Skip to content

chore(deps): bump the ai-sdk group across 1 directory with 6 updates - #1012

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/javascript/ai-sdk-d3ba922238
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/javascript/ai-sdk-d3ba922238

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the ai-sdk group with 6 updates in the /javascript directory:

Package From To
@ai-sdk/openai 3.0.65 4.0.83
ai 6.0.190 7.0.127
@ai-sdk/amazon-bedrock 4.0.183 5.0.105
@ai-sdk/google 3.0.127 4.0.87
@ai-sdk/anthropic 3.0.41 4.0.71
@ai-sdk/xai 3.0.50 5.0.14

Updates @ai-sdk/openai from 3.0.65 to 4.0.83

Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.83

Patch Changes

  • 8c65988: feat(ai): add telemetry to speech generation and transcription, including provider usage propagation and experimental streaming lifecycle callbacks
  • Updated dependencies [8c65988]
  • Updated dependencies [527a163]
    • @​ai-sdk/provider@​4.0.21
    • @​ai-sdk/provider-utils@​5.0.53

4.0.82

Patch Changes

  • 040033b: feat(openai): add GPT-6.1 Sol model support
  • ede5b89: chore: migrate package builds from tsup to tsdown
  • Updated dependencies [ede5b89]
    • @​ai-sdk/provider@​4.0.20
    • @​ai-sdk/provider-utils@​5.0.52

4.0.81

Patch Changes

  • 4e94782: fix(openai): rewrite recursive Zod schemas that use allOf wrappers

4.0.80

Patch Changes

  • c2511c1: fix: use standards-compliant User-Agent header
  • Updated dependencies [c2511c1]
    • @​ai-sdk/provider-utils@​5.0.51

4.0.79

Patch Changes

  • e3605f6: Fix streamed tool calls with missing, blank, or repeated IDs.

  • 525efc5: feat(provider): advertise image model file and mask input support

    Use confirmed model IDs for capability declarations so unrecognized model names remain unknown. Include Together AI FLUX.2 Pro and Flex single-image editing, and allow asynchronous capability lookups and middleware overrides to resolve to unknown.

    Advertise QuiverAI Arrow 2 and Arrow 2 Telos file-input support, and mark Together AI Gemini image inputs unsupported by the current single-image request mapping.

... (truncated)

Commits

Updates ai from 6.0.190 to 7.0.127

Changelog

Sourced from ai's changelog.

7.0.127

Patch Changes

  • 158a718: feat(ai): select and rank eligible deferred tools via 'search()' callback in tool search
  • bb8d33e: fix(ai): cancel merged UI message streams when the consumer disconnects
  • 284dc11: fix(ai): accept unchanged tool approval inputs created in another JavaScript realm
  • ba8afe9: feat(ai): add a configurable maxResults for number of tools returned in tool search
  • Updated dependencies [d1bb9e8]
    • @​ai-sdk/gateway@​4.0.103

7.0.126

Patch Changes

  • 4f3d236: fix: clear tool approvals when addToolOutput runs

7.0.125

Patch Changes

  • ff3dcef: feat(ai): add convertDataPart to agent UI stream helpers

7.0.124

Patch Changes

  • 8c65988: feat(ai): add telemetry to speech generation and transcription, including provider usage propagation and experimental streaming lifecycle callbacks
  • Updated dependencies [8c65988]
  • Updated dependencies [e25994e]
  • Updated dependencies [527a163]
  • Updated dependencies [e74afc5]
    • @​ai-sdk/provider@​4.0.21
    • @​ai-sdk/provider-utils@​5.0.53
    • @​ai-sdk/gateway@​4.0.102

7.0.123

Patch Changes

  • 05cdac6: fix(ai): keep idle UI message streams open with optional SSE heartbeats
  • 4514fc1: fix(ai): prune all tool content when retaining zero trailing messages
  • ede5b89: chore: migrate package builds from tsup to tsdown
  • 2a625cf: fix(ai): preserve partial reasoning tags when streamed text parts end
  • 50a26d5: fix(ai): ignore pending tool approvals superseded by user messages
  • Updated dependencies [040033b]
  • Updated dependencies [ede5b89]
    • @​ai-sdk/gateway@​4.0.101
    • @​ai-sdk/provider@​4.0.20

... (truncated)

Commits
  • eb77f09 Version Packages (#21908)
  • 284dc11 fix: accept structurally identical cross-realm tool approval inputs (#21810)
  • bb8d33e fix: propagate createUIMessageStream consumer cancellation to merged streams ...
  • 158a718 feat(ai): select and rank eligible deferred tools via 'search()' callback in ...
  • ba8afe9 feat(ai): add a configurable maxResults for number of tools returned in tool ...
  • 45e1fbc Version Packages (#21880)
  • ce87e49 Version Packages (#21868)
  • 4f3d236 fix: clear tool approvals when addToolOutput runs (#21879)
  • ff3dcef feat(ai): add convertDataPart to agent UI stream helpers (#21816)
  • eb93c81 Version Packages (#21822)
  • Additional commits viewable in compare view

Updates @ai-sdk/amazon-bedrock from 4.0.183 to 5.0.105

Changelog

Sourced from @​ai-sdk/amazon-bedrock's changelog.

5.0.105

Patch Changes

  • 2850ad8: Add requestMetadata support to the Converse and ConverseStream APIs via providerOptions.amazonBedrock.requestMetadata. Accepts a Record<string, string> for per-request tagging in Amazon Bedrock invocation logs for cost attribution.

5.0.104

Patch Changes

  • Updated dependencies [c35458e]
    • @​ai-sdk/anthropic@​4.0.71

5.0.103

Patch Changes

  • 527a163: fix: validate hostname parts using isValidHostnamePart
  • Updated dependencies [8c65988]
  • Updated dependencies [527a163]
    • @​ai-sdk/provider@​4.0.21
    • @​ai-sdk/provider-utils@​5.0.53
    • @​ai-sdk/openai@​4.0.83
    • @​ai-sdk/anthropic@​4.0.70

5.0.102

Patch Changes

  • ede5b89: chore: migrate package builds from tsup to tsdown
  • Updated dependencies [040033b]
  • Updated dependencies [ede5b89]
  • Updated dependencies [a587f55]
    • @​ai-sdk/openai@​4.0.82
    • @​ai-sdk/anthropic@​4.0.69
    • @​ai-sdk/provider@​4.0.20
    • @​ai-sdk/provider-utils@​5.0.52

5.0.101

Patch Changes

  • Updated dependencies [4e94782]
    • @​ai-sdk/openai@​4.0.81

5.0.100

Patch Changes

  • c2511c1: fix: use standards-compliant User-Agent header

... (truncated)

Commits

Updates @ai-sdk/google from 3.0.127 to 4.0.87

Changelog

Sourced from @​ai-sdk/google's changelog.

4.0.87

Patch Changes

  • 8c65988: feat(ai): add telemetry to speech generation and transcription, including provider usage propagation and experimental streaming lifecycle callbacks
  • Updated dependencies [8c65988]
  • Updated dependencies [527a163]
    • @​ai-sdk/provider@​4.0.21
    • @​ai-sdk/provider-utils@​5.0.53

4.0.86

Patch Changes

  • ede5b89: chore: migrate package builds from tsup to tsdown
  • Updated dependencies [ede5b89]
    • @​ai-sdk/provider@​4.0.20
    • @​ai-sdk/provider-utils@​5.0.52

4.0.85

Patch Changes

  • c2511c1: fix: use standards-compliant User-Agent header
  • Updated dependencies [c2511c1]
    • @​ai-sdk/provider-utils@​5.0.51

4.0.84

Patch Changes

  • d0290cf: fix(google): preserve realtime user utterances with independent IDs and cumulative transcripts, honor text-free transcription completion markers, and advance response IDs after interruption

4.0.83

Patch Changes

  • 32cf2f6: fix(google): send the default Gemini Live thinkingLevel when thinkingConfig sets neither thinkingLevel nor thinkingBudget, and stop overwriting a raw generationConfig.thinkingConfig

  • 525efc5: feat(provider): advertise image model file and mask input support

    Use confirmed model IDs for capability declarations so unrecognized model names remain unknown. Include Together AI FLUX.2 Pro and Flex single-image editing, and allow asynchronous capability lookups and middleware overrides to resolve to unknown.

    Advertise QuiverAI Arrow 2 and Arrow 2 Telos file-input support, and mark Together AI Gemini image inputs unsupported by the current single-image request mapping.

  • Updated dependencies [e3605f6]

... (truncated)

Commits

Updates @ai-sdk/anthropic from 3.0.41 to 4.0.71

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

4.0.71

Patch Changes

  • c35458e: fix(anthropic): preserve invalid toolset calls

4.0.70

Patch Changes

  • Updated dependencies [8c65988]
  • Updated dependencies [527a163]
    • @​ai-sdk/provider@​4.0.21
    • @​ai-sdk/provider-utils@​5.0.53

4.0.69

Patch Changes

  • ede5b89: chore: migrate package builds from tsup to tsdown
  • a587f55: fix(anthropic): preserve server-side fallback boundaries when replaying assistant messages
  • Updated dependencies [ede5b89]
    • @​ai-sdk/provider@​4.0.20
    • @​ai-sdk/provider-utils@​5.0.52

4.0.68

Patch Changes

  • c2511c1: fix: use standards-compliant User-Agent header
  • Updated dependencies [c2511c1]
    • @​ai-sdk/provider-utils@​5.0.51

4.0.67

Patch Changes

  • e361d39: feat(anthropic): add Claude Sonnet 5.5 support

    • add the claude-sonnet-5-5 model ID to @ai-sdk/anthropic and @ai-sdk/google-vertex, anthropic.claude-sonnet-5-5 and us.anthropic.claude-sonnet-5-5 to @ai-sdk/amazon-bedrock, and anthropic/claude-sonnet-5.5 to @ai-sdk/gateway
    • add the between_tools thinking type (thinking: { type: 'between_tools' }), the lowest thinking setting on claude-sonnet-5-5; xhigh and max effort are lowered to high with a warning because the API rejects them with between_tools
    • claude-sonnet-5-5 rejects disabled thinking: thinking: { type: 'disabled' } is replaced with between_tools thinking (with a warning), reasoning: 'none' maps to between_tools thinking, and budget-based thinking is converted to adaptive thinking
    • claude-sonnet-5-5 rejects forced tool use: required and named tool choices fall back to auto, and structuredOutputMode: 'jsonTool' falls back to native structured outputs, each with a warning
  • 8373a22: Normalize dangling programmatic tool caller references in conversation history after pruning. Before a subsequent user message, omit caller metadata whose source code execution call is missing and emit a warning, preserving the retained tool calls and results. Keep caller metadata unchanged for active tool continuations.

4.0.66

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/anthropic since your current version.


Updates @ai-sdk/xai from 3.0.50 to 5.0.14

Changelog

Sourced from @​ai-sdk/xai's changelog.

5.0.14

Patch Changes

  • Updated dependencies [8c65988]
  • Updated dependencies [527a163]
    • @​ai-sdk/provider@​4.0.21
    • @​ai-sdk/provider-utils@​5.0.53

5.0.13

Patch Changes

  • ede5b89: chore: migrate package builds from tsup to tsdown
  • Updated dependencies [ede5b89]
    • @​ai-sdk/provider@​4.0.20
    • @​ai-sdk/provider-utils@​5.0.52

5.0.12

Patch Changes

  • c2511c1: fix: use standards-compliant User-Agent header
  • Updated dependencies [c2511c1]
    • @​ai-sdk/provider-utils@​5.0.51

5.0.11

Patch Changes

  • 525efc5: feat(provider): advertise image model file and mask input support

    Use confirmed model IDs for capability declarations so unrecognized model names remain unknown. Include Together AI FLUX.2 Pro and Flex single-image editing, and allow asynchronous capability lookups and middleware overrides to resolve to unknown.

    Advertise QuiverAI Arrow 2 and Arrow 2 Telos file-input support, and mark Together AI Gemini image inputs unsupported by the current single-image request mapping.

  • Updated dependencies [e3605f6]

  • Updated dependencies [525efc5]

    • @​ai-sdk/provider-utils@​5.0.50
    • @​ai-sdk/provider@​4.0.19

5.0.10

Patch Changes

  • Updated dependencies [af9597b]

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/xai since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 5, 2026
@coderabbitai

coderabbitai Bot commented Oct 5, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 8341d1d3-42f9-49df-b917-42e270782a9a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@langwatch-agent langwatch-agent left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 P1 compatibility blocker; details and current CI evidence inline. Static review only; no PR code or dependencies executed locally.

LangWatch-Review: verdict=findings sha=b46d9c0203178f33a3a71d0cd87a090339d4c862 p0=0 p1=1 p2=0 p3=0

Comment thread javascript/package.json
"@opentelemetry/sdk-trace-base": "2.10.0",
"@opentelemetry/sdk-trace-node": "2.10.0",
"ai": "^6.0.0",
"ai": "^7.0.127",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 · Migrate the example contracts with AI SDK 7

  • What you're looking at. The root and example lock resolutions move to AI SDK 7 without migrating the Vitest example callers.

  • Why it's scary. Current CI fails in llm-provider-mocking.test.ts because GenerateTextResult now needs three type parameters, and in weather-agent.test.ts and tool-call-role-reversal.test.ts because ToolExecutionOptions now requires context. Main still has these callers. Update the examples and their tests in the same dependency migration; the required JavaScript check currently stops at typecheck. Evidence: https://github.com/langwatch/scenario/actions/runs/37373631308/job/111976898611

Bumps the ai-sdk group with 6 updates in the /javascript directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `3.0.65` | `4.0.83` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.190` | `7.0.127` |
| [@ai-sdk/amazon-bedrock](https://github.com/vercel/ai/tree/HEAD/packages/amazon-bedrock) | `4.0.183` | `5.0.105` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `3.0.127` | `4.0.87` |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `3.0.41` | `4.0.71` |
| [@ai-sdk/xai](https://github.com/vercel/ai/tree/HEAD/packages/xai) | `3.0.50` | `5.0.14` |



Updates `@ai-sdk/openai` from 3.0.65 to 4.0.83
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.83/packages/openai)

Updates `ai` from 6.0.190 to 7.0.127
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.127/packages/ai)

Updates `@ai-sdk/amazon-bedrock` from 4.0.183 to 5.0.105
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/amazon-bedrock/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/amazon-bedrock@5.0.105/packages/amazon-bedrock)

Updates `@ai-sdk/google` from 3.0.127 to 4.0.87
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.87/packages/google)

Updates `@ai-sdk/anthropic` from 3.0.41 to 4.0.71
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@4.0.71/packages/anthropic)

Updates `@ai-sdk/xai` from 3.0.50 to 5.0.14
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/xai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/xai@5.0.14/packages/xai)

---
updated-dependencies:
- dependency-name: "@ai-sdk/amazon-bedrock"
  dependency-version: 5.0.105
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: ai-sdk
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 4.0.71
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ai-sdk
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.87
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: ai-sdk
- dependency-name: "@ai-sdk/openai"
  dependency-version: 4.0.83
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ai-sdk
- dependency-name: "@ai-sdk/xai"
  dependency-version: 5.0.14
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ai-sdk
- dependency-name: ai
  dependency-version: 7.0.127
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ai-sdk
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/javascript/ai-sdk-d3ba922238 branch from b46d9c0 to 861abea Compare October 7, 2026 12:04
@github-actions

github-actions Bot commented Oct 7, 2026

Copy link
Copy Markdown
Contributor

Automated low-risk assessment

This PR was evaluated against the repository's Low-Risk Pull Requests procedure and does not qualify as low risk.

The PR upgrades multiple ai-sdk packages and the top-level pnpm lockfile (e.g. ai, @ai-sdk/openai, @ai-sdk/amazon-bedrock, @ai-sdk/google, @ai-sdk/anthropic, @ai-sdk/xai), changing dependency versions and runtime/engine constraints. These changes affect integrations with external AI providers and runtime behavior, so they do not meet the low-risk criteria.

This PR requires a manual review before merging.

@langwatch-agent langwatch-agent left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The previous P1 compatibility finding remains at this rebased head; details inline. Static review plus current CI logs only, with no contributor code or dependency execution.

LangWatch-Review: verdict=findings sha=861abea51d9b33c3ca069cb8afb0898259b7e4dc p0=0 p1=1 p2=0 p3=0

Comment thread javascript/package.json
"@opentelemetry/sdk-trace-base": "2.10.0",
"@opentelemetry/sdk-trace-node": "2.10.0",
"ai": "^6.0.0",
"ai": "^7.0.127",

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 · Complete the AI SDK 7 caller migration

  • What you're looking at. The new head still upgrades ai to 7 without updating the example callers identified in the previous review. Main also retains those callers.

  • Why it's scary. Current CI typecheck fails at llm-provider-mocking.test.ts:54 because GenerateTextResult now needs three type arguments, and at tool-call-role-reversal.test.ts:45 and weather-agent.test.ts:47 because ToolExecutionOptions requires context. Migrate these examples with the dependency upgrade and rerun the required JavaScript check.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant