Skip to content

chore(deps): update dependency ai to v7 - #10

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ai-7.x
Open

chore(deps): update dependency ai to v7#10
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ai-7.x

Conversation

@renovate

@renovate renovate Bot commented Jun 27, 2026 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
ai (source) ^5.0.97 → ^5.0.97 || ^7.0.0 age confidence
ai (source) ^5.0.98 → ^7.0.0 age confidence

Release Notes

vercel/ai (ai)

v7.0.99

Compare Source

Patch Changes

v7.0.98

Compare Source

Patch Changes

v7.0.97

Compare Source

Patch Changes

v7.0.96

Compare Source

Patch Changes

v7.0.95

Compare Source

Patch Changes
  • 27f6d7a: fix(ai): reject embedding model responses that contain no embeddings

v7.0.94

Compare Source

Patch Changes

v7.0.93

Compare Source

Patch Changes
  • df6c009: fix(ai): use new message ID when replacing a message in sendMessage
  • 6ee74a3: fix(ai): preserve tool part titles when validating UI messages
  • f13d371: fix(ai): preserve provider metadata when converting failed tool calls
  • d4485fe: feat(ai): support minItems and maxItems in array outputs
  • 4f201cc: chore(ai): formally include already supported onLanguageModelCallStart and onLanguageModelCallEnd in ToolLoopAgentSettings type
  • 8cdb2a7: fix(ai): decode text data URLs in Node.js
  • 0f2281e: fix(ai): reject embedding responses whose count does not match the input values
  • fc8e8ac: fix(ai): preserve image call diagnostics when no image is generated
  • ee8391e: fix(ai): support abort signals when the global AbortSignal is not a constructor
  • Updated dependencies [3cfc1fc]

v7.0.92

Compare Source

Patch Changes
  • a51cc94: fix(ai): preserve provider metadata from empty smooth stream deltas
  • d1904d3: fix(ai): surface fallback errors for empty HTTP response bodies
  • 84e5a79: fix(ai): skip smoothStream delays while the document is hidden
  • a8e8ad0: fix(ai): expose call ID and abort reason in streamText onAbort callbacks
  • Updated dependencies [a7e324b]

v7.0.91

Compare Source

Patch Changes
  • 802af1e: Add configurable recovery for provider errors received after streamText response streaming begins. Explicitly configuring streamRetries enables isolated retry attempts, including one bounded callback-directed recovery through StreamTextOnErrorRetryCallback with streamRetries: 0; recovered results and metadata reflect only the successful attempt, while the existing StreamTextOnErrorCallback contract and logging-only observer behavior remain compatible.
  • Updated dependencies [5484f27]
  • Updated dependencies [36eb7ee]
  • Updated dependencies [622fa7f]

v7.0.90

Compare Source

Patch Changes

v7.0.89

Compare Source

Patch Changes
  • 5190b67: feat(provider): extend the FilesV4 interface with optional getFileMetadata, downloadFile (streaming), and deleteFile operations, plus abortSignal/headers call options and a { type: 'stream' } upload data variant; upload results now expose byteSize, createdAt, and expiresAt (also surfaced by the core uploadFile() helper, which now forwards abortSignal/headers); add postMultipartStreamToApi (streaming multipart uploads with deterministic part ordering and failure-path stream teardown), deleteFromApi, and createBinaryStreamResponseHandler to provider-utils
  • Updated dependencies [5190b67]

v7.0.88

Compare Source

Patch Changes
  • 8b6b756: fix(ai): prevent generateText from accepting responses that violate required tool choices
  • e07b577: feat: add tool calling support to batch

v7.0.87

Compare Source

Patch Changes
  • 850d863: fix(ai): preserve approval descriptors in UI message streams

v7.0.86

Compare Source

Patch Changes

v7.0.85

Compare Source

Patch Changes
  • 55a9981: Ensure canonical hashes preserve undefined array element positions.
  • dd32de2: fix(ai): sum Gateway image-generation costs across split requests
  • aa45741: fix(provider/anthropic): preserve native message batch request counts in provider metadata and support the full language-model option surface in batch requests
  • cc29073: feat(ai): expose individual image generation calls
  • Updated dependencies [d2507af]
  • Updated dependencies [aa45741]

v7.0.84

Compare Source

Patch Changes

v7.0.83

Compare Source

Patch Changes
  • 8dd86a9: Validate persisted typed tool calls against current input and output schemas.
    Schema-incompatible empty or error inputs and terminal history from unavailable
    tools remain loadable as dynamic tool parts instead of exposing unvalidated
    values under current static tool types.
  • fda13b3: Allow chats to continue automatically after tool approval denials reach the output-denied state.
  • 957146c: add operation-level outcomes to UI message stream end callbacks
  • ce6849a: fix(ai): handle stitchable stream cancellation before an inner stream is registered

v7.0.82

Compare Source

Patch Changes
  • 3e125ba: Allow manual tool approval statuses to include a reason and preserve it across
    core, model, and UI approval requests. OPA requires-approval decisions now
    surface their reason to human approvers. UI request chunks serialize the
    optional reason, while UI messages retain it as approval.requestReason
    separately from an approver's response reason.
  • Updated dependencies [0e7994c]
  • Updated dependencies [3e125ba]

v7.0.79

Compare Source

Patch Changes
  • b251584: Preserve active text and reasoning parts when another merged UI message stream finishes a step, and align workflow stream normalization with the explicit part end chunks.
  • 591d25b: feat: add batch completion webhooks. experimental_startTextBatch accepts a webhookUrl, and the gateway provider registers it through the batch callbackUrl contract and exports typed async-job metadata. Direct Anthropic and OpenAI batch providers return an unsupported warning when the option is provided.
  • 9de0baf: Parse structured generateText output when providers omit finishReason but return text.
  • Updated dependencies [591d25b]

v7.0.78

Compare Source

Patch Changes
  • 96970bb: Continue approved generateText, streamText, and WorkflowAgent turns with a model-visible tool error when revalidated tool input is invalid.
  • Updated dependencies [e12e068]

v7.0.77

Compare Source

Patch Changes

v7.0.76

Compare Source

Patch Changes
  • c6d57f3: fix(ai): prevent duplicate text and reasoning part ids
  • 677a707: fix(ai): allow nullish metadata schemas for UI messages with branded IDs

v7.0.74

Compare Source

Patch Changes

v7.0.73

Compare Source

Patch Changes

v7.0.71

Compare Source

Patch Changes
  • 9a37469: Prevent exceptions in streaming onChunk and onError callbacks from terminating the stream or masking provider errors.
  • Updated dependencies [936719b]

v7.0.70

Compare Source

Patch Changes
  • 9566914: Stop multi-step text generation for client tool approval even when a provider-executed tool has a deferred result.
  • b181020: fix: reject streamObject result promises and report failed completion when the provider stream errors
  • 7054073: Filter preliminary tool outputs when ignoreIncompleteToolCalls is enabled.
  • a828527: Prevent automatic tool execution when a model call ends with an unsafe finish reason.
  • d3cc3fe: Clear partial UI message parts when a WorkflowAgent model-call step is retried.
  • Updated dependencies [e6087c9]

v7.0.69

Compare Source

Patch Changes

v7.0.68

Compare Source

Patch Changes

v7.0.67

Patch Changes

v7.0.66

Patch Changes
  • 0782259: Keep chat status submitted until response content begins streaming.
  • 2fd1214: Fix declaration emit for exported values that infer an Output type.

v7.0.65

Patch Changes
  • dc8caae: Avoid repeatedly cloning accumulated text in readUIMessageStream while
    preserving independent snapshots for mutable nested values.
  • 72ec74f: Preserve root-level JSON Schema definitions when wrapping array output schemas.
  • c5b0515: Propagate errors thrown by the Chat onFinish callback to the initiating request.
  • Updated dependencies [16650e9]

v7.0.64

Patch Changes

v7.0.63

Patch Changes
  • d0a5807: Preserve reasoning block IDs from UI message streams on reasoning UI parts.
  • dcf33e8: Allow providers without reranking model support to be assigned to Provider.
  • Updated dependencies [a4d386d]

v7.0.62

Patch Changes
  • e0bcf52: feat(ui): add typed custom bodies to Completion APIs

v7.0.61

Patch Changes

v7.0.60

Patch Changes

v7.0.59

Patch Changes

v7.0.58

Patch Changes

  • 72ad23f: Respect ToolLoopAgent timeouts configured in agent settings.

  • ad6a650: feat(video): allow aspectRatio: 'adaptive' on generateVideo

    Some video models derive the output ratio from the input and reject explicit
    {width}:{height} values — BytePlus Seedance 2.5 does this for first-frame,
    first-and-last-frame, editing, and extension tasks. aspectRatio on
    VideoModelV3CallOptions, VideoModelV4CallOptions, and
    experimental_generateVideo is now `${number}:${number}` | 'adaptive', so
    those calls no longer need a type assertion. Support is provider-specific.

  • 81cd026: Reduce bundle size by making internal Zod v4 imports tree-shakeable.

  • Updated dependencies [c477556]

  • Updated dependencies [ad6a650]

  • Updated dependencies [81cd026]

v7.0.57

Patch Changes

v7.0.56

Patch Changes

  • 25c9120: Expose provider metadata on language-model-call end callbacks and telemetry spans.

  • 89080c8: fix (ai/gateway): make retried doStart calls idempotent

    generateVideo retries doStart, which creates a billable generation, so a
    retry after a lost response could start a second one. It now mints one
    idempotency token per logical start — outside the retry closure — and forwards it
    as an idempotency-key header, so a provider that deduplicates (the Vercel AI
    Gateway does) sees the same key on every attempt. GatewayVideoModel simply
    forwards the caller's headers rather than inferring retry identity from an
    options object, which would collide across unrelated calls.

  • 79d6195: Stop pending and active resumed chat streams after cancellation, and prevent
    overlapping resumptions from applying stale updates.

  • Updated dependencies [89080c8]

  • Updated dependencies [89080c8]

v7.0.55

Patch Changes

v7.0.54

Patch Changes
  • a6b17a2: Allow ToolLoopAgent prepareCall callbacks to read and override the top-level reasoning option.
  • 5615eb7: Add defaultInstructionsMiddleware for applying default language model instructions while preserving call-level overrides.
  • 36a3ff6: Preserve preceding assistant messages when regenerating a response.

v7.0.52

Patch Changes

v7.0.51

Patch Changes

v7.0.50

Patch Changes

  • 79e133c: async APIs for generateVideo (poll, webhook)

    Adds an asynchronous start/status flow to the experimental video model
    interface (VideoModelV4): models may now implement doStart, doStatus,
    and handleWebhookOption instead of (or in addition to) doGenerate, and
    experimental_generateVideo accepts poll and webhook options to
    orchestrate completion via polling or webhooks. Polling configuration can use
    a custom delay implementation for durable workflow compatibility.

  • da64b51: feat(code-mode): simplify tool caller configuration

  • Updated dependencies [79e133c]

v7.0.49

Compare Source

Patch Changes

v7.0.48

Patch Changes

v7.0.47

Patch Changes

v7.0.46

Patch Changes

v7.0.45

Patch Changes

v7.0.44

Compare Source

Patch Changes
  • 015acb4: fix telemetry attribution for language model calls that resolve to a different response model

v7.0.43

Compare Source

Patch Changes

v7.0.42

Patch Changes
  • 1659cd5: Prevent validated downloads on Node.js from reaching private or internal services through DNS aliases or DNS rebinding by validating and pinning every resolved address at connection time.
  • 60f97f6: support overriding model call settings for individual prepareStep invocations
  • 6a5bdff: Fix validated Node.js downloads when the HTTP connector requests a single DNS address.
  • 6de2ec1: Preserve provider metadata from empty text deltas in streamText.
  • Updated dependencies [1659cd5]
  • Updated dependencies [6a5bdff]
  • Updated dependencies [0012529]

v7.0.41

Patch Changes
  • 2e2224b: Route the warning system information banner to stderr so it does not corrupt application output written to stdout.
  • Updated dependencies [bf216b3]

v7.0.40

Patch Changes
  • c3782a6: Deprecate Experimental_GeneratedImage in favor of GeneratedFile.

v7.0.39

Patch Changes

v7.0.38

Patch Changes

v7.0.37

Patch Changes

v7.0.36

Compare Source

Patch Changes

  • 7fa85b2: fix(ai): use injective serialization for tool approval HMAC payload

    The tool approval signature (experimental_toolApprovalSecret) built its HMAC
    payload by joining fields with \n. Because fields such as toolName and
    toolCallId can themselves contain a newline, distinct field tuples could
    serialize to identical bytes, allowing a signed approval to verify against a
    different tuple. The payload is now serialized with JSON.stringify (with a
    versioned domain-separation prefix), which escapes delimiter/control characters
    and makes the encoding injective.

    Verification remains backwards compatible: a signature in the old format still
    verifies, but only when no field contains the \n delimiter (the condition
    that made the old format ambiguous), so a pending approval that straddles an
    upgrade is not rejected while the collision stays closed.

v7.0.35

Patch Changes
  • 7f6650b: Return response piping promises so callers can catch stream read and write errors.
  • 106ea59: feat(ai): add per-step first content timeout for streaming generations
  • Updated dependencies [2112ff1]

v7.0.34

Patch Changes

v7.0.33

Compare Source

Patch Changes

v7.0.32

Compare Source

Patch Changes
  • 6cd7c74: fix: correct the onToolCall callback result documentation
  • e35bcae: Allow UI message chunks to include fields added by newer server versions.
  • a4eb3f3: Propagate abort reasons when generation is cancelled during tool execution.
  • Updated dependencies [cefa3b1]
  • Updated dependencies [8fbb89c]

v7.0.31

Compare Source

Patch Changes

v7.0.30

Compare Source

Patch Changes

v7.0.29

Compare Source

Patch Changes

v7.0.28

Compare Source

Patch Changes
  • 0bc8d4f: Fix chat onFinish handling when overlapping requests clear the active response before a resume stream finishes.

