chore(deps): bump @ai-sdk/azure from 3.0.95 to 4.0.26 - #1576
chore(deps): bump @ai-sdk/azure from 3.0.95 to 4.0.26#1576dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [@ai-sdk/azure](https://github.com/vercel/ai/tree/HEAD/packages/azure) from 3.0.95 to 4.0.26. - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/azure/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/azure@4.0.26/packages/azure) --- updated-dependencies: - dependency-name: "@ai-sdk/azure" dependency-version: 4.0.26 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: d52e2add06
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "dependencies": { | ||
| "@ai-sdk/amazon-bedrock": "~4.0.120", | ||
| "@ai-sdk/azure": "~3.0.77", | ||
| "@ai-sdk/azure": "~4.0.26", |
There was a problem hiding this comment.
This dependency bump only changes package.json, but the root bun.lock still pins @ai-sdk/azure to ~3.0.77 / 3.0.77. I checked .github/workflows/ci.yml and Dockerfile, and the app install/build paths run bun install --frozen-lockfile, so CI and production image builds will not have a committed lockfile entry for ~4.0.26 and can fail or continue using the stale resolved dependency instead of the intended upgrade. Please regenerate and commit the root lockfile with this bump.
Useful? React with 👍 / 👎.
There was a problem hiding this comment.
Confirmed — this is the correct diagnosis and it is the sole cause of the four red checks. All four failing jobs (Test, Lint, and Type Check, Validate CDK Infrastructure, Auth Edge Production Artifact, Unified Content PostgreSQL Lifecycle) die at the install step with:
error: lockfile had changes, but lockfile is frozen
note: try re-running without --frozen-lockfile and commit the updated lockfile
bun.lock still has "@ai-sdk/azure": "~3.0.77" (line 8) and @ai-sdk/azure@3.0.77 (line 230), while package.json now asks for ~4.0.26.
I could not apply the fix: regenerating the lockfile requires bun install, and this routine's sandbox has no egress to registry.npmjs.org (403 on every request). See the PR-level comment for the systemic finding and the AI SDK v7 override conflict that also needs a human decision here.
Generated by Claude Code
|
🤖 pr-fix routine: blocked — marking Diagnosis (confirmed, single root cause): all 4 failing checks die at the install step: Dependabot changed Why I couldn't fix it: the fix is Two things a human should look at:
To unstick: run Generated by Claude Code |
krishagel
added
the
pr-fix-stuck
Claude
1 participant
Bumps @ai-sdk/azure from 3.0.95 to 4.0.26.
Release notes
Sourced from @ai-sdk/azure's releases.
Changelog
Sourced from @ai-sdk/azure's changelog.
... (truncated)
Commits
eb3d1afVersion Packages (#18208)a56fbc0Version Packages (#18083)2ab3f34Version Packages (#18023)96a237dfeat: support blocked domains in OpenAI web search (#18033)232a45aVersion Packages (#18004)8fd84f0Version Packages (#17983)3c98985Version Packages (#17868)54d4d7aVersion Packages (#17796)799faf7Version Packages (#17653)0319ff3Version Packages (#17553)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)