[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@ai-sdk/openai-compatible@2 (source)	2.0.56 → 2.0.87
@ai-sdk/provider-utils@4 (source)	4.0.61 → 4.0.62
ai (source)	7.0.143 → 7.0.148

---

Release Notes

vercel/ai (@​ai-sdk/openai-compatible@2)

v2.0.87

Compare Source

Patch Changes

• 81df039: Defer validation schema construction until first use to reduce provider import time.
• Updated dependencies [1183cc4]
• Updated dependencies [d726591]
  • @​ai-sdk/provider-utils@4.0.62

v2.0.86

Compare Source

Patch Changes

• b3c2bb4: fix(openai-compatible, groq, alibaba): put reasoning before text in doGenerate

v2.0.85

Compare Source

Patch Changes

• 5aa3086: feat(openai-compatible): support URL-based image responses

  Add opt-in URL validation and credential origin handling to getFromApi for URL-based image responses. Validate redirect targets, strip unsafe request headers, and drop credentials on cross-origin redirects while preserving existing unvalidated requests.

• Updated dependencies [5aa3086]

  • @​ai-sdk/provider-utils@4.0.61

v2.0.84

Compare Source

Patch Changes

• Updated dependencies [739e9f6]
  • @​ai-sdk/provider@3.0.19
  • @​ai-sdk/provider-utils@4.0.60

v2.0.83

Compare Source

Patch Changes

• Updated dependencies [d5e7d82]
  • @​ai-sdk/provider-utils@4.0.59

v2.0.82

Compare Source

Patch Changes

• Updated dependencies [604b4d3]
  • @​ai-sdk/provider-utils@4.0.58

v2.0.81

Compare Source

Patch Changes

• Updated dependencies [a9cea74]
• Updated dependencies [a9cea74]
• Updated dependencies [a9cea74]
  • @​ai-sdk/provider-utils@4.0.57

v2.0.80

Compare Source

Patch Changes

• 29dc427: fix(provider-utils): preserve streamed tool calls with unreliable IDs and indices
• Updated dependencies [29dc427]
  • @​ai-sdk/provider-utils@4.0.56

v2.0.79

Patch Changes

• Updated dependencies [3983fea]
  • @​ai-sdk/provider@3.0.18
  • @​ai-sdk/provider-utils@4.0.55

v2.0.78

Patch Changes

• Updated dependencies [069a945]
• Updated dependencies [d1a36d2]
• Updated dependencies [f7f36d2]
  • @​ai-sdk/provider-utils@4.0.54

v2.0.77

Patch Changes

• Updated dependencies [da2e17b]
  • @​ai-sdk/provider@3.0.17
  • @​ai-sdk/provider-utils@4.0.53

v2.0.76

Compare Source

Patch Changes

• Updated dependencies [82e18b0]
  • @​ai-sdk/provider-utils@4.0.52

v2.0.75

Compare Source

Patch Changes

• f3c1980: fix(openai-compatible): keep reasoning streams contiguous when deltas include empty tool call arrays
• 1336501: fix(openai): return an AI SDK error for empty chat completion choices
• Updated dependencies [1a4dbb1]
  • @​ai-sdk/provider@3.0.16
  • @​ai-sdk/provider-utils@4.0.51

v2.0.74

Compare Source

Patch Changes

• 6d44462: Support text and thinking parts in array-based chat completion content while ignoring unknown part types.
• Updated dependencies [cc23556]
  • @​ai-sdk/provider-utils@4.0.50

v2.0.73

Compare Source

Patch Changes

• Updated dependencies [9a521b9]
  • @​ai-sdk/provider-utils@4.0.49

v2.0.72

Compare Source

Patch Changes

• Updated dependencies [5642849]
  • @​ai-sdk/provider-utils@4.0.48

v2.0.71

Compare Source

Patch Changes

• Updated dependencies [2d172fb]
  • @​ai-sdk/provider-utils@4.0.47

v2.0.70

Compare Source

Patch Changes

• c79dd10: fix(openai-compatible): report truncated chat streams as errors

v2.0.69

Compare Source

Patch Changes

• 7440d89: fix(openai-compatible): preserve unmapped usage fields in usage.raw

  usage.raw is specified as usage "in the shape that the provider returns",
  and the chat model already parsed the usage object loosely so that extra
  top-level fields survived. The nested prompt_tokens_details and
  completion_tokens_details objects were still strict, so anything a provider
  reported inside them was dropped — which is where providers put their most
  distinguishing detail. The existing "should preserve extra usage fields"
  fixture was itself losing audio_tokens, image_tokens and text_tokens
  this way.

  Both nested objects are now parsed loosely, as is the completion model's usage
  schema, which was strict throughout despite feeding the same raw field.

