Skip to content

build(deps): bump @ai-sdk/provider-utils, @ai-sdk/react and ai - #3496

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-ca64fbc12d
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-ca64fbc12d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @ai-sdk/provider-utils to 3.0.41 and updates ancestor dependencies @ai-sdk/provider-utils, @ai-sdk/react and ai. These dependencies need to be updated together.

Updates @ai-sdk/provider-utils from 3.0.18 to 3.0.41

Release notes

Sourced from @​ai-sdk/provider-utils's releases.

@​ai-sdk/zai@​3.0.24

Patch Changes

  • Updated dependencies [04be48f]
    • @​ai-sdk/openai-compatible@​3.0.62

@​ai-sdk/zai@​3.0.23

Patch Changes

  • Updated dependencies [8c65988]
  • Updated dependencies [527a163]
    • @​ai-sdk/provider@​4.0.21
    • @​ai-sdk/provider-utils@​5.0.53
    • @​ai-sdk/openai-compatible@​3.0.61

@​ai-sdk/zai@​3.0.22

Patch Changes

  • ede5b89: chore: migrate package builds from tsup to tsdown
  • Updated dependencies [ede5b89]
    • @​ai-sdk/openai-compatible@​3.0.60
    • @​ai-sdk/provider@​4.0.20
    • @​ai-sdk/provider-utils@​5.0.52
Changelog

Sourced from @​ai-sdk/provider-utils's changelog.

3.0.41

Patch Changes

  • 2b1c2df: Keep default Node.js downloads protected by DNS validation and connection pinning when frameworks or instrumentation wrap global fetch before or after the SDK loads.
  • 2b1c2df: fix(mcp): prevent SSRF in OAuth metadata discovery
  • 2b1c2df: fix(provider-utils): make lazy Undici import visible to deployment tracers

3.0.40

Patch Changes

  • 14810cb: fix(provider-utils): preserve streamed tool calls with unreliable IDs and indices

3.0.39

Patch Changes

  • bf29419: chore: enable dead code lint rules

3.0.38

Patch Changes

  • Updated dependencies [594787e]
    • @​ai-sdk/provider@​2.0.5

3.0.37

Patch Changes

  • ab3990f: fix(provider-utils): avoid excessive memory usage when base64 encoding byte arrays
  • Updated dependencies [c2089a9]
    • @​ai-sdk/provider@​2.0.4

3.0.36

Patch Changes

  • 26165ee: Mark transient network errors that occur while reading successful response bodies as retryable, including AI Gateway responses.

3.0.35

Patch Changes

  • 77d33c0: Split OpenAI and Azure OpenAI embedding requests by a conservative UTF-8 byte budget derived from their aggregate token limit, in addition to input count limits.

3.0.34

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/provider-utils since your current version.


Updates @ai-sdk/react from 2.0.104 to 2.0.274

Changelog

Sourced from @​ai-sdk/react's changelog.

2.0.274

Patch Changes

  • Updated dependencies [2b1c2df]
  • Updated dependencies [2b1c2df]
  • Updated dependencies [2b1c2df]
    • ai@5.0.271
    • @​ai-sdk/provider-utils@​3.0.41

2.0.273

Patch Changes

  • Updated dependencies [1849a5f]
  • Updated dependencies [5381c08]
  • Updated dependencies [06e8d1c]
  • Updated dependencies [58d303f]
  • Updated dependencies [430ae0a]
    • ai@5.0.270

2.0.272

Patch Changes

  • Updated dependencies [11f5cda]
    • ai@5.0.269

2.0.271

Patch Changes

  • Updated dependencies [dfffb7e]
  • Updated dependencies [1d0096a]
  • Updated dependencies [14810cb]
    • ai@5.0.268
    • @​ai-sdk/provider-utils@​3.0.40

2.0.270

Patch Changes

  • ai@5.0.267

2.0.269

Patch Changes

  • ai@5.0.266

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/react since your current version.


Updates ai from 5.0.104 to 5.0.271

Release notes

Sourced from ai's releases.

ai@5.0.271

Patch Changes

  • 2b1c2df: Keep default Node.js downloads protected by DNS validation and connection pinning when frameworks or instrumentation wrap global fetch before or after the SDK loads.
  • Updated dependencies [0fa5517]
  • Updated dependencies [2b1c2df]
  • Updated dependencies [2b1c2df]
  • Updated dependencies [2b1c2df]
    • @​ai-sdk/gateway@​2.0.162
    • @​ai-sdk/provider-utils@​3.0.41

ai@5.0.270

Patch Changes

  • 1849a5f: fix(ai): preserve hydrated partial static tool input across stream resumptions
  • 5381c08: fix(ai): keep idle UI message streams open with optional SSE heartbeats
  • 06e8d1c: Encode chat IDs in default stream reconnection URLs so slashes, query delimiters, and fragments stay within the ID. Reject standalone . and .. IDs before fetching. Custom URLs returned by prepareReconnectToStreamRequest remain unchanged.
  • 58d303f: Preserve prototype-named tools, providers, and provider metadata as own properties without changing lookup object prototypes. Prevent inherited names from resolving as registered providers or causing image metadata aggregation to fail.
  • 430ae0a: Prevent automatic chat resumption when completed tool output is followed by terminal text without a completed stream state, while preserving resumption after completed model text.
  • Updated dependencies [07e394b]
  • Updated dependencies [b6cf409]
    • @​ai-sdk/gateway@​2.0.161
Changelog

Sourced from ai's changelog.

5.0.271

Patch Changes

  • 2b1c2df: Keep default Node.js downloads protected by DNS validation and connection pinning when frameworks or instrumentation wrap global fetch before or after the SDK loads.
  • Updated dependencies [0fa5517]
  • Updated dependencies [2b1c2df]
  • Updated dependencies [2b1c2df]
  • Updated dependencies [2b1c2df]
    • @​ai-sdk/gateway@​2.0.162
    • @​ai-sdk/provider-utils@​3.0.41

5.0.270

Patch Changes

  • 1849a5f: fix(ai): preserve hydrated partial static tool input across stream resumptions
  • 5381c08: fix(ai): keep idle UI message streams open with optional SSE heartbeats
  • 06e8d1c: Encode chat IDs in default stream reconnection URLs so slashes, query delimiters, and fragments stay within the ID. Reject standalone . and .. IDs before fetching. Custom URLs returned by prepareReconnectToStreamRequest remain unchanged.
  • 58d303f: Preserve prototype-named tools, providers, and provider metadata as own properties without changing lookup object prototypes. Prevent inherited names from resolving as registered providers or causing image metadata aggregation to fail.
  • 430ae0a: Prevent automatic chat resumption when completed tool output is followed by terminal text without a completed stream state, while preserving resumption after completed model text.
  • Updated dependencies [07e394b]
  • Updated dependencies [b6cf409]
    • @​ai-sdk/gateway@​2.0.161

5.0.269

Patch Changes

  • 11f5cda: Preserve provider metadata on corresponding smoothStream chunks without carrying it into subsequent metadata-free deltas.

5.0.268

Patch Changes

  • dfffb7e: fix(ai): cancel response streams when clients disconnect
  • 1d0096a: fix(ai): continue active UI message parts when resuming after a disconnect
  • Updated dependencies [6dc04c5]
  • Updated dependencies [14810cb]
    • @​ai-sdk/gateway@​2.0.160
    • @​ai-sdk/provider-utils@​3.0.40

5.0.267

Patch Changes

  • Updated dependencies [3569298]
    • @​ai-sdk/gateway@​2.0.159

5.0.266

... (truncated)

Commits
  • 99bce4f Version Packages (#21839)
  • 2b1c2df Backport: fix(mcp, provider-utils): DNS-pinned MCP OAuth fetches under wrappe...
  • 191bd07 Version Packages (#21669)
  • 89dd246 [v5] chore(ai): raise bundle size limit to 565 KB (#21803)
  • 5381c08 [v5.0] fix: idle UI message streams failing to flush promptly or remain open ...
  • 1849a5f [v5.0] fix: resume hydrated partial static tool calls without losing streamin...
  • 430ae0a [v5.0] fix: prevent unexpected chat resumption after terminal text follows a ...
  • 06e8d1c fix(ai): backport reconnect chat ID encoding to v5 (#21662)
  • 58d303f fix(ai,mcp): backport prototype-safe maps to v5 (#21659)
  • 7947722 Version Packages (#21652)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ai since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 8, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Sep 8, 2026 •

Copy link
Copy Markdown

Deploying waveterm with  Cloudflare Pages  Cloudflare Pages

Latest commit: 0515843
Status: ✅  Deploy successful!
Preview URL: https://face74ab.waveterm.pages.dev
Branch Preview URL: https://dependabot-npm-and-yarn-mult-suf4.waveterm.pages.dev

View logs

@dependabot dependabot Bot changed the title Bump @ai-sdk/provider-utils, @ai-sdk/react and ai build(deps): bump @ai-sdk/provider-utils, @ai-sdk/react and ai Sep 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-ca64fbc12d branch from ac75ba7 to b32283c Compare September 25, 2026 03:37
@coderabbitai

coderabbitai Bot commented Sep 25, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Advanced

Run ID: 995b071f-6831-4567-903e-d8f8d32e82b6

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot dependabot Bot changed the title build(deps): bump @ai-sdk/provider-utils, @ai-sdk/react and ai Bump @ai-sdk/provider-utils, @ai-sdk/react and ai Sep 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-ca64fbc12d branch 2 times, most recently from 05e2c65 to d0d0104 Compare September 25, 2026 04:54
@dependabot dependabot Bot changed the title Bump @ai-sdk/provider-utils, @ai-sdk/react and ai build(deps): bump @ai-sdk/provider-utils, @ai-sdk/react and ai Sep 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-ca64fbc12d branch 2 times, most recently from 6e800f3 to b0ad19f Compare September 25, 2026 16:27
Bumps [@ai-sdk/provider-utils](https://github.com/vercel/ai/tree/HEAD/packages/provider-utils) to 3.0.41 and updates ancestor dependencies [@ai-sdk/provider-utils](https://github.com/vercel/ai/tree/HEAD/packages/provider-utils), [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) and [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai). These dependencies need to be updated together.


Updates `@ai-sdk/provider-utils` from 3.0.18 to 3.0.41
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/provider-utils@3.0.41/packages/provider-utils/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/provider-utils@3.0.41/packages/provider-utils)

Updates `@ai-sdk/react` from 2.0.104 to 2.0.274
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/react@2.0.274/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@2.0.274/packages/react)

Updates `ai` from 5.0.104 to 5.0.271
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@5.0.271/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@5.0.271/packages/ai)

---
updated-dependencies:
- dependency-name: "@ai-sdk/provider-utils"
  dependency-version: 3.0.36
  dependency-type: indirect
- dependency-name: "@ai-sdk/react"
  dependency-version: 2.0.256
  dependency-type: direct:production
- dependency-name: ai
  dependency-version: 5.0.253
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-ca64fbc12d branch from b0ad19f to 0515843 Compare October 2, 2026 01:20

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants