release: 0.140.0

.github/workflows/ci.yml

@@ -21,10 +21,10 @@ jobs:
     runs-on: ${{ github.repository == 'stainless-sdks/lithic-typescript' && 'depot-ubuntu-24.04' || 'ubuntu-latest' }}
     if: (github.event_name == 'push' || github.event.pull_request.head.repo.fork) && (github.event_name != 'push' || github.event.head_commit.message != 'codegen metadata')
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: '22'
 
@@ -43,10 +43,10 @@ jobs:
       contents: read
       id-token: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: '22'
 
@@ -61,7 +61,7 @@ jobs:
           github.repository == 'stainless-sdks/lithic-typescript' &&
           !startsWith(github.ref, 'refs/heads/stl/')
         id: github-oidc
-        uses: actions/github-script@v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: core.setOutput('github_token', await core.getIDToken());
 
@@ -91,10 +91,10 @@ jobs:
     runs-on: ${{ github.repository == 'stainless-sdks/lithic-typescript' && 'depot-ubuntu-24.04' || 'ubuntu-latest' }}
     if: github.event_name == 'push' || github.event.pull_request.head.repo.fork
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: '22'
 

.github/workflows/publish-npm.yml

@@ -21,10 +21,10 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1
         with:
           node-version: '20'
 

.github/workflows/release-doctor.yml

@@ -12,7 +12,7 @@ jobs:
     if: github.repository == 'lithic-com/lithic-node' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch' || startsWith(github.head_ref, 'release-please') || github.head_ref == 'next')
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Check release environment
         run: |

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.139.0"
+  ".": "0.140.0"
 }

.stats.yml

@@ -1,4 +1,4 @@
-configured_endpoints: 193
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/lithic/lithic-00f07b0edcc0c3c5ef79920ced7f58dac2434df5e4c27ff6041783e8228315f9.yml
-openapi_spec_hash: 963688b09480159a06865075c94a2577
-config_hash: 265a2b679964f4ad5706de101ad2a942
+configured_endpoints: 194
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/lithic/lithic-26d81470c7f745ed62524638a09233f19280a1d386ae1041e41fa0f3f58fc59b.yml
+openapi_spec_hash: 8d6111c35fddd5b9e291ecc0f9a4b206
+config_hash: 1c5c139a2aa0d1d45c063f953a9bc803

CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 0.140.0 (2026-05-15)
+
+Full Changelog: [v0.139.0...v0.140.0](https://github.com/lithic-com/lithic-node/compare/v0.139.0...v0.140.0)
+
+### Features
+
+* **api:** add card_authorization.challenge webhook event ([aa5e447](https://github.com/lithic-com/lithic-node/commit/aa5e44751b46b22055da3691529cae688f6d6ce5))
+
+
+### Bug Fixes
+
+* **api:** Change conditional value numeric type from integer to number ([6e86c29](https://github.com/lithic-com/lithic-node/commit/6e86c2959478dae721d835a3816b7cc599927131))
+
+
+### Documentation
+
+* **api:** clarify ACCOUNT_AGE attribute in auth rules v2 ([a492725](https://github.com/lithic-com/lithic-node/commit/a492725ac836e570ede0091904b38040d0b44446))
+
 ## 0.139.0 (2026-05-08)
 
 Full Changelog: [v0.138.0...v0.139.0](https://github.com/lithic-com/lithic-node/compare/v0.138.0...v0.139.0)

api.md

@@ -232,6 +232,16 @@ Methods:
 - <code title="get /v1/cards/{card_token}/financial_transactions/{financial_transaction_token}">client.cards.financialTransactions.<a href="./src/resources/cards/financial-transactions.ts">retrieve</a>(financialTransactionToken, { ...params }) -> FinancialTransaction</code>
 - <code title="get /v1/cards/{card_token}/financial_transactions">client.cards.financialTransactions.<a href="./src/resources/cards/financial-transactions.ts">list</a>(cardToken, { ...params }) -> FinancialTransactionsSinglePage</code>
 
+# CardAuthorizations
+
+Types:
+
+- <code><a href="./src/resources/card-authorizations.ts">CardAuthorization</a></code>
+
+Methods:
+
+- <code title="post /v1/card_authorizations/{event_token}/challenge_response">client.cardAuthorizations.<a href="./src/resources/card-authorizations.ts">challengeResponse</a>(eventToken, { ...params }) -> void</code>
+
 # CardBulkOrders
 
 Types:
@@ -808,6 +818,7 @@ Types:
 - <code><a href="./src/resources/webhooks.ts">AccountHolderVerificationWebhookEvent</a></code>
 - <code><a href="./src/resources/webhooks.ts">AccountHolderDocumentUpdatedWebhookEvent</a></code>
 - <code><a href="./src/resources/webhooks.ts">CardAuthorizationApprovalRequestWebhookEvent</a></code>
+- <code><a href="./src/resources/webhooks.ts">CardAuthorizationChallengeWebhookEvent</a></code>
 - <code><a href="./src/resources/webhooks.ts">CardAuthorizationChallengeResponseWebhookEvent</a></code>
 - <code><a href="./src/resources/webhooks.ts">AuthRulesBacktestReportCreatedWebhookEvent</a></code>
 - <code><a href="./src/resources/webhooks.ts">BalanceUpdatedWebhookEvent</a></code>

package.json

@@ -1,6 +1,6 @@
 {
   "name": "lithic",
-  "version": "0.139.0",
+  "version": "0.140.0",
   "description": "The official TypeScript library for the Lithic API",
   "author": "Lithic <sdk-feedback@lithic.com>",
   "types": "dist/index.d.ts",

packages/mcp-server/manifest.json

@@ -1,7 +1,7 @@
 {
   "dxt_version": "0.2",
   "name": "lithic-mcp",
-  "version": "0.139.0",
+  "version": "0.140.0",
   "description": "The official MCP Server for the Lithic API",
   "author": {
     "name": "Lithic",

packages/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lithic-mcp",
-  "version": "0.139.0",
+  "version": "0.140.0",
   "description": "The official MCP Server for the Lithic API",
   "author": "Lithic <sdk-feedback@lithic.com>",
   "types": "dist/index.d.ts",

packages/mcp-server/src/code-tool-worker.ts

@@ -167,6 +167,7 @@ const fuse = new Fuse(
     'client.cards.balances.list',
     'client.cards.financialTransactions.list',
     'client.cards.financialTransactions.retrieve',
+    'client.cardAuthorizations.challengeResponse',
     'client.cardBulkOrders.create',
     'client.cardBulkOrders.list',
     'client.cardBulkOrders.retrieve',