chore(deps): update dependency ai to v6.0.157#2931
Merged
renovate[bot] merged 1 commit intomainfrom Apr 10, 2026
Merged
Conversation
github-actions
bot
added
the
type: chore
renovate
bot
force-pushed
the
renovate/ai-6.x-lockfile
branch
from
cbdae09 to
49e2bdc
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
6.0.77→6.0.157Release Notes
vercel/ai (ai)
v6.0.157Compare Source
Patch Changes
ff11aee: fix(ai): fixproviderExecutedtool approvals being passed to language model twicev6.0.156Compare Source
Patch Changes
08c5ac3]v6.0.155Compare Source
Patch Changes
06764c5: fix(ai): skip passing invalid JSON inputs to response messagesv6.0.154Compare Source
Patch Changes
37a378e]v6.0.153Compare Source
Patch Changes
f152133: feat (ai/core): support plain string model IDs inrerank()functionThe
rerank()function now accepts plain model strings (e.g.,'cohere/rerank-v3.5') in addition toRerankingModelobjects, matching the behavior ofgenerateText,embed, and other core functions.v6.0.152Compare Source
Patch Changes
d42076d: Add AI Gateway hint to provider READMEsv6.0.151Compare Source
Patch Changes
ec18852]v6.0.150Compare Source
Patch Changes
1003609: fix(ai): skip stringifying text when streaming partial text9de7d7b]v6.0.149Compare Source
Patch Changes
3aca847]v6.0.148Compare Source
Patch Changes
e923a24]v6.0.147Compare Source
Patch Changes
6247886]v6.0.146Compare Source
Patch Changes
5f439a1]v6.0.145Compare Source
Patch Changes
ffd431a]v6.0.144Compare Source
Patch Changes
0469aed: fix: allow inline data URLs in download validation0469aed]15bfbd2]v6.0.143Compare Source
Patch Changes
85e476d]v6.0.142Compare Source
Patch Changes
6f75953: feat(ai): add newisLoopFinishedstop condition helper for unlimited steps70322b4]v6.0.141Compare Source
Patch Changes
768a9d6]v6.0.140Compare Source
Patch Changes
95fedf0]v6.0.139Compare Source
Patch Changes
e69062d]v6.0.138Compare Source
Patch Changes
0db5cd8]v6.0.137Compare Source
Patch Changes
3caa544]v6.0.136Compare Source
Patch Changes
763e178]v6.0.135Compare Source
Patch Changes
df6a330: chore(ai): remove all experimental agent eventsv6.0.134Compare Source
Patch Changes
ed6876b: chore(ai): remove all experimental embed eventsv6.0.133Compare Source
Patch Changes
055cd68: fix: publish v6 to latest npm dist tagd99eb91]055cd68]v6.0.132Compare Source
Patch Changes
28fd5a5: README updatesv6.0.131Compare Source
Patch Changes
14f25f9: feat(ai): introduce experimental callbacks for embed functionv6.0.130Compare Source
Patch Changes
25af909]v6.0.129Compare Source
Patch Changes
f95e0c0]v6.0.128Compare Source
Patch Changes
7324b56]v6.0.127Compare Source
Patch Changes
ac0c407]e748159]v6.0.126Compare Source
Patch Changes
578615a: Remove custom User-Agent header from HttpChatTransport to fix CORS preflight failures in Safari and Firefoxv6.0.125Compare Source
Patch Changes
5ffb1ad]f5bf0c6]v6.0.124Patch Changes
55ccbe2]v6.0.122Compare Source
Patch Changes
ca0b430]v6.0.121Compare Source
Patch Changes
efdaefc]v6.0.120Compare Source
Patch Changes
78c0e26: feat(ai): pass result provider metadata across the streamv6.0.119Patch Changes
ab286f1: fix(ai): doStream should reflect transformed valuesd68b122: feat(ai): add missing usage attributesv6.0.118Patch Changes
64ac0fd: fix(security): validate redirect targets in download functions to prevent SSRF bypassBoth
downloadBlobanddownloadnow validate the final URL after following HTTP redirects, preventing attackers from bypassing SSRF protections via open redirects to internal/private addresses.Updated dependencies [
64ac0fd]v6.0.117Patch Changes
d23121f: chore(ai): add optional ChatRequestOptions toaddToolApprovalResponseandaddToolOutput2589004]v6.0.116Patch Changes
ad4cfc2: Add URL validation todownloadBlobanddownloadto prevent blind SSRF attacks. Private/internal IP addresses, localhost, and non-HTTP protocols are now rejected before fetching.ad4cfc2]v6.0.115Patch Changes
824b295]v6.0.114Compare Source
Patch Changes
2291047: fix(ai): fix missing support for image thought signatures (e.g. for Gemini image models)v6.0.113Compare Source
Patch Changes
70d3980: fix(ai): use errorMode 'text' in approval continuation to preserve tool error messagesv6.0.112Compare Source
Patch Changes
db3d4ca]v6.0.111Compare Source
Patch Changes
2129c82: feat(ai): register global telemetry integrationsv6.0.110Compare Source
Patch Changes
1b01ec1]8df8e11]v6.0.109Compare Source
Patch Changes
10bec50]v6.0.108Compare Source
Patch Changes
2a4f512: feat(ai): add telemetry interface and registryv6.0.107Compare Source
Patch Changes
08336f1]v6.0.106Compare Source
Patch Changes
29e9f4d]v6.0.105Compare Source
Patch Changes
58bc42d]v6.0.104Compare Source
Patch Changes
1330f2f]v6.0.103Compare Source
Patch Changes
ba63bc2]v6.0.102Compare Source
Patch Changes
45f0a7f]v6.0.101Compare Source
Patch Changes
5230482: fix(ai): Don't create duplicate tool parts when models call non-existent toolsv6.0.100Compare Source
Patch Changes
b7fba77: feat(ai): add event notifiers to core functionsv6.0.99Compare Source
Patch Changes
e8172b6]v6.0.98Compare Source
Patch Changes
0c9395b]v6.0.97Compare Source
Patch Changes
ebfdad1: feat(ai): experimental callbacks in ToolLoopAgentv6.0.96Compare Source
Patch Changes
30c9de6: feat(ai): experimental callbacks for streamTextv6.0.95Compare Source
Patch Changes
73b7e09]v6.0.94Compare Source
Patch Changes
363fa44]v6.0.93Compare Source
Patch Changes
d3769ec: feat(ai): add experimental callbacks in generateTextv6.0.92Compare Source
Patch Changes
765b013]v6.0.91Compare Source
Patch Changes
a433cd3]v6.0.90Patch Changes
98e83ab: FixuseChatstatus briefly flashing tosubmittedon page load whenresume: trueis set and there is no active stream to resume. ThereconnectToStreamcheck is now performed before setting status tosubmitted, so status staysreadywhen the server responds with 204 (no active stream).v6.0.89Patch Changes
5f693c8]v6.0.88Patch Changes
2a1c664]v6.0.87Compare Source
Patch Changes
6bbd05b]v6.0.86Compare Source
Patch Changes
f75f18c]v6.0.85Compare Source
Patch Changes
e858654]v6.0.84Compare Source
Patch Changes
4024a3a: security: prevent unbounded memory growth in download functionsThe
download()anddownloadBlob()functions now enforce a default 2 GiB size limit when downloading from user-provided URLs. Downloads that exceed this limit are aborted with aDownloadErrorinstead of consuming unbounded memory and crashing the process. TheabortSignalparameter is now passed through tofetch()in all download call sites.Added
downloadoption totranscribe()andexperimental_generateVideo()for providing a custom download function. Use the newcreateDownload({ maxBytes })factory to configure download size limits.Updated dependencies [
4024a3a]v6.0.83Compare Source
Patch Changes
b424e50]v6.0.82Compare Source
Patch Changes
1819bc1]v6.0.81Compare Source
Patch Changes
ee4beee: feat(ai): add onStepFinish callback to createUIMessageStreamv6.0.80Compare Source
Patch Changes
99fbed8]v6.0.79Compare Source
Patch Changes
a2208a2]v6.0.78Compare Source
Patch Changes
59fcf30: fix(ai): make experimental_context required in ToolLoopAgentOnFinishCallbackThis fixes a type inconsistency where
ToolLoopAgentOnFinishCallbackhadexperimental_contextas optional whileStreamTextOnFinishCallbackandGenerateTextOnFinishCallbackhad it as required. SinceToolLoopAgentdelegates tostreamText/generateText, and both always passexperimental_contextwhen invoking the callback, the types should match.Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.