  Only usage.raw changes. The mapped token counts are unaffected.

v2.0.68

Compare Source

Patch Changes

• Updated dependencies [31205a4]
  • @​ai-sdk/provider-utils@4.0.46

v2.0.67

Compare Source

Patch Changes

• Updated dependencies [b2a4d5a]
  • @​ai-sdk/provider-utils@4.0.45

v2.0.66

Compare Source

Patch Changes

• de18066: fix(provider/openai-compatible): clamp outputTokens.text at 0 when a provider reports completion_tokens_details.reasoning_tokens greater than completion_tokens (observed with Baseten serving reasoning models that hit the length stop mid-reasoning). The text share of completion tokens can never be negative; total and reasoning remain as reported by the provider.
• Updated dependencies [2171d15]
  • @​ai-sdk/provider@3.0.15
  • @​ai-sdk/provider-utils@4.0.44

v2.0.65

Compare Source

Patch Changes

• Updated dependencies [dab0a08]
  • @​ai-sdk/provider-utils@4.0.43

v2.0.64

Compare Source

Patch Changes

• Updated dependencies [ee2bf30]
  • @​ai-sdk/provider-utils@4.0.42

v2.0.63

Compare Source

Patch Changes

• Updated dependencies [9ecdefe]
  • @​ai-sdk/provider-utils@4.0.41

v2.0.62

Compare Source

Patch Changes

• Updated dependencies [19093fd]
  • @​ai-sdk/provider-utils@4.0.40

v2.0.61

Compare Source

Patch Changes

• 94fda5c: Preserve structured error data from chat completion SSE streams.

v2.0.60

Compare Source

Patch Changes

• Updated dependencies [06fb54c]
  • @​ai-sdk/provider-utils@4.0.39

v2.0.59

Compare Source

Patch Changes

• Updated dependencies [e1af05f]
  • @​ai-sdk/provider@3.0.14
  • @​ai-sdk/provider-utils@4.0.38

v2.0.58

Compare Source

Patch Changes

• 4d4e176: fix(openai-compatible): buffer tool call deltas until function.name arrives

• bef93ae: fix(security): prevent streaming tool calls from finalizing on parsable partial JSON

  Streaming tool call arguments were finalized using isParsableJson() as a heuristic for completion. If partial accumulated JSON happened to be valid JSON before all chunks arrived, the tool call would be executed with incomplete arguments. Tool call finalization now only occurs in flush() after the stream is fully consumed.

• 327642b: fix: more precise default message for tool execution denial

• Updated dependencies [d559de9]

  • @​ai-sdk/provider-utils@4.0.37

v2.0.57

Compare Source

Patch Changes

• Updated dependencies [0952964]
  • @​ai-sdk/provider-utils@4.0.36

vercel/ai (ai)

v7.0.148

Compare Source

Patch Changes

• Updated dependencies [b089ce8]
• Updated dependencies [39a776b]
• Updated dependencies [f1b550e]
  • @​ai-sdk/provider-utils@5.0.65
  • @​ai-sdk/gateway@4.0.121

v7.0.147

Compare Source

Patch Changes

• 66e74dc: fix(ai): preserve repaired tool names in streamed UI message parts
• Updated dependencies [9bec2c3]
  • @​ai-sdk/gateway@4.0.120

v7.0.146

Compare Source

Patch Changes

• 0c2a9de: Add maxOutputTokens and reasoning to experimental decision calls and forward them to language-model-backed decisions. Language-model adapters keep reasoning disabled when omitted. Native decision providers warn when either setting is unsupported.
• 3785b2e: fix(ai): remove orphaned reasoning, including consecutive summary and reasoning-file parts, when pruning tool calls
• ab8eb61: Fix optional tools adding an incorrect undefined member to tool call, result, error, denied output, and execution event types.
• Updated dependencies [9d13c4d]
• Updated dependencies [0c2a9de]
• Updated dependencies [200c47f]
  • @​ai-sdk/gateway@4.0.119
  • @​ai-sdk/provider@4.0.31
  • @​ai-sdk/provider-utils@5.0.64

v7.0.145

Compare Source

Patch Changes

• Updated dependencies [1c47fee]
  • @​ai-sdk/gateway@4.0.118

v7.0.144

Compare Source

Patch Changes

• 60cc252: feat(perplexity): add decisions api support
• 0ed59e2: Fix streamText return types for reusable options and ReturnType by moving low-memory streaming to experimental_streamTextLowMemory. Replace experimental streamText({ experimental_lowMemory: true, ...options }) calls with experimental_streamTextLowMemory(options).
• Updated dependencies [60cc252]
• Updated dependencies [6b7fb8f]
  • @​ai-sdk/provider@4.0.30
  • @​ai-sdk/gateway@4.0.117
  • @​ai-sdk/provider-utils@5.0.63

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one): 1

• coderabbit-review-active

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Zoo-Code-Org/Zoo-Code
• Branch: main
• File: .coderabbit.yaml
• Commit: 37b66fe
• Layers: Repository YAML
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: d349ca26-8ab6-4508-b072-a1715d83c57a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Review status

This PR was opened by an automated account. A human maintainer must verify the change intent, provenance, and validation before merging.

Current step: The required review sequence passed. Remaining merge requirements apply.

Review-state labels are managed by this workflow; do not edit them manually. community-approved is managed the same way — do not add or remove it manually. It signals a fresh community code approval for the current head as an advisory priority only; maintainer review is still required.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!