fix(deps): update dependency ai to v7 [security] - #17
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
|
Important Review skippedAuto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
3 times, most recently
from
November 20, 2025 06:51
14319b6 to
7a2abc5
Compare
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
2 times, most recently
from
December 5, 2025 23:11
a935a57 to
c41afcd
Compare
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
4 times, most recently
from
December 18, 2025 07:32
66b29d4 to
0726482
Compare
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
December 31, 2025 07:24
0726482 to
73d8ffc
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
January 2, 2026 07:40
73d8ffc to
89ee48d
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
January 9, 2026 07:30
89ee48d to
232ff70
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
January 10, 2026 07:44
232ff70 to
cb19e59
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
January 20, 2026 06:48
cb19e59 to
27a75e2
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
January 21, 2026 07:42
27a75e2 to
90f43b0
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
January 24, 2026 19:36
90f43b0 to
ddf8c75
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
January 25, 2026 14:53
ddf8c75 to
4236dca
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
February 3, 2026 20:07
4236dca to
2bbfc71
Compare
renovate
Bot
changed the title
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
February 4, 2026 12:15
2bbfc71 to
db235d0
Compare
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
March 31, 2026 10:12
4dfa1a5 to
c97d10c
Compare
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
2 times, most recently
from
April 19, 2026 04:16
d444afd to
33d08e9
Compare
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
3 times, most recently
from
May 3, 2026 14:50
ae240c1 to
95ef009
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
May 13, 2026 03:00
95ef009 to
6649e5b
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
May 14, 2026 07:48
6649e5b to
663cfb1
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
May 16, 2026 07:25
663cfb1 to
469f439
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
May 17, 2026 10:56
469f439 to
b1d55ae
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
May 23, 2026 03:42
b1d55ae to
6eaf182
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
May 24, 2026 11:15
6eaf182 to
97b45f6
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
May 30, 2026 20:05
97b45f6 to
d1eec2d
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
2 times, most recently
from
June 6, 2026 19:17
f8b02a7 to
57741d9
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
June 12, 2026 23:54
57741d9 to
0d3704c
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/npm-ai-vulnerability
branch
from
June 14, 2026 07:10
0d3704c to
496807a
Compare
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
|
On this bump: ai 4.3.16 -> v7 removes two things in your tree. I scanned current master (06af8d8) against the 2026-09-13.1 change feed:
Full disclosure: I build the scanner (Emendant) - the findings above are yours to use either way. If it's useful, I can do a free 20-minute check of the repo with you - runs locally, no repository access needed. Session or async instructions? |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^4.3.16→^7.0.0Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files
CVE-2025-48985 / GHSA-rwvc-j5jr-mgvh
More information
Details
A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade.
Severity
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:NReferences
This data is provided by the GitHub Advisory Database (CC-BY 4.0).
Release Notes
vercel/ai (ai)
v7.0.99Compare Source
Patch Changes
615ac89: feat(ai): use InvalidArgumentError for utility input validation7f76d83]v7.0.98Compare Source
Patch Changes
5ec21a6: fix: reject unsupported batch request typesdb59d78: feat(ai): add runtime context attribution to embed, embedMany and rerank7469a3b: feat: support image generation requests in batchesf87bf07: fix(ai): reject invalid reranking provider indicesbc5cb7a: fix(ai): accept inferred tools invalidateUIMessagesa5f449a: feat(ai): add a stable UI message type and type guard for tool output errors5ec21a6]7469a3b]dbd83a3]813bb36]c43e4b7]03f4e59]v7.0.97Compare Source
Patch Changes
ef3bac4: Observe video webhook receiver rejections before generation starts to prevent unhandled rejections during or after a failed start. Preserve start error precedence and assimilate custom receivers only once.9942196: feat: add batch cancel and list APIs9942196]v7.0.96Compare Source
Patch Changes
912fb01: feat: add batch cancel and list APIsc595e6e: fix(ai): callatobwithout a receiver for Cloudflare Workers compatibility912fb01]aa4cc14]f102e41]v7.0.95Compare Source
Patch Changes
27f6d7a: fix(ai): reject embedding model responses that contain no embeddingsv7.0.94Compare Source
Patch Changes
a4ba394: feat: support per-request models in batch36b3364: fix(ai): enforce tool choices in streamText45099da: Retry unclassified empty image results, preserve retry-attempt accounting, add provider-independent result retryability classification, and mark Google and Google Vertex prompt blocks as terminal.a4ba394]e9bf5e3]45099da]56c004c]9e1d1b2]a495511]v7.0.93Compare Source
Patch Changes
df6c009: fix(ai): use new message ID when replacing a message insendMessage6ee74a3: fix(ai): preserve tool part titles when validating UI messagesf13d371: fix(ai): preserve provider metadata when converting failed tool callsd4485fe: feat(ai): support minItems and maxItems in array outputs4f201cc: chore(ai): formally include already supportedonLanguageModelCallStartandonLanguageModelCallEndinToolLoopAgentSettingstype8cdb2a7: fix(ai): decode text data URLs in Node.js0f2281e: fix(ai): reject embedding responses whose count does not match the input valuesfc8e8ac: fix(ai): preserve image call diagnostics when no image is generatedee8391e: fix(ai): support abort signals when the global AbortSignal is not a constructor3cfc1fc]v7.0.92Compare Source
Patch Changes
a51cc94: fix(ai): preserve provider metadata from empty smooth stream deltasd1904d3: fix(ai): surface fallback errors for empty HTTP response bodies84e5a79: fix(ai): skipsmoothStreamdelays while the document is hiddena8e8ad0: fix(ai): expose call ID and abort reason in streamText onAbort callbacksa7e324b]v7.0.91Compare Source
Patch Changes
802af1e: Add configurable recovery for provider errors received afterstreamTextresponse streaming begins. Explicitly configuringstreamRetriesenables isolated retry attempts, including one bounded callback-directed recovery throughStreamTextOnErrorRetryCallbackwithstreamRetries: 0; recovered results and metadata reflect only the successful attempt, while the existingStreamTextOnErrorCallbackcontract and logging-only observer behavior remain compatible.5484f27]36eb7ee]622fa7f]v7.0.90Compare Source
Patch Changes
4d25a08]6bcc0f8]v7.0.89Compare Source
Patch Changes
5190b67: feat(provider): extend the FilesV4 interface with optionalgetFileMetadata,downloadFile(streaming), anddeleteFileoperations, plusabortSignal/headerscall options and a{ type: 'stream' }upload data variant; upload results now exposebyteSize,createdAt, andexpiresAt(also surfaced by the coreuploadFile()helper, which now forwardsabortSignal/headers); addpostMultipartStreamToApi(streaming multipart uploads with deterministic part ordering and failure-path stream teardown),deleteFromApi, andcreateBinaryStreamResponseHandlerto provider-utils5190b67]v7.0.88Compare Source
Patch Changes
8b6b756: fix(ai): prevent generateText from accepting responses that violate required tool choicese07b577: feat: add tool calling support to batchv7.0.87Compare Source
Patch Changes
850d863: fix(ai): preserve approval descriptors in UI message streamsv7.0.86Compare Source
Patch Changes
11109ae: feat(ai): support signed tool approvals in WorkflowAgent1329d5a]v7.0.85Compare Source
Patch Changes
55a9981: Ensure canonical hashes preserve undefined array element positions.dd32de2: fix(ai): sum Gateway image-generation costs across split requestsaa45741: fix(provider/anthropic): preserve native message batch request counts in provider metadata and support the full language-model option surface in batch requestscc29073: feat(ai): expose individual image generation callsd2507af]aa45741]v7.0.84Compare Source
Patch Changes
6669d69: Expose parsed structured output instreamTextend callbacks.a6463ca: fix(ai): allow tool approval secrets in ToolLoopAgent settings and prepareCalle604532: fix(ai): handle stateful and empty-match regular expressions in smoothStream805bbfc]90192f1]v7.0.83Compare Source
Patch Changes
8dd86a9: Validate persisted typed tool calls against current input and output schemas.Schema-incompatible empty or error inputs and terminal history from unavailable
tools remain loadable as dynamic tool parts instead of exposing unvalidated
values under current static tool types.
fda13b3: Allow chats to continue automatically after tool approval denials reach theoutput-deniedstate.957146c: add operation-level outcomes to UI message stream end callbacksce6849a: fix(ai): handle stitchable stream cancellation before an inner stream is registeredv7.0.82Compare Source
Patch Changes
3e125ba: Allow manual tool approval statuses to include a reason and preserve it acrosscore, model, and UI approval requests. OPA
requires-approvaldecisions nowsurface their reason to human approvers. UI request chunks serialize the
optional
reason, while UI messages retain it asapproval.requestReasonseparately from an approver's response
reason.0e7994c]3e125ba]v7.0.79Compare Source
Patch Changes
b251584: Preserve active text and reasoning parts when another merged UI message stream finishes a step, and align workflow stream normalization with the explicit part end chunks.591d25b: feat: add batch completion webhooks.experimental_startTextBatchaccepts awebhookUrl, and the gateway provider registers it through the batchcallbackUrlcontract and exports typed async-job metadata. Direct Anthropic and OpenAI batch providers return an unsupported warning when the option is provided.9de0baf: Parse structured generateText output when providers omit finishReason but return text.591d25b]v7.0.78Compare Source
Patch Changes
96970bb: Continue approvedgenerateText,streamText, andWorkflowAgentturns with a model-visible tool error when revalidated tool input is invalid.e12e068]v7.0.77Compare Source
Patch Changes
b74971f]a371615]v7.0.76Compare Source
Patch Changes
c6d57f3: fix(ai): prevent duplicate text and reasoning part ids677a707: fix(ai): allow nullish metadata schemas for UI messages with branded IDsv7.0.74Compare Source
Patch Changes
5941bd6]9a4337d]v7.0.73Compare Source
Patch Changes
f607a12]v7.0.71Compare Source
Patch Changes
9a37469: Prevent exceptions in streamingonChunkandonErrorcallbacks from terminating the stream or masking provider errors.936719b]v7.0.70Compare Source
Patch Changes
9566914: Stop multi-step text generation for client tool approval even when a provider-executed tool has a deferred result.b181020: fix: rejectstreamObjectresult promises and report failed completion when the provider stream errors7054073: Filter preliminary tool outputs whenignoreIncompleteToolCallsis enabled.a828527: Prevent automatic tool execution when a model call ends with an unsafe finish reason.d3cc3fe: Clear partial UI message parts when a WorkflowAgent model-call step is retried.e6087c9]v7.0.69Compare Source
Patch Changes
1f7a464]v7.0.68Compare Source
Patch Changes
257632b]v7.0.67Compare Source
Patch Changes
a0b1ffc]v7.0.66Patch Changes
0782259: Keep chat status submitted until response content begins streaming.2fd1214: Fix declaration emit for exported values that infer anOutputtype.v7.0.65Patch Changes
dc8caae: Avoid repeatedly cloning accumulated text inreadUIMessageStreamwhilepreserving independent snapshots for mutable nested values.
72ec74f: Preserve root-level JSON Schema definitions when wrapping array output schemas.c5b0515: Propagate errors thrown by the ChatonFinishcallback to the initiating request.16650e9]v7.0.64Patch Changes
ea75787]b20de9e]v7.0.63Patch Changes
d0a5807: Preserve reasoning block IDs from UI message streams on reasoning UI parts.dcf33e8: Allow providers without reranking model support to be assigned toProvider.a4d386d]v7.0.62Patch Changes
e0bcf52: feat(ui): add typed custom bodies to Completion APIsv7.0.61Patch Changes
326054b: PreventresumeStreamfrom copying the previous assistant message into the resumed response.975bb28: Cancel messages that are still being prepared when a chat is stopped.7fbfc6d]v7.0.60Patch Changes
79c52ef: AlignToolLoopAgentprepareCalltypes with the settings available and honored at runtime.3cc1bb6]v7.0.59Patch Changes
401a4ba]7af9646]v7.0.58Patch Changes
72ad23f: Respect ToolLoopAgent timeouts configured in agent settings.ad6a650: feat(video): allowaspectRatio: 'adaptive'ongenerateVideoSome video models derive the output ratio from the input and reject explicit
{width}:{height}values — BytePlus Seedance 2.5 does this for first-frame,first-and-last-frame, editing, and extension tasks.
aspectRatioonVideoModelV3CallOptions,VideoModelV4CallOptions, andexperimental_generateVideois now`${number}:${number}` | 'adaptive', sothose calls no longer need a type assertion. Support is provider-specific.
81cd026: Reduce bundle size by making internal Zod v4 imports tree-shakeable.Updated dependencies [
c477556]Updated dependencies [
ad6a650]Updated dependencies [
81cd026]v7.0.57Patch Changes
1937bef]v7.0.56Patch Changes
25c9120: Expose provider metadata on language-model-call end callbacks and telemetry spans.89080c8: fix (ai/gateway): make retrieddoStartcalls idempotentgenerateVideoretriesdoStart, which creates a billable generation, so aretry after a lost response could start a second one. It now mints one
idempotency token per logical start — outside the retry closure — and forwards it
as an
idempotency-keyheader, so a provider that deduplicates (the Vercel AIGateway does) sees the same key on every attempt.
GatewayVideoModelsimplyforwards the caller's headers rather than inferring retry identity from an
options object, which would collide across unrelated calls.
79d6195: Stop pending and active resumed chat streams after cancellation, and preventoverlapping resumptions from applying stale updates.
Updated dependencies [
89080c8]Updated dependencies [
89080c8]v7.0.55Patch Changes
3469d0c: feat: add batch APIs3469d0c]v7.0.54Patch Changes
a6b17a2: AllowToolLoopAgentprepareCallcallbacks to read and override the top-levelreasoningoption.5615eb7: AdddefaultInstructionsMiddlewarefor applying default language model instructions while preserving call-level overrides.36a3ff6: Preserve preceding assistant messages when regenerating a response.v7.0.52Patch Changes
3836a85: Skip re-validating tool input for terminal output-available UI message parts.1bec07d]53c326e]d765f82]v7.0.51Patch Changes
160ccdb]v7.0.50Patch Changes
79e133c: async APIs for generateVideo (poll, webhook)Adds an asynchronous start/status flow to the experimental video model
interface (
VideoModelV4): models may now implementdoStart,doStatus,and
handleWebhookOptioninstead of (or in addition to)doGenerate, andexperimental_generateVideoacceptspollandwebhookoptions toorchestrate completion via polling or webhooks. Polling configuration can use
a custom delay implementation for durable workflow compatibility.
da64b51: feat(code-mode): simplify tool caller configurationUpdated dependencies [
79e133c]v7.0.49Compare Source
Patch Changes
fb6d2f8]v7.0.48Patch Changes
bdd5e28]v7.0.47Patch Changes
5fc7da5]93b2acd]v7.0.46Patch Changes
4f2e064]v7.0.45Patch Changes
d6ce0ee: feat(ai): support experimental_toolCallers in streamTextfa95504: feat(ai): support experimental tool callers in ToolLoopAgent349afe7: Warn whengenerateTextreceives streaming-onlyfirstChunkMsorchunkMstimeout settings.fa95504]v7.0.44Compare Source
Patch Changes
015acb4: fix telemetry attribution for language model calls that resolve to a different response modelv7.0.43Compare Source
Patch Changes
b192878: feat: add experimental_toolCaller routing to generateText for code moded8210b6]af3f400]b192878]v7.0.42Patch Changes
1659cd5: Prevent validated downloads on Node.js from reaching private or internal services through DNS aliases or DNS rebinding by validating and pinning every resolved address at connection time.60f97f6: support overriding model call settings for individualprepareStepinvocations6a5bdff: Fix validated Node.js downloads when the HTTP connector requests a single DNS address.6de2ec1: Preserve provider metadata from empty text deltas instreamText.1659cd5]6a5bdff]0012529]v7.0.41Patch Changes
2e2224b: Route the warning system information banner to stderr so it does not corrupt application output written to stdout.bf216b3]v7.0.40Patch Changes
c3782a6: DeprecateExperimental_GeneratedImagein favor ofGeneratedFile.v7.0.39Patch Changes
09a52cb: Promote therepairTextoption to stable ongenerateObjectandstreamObject, with a deprecatedexperimental_repairTextalias for backwards compatibility.0c464d9]c49380c]v7.0.38Patch Changes
7bd6bdd: Avoid synthesizing client tool errors for invalid provider-executed tool calls.1e2f324: feat: add experimental speech translation model specification (Experimental_SpeechTranslationModelV4) andexperimental_streamTranslatefor streaming speech-to-speech translationd9d2a11]1e2f324]v7.0.37Patch Changes
0a7c7f4]v7.0.36Compare Source
Patch Changes
7fa85b2: fix(ai): use injective serialization for tool approval HMAC payloadThe tool approval signature (
experimental_toolApprovalSecret) built its HMACpayload by joining fields with
\n. Because fields such astoolNameandtoolCallIdcan themselves contain a newline, distinct field tuples couldserialize to identical bytes, allowing a signed approval to verify against a
different tuple. The payload is now serialized with
JSON.stringify(with aversioned domain-separation prefix), which escapes delimiter/control characters
and makes the encoding injective.
Verification remains backwards compatible: a signature in the old format still
verifies, but only when no field contains the
\ndelimiter (the conditionthat made the old format ambiguous), so a pending approval that straddles an
upgrade is not rejected while the collision stays closed.
v7.0.35Patch Changes
7f6650b: Return response piping promises so callers can catch stream read and write errors.106ea59: feat(ai): add per-step first content timeout for streaming generations2112ff1]v7.0.34Patch Changes
7c16f21]v7.0.33Compare Source
Patch Changes
76cb673: fix: detect MP4 audio from its ftyp box during transcriptione808fa5: fix(ai): preserve tool parts when tool call IDs repeat across steps33647d7: Preserve provider options when combining consecutive tool messages.02ffdcb]76cb673]v7.0.32Compare Source
Patch Changes
6cd7c74: fix: correct theonToolCallcallback result documentatione35bcae: Allow UI message chunks to include fields added by newer server versions.a4eb3f3: Propagate abort reasons when generation is cancelled during tool execution.cefa3b1]8fbb89c]v7.0.31Compare Source
Patch Changes
70f18c3: fix(ai): emit denied tool output state for client-rejected approvalscd06458: fix(ai): callonInputStartbeforeonInputAvailableduring non-streaming tool callscd06458]v7.0.30Compare Source
Patch Changes
341616a]70fc45c]v7.0.29Compare Source
Patch Changes
7069785]4bf9ac2]v7.0.28Compare Source
Patch Changes
0bc8d4f: Fix chatonFinishhandling when overlapping requests clear the active response before a resume stream finishes.v7.0.27Compare Source
Patch Changes
ac01b79: Allow validating assistant UI messages with empty parts so persisted errored responses remain loadable.2696562:experimental_streamTranscriberesult promises now resolve without consumingfullStream: accessing any result promise consumes the stream internally. Previouslyawait result.textalone deadlocked on transform backpressure. Because live transcription streams can be unbounded,fullStreamis explicitly single-consumer (no replay buffering): access it once, before any result promise, when both stream parts and final results are needed.31c7be8]4d096f6]v7.0.26Compare Source
Patch Changes
27d294d: feat(ai): group orphaned tool calls after tool approvals under parent spanv7.0.25Compare Source
Patch Changes
7805e4a: Cancelling theexperimental_streamTranscribefullStreamnow also aborts a still-pendingdoStreamsetup, so a model whosedoStreamhas not yet resolved is cancelled instead of leaking.f8e82fd: Update theexperimental_streamTranscribeunsupported-model error message now that gateway string model IDs can support streaming transcription.4be62c1]f8e82fd]7805e4a]cd12954]v7.0.23Compare Source
Patch Changes
930f949: feat(ai): wrap embedMany in tracing channel context867f80a]v7.0.22Compare Source
Patch Changes
8f89c25: Add the Cartesia provider with Sonic 3.5 speech generation, Ink-Whisper batch transcription, and Ink 2 realtime transcription support.v7.0.21Compare Source
Patch Changes
308a519: chore: enforce consistent imports fromzod/v4instead ofzod308a519]7fe53d2]v7.0.20Compare Source
Patch Changes
b9ac19f: Flush compressed Node.js response chunks as they are piped so UI message and text streams remain incremental in Express and Next.js.a4186d6: Promote therepairToolCalloption to stable, with a deprecatedexperimental_repairToolCallalias for backwards compatibility.v7.0.19Compare Source
Patch Changes
be7f05a: AddfingerprintToolsanddetectToolDriftto detect MCP tool-definition drift ("rug pull"). Pin a tool set's server-controlled fields (string description, input schema, title) at trust time withfingerprintTools, then diff later fetches withdetectToolDriftto catch injected descriptions or widened schemas before passing tools to the model. Baseline storage and the drift response remain the app's responsibility.ee55a07: Preserve tool approval signatures when approvals transition to responded.aad737d: Use own-property checks when resolving per-tool approvals so tool names and approval ids that match inherited object properties (e.g.constructor,toString,valueOf,__proto__) are treated as unconfigured/absent.@ai-sdk/policy-opa:wrapMcpToolsbuilds its per-tool map with a null prototype and reads supplied approvals via an own-property check, andshadowguards its per-tool map lookup the same way.ai: tool and tool-context lookups keyed by a model- or client-supplied name now go through an own-property check (getOwn), so a name matching an inherited object property resolves to "no such tool"/"unconfigured" instead of a prototype value. This covers the approval path (per-tool approval resolution and replay re-validation) as well as tool-call parsing, execution, streaming callbacks, and UI message conversion/validation. The human-in-the-loop approval matching (collectToolApprovals) and streaming tool-name maps are built with a null prototype so a client-supplied id that matches an inherited property no longer slips past the "unknown approval" / "tool call not found" guards.[
0f93c57](https://redirect.github.com/vercel/ai/commit/0f93Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.