Skip to content

Bump the ai group with 6 updates - #1133

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/ai-e25f7d9d37
Closed

dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/ai-e25f7d9d37

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the ai group with 6 updates:

Package From To
@ai-sdk/anthropic 3.0.133 3.0.135
@ai-sdk/azure 3.0.141 3.0.143
@ai-sdk/google 3.0.136 3.0.139
@ai-sdk/openai 3.0.130 3.0.132
@ai-sdk/openai-compatible 2.0.86 2.0.87
ai 6.0.311 6.0.316

Updates @ai-sdk/anthropic from 3.0.133 to 3.0.135

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

3.0.135

Patch Changes

  • 2223bf2: Defer validation schema construction until first use to reduce provider import time.
  • e172400: Defer construction of Anthropic provider option schemas until they are first used to reduce package import time.
  • Updated dependencies [1183cc4]
  • Updated dependencies [d726591]
    • @​ai-sdk/provider-utils@​4.0.62

3.0.134

Patch Changes

  • eba06d9: Add MiniMax M3.1 Flash support with reasoning effort, image detail, video input and frame sampling, prompt cache control, and sampling controls.
Commits

Updates @ai-sdk/azure from 3.0.141 to 3.0.143

Changelog

Sourced from @​ai-sdk/azure's changelog.

3.0.143

Patch Changes

  • 766eebd: add azure.tools.toolSearch and support azure provider options on responses function tools
  • Updated dependencies [766eebd]
    • @​ai-sdk/openai@​3.0.132

3.0.142

Patch Changes

  • a7e1746: Defer validation schema construction until first use to reduce provider import time.
  • Updated dependencies [1183cc4]
  • Updated dependencies [69664c4]
  • Updated dependencies [6afa8a8]
  • Updated dependencies [aad3b66]
  • Updated dependencies [d726591]
    • @​ai-sdk/provider-utils@​4.0.62
    • @​ai-sdk/deepseek@​2.0.77
    • @​ai-sdk/openai@​3.0.131
Commits

Updates @ai-sdk/google from 3.0.136 to 3.0.139

Release notes

Sourced from @​ai-sdk/google's releases.

@​ai-sdk/google@​3.0.139

Patch Changes

  • 08c1a86: fix(google): keep empty arrays and objects in tool-call input streamed with streamFunctionCallArguments

    Vertex sends a value-less partialArgs entry for an empty container (e.g. $.tags[]), which was dropped, so [] and {} arguments went missing from the streamed tool-call input.

Changelog

Sourced from @​ai-sdk/google's changelog.

3.0.139

Patch Changes

  • 08c1a86: fix(google): keep empty arrays and objects in tool-call input streamed with streamFunctionCallArguments

    Vertex sends a value-less partialArgs entry for an empty container (e.g. $.tags[]), which was dropped, so [] and {} arguments went missing from the streamed tool-call input.

3.0.138

Patch Changes

  • 2b59d8a: fix(google): convert type: [X, "null"] to a plain nullable node so items and format beside it stay valid for Gemini

3.0.137

Patch Changes

  • f536aa8: Defer validation schema construction until first use to reduce provider import time.
  • Updated dependencies [1183cc4]
  • Updated dependencies [d726591]
    • @​ai-sdk/provider-utils@​4.0.62
Commits
  • 171c5d5 Version Packages (#23952)
  • 08c1a86 Backport: fix(google): keep empty arrays and objects in streamed Vertex tool-...
  • 7a6592f Version Packages (#23882)
  • 2b59d8a fix(google): convert a single nullable type array to a plain nullable node (#...
  • 9ef21a8 Version Packages (#23625)
  • f536aa8 Backport: perf(google): defer schema construction until first use (v6) (#23706)
  • See full diff in compare view

Updates @ai-sdk/openai from 3.0.130 to 3.0.132

Release notes

Sourced from @​ai-sdk/openai's releases.

@​ai-sdk/openai@​3.0.132

Patch Changes

  • 766eebd: add azure.tools.toolSearch and support azure provider options on responses function tools
Changelog

Sourced from @​ai-sdk/openai's changelog.

3.0.132

Patch Changes

  • 766eebd: add azure.tools.toolSearch and support azure provider options on responses function tools

3.0.131

Patch Changes

  • 6afa8a8: Defer validation schema construction until first use to reduce provider import time.
  • aad3b66: feat(openai): support 12h prompt cache writes and cache prewarming
  • Updated dependencies [1183cc4]
  • Updated dependencies [d726591]
    • @​ai-sdk/provider-utils@​4.0.62
Commits
  • 171c5d5 Version Packages (#23952)
  • 766eebd backport v6: feat(provider/azure): add toolSearch tool and support azure prov...
  • 9ef21a8 Version Packages (#23625)
  • aad3b66 Backport: feat(openai): support 12h prompt cache writes and cache prewarming ...
  • 6afa8a8 Backport: perf(openai): defer schema construction until first use (v6) (#23716)
  • See full diff in compare view

Updates @ai-sdk/openai-compatible from 2.0.86 to 2.0.87

Changelog

Sourced from @​ai-sdk/openai-compatible's changelog.

2.0.87

Patch Changes

  • 81df039: Defer validation schema construction until first use to reduce provider import time.
  • Updated dependencies [1183cc4]
  • Updated dependencies [d726591]
    • @​ai-sdk/provider-utils@​4.0.62
Commits

Updates ai from 6.0.311 to 6.0.316

Release notes

Sourced from ai's releases.

ai@6.0.316

Patch Changes

  • Updated dependencies [fe96bb3]
    • @​ai-sdk/gateway@​3.0.222
Changelog

Sourced from ai's changelog.

6.0.316

Patch Changes

  • Updated dependencies [fe96bb3]
    • @​ai-sdk/gateway@​3.0.222

6.0.315

Patch Changes

  • Updated dependencies [e4469a3]
    • @​ai-sdk/gateway@​3.0.221

6.0.314

Patch Changes

  • 6572f26: Fix toolChoice: 'none' by forwarding it to the Hugging Face Responses API and rejecting tool calls before local execution in generateText and streamText. Streamed tool parts are withheld so client-side tools cannot act on them, and experimental_repairToolCall is not invoked for rejected tool calls.

6.0.313

Patch Changes

  • 52803fb: fix(ai): process only the first approval response per tool call, so repeated or conflicting responses in the final tool message no longer execute a tool twice or both execute and deny it
  • a0f7494: fix(ai): remove orphaned reasoning, including consecutive reasoning parts, when pruning tool calls
  • a48e8a9: fix(ai): preserve repaired tool names in streamed UI message parts
  • Updated dependencies [fa49238]
  • Updated dependencies [d301a16]
  • Updated dependencies [965effe]
  • Updated dependencies [4f82ab0]
    • @​ai-sdk/gateway@​3.0.220

6.0.312

Patch Changes

  • Updated dependencies [1183cc4]
  • Updated dependencies [ae8a8d4]
  • Updated dependencies [93e9720]
  • Updated dependencies [d726591]
    • @​ai-sdk/provider-utils@​4.0.62
    • @​ai-sdk/gateway@​3.0.219
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ai group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `3.0.133` | `3.0.135` |
| [@ai-sdk/azure](https://github.com/vercel/ai/tree/HEAD/packages/azure) | `3.0.141` | `3.0.143` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `3.0.136` | `3.0.139` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `3.0.130` | `3.0.132` |
| [@ai-sdk/openai-compatible](https://github.com/vercel/ai/tree/HEAD/packages/openai-compatible) | `2.0.86` | `2.0.87` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.311` | `6.0.316` |


Updates `@ai-sdk/anthropic` from 3.0.133 to 3.0.135
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/anthropic@3.0.135/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@3.0.135/packages/anthropic)

Updates `@ai-sdk/azure` from 3.0.141 to 3.0.143
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/azure@3.0.143/packages/azure/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/azure@3.0.143/packages/azure)

Updates `@ai-sdk/google` from 3.0.136 to 3.0.139
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/google@3.0.139/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@3.0.139/packages/google)

Updates `@ai-sdk/openai` from 3.0.130 to 3.0.132
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@3.0.132/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@3.0.132/packages/openai)

Updates `@ai-sdk/openai-compatible` from 2.0.86 to 2.0.87
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai-compatible@2.0.87/packages/openai-compatible/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai-compatible@2.0.87/packages/openai-compatible)

Updates `ai` from 6.0.311 to 6.0.316
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@6.0.316/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@6.0.316/packages/ai)

---
updated-dependencies:
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 3.0.135
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai
- dependency-name: "@ai-sdk/azure"
  dependency-version: 3.0.143
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai
- dependency-name: "@ai-sdk/google"
  dependency-version: 3.0.139
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai
- dependency-name: "@ai-sdk/openai"
  dependency-version: 3.0.132
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai
- dependency-name: "@ai-sdk/openai-compatible"
  dependency-version: 2.0.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai
- dependency-name: ai
  dependency-version: 6.0.316
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 27, 2026
@changeset-bot

changeset-bot Bot commented Oct 27, 2026 •

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: e10d795

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages
Name Type
@chainfuse/ai-tools Patch
@chainfuse/helpers Patch
@chainfuse/types Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 3 package(s) with unknown licenses.
See the Details below.

License Issues

package-lock.json

PackageVersionLicenseIssue Type
packages/ai-tools2.0.18NullUnknown License
packages/helpers5.0.9NullUnknown License
packages/types4.2.35NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@ai-sdk/anthropic 3.0.135 UnknownUnknown
npm/@ai-sdk/azure 3.0.143 UnknownUnknown
npm/@ai-sdk/deepseek 2.0.77 UnknownUnknown
npm/@ai-sdk/gateway 3.0.222 UnknownUnknown
npm/@ai-sdk/google 3.0.139 UnknownUnknown
npm/@ai-sdk/openai 3.0.132 UnknownUnknown
npm/@ai-sdk/openai-compatible 2.0.87 UnknownUnknown
npm/@ai-sdk/provider-utils 4.0.62 UnknownUnknown
npm/ai 6.0.316 UnknownUnknown
npm/packages/ai-tools 2.0.18 UnknownUnknown
npm/packages/helpers 5.0.9 UnknownUnknown
npm/packages/types 4.2.35 UnknownUnknown
npm/@ai-sdk/anthropic ^3.0.135 UnknownUnknown
npm/@ai-sdk/azure ^3.0.143 UnknownUnknown
npm/@ai-sdk/google ^3.0.139 UnknownUnknown
npm/@ai-sdk/openai-compatible ^2.0.87 UnknownUnknown
npm/ai ^6.0.316 UnknownUnknown

Scanned Files

  • package-lock.json
  • packages/ai-tools/package.json

@socket-security

socket-security Bot commented Oct 27, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​ai-sdk/​google@​3.0.136 ⏵ 3.0.13973 +110088 +198100
Updated@​ai-sdk/​openai@​3.0.130 ⏵ 3.0.13273 +110089 +198100
Updated@​ai-sdk/​azure@​3.0.141 ⏵ 3.0.14379 +110086 +198100
Updated@​ai-sdk/​openai-compatible@​2.0.86 ⏵ 2.0.8784 +110010098100
Updated@​ai-sdk/​anthropic@​3.0.133 ⏵ 3.0.13599 +110088 +198100
Updatedai@​6.0.311 ⏵ 6.0.31698 +110010099100

View full report

@dependabot @github

dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 3, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/ai-e25f7d9d37 branch November 3, 2026 19:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code semver-patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants