Skip to content

chore(deps): update dependency ai to v6#1040

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/ai-6.x
Open

chore(deps): update dependency ai to v6#1040
renovate[bot] wants to merge 1 commit intomainfrom
renovate/ai-6.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 22, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change OpenSSF
ai (source) dependencies major 5.0.1176.0.134 OpenSSF Scorecard

Release Notes

vercel/ai (ai)

v6.0.134

Compare Source

v6.0.133

Compare Source

Patch Changes

v6.0.132

Compare Source

Patch Changes

v6.0.131

Compare Source

Patch Changes
  • 14f25f9: feat(ai): introduce experimental callbacks for embed function

v6.0.130

Compare Source

Patch Changes

v6.0.129

Compare Source

Patch Changes

v6.0.128

Compare Source

Patch Changes

v6.0.127

Compare Source

Patch Changes

v6.0.126

Compare Source

Patch Changes
  • 578615a: Remove custom User-Agent header from HttpChatTransport to fix CORS preflight failures in Safari and Firefox

v6.0.125

Compare Source

Patch Changes

v6.0.124

Patch Changes

v6.0.122

Compare Source

Patch Changes

v6.0.121

Compare Source

Patch Changes

v6.0.120

Compare Source

Patch Changes
  • 78c0e26: feat(ai): pass result provider metadata across the stream

v6.0.119

Compare Source

Patch Changes
  • ab286f1: fix(ai): doStream should reflect transformed values
  • d68b122: feat(ai): add missing usage attributes

v6.0.118

Compare Source

Patch Changes
  • 64ac0fd: fix(security): validate redirect targets in download functions to prevent SSRF bypass

    Both downloadBlob and download now validate the final URL after following HTTP redirects, preventing attackers from bypassing SSRF protections via open redirects to internal/private addresses.

  • Updated dependencies [64ac0fd]

v6.0.117

Compare Source

Patch Changes

v6.0.116

Compare Source

Patch Changes

v6.0.115

Compare Source

Patch Changes

v6.0.114

Compare Source

Patch Changes
  • 2291047: fix(ai): fix missing support for image thought signatures (e.g. for Gemini image models)

v6.0.113

Compare Source

Patch Changes
  • 70d3980: fix(ai): use errorMode 'text' in approval continuation to preserve tool error messages

v6.0.112

Compare Source

Patch Changes

v6.0.111

Compare Source

Patch Changes
  • 2129c82: feat(ai): register global telemetry integrations

v6.0.110

Compare Source

Patch Changes

v6.0.109

Compare Source

Patch Changes

v6.0.108

Compare Source

Patch Changes
  • 2a4f512: feat(ai): add telemetry interface and registry

v6.0.107

Compare Source

Patch Changes

v6.0.106

Compare Source

Patch Changes

v6.0.105

Compare Source

Patch Changes

v6.0.104

Compare Source

Patch Changes

v6.0.103

Compare Source

Patch Changes

v6.0.102

Compare Source

Patch Changes

v6.0.101

Compare Source

Patch Changes
  • 5230482: fix(ai): Don't create duplicate tool parts when models call non-existent tools

v6.0.100

Compare Source

Patch Changes
  • b7fba77: feat(ai): add event notifiers to core functions

v6.0.99

Compare Source

Patch Changes

v6.0.98

Compare Source

Patch Changes

v6.0.97

Compare Source

Patch Changes
  • ebfdad1: feat(ai): experimental callbacks in ToolLoopAgent

v6.0.96

Compare Source

Patch Changes
  • 30c9de6: feat(ai): experimental callbacks for streamText

v6.0.95

Compare Source

Patch Changes

v6.0.94

Compare Source

Patch Changes

v6.0.93

Compare Source

Patch Changes
  • d3769ec: feat(ai): add experimental callbacks in generateText

v6.0.92

Compare Source

Patch Changes

v6.0.91

Compare Source

Patch Changes

v6.0.90

Patch Changes
  • 98e83ab: Fix useChat status briefly flashing to submitted on page load when resume: true is set and there is no active stream to resume. The reconnectToStream check is now performed before setting status to submitted, so status stays ready when the server responds with 204 (no active stream).

v6.0.89

Patch Changes

v6.0.88

Patch Changes

v6.0.87

Compare Source

Patch Changes

v6.0.86

Compare Source

Patch Changes

v6.0.85

Compare Source

Patch Changes

v6.0.84

Compare Source

Patch Changes
  • 4024a3a: security: prevent unbounded memory growth in download functions

    The download() and downloadBlob() functions now enforce a default 2 GiB size limit when downloading from user-provided URLs. Downloads that exceed this limit are aborted with a DownloadError instead of consuming unbounded memory and crashing the process. The abortSignal parameter is now passed through to fetch() in all download call sites.

    Added download option to transcribe() and experimental_generateVideo() for providing a custom download function. Use the new createDownload({ maxBytes }) factory to configure download size limits.

  • Updated dependencies [4024a3a]

v6.0.83

Compare Source

Patch Changes

v6.0.82

Compare Source

Patch Changes

v6.0.81

Compare Source

Patch Changes
  • ee4beee: feat(ai): add onStepFinish callback to createUIMessageStream

v6.0.80

Compare Source

Patch Changes

v6.0.79

Compare Source

Patch Changes

v6.0.78

Compare Source

Patch Changes
  • 59fcf30: fix(ai): make experimental_context required in ToolLoopAgentOnFinishCallback

    This fixes a type inconsistency where ToolLoopAgentOnFinishCallback had experimental_context as optional while StreamTextOnFinishCallback and GenerateTextOnFinishCallback had it as required. Since ToolLoopAgent delegates to streamText/generateText, and both always pass experimental_context when invoking the callback, the types should match.

v6.0.77

Compare Source

Patch Changes

v6.0.76

Compare Source

Patch Changes

v6.0.75

Compare Source

Patch Changes

v6.0.74

Compare Source

Patch Changes
  • 471009b: fix(ai): pass reasoning text in telemetry

v6.0.73

Compare Source

Patch Changes

v6.0.72

Compare Source

Patch Changes

v6.0.71

Compare Source

Patch Changes

v6.0.70

Compare Source

Patch Changes

v6.0.69

Compare Source

Patch Changes
  • d659305: fix(ai): auto-populate originalMessages in createAgentUIStream

v6.0.68

Compare Source

Patch Changes
  • 8bf2660: chore(ai): export DefaultGeneratedFile

v6.0.67

Compare Source

Patch Changes

v6.0.66

Compare Source

Patch Changes

v6.0.65

Compare Source

Patch Changes

v6.0.64

Compare Source

Patch Changes
  • ce9daa3: Fixed 'reasoning part reasoning-0 not found' error by ensuring 'reasoning-start' event is emitted for empty thinking blocks (eg. )

v6.0.63

Compare Source

Patch Changes
  • be95579: fix(ui): respect Promise<false> when returned by sendAutomaticallyWhen

v6.0.62

Compare Source

Patch Changes

v6.0.61

Compare Source

Patch Changes

v6.0.60

Compare Source

Patch Changes
  • 5fc42fa: feat(ai): add experimental retention setting

v6.0.59

Compare Source

Patch Changes

v6.0.58

Compare Source

Patch Changes

v6.0.57

Compare Source

Patch Changes
  • 65865d8: Fix handling of error results in deferrable tools

v6.0.56

Compare Source

Patch Changes

v6.0.55

Compare Source

Patch Changes
  • 43a74df: chore(ai): add skill to README

v6.0.54

Compare Source

Patch Changes
  • 2f8ac87: docs(ai): fix incorrect and outdated jsdoc

v6.0.53

Compare Source

Patch Changes

v6.0.52

Compare Source

Patch Changes

v6.0.51

Compare Source

Patch Changes
  • ea0feb5: fix(ai): clean up step timeout when error occurs in streamText

v6.0.50

Compare Source

Patch Changes

v6.0.49

Compare Source

Patch Changes
  • ded661b: feat(ai): add onStepFinish to agent.generate and agent.stream

v6.0.48

Compare Source

Patch Changes

v6.0.47

Compare Source

Patch Changes

v6.0.46

Compare Source

v6.0.45

Compare Source

Patch Changes

v6.0.44

Compare Source

Patch Changes

v6.0.43

Compare Source

Patch Changes
  • 2dc9bfa: fix(ai): handle provider-executed tools and tool-approval-response in validation

    • Skip validation for tool calls with providerExecuted: true (deferred results)
    • Map approvalId to toolCallId for proper tool-approval-response handling
    • Filter out empty tool messages after content filtering
    • Fixes MissingToolResultError for async and approval-based tool flows

v6.0.42

Compare Source

Patch Changes

v6.0.41

Compare Source

Patch Changes

v6.0.40

Compare Source

Patch Changes
  • ab57783: Add usage information to onFinish callback in useChat

v6.0.39

Compare Source

Patch Changes
  • 4e28ba0: fix(ai): propagate providerMetadata during input-streaming state

    Provider-executed tools (like MCP tools) need to send metadata during the streaming phase, but the implementation only set callProviderMetadata when part.state === "input-available". This fix removes the overly-restrictive state check and adds callProviderMetadata to the input-streaming state types and schemas.

v6.0.38

Compare Source

Patch Changes

v6.0.37

Compare Source

Patch Changes
  • b5dab9b: fix(ai): maintain OpenTelemetry context across async generator yields

    Fixes an issue where OpenTelemetry context was lost at async generator yield boundaries, causing nested ToolLoopAgent spans to escape to the parent agent's level in observability platforms.

    The fix ensures that when recordSpan is used with async generators (e.g., in tool execution), the active context is explicitly maintained using context.with(), preventing span hierarchy corruption in nested agent scenarios.

    Closes #​11720

v6.0.36

Compare Source

Patch Changes

v6.0.35

Compare Source

Patch Changes
  • d7e7f1f: Add descriptive error messages for malformed UIMessageStream chunks.

v6.0.34

Compare Source

Patch Changes

v6.0.33

Compare Source

Patch Changes
  • 0ca078c: fix(ai): pass providerMetadata in smooth stream to preserve thinking tag

v6.0.32

Compare Source

Patch Changes
  • ec24401: chore(ai): include docs in npm package

v6.0.31

Compare Source

Patch Changes

v6.0.30

Compare Source

Patch Changes

v6.0.29

Compare Source

Patch Changes

v6.0.28

Compare Source

Patch Changes
  • d4486d2: fix(ai): do not cleanup AsyncIterableStream twice

v6.0.27

Compare Source

Patch Changes

v6.0.26

Compare Source

Patch Changes
  • 40d4997: feat(ai): add middleware for extracting JSON

v6.0.25

Compare Source

Patch Changes
  • b64f256: Add elementStream to streamText for streaming individual array elements when using output: Output.array().

v6.0.24

Compare Source

Patch Changes
  • 4f236c8: feat(ai): per-chunk timeouts for streamText

v6.0.23

Compare Source

Patch Changes
  • a4c680a: feat(ai): per-step timeouts for generateText and streamText
  • 8c6f067: feat(ai): support Intl.Segmenter in smoothStream

v6.0.22

Compare Source

Patch Changes
  • f0d29de: chore(ai): remove _internal.currentDate from streamText

v6.0.21

Compare Source

Patch Changes
  • 9667780: fix(ai): preserve rawInput in safeValidateUIMessages for output-error tool parts

    Fixes #​11406

v6.0.20

Compare Source

Patch Changes
  • f748c46: Updated Unified Provider Architecture section in README to describe AI Gateway as the default.

v6.0.19

Compare Source

Patch Changes

v6.0.18

Compare Source

Patch Changes
  • d6ec0e2: chore(ai): remove _internal.currentDate from generateText

v6.0.17

Compare Source

Patch Changes
  • af0955e: streamText should throw timeout error with proper cause when it times out

v6.0.16

Compare Source

Patch Changes
  • 81adf59: feat(ai): introduce timeout configuration object

v6.0.15

Compare Source

Patch Changes
  • 3a73fb3: Include abort reason in stream chunks and document the new field

v6.0.14

Compare Source

Patch Changes
  • 3f9453f: feat(ai): add timeout option to generateText, streamText, and Agent

v6.0.13

Compare Source

Patch Changes
  • e2c445d: feat(ai): smoothStream reasoning support

v6.0.12

Compare Source

Patch Changes

v6.0.11

Compare Source

Patch Changes

v6.0.10

Compare Source

Patch Changes
  • ae26f95: Add missing .catch() handler to executeToolCall promise in runToolsTransformation to prevent potential stream hang when the promise rejects.

v6.0.9

Compare Source

Patch Changes
  • 4e90233: feat(ui): add DirectChatTransport

v6.0.8

Compare Source

Patch Changes

v6.0.7

Compare Source

Patch Changes

v6.0.6

Compare Source

Patch Changes

v6.0.5

Compare Source

Patch Changes

v6.0.4

Compare Source

Patch Changes

v6.0.3

Compare Source

Patch Changes

v6.0.2

Compare Source

Patch Changes

v6.0.1

Compare Source

Patch Changes

v6.0.0

Compare Source

Major Changes
Minor Changes
Patch Changes
  • 0c3b58b: fix(provider): add specificationVersion to ProviderV3

  • 58920e0: fix(ai): do not drop custom headers in HttpChatTransport

  • a7da2b6: feat(agent): change output generics

  • 0adc679: feat(provider): shared spec v3

  • 50b70d6: feat(anthropic): add programmatic tool calling

  • 2d28066: chore(agent): limit agent call parameters

  • fca786b: feat(agent): configurable call options

  • 046aa3b: feat(provider): speech model v3 spec

  • e1f6e8e: feat(ai): add Output.json()

  • 8d9e8ad: chore(provider): remove generics from EmbeddingModelV3

    Before

    model.textEmbeddingModel('my-model-id');

    After

    model.embeddingModel('my-model-id');
  • b67d224: Fixes an issue where providerMetadata and providerExecuted were lost when tool input validation failed

  • ab6f01a: Improve ai gateway error message when api key is not present

  • 9388ff1: feat(ui): add isDataUIPart helper

  • dce03c4: feat: tool input examples

  • [2625a04](https://redirect.github.c


Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Dependency updates label Dec 22, 2025
@github-actions github-actions bot added the qa:running QA workflow is currently running label Dec 22, 2025
Copy link

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

@github-actions github-actions bot added status:ready-for-review Pull request is ready for review qa:failed QA workflow failed and removed qa:running QA workflow is currently running labels Dec 22, 2025
@renovate renovate bot force-pushed the renovate/ai-6.x branch from 4b78058 to 7cf7f69 Compare December 23, 2025 14:56
@github-actions github-actions bot added qa:running QA workflow is currently running qa:failed QA workflow failed and removed qa:failed QA workflow failed qa:running QA workflow is currently running labels Dec 23, 2025
Comment on lines 2104 to 2114
"zwitch": ["zwitch@2.0.4", "", {}, "sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A=="],

"@ai-sdk/gateway/@ai-sdk/provider": ["@ai-sdk/provider@3.0.0", "", { "dependencies": { "json-schema": "^0.4.0" } }, "sha512-m9ka3ptkPQbaHHZHqDXDF9C9B5/Mav0KTdky1k2HZ3/nrW2t1AgObxIVPyGDWQNS9FXT/FS6PIoSjpcP/No8rQ=="],

"@ai-sdk/gateway/@ai-sdk/provider-utils": ["@ai-sdk/provider-utils@4.0.0", "", { "dependencies": { "@ai-sdk/provider": "3.0.0", "@standard-schema/spec": "^1.1.0", "eventsource-parser": "^3.0.6" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" } }, "sha512-HyCyOls9I3a3e38+gtvOJOEjuw9KRcvbBnCL5GBuSmJvS9Jh9v3fz7pRC6ha1EUo/ZH1zwvLWYXBMtic8MTguA=="],

"@ai-sdk/react/ai": ["ai@5.0.116", "", { "dependencies": { "@ai-sdk/gateway": "2.0.23", "@ai-sdk/provider": "2.0.0", "@ai-sdk/provider-utils": "3.0.19", "@opentelemetry/api": "1.9.0" }, "peerDependencies": { "zod": "^3.25.76 || ^4.1.8" } }, "sha512-+2hYJ80/NcDWuv9K2/MLP3cTCFgwWHmHlS1tOpFUKKcmLbErAAlE/S2knsKboc3PNAu8pQkDr2N3K/Vle7ENgQ=="],

"@babel/core/json5": ["json5@2.2.3", "", { "bin": { "json5": "lib/cli.js" } }, "sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg=="],

"@babel/helper-compilation-targets/lru-cache": ["lru-cache@5.1.1", "", { "dependencies": { "yallist": "^3.0.2" } }, "sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w=="],

This comment was marked as outdated.

@renovate renovate bot force-pushed the renovate/ai-6.x branch from 7cf7f69 to 7766a3e Compare December 23, 2025 18:41
@github-actions github-actions bot added qa:running QA workflow is currently running qa:failed QA workflow failed and removed qa:failed QA workflow failed qa:running QA workflow is currently running labels Dec 23, 2025
@renovate renovate bot force-pushed the renovate/ai-6.x branch from 7766a3e to fa7e584 Compare December 30, 2025 22:59
@github-actions github-actions bot added qa:running QA workflow is currently running qa:failed QA workflow failed and removed qa:failed QA workflow failed qa:running QA workflow is currently running labels Dec 30, 2025
@renovate renovate bot force-pushed the renovate/ai-6.x branch from fa7e584 to 65c6427 Compare December 31, 2025 02:50
@github-actions github-actions bot added qa:running QA workflow is currently running qa:failed QA workflow failed and removed qa:failed QA workflow failed qa:running QA workflow is currently running labels Dec 31, 2025
@renovate renovate bot force-pushed the renovate/ai-6.x branch from 65c6427 to 2fc99f5 Compare December 31, 2025 06:57
@github-actions github-actions bot added qa:running QA workflow is currently running and removed qa:failed QA workflow failed labels Dec 31, 2025
@renovate renovate bot force-pushed the renovate/ai-6.x branch 16 times, most recently from 8b3c1e5 to 2140090 Compare January 13, 2026 18:54
@renovate renovate bot force-pushed the renovate/ai-6.x branch 11 times, most recently from 2644a71 to 2c26fa3 Compare January 21, 2026 18:48
@renovate renovate bot force-pushed the renovate/ai-6.x branch 2 times, most recently from e6edd1a to b7c5ab8 Compare January 22, 2026 14:55
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates qa:running QA workflow is currently running status:ready-for-review Pull request is ready for review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants