Skip to content

Bump the ai group across 1 directory with 8 updates - #1131

Merged
demosjarco merged 2 commits into
mainfrom
dependabot/npm_and_yarn/ai-dbd8e0bcde
Oct 20, 2026
Merged

demosjarco merged 2 commits into
mainfrom
dependabot/npm_and_yarn/ai-dbd8e0bcde

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the ai group with 8 updates in the / directory:

Package From To
@azure/identity 4.13.3 4.14.0
@ai-sdk/anthropic 3.0.128 3.0.133
@ai-sdk/azure 3.0.135 3.0.141
@ai-sdk/google 3.0.131 3.0.136
@ai-sdk/openai 3.0.124 3.0.130
@ai-sdk/openai-compatible 2.0.81 2.0.86
@ai-sdk/provider 3.0.18 3.0.19
ai 6.0.302 6.0.311

Updates @azure/identity from 4.13.3 to 4.14.0

Changelog

Sourced from @​azure/identity's changelog.

4.14.0 (2026-10-14)

This release includes all changes introduced in versions 4.14.0-beta.1 through 4.14.0-beta.5.

Bugs Fixed

  • Fixed AzurePipelinesCredential to include only relevant details in error messages and logs when the OIDC token request fails. #39774
  • Fixed InteractiveBrowserCredential failing to authenticate when the user's default browser is already running and only permits a single instance. The browser is no longer launched with newInstance, which on macOS passed open --new. #39814
  • Fixed EnvironmentCredential and DefaultAzureCredential ignoring the AZURE_ADDITIONALLY_ALLOWED_TENANTS environment variable. If the additionallyAllowedTenants option is also set, the option takes precedence. #40221

Other Changes

  • Preserve caught errors as the cause when wrapping them. #39423
  • Updated @azure/msal-node to ^6.0.0. #39965

4.14.0-beta.5 (2026-08-12)

Other Changes

  • Bumped the minimum @azure/msal-node dependency to ^5.1.5 so installs no longer resolve older 5.1.x versions that pull in the vulnerable uuid@8.3.0 transitive dependency. #39425
  • Replaced shell-based developer credential commands with safe, structured process execution. #39279

4.13.2 (2026-08-12)

Other Changes

  • Bumped the minimum @azure/msal-node dependency to ^5.1.5 so installs no longer resolve older 5.1.x versions that pull in the vulnerable uuid@8.3.0 transitive dependency. #39569
  • Replaced shell-based developer credential commands with safe, structured process execution. #39279
  • Migrated platform-specific module resolution to #platform/* imports. #38309

4.14.0-beta.4 (2026-06-08)

Bugs Fixed

  • Fixed AzureDeveloperCliCredential to correctly parse error messages from Azure Developer CLI v1.23.7 and later, which previously caused raw JSON to surface in the credential error instead of the underlying error text. #38416
  • Fixed handleMsalError to preserve the original MSAL error via cause on AuthenticationRequiredError, allowing callers to access .claims on the underlying error. #38722

4.14.0-beta.3 (2026-04-08)

Other Changes

  • Reduced bundle size by optimizing imports from @azure/msal-node, e.g. achieving a ~61kb reduction (from 851kb to 790kb) when importing ClientCertificateCredential. #36942
  • Updated @azure/msal-node to ^5.1.0 and @azure/msal-browser to ^5.5.0. #37836

4.13.1 (2026-03-18)

Other Changes

... (truncated)

Commits
  • 4fb292a [Identity] GA Identity Binding Feature (#40297)
  • a369673 [Identity] Add AKS Identity Binding Test For Weekly Pipeline (#40256)
  • 8a46161 Upgrade dotenv to 18.0.5 (#40240)
  • f814748 [identity] Fix EnvironmentCredential ignoring AZURE_ADDITIONALLY_ALLOWED_TENA...
  • 5fadd99 Add GitHubActionsCredential for GitHub Actions OIDC federation (#38581)
  • 2b86f77 [Identity] Migrate to MSAL v6 (#39965)
  • See full diff in compare view

Updates @ai-sdk/anthropic from 3.0.128 to 3.0.133

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

3.0.133

Patch Changes

  • Updated dependencies [5aa3086]
    • @​ai-sdk/provider-utils@​4.0.61

3.0.132

Patch Changes

  • Updated dependencies [739e9f6]
    • @​ai-sdk/provider@​3.0.19
    • @​ai-sdk/provider-utils@​4.0.60

3.0.131

Patch Changes

  • 8228dfa: Fall back to automatic tool choice with a warning when manual thinking is enabled with a required or named tool choice, avoiding an Anthropic API 400 error. Named tool choices send only the selected tool.
  • Updated dependencies [d5e7d82]
    • @​ai-sdk/provider-utils@​4.0.59

3.0.130

Patch Changes

  • Updated dependencies [604b4d3]
    • @​ai-sdk/provider-utils@​4.0.58

3.0.129

Patch Changes

  • ed0cd89: fix(anthropic): preserve tools when disabling tool calls
  • b5d3c2f: fix(anthropic): preserve failed tool search results in conversation history
Commits

Updates @ai-sdk/azure from 3.0.135 to 3.0.141

Changelog

Sourced from @​ai-sdk/azure's changelog.

3.0.141

Patch Changes

  • Updated dependencies [5aa3086]
    • @​ai-sdk/provider-utils@​4.0.61
    • @​ai-sdk/deepseek@​2.0.76
    • @​ai-sdk/openai@​3.0.130

3.0.140

Patch Changes

  • Updated dependencies [739e9f6]
    • @​ai-sdk/provider@​3.0.19
    • @​ai-sdk/openai@​3.0.129
    • @​ai-sdk/deepseek@​2.0.75
    • @​ai-sdk/provider-utils@​4.0.60

3.0.139

Patch Changes

  • Updated dependencies [d5e7d82]
    • @​ai-sdk/provider-utils@​4.0.59
    • @​ai-sdk/deepseek@​2.0.74
    • @​ai-sdk/openai@​3.0.128

3.0.138

Patch Changes

  • Updated dependencies [604b4d3]
  • Updated dependencies [347b939]
    • @​ai-sdk/provider-utils@​4.0.58
    • @​ai-sdk/openai@​3.0.127
    • @​ai-sdk/deepseek@​2.0.73

3.0.137

Patch Changes

  • Updated dependencies [fd1b82b]
  • Updated dependencies [e8ce454]
    • @​ai-sdk/deepseek@​2.0.72
    • @​ai-sdk/openai@​3.0.126

3.0.136

Patch Changes

... (truncated)

Commits

Updates @ai-sdk/google from 3.0.131 to 3.0.136

Changelog

Sourced from @​ai-sdk/google's changelog.

3.0.136

Patch Changes

  • 8fccc63: Preserve grounding metadata from each automatically continued Google response in groundingMetadataPerRequest. Previously, a later response without grounding could leave earlier Search queries absent from the final provider metadata even though their sources were returned. The new array preserves request order and includes null for requests without grounding.

3.0.135

Patch Changes

  • Updated dependencies [5aa3086]
    • @​ai-sdk/provider-utils@​4.0.61

3.0.134

Patch Changes

  • Updated dependencies [739e9f6]
    • @​ai-sdk/provider@​3.0.19
    • @​ai-sdk/provider-utils@​4.0.60

3.0.133

Patch Changes

  • Updated dependencies [d5e7d82]
    • @​ai-sdk/provider-utils@​4.0.59

3.0.132

Patch Changes

  • 0a2b345: feat(google): add gemini-4-argon model id and long decode support for generateContent: requests that reach the per-request cap (CONTINUATION) are continued automatically with usage summed across requests and the first request's prompt token count exposed as providerMetadata.google.initialPromptTokenCount, and the continuationToken provider option / provider metadata resume responses that used up their maxOutputTokens budget. generateText with the Interactions API now polls background: true model calls until they finish.
  • Updated dependencies [604b4d3]
    • @​ai-sdk/provider-utils@​4.0.58
Commits

Updates @ai-sdk/openai from 3.0.124 to 3.0.130

Changelog

Sourced from @​ai-sdk/openai's changelog.

3.0.130

Patch Changes

  • Updated dependencies [5aa3086]
    • @​ai-sdk/provider-utils@​4.0.61

3.0.129

Patch Changes

  • 739e9f6: Restore raw OpenAI custom-tool input deltas for consumers that forward them to Responses API clients. Mark streamed input with inputEncoding: 'text' so UI clients can display it progressively without JSON parsing. Preserve the encoding when partial UI messages are saved and resumed. Final provider tool-call inputs remain JSON-encoded.
  • Updated dependencies [739e9f6]
    • @​ai-sdk/provider@​3.0.19
    • @​ai-sdk/provider-utils@​4.0.60

3.0.128

Patch Changes

  • Updated dependencies [d5e7d82]
    • @​ai-sdk/provider-utils@​4.0.59

3.0.127

Patch Changes

  • 347b939: fix(openai): send assistant text with content instead of an item reference when its reasoning was removed

    With reasoning models, pruning reasoning (e.g. pruneMessages({ reasoning: 'all' })) caused follow-up requests to fail with "Item 'msg_...' of type 'message' was provided without its required 'reasoning' item". Assistant text parts are now only sent as item references, or with their item id, when they are preceded by reasoning in the same assistant message.

  • Updated dependencies [604b4d3]

    • @​ai-sdk/provider-utils@​4.0.58

3.0.126

Patch Changes

  • e8ce454: fix(openai): JSON-encode custom tool input deltas for progressive UI updates

3.0.125

Patch Changes

  • ce4202b: fix(openai): replay web search results when response storage is disabled
  • fde0b6c: fix(openai): classify Responses stream errors with null codes
Commits
  • f0300b8 Version Packages (#23417)
  • 68ad66c Version Packages (#23409)
  • 739e9f6 fix(openai): preserve raw custom-tool deltas with explicit UI input encoding ...
  • 67f3038 Version Packages (#23351)
  • 886e59d Version Packages (#23121)
  • 347b939 [v6.0] fix(openai): send assistant text with content when its reasoning was r...
  • 1e2184a Version Packages (#22495)
  • e8ce454 Backport: fix(openai): json-encode custom tool input deltas for progressive U...
  • 4225e0e Version Packages (#22319)
  • ce4202b [v6.0] fix: preserve web search context across stateless OpenAI Responses ste...
  • Additional commits viewable in compare view

Updates @ai-sdk/openai-compatible from 2.0.81 to 2.0.86

Changelog

Sourced from @​ai-sdk/openai-compatible's changelog.

2.0.86

Patch Changes

  • b3c2bb4: fix(openai-compatible, groq, alibaba): put reasoning before text in doGenerate

2.0.85

Patch Changes

  • 5aa3086: feat(openai-compatible): support URL-based image responses

    Add opt-in URL validation and credential origin handling to getFromApi for URL-based image responses. Validate redirect targets, strip unsafe request headers, and drop credentials on cross-origin redirects while preserving existing unvalidated requests.

  • Updated dependencies [5aa3086]

    • @​ai-sdk/provider-utils@​4.0.61

2.0.84

Patch Changes

  • Updated dependencies [739e9f6]
    • @​ai-sdk/provider@​3.0.19
    • @​ai-sdk/provider-utils@​4.0.60

2.0.83

Patch Changes

  • Updated dependencies [d5e7d82]
    • @​ai-sdk/provider-utils@​4.0.59

2.0.82

Patch Changes

  • Updated dependencies [604b4d3]
    • @​ai-sdk/provider-utils@​4.0.58
Commits

Updates @ai-sdk/provider from 3.0.18 to 3.0.19

Changelog

Sourced from @​ai-sdk/provider's changelog.

3.0.19

Patch Changes

  • 739e9f6: Restore raw OpenAI custom-tool input deltas for consumers that forward them to Responses API clients. Mark streamed input with inputEncoding: 'text' so UI clients can display it progressively without JSON parsing. Preserve the encoding when partial UI messages are saved and resumed. Final provider tool-call inputs remain JSON-encoded.
Commits

Updates ai from 6.0.302 to 6.0.311

Changelog

Sourced from ai's changelog.

6.0.311

Patch Changes

  • af9972b: fix(ai): stop emitting buffered stream parts after a streamText transform calls stopStream

6.0.310

Patch Changes

  • Updated dependencies [37be196]
    • @​ai-sdk/gateway@​3.0.218

6.0.309

Patch Changes

  • Updated dependencies [5aa3086]
  • Updated dependencies [c42700c]
    • @​ai-sdk/provider-utils@​4.0.61
    • @​ai-sdk/gateway@​3.0.217

6.0.308

Patch Changes

  • 739e9f6: Restore raw OpenAI custom-tool input deltas for consumers that forward them to Responses API clients. Mark streamed input with inputEncoding: 'text' so UI clients can display it progressively without JSON parsing. Preserve the encoding when partial UI messages are saved and resumed. Final provider tool-call inputs remain JSON-encoded.
  • Updated dependencies [739e9f6]
    • @​ai-sdk/provider@​3.0.19
    • @​ai-sdk/gateway@​3.0.216
    • @​ai-sdk/provider-utils@​4.0.60

6.0.307

Patch Changes

  • Updated dependencies [d5e7d82]
  • Updated dependencies [0650c06]
    • @​ai-sdk/provider-utils@​4.0.59
    • @​ai-sdk/gateway@​3.0.215

6.0.306

Patch Changes

  • Updated dependencies [d9244d1]
    • @​ai-sdk/gateway@​3.0.214

6.0.305

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 20, 2026

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review for a one-time review, or @claude review always to subscribe this PR to a review on every future push.

Tip: disable this comment in your organization's Code Review settings.

@changeset-bot

changeset-bot Bot commented Oct 20, 2026 •

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 08e0446

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages
Name Type
@chainfuse/ai-tools Patch
@chainfuse/helpers Patch
@chainfuse/types Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ai-dbd8e0bcde branch from 702795c to 19b4ca2 Compare October 20, 2026 20:08
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@ai-sdk/anthropic 3.0.133 UnknownUnknown
npm/@ai-sdk/azure 3.0.141 UnknownUnknown
npm/@ai-sdk/deepseek 2.0.76 UnknownUnknown
npm/@ai-sdk/gateway 3.0.218 UnknownUnknown
npm/@ai-sdk/google 3.0.136 UnknownUnknown
npm/@ai-sdk/openai 3.0.130 UnknownUnknown
npm/@ai-sdk/openai-compatible 2.0.86 UnknownUnknown
npm/@ai-sdk/provider 3.0.19 UnknownUnknown
npm/@ai-sdk/provider-utils 4.0.61 UnknownUnknown
npm/@azure/identity 4.14.0 UnknownUnknown
npm/ai 6.0.311 UnknownUnknown
npm/default-browser 5.5.1 🟢 3.7
Details
CheckScoreReason
Code-Review⚠️ 1Found 4/30 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained⚠️ 23 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2
Security-Policy🟢 9security policy file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/is-in-ssh 1.0.0 UnknownUnknown
npm/open 11.0.4 🟢 4.3
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟢 9security policy file detected
Code-Review⚠️ 1Found 5/30 approved changesets -- score normalized to 1
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Maintained🟢 810 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/powershell-utils 0.2.1 UnknownUnknown
npm/wsl-utils 1.0.1 UnknownUnknown
npm/@ai-sdk/anthropic ^3.0.133 UnknownUnknown
npm/@ai-sdk/azure ^3.0.141 UnknownUnknown
npm/@ai-sdk/google ^3.0.136 UnknownUnknown
npm/@ai-sdk/openai-compatible ^2.0.86 UnknownUnknown
npm/@ai-sdk/provider ^3.0.19 UnknownUnknown
npm/ai ^6.0.311 UnknownUnknown

Scanned Files

  • package-lock.json
  • packages/ai-tools/package.json

@socket-security

socket-security Bot commented Oct 20, 2026 •

Copy link
Copy Markdown

@socket-security

socket-security Bot commented Oct 20, 2026 •

Copy link
Copy Markdown

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Priority Alert  (click "▶" to expand/collapse) Action
Low priority
System shell access: npm powershell-utils in module node:child_process

Module: node:child_process

Location: Package overview

From: package-lock.json → npm/@azure/identity@4.14.0 → npm/powershell-utils@0.2.1

ℹ Read more on: This package | This alert | What is shell access?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/powershell-utils@0.2.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Block
Low priority
System shell access: npm wsl-utils in module node:child_process

Module: node:child_process

Location: Package overview

From: package-lock.json → npm/@azure/identity@4.14.0 → npm/wsl-utils@1.0.1

ℹ Read more on: This package | This alert | What is shell access?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/wsl-utils@1.0.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Block

View full report

@demosjarco

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ai-dbd8e0bcde branch from 7137f1d to ee3bd1b Compare October 20, 2026 20:20
Bumps the ai group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@azure/identity](https://github.com/Azure/azure-sdk-for-js/tree/HEAD/sdk/identity/identity) | `4.13.3` | `4.14.0` |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `3.0.128` | `3.0.133` |
| [@ai-sdk/azure](https://github.com/vercel/ai/tree/HEAD/packages/azure) | `3.0.135` | `3.0.141` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `3.0.131` | `3.0.136` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `3.0.124` | `3.0.130` |
| [@ai-sdk/openai-compatible](https://github.com/vercel/ai/tree/HEAD/packages/openai-compatible) | `2.0.81` | `2.0.86` |
| [@ai-sdk/provider](https://github.com/vercel/ai/tree/HEAD/packages/provider) | `3.0.18` | `3.0.19` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `6.0.302` | `6.0.311` |



Updates `@azure/identity` from 4.13.3 to 4.14.0
- [Release notes](https://github.com/Azure/azure-sdk-for-js/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-js/commits/@azure/identity_4.14.0/sdk/identity/identity)

Updates `@ai-sdk/anthropic` from 3.0.128 to 3.0.133
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/anthropic@3.0.133/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@3.0.133/packages/anthropic)

Updates `@ai-sdk/azure` from 3.0.135 to 3.0.141
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/azure@3.0.141/packages/azure/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/azure@3.0.141/packages/azure)

Updates `@ai-sdk/google` from 3.0.131 to 3.0.136
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/google@3.0.136/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@3.0.136/packages/google)

Updates `@ai-sdk/openai` from 3.0.124 to 3.0.130
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@3.0.130/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@3.0.130/packages/openai)

Updates `@ai-sdk/openai-compatible` from 2.0.81 to 2.0.86
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai-compatible@2.0.86/packages/openai-compatible/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai-compatible@2.0.86/packages/openai-compatible)

Updates `@ai-sdk/provider` from 3.0.18 to 3.0.19
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/provider@3.0.19/packages/provider/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/provider@3.0.19/packages/provider)

Updates `ai` from 6.0.302 to 6.0.311
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@6.0.311/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@6.0.311/packages/ai)

---
updated-dependencies:
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 3.0.133
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai
- dependency-name: "@ai-sdk/azure"
  dependency-version: 3.0.141
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai
- dependency-name: "@ai-sdk/google"
  dependency-version: 3.0.136
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai
- dependency-name: "@ai-sdk/openai"
  dependency-version: 3.0.130
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai
- dependency-name: "@ai-sdk/openai-compatible"
  dependency-version: 2.0.86
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai
- dependency-name: "@ai-sdk/provider"
  dependency-version: 3.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai
- dependency-name: "@azure/identity"
  dependency-version: 4.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: ai
- dependency-name: ai
  dependency-version: 6.0.311
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ai
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ai-dbd8e0bcde branch from dae96e7 to eef196e Compare October 20, 2026 20:25
@demosjarco
demosjarco merged commit bb919d2 into main Oct 20, 2026
4 of 5 checks passed
@demosjarco
demosjarco deleted the dependabot/npm_and_yarn/ai-dbd8e0bcde branch October 20, 2026 20:29
@github-actions github-actions Bot mentioned this pull request Oct 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code semver-minor

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant