chore(deps): update dependency ai to v5.0.253 - #369
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
renovate
Bot
force-pushed
the
renovate/ai-5.x-lockfile
branch
from
September 3, 2026 22:59
4b8a4cd to
10bdddc
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/ai-5.x-lockfile
branch
from
September 4, 2026 19:47
10bdddc to
20e89ac
Compare
renovate
Bot
force-pushed
the
renovate/ai-5.x-lockfile
branch
from
September 4, 2026 22:33
20e89ac to
70da457
Compare
renovate
Bot
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.0.105→5.0.253Release Notes
vercel/ai (ai)
v5.0.253Compare Source
Patch Changes
5643ec9: fix(ai): allow manual continuations to reuse JSON tool outputs with undefined object propertiesb436246]v5.0.252Compare Source
Patch Changes
2c12cd3: fix(ai): skipsmoothStreamdelays while the document is hiddencfa33a0]8ee6f7d]2287da5]526f371]v5.0.251Compare Source
Patch Changes
78a29c2]v5.0.250Compare Source
Patch Changes
4e3f54b: Validate persisted typed tool calls against current input and output schemas.Schema-incompatible empty or error inputs and completed or failed history from
unavailable tools remain loadable as dynamic tool parts instead of exposing
unvalidated values under current static tool types.
26165ee: Mark transient network errors that occur while reading successful response bodies as retryable, including AI Gateway responses.810dc70]7a926ba]25c1956]26165ee]v5.0.249Compare Source
Patch Changes
989be6f: add operation-level outcomes to UI message stream end callbacksv5.0.248Compare Source
Patch Changes
77d33c0: Split OpenAI and Azure OpenAI embedding requests by a conservative UTF-8 byte budget derived from their aggregate token limit, in addition to input count limits.77d33c0]e0d7904]v5.0.245Compare Source
Patch Changes
9e8e087: Stop re-exportingcreateTestServerandTestResponseControllerfrom@ai-sdk/provider-utils/testsoai/testcan load withoutmsworvitest. Import these APIs from@ai-sdk/test-server/with-vitestinstead.9e8e087]3505af4]v5.0.244Compare Source
Patch Changes
b7dd2fe]v5.0.243Compare Source
Patch Changes
9e8a754: Prevent exceptions in streamingonChunkandonErrorcallbacks from terminating the stream or masking provider errors.1a04ece]ed2f035]v5.0.242Compare Source
Patch Changes
e88bc9f: Fix array-backed language model mocks to return configured results in order from the first call.v5.0.241Compare Source
Patch Changes
9d0b84c: fix: rejectstreamObjectresult promises and report failed completion when the provider stream errors05df123: Filter preliminary tool outputs whenignoreIncompleteToolCallsis enabled.e532644: Prevent automatic tool execution when a model call ends with an unsafe finish reason.v5.0.240Compare Source
Patch Changes
bef36a6]v5.0.239Compare Source
Patch Changes
05d5b6c]v5.0.238Compare Source
Patch Changes
b484978]v5.0.237Compare Source
Patch Changes
bf11412: Avoid repeatedly cloning accumulated text inreadUIMessageStreamwhilepreserving independent snapshots for mutable nested values.
7ec6b69: Fix declaration emit for exported values that infer anOutputtype.v5.0.236Compare Source
Patch Changes
c425210: Propagate errors thrown by chatonFinishcallbacks.eb7f2ac: Keep chat status submitted until response content begins streaming.df0cbe9]v5.0.235Compare Source
Patch Changes
91e93fa]de0921d]v5.0.234Compare Source
Patch Changes
412c15e: Preserve reasoning part IDs when processing UI message streams.1e632f7]v5.0.233Compare Source
Patch Changes
2604cb6: PreventresumeStreamfrom copying the previous assistant message into the resumed response.v5.0.232Compare Source
Patch Changes
66dd974: Prevent streaming telemetry spans from ending twice or remaining unfinished when model calls fail.0e51b7b]v5.0.231Compare Source
Patch Changes
2709314: Stop pending and active resumed chat streams after cancellation, and prevent overlapping resumptions from applying stale updates.b474448]v5.0.230Compare Source
Patch Changes
c524e57]v5.0.229Compare Source
Patch Changes
bd09b8e]v5.0.228Compare Source
Patch Changes
b74765f]v5.0.227Compare Source
Patch Changes
212d793: Skip re-validating tool input for terminal output-available UI message parts.1ce55ef]f50dc31]v5.0.226Compare Source
Patch Changes
ecd9c1c]v5.0.225Patch Changes
8ea0ce4]v5.0.224Patch Changes
d27b3c3]v5.0.223Patch Changes
7a6bdbc: Prevent validated downloads on Node.js from reaching private or internal services through DNS aliases or DNS rebinding by validating and pinning every resolved address at connection time.c5e11c6: Preserve provider metadata from empty text deltas instreamText.7a6bdbc]5bd6d2c]v5.0.222Patch Changes
d38a1d5: Route the warning system information banner to stderr so it does not corrupt application output written to stdout.b408f1d]v5.0.221Patch Changes
191423e]v5.0.220Patch Changes
a45e563]v5.0.219Patch Changes
649bd0f: fix(ai): bound media-type sniffing decode for ID3-prefixed inputMedia-type detection stripped ID3 tags before the ~18-byte prefix cap, decoding the entire base64 attachment (plus a full-size copy) whenever the data began with
ID3/SUQz. This turned the intended O(1) sniff into an O(N) decode of the whole attachment. Detection now decodes at most a bounded prefix and skips the ID3 tag within that bound, keeping cost O(1) in input size on both image and audio paths.965545b: Return response piping promises so callers can catch stream read and write errors.Updated dependencies [
fb4c0d7]v5.0.217Compare Source
Patch Changes
dcbdf32: Fix chatonFinishhandling when overlapping requests clear the active response before a resume stream finishes.d7d22d3: Allow UI message chunks to include fields added by newer server versions.01edf75: Propagate abort reasons when generation is cancelled during tool execution.473d770: Prevent tools excluded byactiveToolsfrom being parsed or executed.1fec2e5]d8e8477]v5.0.216Compare Source
Patch Changes
2fd6076: fix(ai): callonInputStartbeforeonInputAvailableduring non-streaming tool calls2fd6076]v5.0.215Compare Source
Patch Changes
73c6143]v5.0.214Compare Source
Patch Changes
4e119ca]v5.0.213Compare Source
Patch Changes
97e9b70: Allow validating assistant UI messages with empty parts so persisted errored responses remain loadable.59e34d9: Prevent pending tool executions from enqueueing results after a model stream error closes the result stream.c6e1d1a]7480df1]v5.0.212Compare Source
Patch Changes
2786e44]v5.0.211Compare Source
Patch Changes
6a823a6]ed8b811]4f00314]8549807]3c89617]v5.0.210Compare Source
Patch Changes
6d52ce8]v5.0.209Compare Source
Patch Changes
f236836]bd9365a]v5.0.208Compare Source
Patch Changes
4a3b4c0]v5.0.207Compare Source
Patch Changes
b85c4fb]v5.0.206Compare Source
Patch Changes
3118e98]v5.0.205Compare Source
Patch Changes
5ed46cd]v5.0.204Compare Source
Patch Changes
9169261: fix(provider-utils): cancel response body on download rejection to prevent socket leakWhen a download was rejected early — because the
Content-Lengthheader exceeded the size limit, the response status was not ok, or a redirect resolved to a blocked URL — the fetch response body was left unconsumed and uncancelled. With WHATWG Fetch/undici this leaves the underlying TCP socket open instead of returning it to the connection pool, allowing an attacker-controlled origin to exhaust file descriptors and cause a denial of service. The body is now cancelled on all early-rejection paths inreadResponseWithSizeLimitanddownload, andfetchWithValidatedRedirectscancels each redirect hop's body before following or rejecting the next hop.Updated dependencies [
dd9349d]Updated dependencies [
9169261]v5.0.203Compare Source
Patch Changes
49f2e26]v5.0.202Patch Changes
3a5c051]v5.0.200Compare Source
Patch Changes
eea9166: fix: harden download URL SSRF guard against hostname and redirect bypassesvalidateDownloadUrland the file download helpers (downloadBlob,download) could be bypassed in several ways when handling untrusted URLs:localhost.,myhost.local.) skipped the localhost/.localblocklist.::127.0.0.1), IPv4-translated (::ffff:0:127.0.0.1), and NAT64 (64:ff9b::127.0.0.1, including the64:ff9b:1::/48local-use prefix) — were not decoded and checked against the private IPv4 ranges.fetchhad already followed them, so the request to a redirect target (e.g. an internal/metadata address) had already been issued before the check ran.100.64.0.0/10, used by some cloud providers for internal traffic), benchmarking (198.18.0.0/15), IETF protocol assignments (192.0.0.0/24), the reserved240.0.0.0/4block (including the255.255.255.255broadcast address), and IPv6 site-local (fec0::/10) and multicast (ff00::/8).The validator now strips trailing dots before the hostname checks and fully expands IPv6 addresses to detect embedded private IPv4 targets. The download helpers now follow redirects manually (
redirect: 'manual'), re-validating each hop before requesting it, so an unsafe redirect target is never fetched. When a redirect cannot be inspected because the runtime returns an opaque response, the helpers fail closed (reject the redirect) on the server; only in a real browser — where SSRF is not reachable (fetch is constrained by CORS and cannot reach a server's internal network or cloud-metadata endpoints) — is the redirect followed natively so legitimate redirected downloads keep working.15cf74f: Harden stream text processing and middleware against prototype pollution from stream part IDs.8ad6f80: fix: redact server error details from UI message streams by defaultstreamText(...).toUIMessageStream()andcreateUIMessageStreamdefaulted theironErrorcallback togetErrorMessage, which serializes the raw error (error.toString()/JSON.stringify(error)) into the client-facing{ type: 'error', errorText }chunk — and also intotool-output-errorparts. The documented default was() => 'An error occurred.', so applications relying on the documented behavior were unknowingly streaming server exception details (internal hostnames, paths, provider request data, validation inputs) to end users.The default
onErrornow returns the documented generic'An error occurred.'. Raw error details are only emitted when the developer explicitly supplies anonErrorhandler. This also redactstool-output-errorand invalid-tool-input error text by default; pass anonErrorto surface richer messages.Updated dependencies [
9f67efe]Updated dependencies [
eea9166]v5.0.199Compare Source
Patch Changes
040dc83: fix(ai): return schema-transformed elements in array output modePreviously final array output validation checked each element against the schema but returned the raw model output. Array output now returns the validated values so Zod transforms, coercions, defaults, and pipes are applied consistently with object output.
v5.0.198Compare Source
Patch Changes
b02267c: Harden UI message stream processing against prototype pollution from chunk IDs.v5.0.197Compare Source
Patch Changes
518f0c3]ebec5ab]v5.0.196Patch Changes
d4617bf]v5.0.194Compare Source
Patch Changes
afe2618]v5.0.193Compare Source
Patch Changes
0e2aaaa]8fc77c6]v5.0.192Compare Source
Patch Changes
544fbab]1bdb6f7]v5.0.190Compare Source
Patch Changes
00a1e93]v5.0.188Compare Source
Patch Changes
1760d76: fix URL of hero animation in READMEv5.0.187Compare Source
Patch Changes
e676093]v5.0.186Compare Source
Patch Changes
c261259]v5.0.185Compare Source
Patch Changes
f668fe8]80e2f83]v5.0.184Compare Source
Patch Changes
cb911d2: fix(ai): add allowSystemInMessages option and warn by default when system messages are found in prompt or messagesv5.0.183Compare Source
Patch Changes
8dd759d]v5.0.182Compare Source
Patch Changes
8374557]v5.0.181Compare Source
Patch Changes
783fa6c: chore: ensure consistent import handling and avoid import duplicates or cyclesc327fb9: fix(mcp): prevent prototype pollution by using secureJsonParse783fa6c]v5.0.180Compare Source
Patch Changes
0a00b9b: trigger release for all packages after provenance setup0a00b9b]c30c710]11c7bdd]v5.0.179Compare Source
Patch Changes
5543cd1: Add AI Gateway hint to provider READMEsv5.0.178Compare Source
Patch Changes
eacfb5e]v5.0.176Compare Source
Patch Changes
4b40033]v5.0.175Compare Source
Patch Changes
d4fbea5]v5.0.174Compare Source
Patch Changes
140640d]v5.0.173Compare Source
Patch Changes
6c0cde5]v5.0.172Compare Source
Patch Changes
a5317d0]v5.0.171Compare Source
Patch Changes
f03fec2]v5.0.170Compare Source
Patch Changes
8180bff]v5.0.169Compare Source
Patch Changes
c6fcbfa]v5.0.168Compare Source
Patch Changes
a064eef]v5.0.167Compare Source
Patch Changes
6b4ceaa]v5.0.166Compare Source
Patch Changes
5e2950a]v5.0.165Compare Source
Patch Changes
a27a978: fix: allow inline data URLs in download validationa27a978]v5.0.164Compare Source
Patch Changes
bc392cb]v5.0.163Compare Source
Patch Changes
5bc2cb8]v5.0.162Compare Source
Patch Changes
efc9006]v5.0.161Patch Changes
4e8bdc7]v5.0.160Patch Changes
2f94884]v5.0.159Patch Changes
5e55f43]v5.0.158Patch Changes
946ef88]v5.0.157Patch Changes
9379c51: README updates2e35d03]v5.0.156Patch Changes
205f9d8]v5.0.155Patch Changes
6f40c1a]v5.0.154Patch Changes
f29cec3]51c7d28]dacdf4b]v5.0.153Patch Changes
c59a31c: Remove custom User-Agent header from HttpChatTransport to fix CORS preflight failures in Safari and Firefoxv5.0.152Patch Changes
a608d48]c5790b1]v5.0.151Patch Changes
f54cb63]v5.0.150Patch Changes
ee7582f]v5.0.149Patch Changes
c66afc5: fix(security): validate redirect targets in download functions to prevent SSRF bypassdownloadnow validates the final URL after following HTTP redirects, preventing attackers from bypassing SSRF protections via open redirects to internal/private addresses.v5.0.148Patch Changes
392dc94]v5.0.147Patch Changes
7a57a71]v5.0.146Patch Changes
6a2f01b: Add URL validation todownloadto prevent blind SSRF attacks. Private/internal IP addresses, localhost, and non-HTTP protocols are now rejected before fetching.6a2f01b]17d64e3]v5.0.145Patch Changes
201bb12]v5.0.144Patch Changes
c4a324b]v5.0.143Patch Changes
4fa740a]v5.0.142Patch Changes
8ea21c1]v5.0.141Patch Changes
4db4318]v5.0.140Patch Changes
3749ed6]v5.0.139Patch Changes
9212b2d]v5.0.138Patch Changes
42815ac]v5.0.137Patch Changes
5e921ed]v5.0.136Patch Changes
9baf5ea]v5.0.135Patch Changes
fe42fd3]8b5473c]v5.0.134Patch Changes
9545c46]v5.0.133Patch Changes
b4ac032]v5.0.132Patch Changes
8aac221]v5.0.131Patch Changes
3f04ffe]v5.0.130Patch Changes
20565b8: security: prevent unbounded memory growth in download functionsThe
download()anddownloadBlob()functions now enforce a default 2 GiB size limit when downloading from user-provided URLs. Downloads that exceed this limit are aborted with aDownloadErrorinstead of consuming unbounded memory and crashing the process. TheabortSignalparameter is now passed through tofetch()in all download call sites.Added
downloadoption totranscribe()andexperimental_generateVideo()for providing a custom download function. Use the newcreateDownload({ maxBytes })factory to configure download size limits.Updated dependencies [
20565b8]v5.0.129Patch Changes
a207442]v5.0.128Patch Changes
7e6c81a]v5.0.127Patch Changes
db2e810]v5.0.126Patch Changes
beba89c]v5.0.125Patch Changes
8d8fdd2]v5.0.124Patch Changes
fad90dd]8479fe8]0d3fc21]53e891c]v5.0.123Patch Changes
5253b83](httpsConfiguration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.