build(deps): bump ai from 7.0.90 to 7.0.93

[dependabot]

Bumps ai from 7.0.90 to 7.0.93.

Changelog

Sourced from ai's changelog.

7.0.93

Patch Changes

• df6c009: fix(ai): use new message ID when replacing a message in sendMessage
• 6ee74a3: fix(ai): preserve tool part titles when validating UI messages
• f13d371: fix(ai): preserve provider metadata when converting failed tool calls
• d4485fe: feat(ai): support minItems and maxItems in array outputs
• 4f201cc: chore(ai): formally include already supported onLanguageModelCallStart and onLanguageModelCallEnd in ToolLoopAgentSettings type
• 8cdb2a7: fix(ai): decode text data URLs in Node.js
• 0f2281e: fix(ai): reject embedding responses whose count does not match the input values
• fc8e8ac: fix(ai): preserve image call diagnostics when no image is generated
• ee8391e: fix(ai): support abort signals when the global AbortSignal is not a constructor
• Updated dependencies [3cfc1fc]
  • @​ai-sdk/gateway@​4.0.75

7.0.92

Patch Changes

• a51cc94: fix(ai): preserve provider metadata from empty smooth stream deltas
• d1904d3: fix(ai): surface fallback errors for empty HTTP response bodies
• 84e5a79: fix(ai): skip smoothStream delays while the document is hidden
• a8e8ad0: fix(ai): expose call ID and abort reason in streamText onAbort callbacks
• Updated dependencies [a7e324b]
  • @​ai-sdk/gateway@​4.0.74

7.0.91

Patch Changes

• 802af1e: Add configurable recovery for provider errors received after streamText response streaming begins. Explicitly configuring streamRetries enables isolated retry attempts, including one bounded callback-directed recovery through StreamTextOnErrorRetryCallback with streamRetries: 0; recovered results and metadata reflect only the successful attempt, while the existing StreamTextOnErrorCallback contract and logging-only observer behavior remain compatible.
• Updated dependencies [5484f27]
• Updated dependencies [36eb7ee]
• Updated dependencies [622fa7f]
  • @​ai-sdk/gateway@​4.0.73

Commits

• 6359fd5 Version Packages (#20288)
• 6ee74a3 fix: tool-part titles disappearing during UI message validation (#20111)
• df6c009 fix(ai): use new message ID when replacing a message in sendMessage (#20379)
• 8cdb2a7 fix: decode valid text data URLs in Node.js (#20354)
• 0f2281e fix: embedMany accepts provider responses with mismatched embedding counts (#...
• fc8e8ac fix: NoImageGeneratedError discards per-call diagnostics for empty image resp...
• f13d371 fix: Preserve namespaces when replaying failed tool calls from UI messages (#...
• ee8391e fix: prevent valid abort signals from crashing WorkflowAgent in runtimes with...
• 4f201cc chore(ai): formally include already supported onLanguageModelCallStart and ...
• d4485fe feat: support minItems and maxItems constraints in Output.array() (#20270)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

---

Summary by cubic

Bumps ai from 7.0.90 to 7.0.93, pulling in bug fixes plus minItems/maxItems support for array outputs. No migration steps needed.

• Adds configurable retry recovery for provider errors after streamText streaming begins.
• Fixes message replacement, tool part title preservation, provider metadata preservation, and Node.js text data URL decoding.
• Updates @ai-sdk/gateway to 4.0.75.
• The lockfile also syncs @cortexkit/opencode-openai-auth and @cortexkit/pi-openai-auth to 0.7.1.

^{Written for commit 66bbabc. Summary will update on new commits.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	ai@​7.0.90 ⏵ 7.0.93	+1

View full report

[oaiauth-alfonso]

Applied in 4f07e37 as one batch rather than merged individually.

The three Pi packages had to move together: bumped separately they leave two copies of pi-ai in the tree, and the same Model type resolved from two copies is two incompatible types. That is what failed the check job on #138 and #139.

Verified together on main: typecheck clean, 1137 + 3 tests, build, lint, format, and a Node import smoke test on both built packages.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.