a></code>
 - <code><a href="./src/resources/webhooks.ts">CardAuthorizationChallengeResponseWebhookEvent</a></code>
 - <code><a href="./src/resources/webhooks.ts">AuthRulesBacktestReportCreatedWebhookEvent</a></code>
 - <code><a href="./src/resources/webhooks.ts">BalanceUpdatedWebhookEvent</a></code>

package.json

@@ -1,6 +1,6 @@
 {
   "name": "lithic",
-  "version": "0.139.0",
+  "version": "0.140.0",
   "description": "The official TypeScript library for the Lithic API",
   "author": "Lithic <sdk-feedback@lithic.com>",
   "types": "dist/index.d.ts",
@@ -45,7 +45,7 @@
     "publint": "^0.2.12",
     "ts-jest": "^29.1.0",
     "ts-node": "^10.5.0",
-    "tsc-multi": "https://github.com/stainless-api/tsc-multi/releases/download/v1.1.9/tsc-multi.tgz",
+    "tsc-multi": "https://github.com/stainless-api/tsc-multi/releases/download/v1.1.11/tsc-multi.tgz",
     "tsconfig-paths": "^4.0.0",
     "tslib": "^2.8.1",
     "typescript": "5.8.3",

packages/mcp-server/manifest.json

@@ -1,7 +1,7 @@
 {
   "dxt_version": "0.2",
   "name": "lithic-mcp",
-  "version": "0.139.0",
+  "version": "0.140.0",
   "description": "The official MCP Server for the Lithic API",
   "author": {
     "name": "Lithic",

packages/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lithic-mcp",
-  "version": "0.139.0",
+  "version": "0.140.0",
   "description": "The official MCP Server for the Lithic API",
   "author": "Lithic <sdk-feedback@lithic.com>",
   "types": "dist/index.d.ts",
@@ -74,7 +74,7 @@
     "ts-jest": "^29.1.0",
     "ts-morph": "^19.0.0",
     "ts-node": "^10.5.0",
-    "tsc-multi": "https://github.com/stainless-api/tsc-multi/releases/download/v1.1.9/tsc-multi.tgz",
+    "tsc-multi": "https://github.com/stainless-api/tsc-multi/releases/download/v1.1.11/tsc-multi.tgz",
     "tsconfig-paths": "^4.0.0"
   },
   "imports": {

packages/mcp-server/src/code-tool-worker.ts

@@ -167,6 +167,7 @@ const fuse = new Fuse(
     'client.cards.balances.list',
     'client.cards.financialTransactions.list',
     'client.cards.financialTransactions.retrieve',
+    'client.cardAuthorizations.challengeResponse',
     'client.cardBulkOrders.create',
     'client.cardBulkOrders.list',
     'client.cardBulkOrders.retrieve',
@@ -239,6 +240,7 @@ const fuse = new Fuse(
     'client.responderEndpoints.delete',
     'client.externalBankAccounts.create',
     'client.externalBankAccounts.list',
+    'client.externalBankAccounts.pause',
     'client.externalBankAccounts.retrieve',
     'client.externalBankAccounts.retryMicroDeposits',
     'client.externalBankAccounts.retryPrenote',