Skip to content

chore(deps): bump @ai-sdk/provider-utils, @ai-sdk/react and ai in /website - #213

Merged
MathiasVDA merged 1 commit into
mainfrom
dependabot/npm_and_yarn/website/multi-d8bd43f8e7
Oct 17, 2026
Merged

MathiasVDA merged 1 commit into
mainfrom
dependabot/npm_and_yarn/website/multi-d8bd43f8e7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 17, 2026

Copy link
Copy Markdown

Bumps @ai-sdk/provider-utils, @ai-sdk/react and ai. These dependencies needed to be updated together.
Updates @ai-sdk/provider-utils from 3.0.18 to 3.0.41

Changelog

Sourced from @​ai-sdk/provider-utils's changelog.

3.0.41

Patch Changes

  • 2b1c2df: Keep default Node.js downloads protected by DNS validation and connection pinning when frameworks or instrumentation wrap global fetch before or after the SDK loads.
  • 2b1c2df: fix(mcp): prevent SSRF in OAuth metadata discovery
  • 2b1c2df: fix(provider-utils): make lazy Undici import visible to deployment tracers

3.0.40

Patch Changes

  • 14810cb: fix(provider-utils): preserve streamed tool calls with unreliable IDs and indices

3.0.39

Patch Changes

  • bf29419: chore: enable dead code lint rules

3.0.38

Patch Changes

  • Updated dependencies [594787e]
    • @​ai-sdk/provider@​2.0.5

3.0.37

Patch Changes

  • ab3990f: fix(provider-utils): avoid excessive memory usage when base64 encoding byte arrays
  • Updated dependencies [c2089a9]
    • @​ai-sdk/provider@​2.0.4

3.0.36

Patch Changes

  • 26165ee: Mark transient network errors that occur while reading successful response bodies as retryable, including AI Gateway responses.

3.0.35

Patch Changes

  • 77d33c0: Split OpenAI and Azure OpenAI embedding requests by a conservative UTF-8 byte budget derived from their aggregate token limit, in addition to input count limits.

3.0.34

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/provider-utils since your current version.


Updates @ai-sdk/react from 2.0.109 to 2.0.280

Changelog

Sourced from @​ai-sdk/react's changelog.

2.0.280

Patch Changes

  • ai@5.0.277

2.0.279

Patch Changes

  • ai@5.0.276

2.0.278

Patch Changes

  • ai@5.0.275

2.0.277

Patch Changes

  • f47f8e0: fix: resume interrupted chat streams when the page becomes visible again

    useChat with resume: true no longer starts a second resume request on mount when the chat is already submitted or streaming, e.g. when remounting with a shared Chat instance mid-stream.

  • 878eb71: fix(react): prevent stale useObject streams from overwriting newer results

  • Updated dependencies [f47f8e0]

  • Updated dependencies [ab0ecab]

  • Updated dependencies [dc561f0]

  • Updated dependencies [c060bd2]

  • Updated dependencies [dbf4338]

  • Updated dependencies [99c9177]

    • ai@5.0.274

2.0.276

Patch Changes

  • Updated dependencies [223133e]
  • Updated dependencies [51e2b34]
  • Updated dependencies [5f95b09]
    • ai@5.0.273

2.0.275

Patch Changes

  • 3494142: Treat nullish useChat IDs the same as omitted IDs so the chat instance is not recreated on every render.
  • Updated dependencies [8db50f1]

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/react since your current version.


Updates ai from 5.0.108 to 5.0.277

Changelog

Sourced from ai's changelog.

5.0.277

Patch Changes

  • Updated dependencies [6d2c041]
    • @​ai-sdk/gateway@​2.0.168

5.0.276

Patch Changes

  • Updated dependencies [39cddec]
    • @​ai-sdk/gateway@​2.0.167

5.0.275

Patch Changes

  • Updated dependencies [7c28815]
  • Updated dependencies [66941b0]
    • @​ai-sdk/gateway@​2.0.166

5.0.274

Patch Changes

  • f47f8e0: fix: resume interrupted chat streams when the page becomes visible again

    useChat with resume: true no longer starts a second resume request on mount when the chat is already submitted or streaming, e.g. when remounting with a shared Chat instance mid-stream.

  • ab0ecab: fix(ai): update tool outputs in the message containing the matching tool call

  • dc561f0: fix(ai): prevent global type conflicts across SDK versions

  • c060bd2: fix(ai): wait for chat stream cleanup when stopping

  • dbf4338: fix(ai): update streaming chat messages by stable ID

  • 99c9177: fix(ai): discard unrelated message state when reading resumed streams

  • Updated dependencies [313a602]

  • Updated dependencies [ae1ebda]

    • @​ai-sdk/gateway@​2.0.165

5.0.273

Patch Changes

  • 223133e: fix(ai): prevent deleted tools named after Object.prototype properties from exposing persisted output to models
  • 51e2b34: fix(ai): prevent unavailable tools from exposing persisted output to models
  • 5f95b09: fix(ai): avoid duplicate slashes in chat reconnect URLs
  • Updated dependencies [4a65dd5]
  • Updated dependencies [8f63231]
  • Updated dependencies [95c921d]
  • Updated dependencies [c858a31]

... (truncated)

Commits
  • 2cdeefc Version Packages (#23350)
  • d5547a5 Version Packages (#23267)
  • 31c1906 Version Packages (#23120)
  • 0f1ae1b Version Packages (#22318)
  • f47f8e0 [v5.0] fix: resume interrupted chat streams after returning to a backgrounded...
  • dbf4338 [v5.0] fix: preserve streaming assistant message identity when the chat messa...
  • ab0ecab [v5.0] fix: addToolOutput results being dropped for tool calls in earlier mes...
  • 99c9177 [v5.0] fix: prevent readUIMessageStream from adopting content from an unrelat...
  • dc561f0 fix(ai): prevent global type conflicts across SDK versions (#22324)
  • c060bd2 [v5.0] fix: chat.stop() resolving before active stream processing and callbac...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ai since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@ai-sdk/provider-utils](https://github.com/vercel/ai/tree/HEAD/packages/provider-utils), [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) and [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai). These dependencies needed to be updated together.

Updates `@ai-sdk/provider-utils` from 3.0.18 to 3.0.41
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/provider-utils@3.0.41/packages/provider-utils/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/provider-utils@3.0.41/packages/provider-utils)

Updates `@ai-sdk/react` from 2.0.109 to 2.0.280
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/react@2.0.280/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@2.0.280/packages/react)

Updates `ai` from 5.0.108 to 5.0.277
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@5.0.277/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@5.0.277/packages/ai)

---
updated-dependencies:
- dependency-name: "@ai-sdk/provider-utils"
  dependency-version: 3.0.41
  dependency-type: indirect
- dependency-name: "@ai-sdk/react"
  dependency-version: 2.0.280
  dependency-type: indirect
- dependency-name: ai
  dependency-version: 5.0.277
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 17, 2026
@MathiasVDA
MathiasVDA merged commit fb11bee into main Oct 17, 2026
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/website/multi-d8bd43f8e7 branch October 17, 2026 19:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant