Skip to content

feat(deps): Bump ai from 4.3.16 to 7.0.79 - #23704

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/ai-7.0.77
Closed

feat(deps): Bump ai from 4.3.16 to 7.0.79#23704
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/ai-7.0.77

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown
Contributor

Bumps ai from 4.3.16 to 7.0.79.

Release notes

Sourced from ai's releases.

ai@6.0.271

Patch Changes

  • 9310140: Validate persisted typed tool calls against current input and output schemas. Schema-incompatible empty or error inputs and terminal history from unavailable tools remain loadable as dynamic tool parts instead of exposing unvalidated values under current static tool types.
  • b503790: add operation-level outcomes to UI message stream end callbacks

ai@6.0.270

Patch Changes

  • 8bc01a1: Allow chats to continue automatically after tool approval denials reach the output-denied state.
  • fa01949: Handle stitchable stream cancellation before an inner stream is registered.

ai@6.0.268

Patch Changes

  • Updated dependencies [ad28ecb]
    • @​ai-sdk/gateway@​3.0.183

ai@5.0.249

Patch Changes

  • 989be6f: add operation-level outcomes to UI message stream end callbacks

ai@5.0.248

Patch Changes

  • 77d33c0: Split OpenAI and Azure OpenAI embedding requests by a conservative UTF-8 byte budget derived from their aggregate token limit, in addition to input count limits.
  • Updated dependencies [77d33c0]
  • Updated dependencies [e0d7904]
    • @​ai-sdk/provider-utils@​3.0.35
    • @​ai-sdk/gateway@​2.0.143
Changelog

Sourced from ai's changelog.

7.0.79

Patch Changes

  • b251584: Preserve active text and reasoning parts when another merged UI message stream finishes a step, and align workflow stream normalization with the explicit part end chunks.
  • 591d25b: feat: add batch completion webhooks. experimental_startTextBatch accepts a webhookUrl, and the gateway provider registers it through the batch callbackUrl contract and exports typed async-job metadata. Direct Anthropic and OpenAI batch providers return an unsupported warning when the option is provided.
  • 9de0baf: Parse structured generateText output when providers omit finishReason but return text.
  • Updated dependencies [591d25b]
    • @​ai-sdk/gateway@​4.0.64
    • @​ai-sdk/provider@​4.0.8
    • @​ai-sdk/provider-utils@​5.0.30

7.0.78

Patch Changes

  • 96970bb: Continue approved generateText, streamText, and WorkflowAgent turns with a model-visible tool error when revalidated tool input is invalid.
  • Updated dependencies [e12e068]
    • @​ai-sdk/gateway@​4.0.63

7.0.77

Patch Changes

  • Updated dependencies [b74971f]
  • Updated dependencies [a371615]
    • @​ai-sdk/provider-utils@​5.0.29
    • @​ai-sdk/gateway@​4.0.62

7.0.76

Patch Changes

  • c6d57f3: fix(ai): prevent duplicate text and reasoning part ids
  • 677a707: fix(ai): allow nullish metadata schemas for UI messages with branded IDs

7.0.75

Patch Changes

  • 8978ad8: feat(ai): add experimental_startVideo and experimental_videoStatus — user-facing fire-and-forget wrappers over the video model doStart/doStatus spec methods, with the same sparse-options DX as generateVideo
  • Updated dependencies [dedac59]
    • @​ai-sdk/gateway@​4.0.61

7.0.74

Patch Changes

  • Updated dependencies [5941bd6]
  • Updated dependencies [9a4337d]

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ai since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 27, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 27, 2026 15:30
@dependabot
dependabot Bot requested review from JPeer264 and isaacs and removed request for a team August 27, 2026 15:30
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 27, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 2 potential issues.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 8ad6e22. Configure here.

"@types/mysql": "^2.15.21",
"@types/pg": "^8.6.5",
"ai": "^4.3.16",
"ai": "^7.0.77",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unpinned bump breaks v4 AI tests

High Severity

The ai dependency is jumped from ^4.3.16 to ^7.0.77, but the v4 suites still import MockLanguageModelV1 and MockEmbeddingModelV1 from ai/test and do not pin a version via additionalDependencies (unlike the v5 and v6/v7 suites). Those mocks are gone in v7, so the v4 and span-streaming-v4 tests fail on import and v4 instrumentation is no longer covered. v7 is also ESM-only and requires Node 22, which further breaks the CJS runs and Node 20 CI.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 8ad6e22. Configure here.

},
"dependencies": {
"ai": "^6.0.0",
"ai": "^7.0.77",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cloudflare v6 AI tests unpinned

Medium Severity

The Cloudflare package ai range moves from ^6.0.0 to ^7.0.77 with no per-suite pin. The vercelai-6 suite and other tests that import ai (including the Vite client build of streamText) now run against v7. That drops v6 coverage on Cloudflare and can fail Workers/client bundling because v7 is ESM-only, requires Node 22, and @ai-sdk/provider-utils now depends on undici.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 8ad6e22. Configure here.

@dependabot dependabot Bot changed the title feat(deps): Bump ai from 4.3.16 to 7.0.77 feat(deps): Bump ai from 4.3.16 to 7.0.79 Aug 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ai-7.0.77 branch 2 times, most recently from bd80880 to e0b118c Compare August 28, 2026 10:17
Bumps [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) from 4.3.16 to 7.0.79.
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.79/packages/ai)

---
updated-dependencies:
- dependency-name: ai
  dependency-version: 7.0.77
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ai-7.0.77 branch from e0b118c to 9c5587e Compare August 28, 2026 12:05
@JPeer264

Copy link
Copy Markdown
Member

We explicitly test for these versions and leaving them as is.

@JPeer264 JPeer264 closed this Aug 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/ai-7.0.77 branch August 28, 2026 14:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant