Skip to content

build(deps): bump ai from 7.0.147 to 7.0.153 - #241

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/ai-7.0.153
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/ai-7.0.153

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026 •

Copy link
Copy Markdown
Contributor

Bumps ai from 7.0.147 to 7.0.153.

Changelog

Sourced from ai's changelog.

7.0.153

Patch Changes

  • 5475347: Fix non-streaming Responses API structured output failing when multiple assistant messages contain JSON. Providers can supply separate structured-output text for parsing, allowing OpenAI and Azure Responses models to select the last final_answer while preserving all generated content, annotations, conversation history, and token usage.
  • Updated dependencies [5475347]
  • Updated dependencies [e729d58]
    • @​ai-sdk/provider@​4.0.34
    • @​ai-sdk/provider-utils@​5.0.68
    • @​ai-sdk/gateway@​4.0.126

7.0.152

Patch Changes

  • Updated dependencies [a706678]
    • @​ai-sdk/gateway@​4.0.125

7.0.151

Patch Changes

  • Updated dependencies [1bf6d85]
    • @​ai-sdk/gateway@​4.0.124

7.0.150

Patch Changes

  • 8e18d59: feat(ai): add experimental_streamSpeech

    Streams speech audio from a string, or an array, iterable, or stream of text deltas and/or text parts (each with an optional voice and providerOptions) using speech models that implement the experimental Experimental_StreamingSpeechModelV4 extension. Returns a single-consumer audioStream / fullStream plus usage, warnings, responses, and providerMetadata promises. Provider error parts are non-fatal and reported through onError (default console.error). A user abort or a cancel rejects the result promises immediately. Exports the Experimental_SpeechTextPart, Experimental_SpeechStreamPart, Experimental_SpeechStreamUsage, and Experimental_StreamSpeechResult types, adds an optional cause to NoSpeechGeneratedError, and adds Experimental_MockStreamingSpeechModelV4 to ai/test.

  • Updated dependencies [8202f5b]

  • Updated dependencies [85d84a1]

    • @​ai-sdk/gateway@​4.0.123
    • @​ai-sdk/provider-utils@​5.0.67
    • @​ai-sdk/provider@​4.0.33

7.0.149

Patch Changes

  • 1727442: fix(ai): process only the first approval response per tool call, so repeated or conflicting responses in the final tool message no longer execute a tool twice or both execute and deny it

  • 0a5d0e7: Fix toolChoice: 'none' by forwarding it to the Hugging Face Responses API and rejecting tool calls before local execution in generateText, streamText, and WorkflowAgent. Streamed tool parts are withheld so client-side tools cannot act on them, and repairToolCall and experimental_refineToolInput are not invoked for rejected tool calls.

  • 10026d1: Add the interrupted finish reason for provider streams that end without a completion signal. Preserve partial output without introducing an error solely for interruption, and stop tool execution, agent continuation, and automatic UI follow-ups for interrupted responses, including late tool results and approvals. Provider detection and emission will be added separately.

    Compatibility notice: Adding interrupted to the public finish-reason types can break type checking after upgrading, even though this is a patch release. Exhaustive switches (for example, using an assertNever fallback) and mappings such as Record<FinishReason, string> must handle the new value. Update any custom validation or application logic that assumes the existing set of finish reasons is exhaustive.

    When providers begin emitting interrupted, a stream ending without a completion signal will preserve partial output and report this finish reason without emitting an error solely for the interruption. Applications that need to detect incomplete responses should check finishReason === 'interrupted' as well as their existing error handling.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Bumps ai from 7.0.147 to 7.0.153 in packages/opencode, updating the lockfile and transitive dependencies (@ai-sdk/gateway, @ai-sdk/provider, @ai-sdk/provider-utils). Brings fixes for toolChoice: 'none', structured output parsing for OpenAI/Azure Responses, and an experimental streamSpeech API.

Compatibility notice: The new interrupted finish reason may break type checks that assume an exhaustive set of finish reasons. Update Record<FinishReason, ...> mappings and assertNever switches.

Written for commit f7125a5. Summary will update on new commits.

View guided diff Turn on auto-fix

Bumps [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) from 7.0.147 to 7.0.153.
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.153/packages/ai)

---
updated-dependencies:
- dependency-name: ai
  dependency-version: 7.0.153
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 28, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedai@​7.0.147 ⏵ 7.0.15399 +110010099100

View full report

@dependabot @github

dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like ai is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 28, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/ai-7.0.153 branch October 28, 2026 02:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants