fix(deps): update dependency ai to ^6.0.174#509
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
Conversation
fc1bd89 to
1aa8bd1
Compare
1aa8bd1 to
dc2df68
Compare
dc2df68 to
230bc0c
Compare
230bc0c to
fe446a0
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^6.0.0→^6.0.174Release Notes
vercel/ai (ai)
v6.0.174Compare Source
Patch Changes
49f6d44]v6.0.173Compare Source
Patch Changes
7beadf0: feat(mcp): propagate the server name through dynamic tool parts7beadf0]v6.0.172Compare Source
v6.0.171Compare Source
Patch Changes
48f842a: fix(ai): enforcecallOptionsSchemaat runtime inToolLoopAgentToolLoopAgentSettings.callOptionsSchemawas declared and documented as a runtime schema foroptions, buttool-loop-agent.tsnever invoked it. Any invariant a developer encoded in the schema was silently bypassed at runtime, and uncheckedoptionsflowed straight intoprepareCalland anyinstructionstemplate that interpolated them.ToolLoopAgent.prepareCallnow validates caller-suppliedoptionsagainstcallOptionsSchema(when set) viasafeValidateTypes, throwingInvalidArgumentErroron failure before forwarding toprepareCall/generateText/streamText.a727da4: chore: ensure consistent import handling and avoid import duplicates or cycles5fee301: fix(mcp): prevent prototype pollution by using secureJsonParseUpdated dependencies [
a727da4]v6.0.170Compare Source
Patch Changes
19d587a: fix(ai): add allowSystemInMessages option and warn by default when system messages are found in prompt or messagesv6.0.169Compare Source
v6.0.168Compare Source
Patch Changes
493d7d4]v6.0.167Compare Source
Patch Changes
20805c8]v6.0.166Compare Source
Patch Changes
b8d28f4: fix(ai): omit reasoning-start/end when sendReasoning is falsev6.0.165Compare Source
Patch Changes
2ff8d57]v6.0.164Compare Source
Patch Changes
83434a9]v6.0.163Compare Source
Patch Changes
a27a631]v6.0.162Compare Source
Patch Changes
8c4abaf]v6.0.161Compare Source
Patch Changes
9031f26]v6.0.160Compare Source
Patch Changes
06f7838]v6.0.159Compare Source
Patch Changes
a0d9373]v6.0.158Compare Source
Patch Changes
295beba: fix(ai): fixlastAssistantMessageIsCompleteWithApprovalResponsesto no longer ignoreproviderExecutedtool approvalsv6.0.157Compare Source
Patch Changes
ff11aee: fix(ai): fixproviderExecutedtool approvals being passed to language model twicev6.0.156Compare Source
Patch Changes
08c5ac3]v6.0.155Compare Source
Patch Changes
06764c5: fix(ai): skip passing invalid JSON inputs to response messagesv6.0.154Compare Source
Patch Changes
37a378e]v6.0.153Compare Source
Patch Changes
f152133: feat (ai/core): support plain string model IDs inrerank()functionThe
rerank()function now accepts plain model strings (e.g.,'cohere/rerank-v3.5') in addition toRerankingModelobjects, matching the behavior ofgenerateText,embed, and other core functions.v6.0.152Compare Source
Patch Changes
d42076d: Add AI Gateway hint to provider READMEsv6.0.151Compare Source
Patch Changes
ec18852]v6.0.150Compare Source
Patch Changes
1003609: fix(ai): skip stringifying text when streaming partial text9de7d7b]v6.0.149Compare Source
Patch Changes
3aca847]v6.0.148Compare Source
Patch Changes
e923a24]v6.0.147Compare Source
Patch Changes
6247886]v6.0.146Compare Source
Patch Changes
5f439a1]v6.0.145Patch Changes
ffd431a]v6.0.144Patch Changes
0469aed: fix: allow inline data URLs in download validation0469aed]15bfbd2]v6.0.143Patch Changes
85e476d]v6.0.142Compare Source
Patch Changes
6f75953: feat(ai): add newisLoopFinishedstop condition helper for unlimited steps70322b4]v6.0.141Compare Source
Patch Changes
768a9d6]v6.0.140Compare Source
Patch Changes
95fedf0]v6.0.139Patch Changes
e69062d]v6.0.138Patch Changes
0db5cd8]v6.0.137Patch Changes
3caa544]v6.0.136Compare Source
Patch Changes
763e178]v6.0.135Patch Changes
df6a330: chore(ai): remove all experimental agent eventsv6.0.134Patch Changes
ed6876b: chore(ai): remove all experimental embed eventsv6.0.133Patch Changes
055cd68: fix: publish v6 to latest npm dist tagd99eb91]055cd68]v6.0.132Patch Changes
28fd5a5: README updatesv6.0.131Patch Changes
14f25f9: feat(ai): introduce experimental callbacks for embed functionv6.0.130Compare Source
Patch Changes
25af909]v6.0.129Compare Source
Patch Changes
f95e0c0]v6.0.128Compare Source
Patch Changes
7324b56]v6.0.127Compare Source
Patch Changes
ac0c407]e748159]v6.0.126Compare Source
Patch Changes
578615a: Remove custom User-Agent header from HttpChatTransport to fix CORS preflight failures in Safari and Firefoxv6.0.125Compare Source
Patch Changes
5ffb1ad]f5bf0c6]v6.0.124Patch Changes
55ccbe2]v6.0.122Compare Source
Patch Changes
ca0b430]v6.0.121Compare Source
Patch Changes
efdaefc]v6.0.120Compare Source
Patch Changes
78c0e26: feat(ai): pass result provider metadata across the streamv6.0.119Compare Source
Patch Changes
ab286f1: fix(ai): doStream should reflect transformed valuesd68b122: feat(ai): add missing usage attributesv6.0.118Compare Source
Patch Changes
64ac0fd: fix(security): validate redirect targets in download functions to prevent SSRF bypassBoth
downloadBlobanddownloadnow validate the final URL after following HTTP redirects, preventing attackers from bypassing SSRF protections via open redirects to internal/private addresses.Updated dependencies [
64ac0fd]v6.0.117Compare Source
Patch Changes
d23121f: chore(ai): add optional ChatRequestOptions toaddToolApprovalResponseandaddToolOutput2589004]Configuration
📅 Schedule: (in timezone Europe/London)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.