Driftwatch

Plaid / Plaid API (2020-09-14) /

Breakingdirection flip: their tools call this safe

Response field postal_code is no longer guaranteed

What changed

Producer-side tools call this non-breaking. For a consumer it is a null dereference on an unknown future date.

Affects postal_code on ClientUserIdentityAddress reachable from 3 operations. Nothing fails at the call; it fails wherever the value is finally used, which is usually somewhere else entirely.

no longer guaranteed present; can now be null

Who is affected

Code that reads Plaid's ClientUserIdentityAddress objects, used by 3 Plaid operations.

Before and after

WhereBeforeAfter
ClientUserIdentityAddress.postal_codealways presentmay be missingno longer guaranteed present
ClientUserIdentityAddress.postal_codestringnull|stringcan now be null

Code that breaks

// response.postal_code may now be absent or null
const postal_code = response.postal_code ?? fallback;

Based on Plaid’s published API specification. How severity is decided.