Skip to content

chore(deps): bump ai from 5.0.52 to 6.0.172#100

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/ai-6.0.171
Apr 30, 2026
Merged

chore(deps): bump ai from 5.0.52 to 6.0.172#100
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/ai-6.0.171

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 30, 2026

Bumps ai from 5.0.52 to 6.0.172.

Release notes

Sourced from ai's releases.

ai@6.0.172

Patch Changes

  • Updated dependencies [982af78]
    • @​ai-sdk/gateway@​3.0.107

ai@6.0.171

Patch Changes

  • 48f842a: fix(ai): enforce callOptionsSchema at runtime in ToolLoopAgent

    ToolLoopAgentSettings.callOptionsSchema was declared and documented as a runtime schema for options, but tool-loop-agent.ts never invoked it. Any invariant a developer encoded in the schema was silently bypassed at runtime, and unchecked options flowed straight into prepareCall and any instructions template that interpolated them.

    ToolLoopAgent.prepareCall now validates caller-supplied options against callOptionsSchema (when set) via safeValidateTypes, throwing InvalidArgumentError on failure before forwarding to prepareCall / generateText / streamText.

  • a727da4: chore: ensure consistent import handling and avoid import duplicates or cycles

  • 5fee301: fix(mcp): prevent prototype pollution by using secureJsonParse

  • Updated dependencies [a727da4]

    • @​ai-sdk/provider-utils@​4.0.25
    • @​ai-sdk/provider@​3.0.10
    • @​ai-sdk/gateway@​3.0.106

ai@5.0.182

Patch Changes

  • Updated dependencies [8374557]
    • @​ai-sdk/gateway@​2.0.85

ai@5.0.181

Patch Changes

  • 783fa6c: chore: ensure consistent import handling and avoid import duplicates or cycles
  • c327fb9: fix(mcp): prevent prototype pollution by using secureJsonParse
  • Updated dependencies [783fa6c]
    • @​ai-sdk/provider-utils@​3.0.25
    • @​ai-sdk/provider@​2.0.3
    • @​ai-sdk/gateway@​2.0.84
Changelog

Sourced from ai's changelog.

6.0.172

Patch Changes

  • Updated dependencies [982af78]
    • @​ai-sdk/gateway@​3.0.107

6.0.171

Patch Changes

  • 48f842a: fix(ai): enforce callOptionsSchema at runtime in ToolLoopAgent

    ToolLoopAgentSettings.callOptionsSchema was declared and documented as a runtime schema for options, but tool-loop-agent.ts never invoked it. Any invariant a developer encoded in the schema was silently bypassed at runtime, and unchecked options flowed straight into prepareCall and any instructions template that interpolated them.

    ToolLoopAgent.prepareCall now validates caller-supplied options against callOptionsSchema (when set) via safeValidateTypes, throwing InvalidArgumentError on failure before forwarding to prepareCall / generateText / streamText.

  • a727da4: chore: ensure consistent import handling and avoid import duplicates or cycles

  • 5fee301: fix(mcp): prevent prototype pollution by using secureJsonParse

  • Updated dependencies [a727da4]

    • @​ai-sdk/provider-utils@​4.0.25
    • @​ai-sdk/provider@​3.0.10
    • @​ai-sdk/gateway@​3.0.106

6.0.170

Patch Changes

  • 19d587a: fix(ai): add allowSystemInMessages option and warn by default when system messages are found in prompt or messages

6.0.169

Patch Changes

  • 2662bb5: skip validation for tool parts in terminal states when tool schema is no longer registered
  • a7f3c72: trigger release for all packages after provenance setup
  • Updated dependencies [a7f3c72]
  • Updated dependencies [4368079]
  • Updated dependencies [c71ad14]
    • @​ai-sdk/gateway@​3.0.105
    • @​ai-sdk/provider@​3.0.9
    • @​ai-sdk/provider-utils@​4.0.24

6.0.168

Patch Changes

  • Updated dependencies [493d7d4]
    • @​ai-sdk/gateway@​3.0.104

... (truncated)

Commits
  • 29c80ec Version Packages (#14868)
  • 8e650ab Version Packages (#14824)
  • 48f842a backport v6: fix(ai): enforce callOptionsSchema at runtime in ToolLoopAgent (...
  • a727da4 backport of chore: ensure consistent import handling and avoid import duplica...
  • 5fee301 backport v6: fix(mcp): prevent prototype pollution by using secureJsonParse (...
  • 7ab1e18 Version Packages (#14815)
  • 19d587a v6: fix(ai): warn about system messages in messages or prompt (#14810)
  • 77a4e05 Version Packages (#14802)
  • a7f3c72 Re-enable v6 releases (#14799)
  • 2662bb5 Backport: fix(ai): skip tool validation for terminal states when schema is mi...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ai since your current version.


@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 30, 2026

Labels

The following labels could not be found: auto-merge, dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@byteworthy
Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot dependabot Bot changed the title chore(deps): bump ai from 5.0.52 to 6.0.171 chore(deps): bump ai from 5.0.52 to 6.0.172 Apr 30, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/ai-6.0.171 branch from 34fda2b to 2fd435f Compare April 30, 2026 23:03
Bumps [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) from 5.0.52 to 6.0.172.
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@6.0.172/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@6.0.172/packages/ai)

---
updated-dependencies:
- dependency-name: ai
  dependency-version: 6.0.171
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/ai-6.0.171 branch from 2fd435f to 084965e Compare April 30, 2026 23:08
@github-actions github-actions Bot merged commit 9078b75 into main Apr 30, 2026
4 of 6 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/ai-6.0.171 branch April 30, 2026 23:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant