Skip to content

build(deps): bump ai from 7.0.90 to 7.0.93 - #137

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/ai-7.0.93
Open

build(deps): bump ai from 7.0.90 to 7.0.93#137
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/ai-7.0.93

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps ai from 7.0.90 to 7.0.93.

Changelog

Sourced from ai's changelog.

7.0.93

Patch Changes

  • df6c009: fix(ai): use new message ID when replacing a message in sendMessage
  • 6ee74a3: fix(ai): preserve tool part titles when validating UI messages
  • f13d371: fix(ai): preserve provider metadata when converting failed tool calls
  • d4485fe: feat(ai): support minItems and maxItems in array outputs
  • 4f201cc: chore(ai): formally include already supported onLanguageModelCallStart and onLanguageModelCallEnd in ToolLoopAgentSettings type
  • 8cdb2a7: fix(ai): decode text data URLs in Node.js
  • 0f2281e: fix(ai): reject embedding responses whose count does not match the input values
  • fc8e8ac: fix(ai): preserve image call diagnostics when no image is generated
  • ee8391e: fix(ai): support abort signals when the global AbortSignal is not a constructor
  • Updated dependencies [3cfc1fc]
    • @​ai-sdk/gateway@​4.0.75

7.0.92

Patch Changes

  • a51cc94: fix(ai): preserve provider metadata from empty smooth stream deltas
  • d1904d3: fix(ai): surface fallback errors for empty HTTP response bodies
  • 84e5a79: fix(ai): skip smoothStream delays while the document is hidden
  • a8e8ad0: fix(ai): expose call ID and abort reason in streamText onAbort callbacks
  • Updated dependencies [a7e324b]
    • @​ai-sdk/gateway@​4.0.74

7.0.91

Patch Changes

  • 802af1e: Add configurable recovery for provider errors received after streamText response streaming begins. Explicitly configuring streamRetries enables isolated retry attempts, including one bounded callback-directed recovery through StreamTextOnErrorRetryCallback with streamRetries: 0; recovered results and metadata reflect only the successful attempt, while the existing StreamTextOnErrorCallback contract and logging-only observer behavior remain compatible.
  • Updated dependencies [5484f27]
  • Updated dependencies [36eb7ee]
  • Updated dependencies [622fa7f]
    • @​ai-sdk/gateway@​4.0.73
Commits
  • 6359fd5 Version Packages (#20288)
  • 6ee74a3 fix: tool-part titles disappearing during UI message validation (#20111)
  • df6c009 fix(ai): use new message ID when replacing a message in sendMessage (#20379)
  • 8cdb2a7 fix: decode valid text data URLs in Node.js (#20354)
  • 0f2281e fix: embedMany accepts provider responses with mismatched embedding counts (#...
  • fc8e8ac fix: NoImageGeneratedError discards per-call diagnostics for empty image resp...
  • f13d371 fix: Preserve namespaces when replaying failed tool calls from UI messages (#...
  • ee8391e fix: prevent valid abort signals from crashing WorkflowAgent in runtimes with...
  • 4f201cc chore(ai): formally include already supported onLanguageModelCallStart and ...
  • d4485fe feat: support minItems and maxItems constraints in Output.array() (#20270)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.


Summary by cubic

Bumps ai from 7.0.90 to 7.0.93, pulling in bug fixes plus minItems/maxItems support for array outputs. No migration steps needed.

  • Adds configurable retry recovery for provider errors after streamText streaming begins.
  • Fixes message replacement, tool part title preservation, provider metadata preservation, and Node.js text data URL decoding.
  • Updates @ai-sdk/gateway to 4.0.75.
  • The lockfile also syncs @cortexkit/opencode-openai-auth and @cortexkit/pi-openai-auth to 0.7.1.

Written for commit 66bbabc. Summary will update on new commits.

Review in cubic

Bumps [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) from 7.0.90 to 7.0.93.
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.93/packages/ai)

---
updated-dependencies:
- dependency-name: ai
  dependency-version: 7.0.93
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 9, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedai@​7.0.90 ⏵ 7.0.9399 +110010099100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants