Skip to content

deps(deps-dev): bump the npm-major group across 1 directory with 5 updates#474

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-major-7a9625c827
Closed

deps(deps-dev): bump the npm-major group across 1 directory with 5 updates#474
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-major-7a9625c827

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-major group with 5 updates in the / directory:

Package From To
@types/node 25.9.3 26.1.1
@ai-sdk/openai-compatible 2.0.50 3.0.5
@arizeai/openinference-vercel 2.7.8 3.1.0
ai 6.0.205 7.0.17
@cloudflare/workers-types 4.20260615.1 5.20260708.1

Updates @types/node from 25.9.3 to 26.1.1

Commits

Updates @ai-sdk/openai-compatible from 2.0.50 to 3.0.5

Release notes

Sourced from @​ai-sdk/openai-compatible's releases.

@​ai-sdk/openai-compatible@​2.0.58

Patch Changes

  • 4d4e176: fix(openai-compatible): buffer tool call deltas until function.name arrives

  • bef93ae: fix(security): prevent streaming tool calls from finalizing on parsable partial JSON

    Streaming tool call arguments were finalized using isParsableJson() as a heuristic for completion. If partial accumulated JSON happened to be valid JSON before all chunks arrived, the tool call would be executed with incomplete arguments. Tool call finalization now only occurs in flush() after the stream is fully consumed.

  • 327642b: fix: more precise default message for tool execution denial

  • Updated dependencies [d559de9]

    • @​ai-sdk/provider-utils@​4.0.37
Changelog

Sourced from @​ai-sdk/openai-compatible's changelog.

3.0.5

Patch Changes

  • 5c5c0f5: Add experimental streaming transcription support for transcription models, including OpenAI gpt-realtime-whisper and xAI WebSocket STT.
  • Updated dependencies [5c5c0f5]
    • @​ai-sdk/provider@​4.0.2
    • @​ai-sdk/provider-utils@​5.0.5

3.0.4

Patch Changes

  • Updated dependencies [c6f5e62]
    • @​ai-sdk/provider-utils@​5.0.4

3.0.3

Patch Changes

  • Updated dependencies [8c616f0]
    • @​ai-sdk/provider-utils@​5.0.3

3.0.2

Patch Changes

  • Updated dependencies [0274f34]
    • @​ai-sdk/provider@​4.0.1
    • @​ai-sdk/provider-utils@​5.0.2

3.0.1

Patch Changes

  • Updated dependencies [6a436e3]
    • @​ai-sdk/provider-utils@​5.0.1

3.0.0

Major Changes

  • ef992f8: Remove CommonJS exports from all packages. All packages are now ESM-only ("type": "module"). Consumers using require() must switch to ESM import syntax.

  • c29a26f: feat(provider): add support for provider references and uploading files as supported per provider

  • 8359612: Start v7 pre-release

  • 04e9009: chore: make provider implementations code patterns more consistent, including renaming certain exported symbols

    For all externally exported symbols that were renamed, the old names continue to work via deprecated aliases.

Patch Changes

... (truncated)

Commits

Updates @arizeai/openinference-vercel from 2.7.8 to 3.1.0

Commits

Updates ai from 6.0.205 to 7.0.17

Release notes

Sourced from ai's releases.

ai@7.0.17

Patch Changes

  • Updated dependencies [cad8227]
    • @​ai-sdk/gateway@​4.0.13

ai@7.0.16

Patch Changes

  • a8f9b6d: Preserve signed tool approval metadata when recording approval responses.

ai@6.0.221

Patch Changes

  • 2958540: fix(ui): export isDynamicToolUIPart from ai package

  • aa2dbe6: Fix: convertToModelMessages no longer emits an empty assistant message when a block contains only unknown data parts (e.g. a data part before step-start with no convertDataPart provided)

  • faaef7c: fix(ai): enforce timeout.stepMs for the whole step in streamText

    Previously streamText's step timer was cleared synchronously right after the step's stream was registered, before the stream produced anything, so stepMs never aborted a step that stalled before emitting content. The step timer now survives until the step's stream finishes or aborts, matching generateText. chunkMs/totalMs and normal step-finish cleanup are unchanged.

  • 45a9cbf: Return validated elements from generateText array output

  • 2706461: fix(ai): include tool input on tool result for provider executed dynamic tools

  • 327642b: fix: more precise default message for tool execution denial

  • 89df298: Preserve signed tool approval metadata when recording approval responses.

  • 8ed1f83: fix(ai): tag step/chunk timeout aborts with TimeoutError reason

    When timeout: { stepMs } or timeout: { chunkMs } fires, the abort reason is now a TimeoutError DOMException, matching what AbortSignal.timeout() produces natively. Consumers can distinguish a framework timeout from a user-initiated cancel via signal.reason.name === 'TimeoutError'.

  • Updated dependencies [d559de9]

  • Updated dependencies [9c54a9f]

  • Updated dependencies [bbc4bd5]

    • @​ai-sdk/provider-utils@​4.0.37
    • @​ai-sdk/gateway@​3.0.145

ai@6.0.220

Patch Changes

  • 158d027: Sort tool results by their tool call order when converting generation output to response messages.
  • eb3cdd9: Fix extractJsonMiddleware preserving leading whitespace in the final streamed text suffix when no markdown fence prefix was stripped.
  • Updated dependencies [7dea716]
  • Updated dependencies [4f7fe37]
  • Updated dependencies [0952964]
    • @​ai-sdk/gateway@​3.0.144
    • @​ai-sdk/provider-utils@​4.0.36
Changelog

Sourced from ai's changelog.

7.0.17

Patch Changes

  • Updated dependencies [cad8227]
    • @​ai-sdk/gateway@​4.0.13

7.0.16

Patch Changes

  • a8f9b6d: Preserve signed tool approval metadata when recording approval responses.

7.0.15

Patch Changes

  • Updated dependencies [0c3c7e4]
  • Updated dependencies [c8d2726]
    • @​ai-sdk/gateway@​4.0.12

7.0.14

Patch Changes

  • 5c5c0f5: Add experimental streaming transcription support for transcription models, including OpenAI gpt-realtime-whisper and xAI WebSocket STT.
  • Updated dependencies [5c5c0f5]
    • @​ai-sdk/provider@​4.0.2
    • @​ai-sdk/provider-utils@​5.0.5
    • @​ai-sdk/gateway@​4.0.11

7.0.13

Patch Changes

  • Updated dependencies [31abef7]
    • @​ai-sdk/gateway@​4.0.10

7.0.12

Patch Changes

  • ecfeb6f: Sort tool results by their tool call order when converting generation output to response messages.
  • a193137: Fix extractJsonMiddleware preserving leading whitespace in the final streamed text suffix when no markdown fence prefix was stripped.
  • Updated dependencies [c6f5e62]
    • @​ai-sdk/gateway@​4.0.9
    • @​ai-sdk/provider-utils@​5.0.4

7.0.11

... (truncated)

Commits

Updates @cloudflare/workers-types from 4.20260615.1 to 5.20260708.1

Commits

@dependabot @github

dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot changed the title deps(deps-dev): bump the npm-major group with 5 updates deps(deps-dev): bump the npm-major group across 1 directory with 5 updates Jul 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-major-7a9625c827 branch 5 times, most recently from 78e5f94 to 53460a5 Compare July 8, 2026 12:30
…dates

Bumps the npm-major group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.3` | `26.1.1` |
| [@ai-sdk/openai-compatible](https://github.com/vercel/ai/tree/HEAD/packages/openai-compatible) | `2.0.50` | `3.0.5` |
| [@arizeai/openinference-vercel](https://github.com/Arize-ai/openinference) | `2.7.8` | `3.1.0` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.205` | `7.0.17` |
| [@cloudflare/workers-types](https://github.com/cloudflare/workerd) | `4.20260615.1` | `5.20260708.1` |



Updates `@types/node` from 25.9.3 to 26.1.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@ai-sdk/openai-compatible` from 2.0.50 to 3.0.5
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/openai-compatible/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai-compatible@3.0.5/packages/openai-compatible)

Updates `@arizeai/openinference-vercel` from 2.7.8 to 3.1.0
- [Release notes](https://github.com/Arize-ai/openinference/releases)
- [Commits](https://github.com/Arize-ai/openinference/commits/python-openinference-instrumentation-llama-index-v3.1.0)

Updates `ai` from 6.0.205 to 7.0.17
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.17/packages/ai)

Updates `@cloudflare/workers-types` from 4.20260615.1 to 5.20260708.1
- [Release notes](https://github.com/cloudflare/workerd/releases)
- [Changelog](https://github.com/cloudflare/workerd/blob/main/RELEASE.md)
- [Commits](https://github.com/cloudflare/workerd/commits)

---
updated-dependencies:
- dependency-name: "@ai-sdk/openai-compatible"
  dependency-version: 3.0.5
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-major
- dependency-name: "@arizeai/openinference-vercel"
  dependency-version: 3.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-major
- dependency-name: "@cloudflare/workers-types"
  dependency-version: 5.20260706.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-major
- dependency-name: "@types/node"
  dependency-version: 26.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-major
- dependency-name: ai
  dependency-version: 7.0.15
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-major-7a9625c827 branch from 53460a5 to a301ade Compare July 8, 2026 12:37
@dependabot @github

dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 8, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-major-7a9625c827 branch July 8, 2026 21:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants