protect_session_id is no longer accepted

What changed

Usually ignored rather than rejected, so the call succeeds and does something subtly different.

Affects protect_session_id on ProtectEvent reachable from 1 operation. Grep for it: nothing else will tell you.

Who is affected

Code that sends Plaid's ProtectEvent objects, used by 1 Plaid operation.

Before and after

Code that breaks

await client.post("/…", {
  // protect_session_id is now ignored, not rejected
  protect_session_id: value,
});

Based on Plaid’s published API specification. How severity is decided.