v7.0.27

Compare Source

Patch Changes
  • ac01b79: Allow validating assistant UI messages with empty parts so persisted errored responses remain loadable.
  • 2696562: experimental_streamTranscribe result promises now resolve without consuming fullStream: accessing any result promise consumes the stream internally. Previously await result.text alone deadlocked on transform backpressure. Because live transcription streams can be unbounded, fullStream is explicitly single-consumer (no replay buffering): access it once, before any result promise, when both stream parts and final results are needed.
  • Updated dependencies [31c7be8]
  • Updated dependencies [4d096f6]

v7.0.26

Compare Source

Patch Changes
  • 27d294d: feat(ai): group orphaned tool calls after tool approvals under parent span

v7.0.25

Compare Source

Patch Changes
  • 7805e4a: Cancelling the experimental_streamTranscribe fullStream now also aborts a still-pending doStream setup, so a model whose doStream has not yet resolved is cancelled instead of leaking.
  • f8e82fd: Update the experimental_streamTranscribe unsupported-model error message now that gateway string model IDs can support streaming transcription.
  • Updated dependencies [4be62c1]
  • Updated dependencies [f8e82fd]
  • Updated dependencies [7805e4a]
  • Updated dependencies [cd12954]

v7.0.23

Compare Source

Patch Changes

v7.0.22

Compare Source

Patch Changes
  • 8f89c25: Add the Cartesia provider with Sonic 3.5 speech generation, Ink-Whisper batch transcription, and Ink 2 realtime transcription support.

v7.0.21

Compare Source

Patch Changes

v7.0.20

Compare Source

Patch Changes
  • b9ac19f: Flush compressed Node.js response chunks as they are piped so UI message and text streams remain incremental in Express and Next.js.
  • a4186d6: Promote the repairToolCall option to stable, with a deprecated experimental_repairToolCall alias for backwards compatibility.

v7.0.19

Compare Source

Patch Changes

  • be7f05a: Add fingerprintTools and detectToolDrift to detect MCP tool-definition drift ("rug pull"). Pin a tool set's server-controlled fields (string description, input schema, title) at trust time with fingerprintTools, then diff later fetches with detectToolDrift to catch injected descriptions or widened schemas before passing tools to the model. Baseline storage and the drift response remain the app's responsibility.

  • ee55a07: Preserve tool approval signatures when approvals transition to responded.

  • aad737d: Use own-property checks when resolving per-tool approvals so tool names and approval ids that match inherited object properties (e.g. constructor, toString, valueOf, __proto__) are treated as unconfigured/absent.

    • @ai-sdk/policy-opa: wrapMcpTools builds its per-tool map with a null prototype and reads supplied approvals via an own-property check, and shadow guards its per-tool map lookup the same way.
    • ai: tool and tool-context lookups keyed by a model- or client-supplied name now go through an own-property check (getOwn), so a name matching an inherited object property resolves to "no such tool"/"unconfigured" instead of a prototype value. This covers the approval path (per-tool approval resolution and replay re-validation) as well as tool-call parsing, execution, streaming callbacks, and UI message conversion/validation. The human-in-the-loop approval matching (collectToolApprovals) and streaming tool-name maps are built with a null prototype so a client-supplied id that matches an inherited property no longer slips past the "unknown approval" / "tool call not found" guards.

  • 0f93c57: feat (video): support video (not just image) reference inputs in inputReferences for reference-to-video generation

  • Updated dependencies [e12411e]

  • Updated dependencies [5d894a7]

  • Updated dependencies [fdb6d5d]

  • Updated dependencies [0f93c57]

  • Updated dependencies [d25a084]

v7.0.18

Compare Source

Patch Changes

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/ai-7.x branch 3 times, most recently from 8c4d4e8 to 7d75788 Compare July 8, 2026 04:14
@renovate
renovate Bot force-pushed the renovate/ai-7.x branch 2 times, most recently from 0b4e4e6 to fc6106b Compare July 18, 2026 15:17
@renovate
renovate Bot force-pushed the renovate/ai-7.x branch 2 times, most recently from 955f299 to c9521f9 Compare July 29, 2026 03:46
@renovate
renovate Bot force-pushed the renovate/ai-7.x branch 4 times, most recently from 3f37832 to 0199142 Compare August 8, 2026 11:53
@renovate
renovate Bot force-pushed the renovate/ai-7.x branch from 0199142 to d3fc498 Compare August 15, 2026 11:32
@renovate
renovate Bot force-pushed the renovate/ai-7.x branch 2 times, most recently from 35d48fe to badacfa Compare August 29, 2026 07:51
@renovate
renovate Bot force-pushed the renovate/ai-7.x branch 2 times, most recently from 9524b71 to 228b8e4 Compare September 6, 2026 00:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants