Skip to content

chore(deps): update dependency ai to v6#4

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/ai-6.x
Open

chore(deps): update dependency ai to v6#4
renovate[bot] wants to merge 1 commit intomainfrom
renovate/ai-6.x

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate Bot commented Dec 22, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
ai (source) ^5.0.97^5.0.97 || ^6.0.0 age confidence
ai (source) ^5.0.98^6.0.0 age confidence

Release Notes

vercel/ai (ai)

v6.0.174

Compare Source

Patch Changes

v6.0.173

Compare Source

Patch Changes

v6.0.172

Compare Source

v6.0.171

Compare Source

Patch Changes
  • 48f842a: fix(ai): enforce callOptionsSchema at runtime in ToolLoopAgent

    ToolLoopAgentSettings.callOptionsSchema was declared and documented as a runtime schema for options, but tool-loop-agent.ts never invoked it. Any invariant a developer encoded in the schema was silently bypassed at runtime, and unchecked options flowed straight into prepareCall and any instructions template that interpolated them.

    ToolLoopAgent.prepareCall now validates caller-supplied options against callOptionsSchema (when set) via safeValidateTypes, throwing InvalidArgumentError on failure before forwarding to prepareCall / generateText / streamText.

  • a727da4: chore: ensure consistent import handling and avoid import duplicates or cycles

  • 5fee301: fix(mcp): prevent prototype pollution by using secureJsonParse

  • Updated dependencies [a727da4]

v6.0.170

Compare Source

Patch Changes
  • 19d587a: fix(ai): add allowSystemInMessages option and warn by default when system messages are found in prompt or messages

v6.0.169

Compare Source

v6.0.168

Compare Source

Patch Changes

v6.0.167

Compare Source

Patch Changes

v6.0.166

Compare Source

Patch Changes
  • b8d28f4: fix(ai): omit reasoning-start/end when sendReasoning is false

v6.0.165

Compare Source

Patch Changes

v6.0.164

Compare Source

Patch Changes

v6.0.163

Compare Source

Patch Changes

v6.0.162

Compare Source

Patch Changes

v6.0.161

Compare Source

Patch Changes

v6.0.160

Compare Source

Patch Changes

v6.0.159

Compare Source

Patch Changes

v6.0.158

Compare Source

Patch Changes
  • 295beba: fix(ai): fix lastAssistantMessageIsCompleteWithApprovalResponses to no longer ignore providerExecuted tool approvals

v6.0.157

Compare Source

Patch Changes
  • ff11aee: fix(ai): fix providerExecuted tool approvals being passed to language model twice

v6.0.156

Compare Source

Patch Changes

v6.0.155

Compare Source

Patch Changes
  • 06764c5: fix(ai): skip passing invalid JSON inputs to response messages

v6.0.154

Compare Source

Patch Changes

v6.0.153

Compare Source

Patch Changes
  • f152133: feat (ai/core): support plain string model IDs in rerank() function

    The rerank() function now accepts plain model strings (e.g., 'cohere/rerank-v3.5') in addition to RerankingModel objects, matching the behavior of generateText, embed, and other core functions.

v6.0.152

Compare Source

Patch Changes
  • d42076d: Add AI Gateway hint to provider READMEs

v6.0.151

Compare Source

Patch Changes

v6.0.150

Compare Source

Patch Changes

v6.0.149

Compare Source

Patch Changes

v6.0.148

Compare Source

Patch Changes

v6.0.147

Compare Source

Patch Changes

v6.0.146

Patch Changes

v6.0.145

Patch Changes

v6.0.144

Patch Changes

v6.0.143

Patch Changes

v6.0.142

Compare Source

Patch Changes

v6.0.141

Compare Source

Patch Changes

v6.0.140

Compare Source

Patch Changes

v6.0.139

Patch Changes

v6.0.138

Patch Changes

v6.0.137

Patch Changes

v6.0.136

Compare Source

Patch Changes

v6.0.135

Patch Changes
  • df6a330: chore(ai): remove all experimental agent events

v6.0.134

Patch Changes
  • ed6876b: chore(ai): remove all experimental embed events

v6.0.133

Patch Changes

v6.0.132

Patch Changes

v6.0.131

Patch Changes
  • 14f25f9: feat(ai): introduce experimental callbacks for embed function

v6.0.130

Compare Source

Patch Changes

v6.0.129

Compare Source

Patch Changes

v6.0.128

Compare Source

Patch Changes

v6.0.127

Compare Source

Patch Changes

v6.0.126

Compare Source

Patch Changes
  • 578615a: Remove custom User-Agent header from HttpChatTransport to fix CORS preflight failures in Safari and Firefox

v6.0.125

Compare Source

Patch Changes

v6.0.124

Patch Changes

v6.0.122

Compare Source

Patch Changes

v6.0.121

Compare Source

Patch Changes

v6.0.120

Compare Source

Patch Changes
  • 78c0e26: feat(ai): pass result provider metadata across the stream

v6.0.119

Compare Source

Patch Changes
  • ab286f1: fix(ai): doStream should reflect transformed values
  • d68b122: feat(ai): add missing usage attributes

v6.0.118

Compare Source

Patch Changes
  • 64ac0fd: fix(security): validate redirect targets in download functions to prevent SSRF bypass

    Both downloadBlob and download now validate the final URL after following HTTP redirects, preventing attackers from bypassing SSRF protections via open redirects to internal/private addresses.

  • Updated dependencies [64ac0fd]

v6.0.117

Compare Source

Patch Changes

v6.0.116

Compare Source

Patch Changes

v6.0.115

Compare Source

Patch Changes

v6.0.114

Compare Source

Patch Changes
  • 2291047: fix(ai): fix missing support for image thought signatures (e.g. for Gemini image models)

v6.0.113

Compare Source

Patch Changes
  • 70d3980: fix(ai): use errorMode 'text' in approval continuation to preserve tool error messages

v6.0.112

Compare Source

Patch Changes

v6.0.111

Compare Source

Patch Changes
  • 2129c82: feat(ai): register global telemetry integrations

v6.0.110

Compare Source

Patch Changes

v6.0.109

Compare Source

Patch Changes

v6.0.108

Compare Source

Patch Changes
  • 2a4f512: feat(ai): add telemetry interface and registry

v6.0.107

Compare Source

Patch Changes

v6.0.106

Compare Source

Patch Changes

v6.0.105

Compare Source

Patch Changes

v6.0.104

Compare Source

Patch Changes

v6.0.103

Compare Source

Patch Changes

v6.0.102

Compare Source

Patch Changes

v6.0.101

Compare Source

Patch Changes
  • 5230482: fix(ai): Don't create duplicate tool parts when models call non-existent tools

v6.0.100

Compare Source

Patch Changes
  • b7fba77: feat(ai): add event notifiers to core functions

v6.0.99

Compare Source

Patch Changes

v6.0.98

Compare Source

Patch Changes

v6.0.97

Compare Source

Patch Changes
  • ebfdad1: feat(ai): experimental callbacks in ToolLoopAgent

v6.0.96

Compare Source

Patch Changes
  • 30c9de6: feat(ai): experimental callbacks for streamText

v6.0.95

Compare Source

Patch Changes

v6.0.94

Compare Source

Patch Changes

v6.0.93

Compare Source

Patch Changes
  • d3769ec: feat(ai): add experimental callbacks in generateText

v6.0.92

Compare Source

Patch Changes

v6.0.91

Compare Source

Patch Changes

v6.0.90

Compare Source

Patch Changes
  • 98e83ab: Fix useChat status briefly flashing to submitted on page load when resume: true is set and there is no active stream to resume. The reconnectToStream check is now performed before setting status to submitted, so status stays ready when the server responds with 204 (no active stream).

v6.0.89

Compare Source

Patch Changes

v6.0.88

Compare Source

Patch Changes

v6.0.87

Compare Source

Patch Changes

v6.0.86

Compare Source

Patch Changes

v6.0.85

Compare Source

Patch Changes

v6.0.84

Compare Source

Patch Changes
  • 4024a3a: security: prevent unbounded memory growth in download functions

    The download() and downloadBlob() functions now enforce a default 2 GiB size limit when downloading from user-provided URLs. Downloads that exceed this limit are aborted with a DownloadError instead of consuming unbounded memory and crashing the process. The abortSignal parameter is now passed through to fetch() in all download call sites.

    Added download option to transcribe() and experimental_generateVideo() for providing a custom download function. Use the new createDownload({ maxBytes }) factory to configure download size limits.

  • Updated dependencies [4024a3a]

v6.0.83

Compare Source

Patch Changes

v6.0.82

Compare Source

Patch Changes

v6.0.81

Compare Source

Patch Changes
  • ee4beee: feat(ai): add onStepFinish callback to createUIMessageStream

v6.0.80

Compare Source

Patch Changes

v6.0.79

Compare Source

Patch Changes

v6.0.78

Compare Source

Patch Changes
  • 59fcf30: fix(ai): make experimental_context required in ToolLoopAgentOnFinishCallback

    This fixes a type inconsistency where ToolLoopAgentOnFinishCallback had experimental_context as optional while StreamTextOnFinishCallback and GenerateTextOnFinishCallback had it as required. Since ToolLoopAgent delegates to streamText/generateText, and both always pass experimental_context when invoking the callback, the types should match.

v6.0.77

Compare Source

Patch Changes

v6.0.76

Compare Source

Patch Changes

v6.0.75

Compare Source

Patch Changes

v6.0.74

Compare Source

Patch Changes
  • 471009b: fix(ai): pass reasoning text in telemetry

v6.0.73

Compare Source

Patch Changes

v6.0.72

Compare Source

Patch Changes

v6.0.71

Compare Source

Patch Changes

v6.0.70

Compare Source

Patch Changes

v6.0.69

Compare Source

Patch Changes
  • d659305: fix(ai): auto-populate originalMessages in createAgentUIStream

v6.0.68

Compare Source

Patch Changes
  • 8bf2660: chore(ai): export DefaultGeneratedFile

v6.0.67

Compare Source

Patch Changes

v6.0.66

Compare Source

Patch Changes

v6.0.65

Compare Source

Patch Changes

v6.0.64

Compare Source

Patch Changes
  • ce9daa3: Fixed 'reasoning part reasoning-0 not found' error by ensuring 'reasoning-start' event is emitted for empty thinking blocks (eg. )

v6.0.63

Compare Source

Patch Changes
  • be95579: fix(ui): respect Promise<false> when returned by sendAutomaticallyWhen

v6.0.62

Compare Source

Patch Changes

v6.0.61

Compare Source

Patch Changes

v6.0.60

Compare Source

Patch Changes
  • 5fc42fa: feat(ai): add experimental retention setting

v6.0.59

Compare Source

Patch Changes

v6.0.58

Compare Source

Patch Changes

v6.0.57

Compare Source

Patch Changes
  • 65865d8: Fix handling of error results in deferrable tools

v6.0.56

Compare Source

Patch Changes

v6.0.55

Compare Source

Patch Changes
  • 43a74df: chore(ai): add skill to README

v6.0.54

Compare Source

Patch Changes
  • 2f8ac87: docs(ai): fix incorrect and outdated jsdoc

v6.0.53

Compare Source

Patch Changes

v6.0.52

Compare Source

Patch Changes

v6.0.51

Compare Source

Patch Changes
  • ea0feb5: fix(ai): clean up step timeout when error occurs in streamText

v6.0.50

Compare Source

Patch Changes

v6.0.49

Compare Source

Patch Changes
  • ded661b: feat(ai): add onStepFinish to agent.generate and agent.stream

v6.0.48

Compare Source

Patch Changes

v6.0.47

Compare Source

Patch Changes

v6.0.46

Compare Source

Patch Changes

v6.0.45

Compare Source

Patch Changes

v6.0.44

Compare Source

Patch Changes

v6.0.43

Compare Source

Patch Changes
  • 2dc9bfa: fix(ai): handle provider-executed tools and tool-approval-response in validation

    • Skip validation for tool calls with providerExecuted: true (deferred results)
    • Map approvalId to toolCallId for proper tool-approval-response handling
    • Filter out empty tool messages after content filtering
    • Fixes MissingToolResultError for async and approval-based tool flows

v6.0.42

Compare Source

Patch Changes

v6.0.41

Compare Source

Patch Changes

v6.0.40

Compare Source

Patch Changes
  • ab57783: Add usage information to onFinish callback in useChat

v6.0.39

Compare Source

Patch Changes
  • 4e28ba0: fix(ai): propagate providerMetadata during input-streaming state

    Provider-executed tools (like MCP tools) need to send metadata during the streaming phase, but the implementation only set callProviderMetadata when part.state === "input-available". This fix removes the overly-restrictive state check and adds callProviderMetadata to the input-streaming state types and schemas.

v6.0.38

Compare Source

Patch Changes

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/ai-6.x branch from 4ee1f0a to f98ac1f Compare December 23, 2025 19:38
@renovate renovate Bot force-pushed the renovate/ai-6.x branch 5 times, most recently from 4b49239 to 6ad114e Compare January 7, 2026 07:26
@renovate renovate Bot force-pushed the renovate/ai-6.x branch 5 times, most recently from ee02940 to 609fd67 Compare January 13, 2026 07:59
@renovate renovate Bot force-pushed the renovate/ai-6.x branch 4 times, most recently from 2859f8e to 307a400 Compare January 22, 2026 06:39
@renovate renovate Bot force-pushed the renovate/ai-6.x branch 4 times, most recently from fd08fc1 to 634797c Compare January 29, 2026 03:34
@renovate renovate Bot force-pushed the renovate/ai-6.x branch 6 times, most recently from f903110 to 629c14a Compare February 5, 2026 07:54
@renovate renovate Bot force-pushed the renovate/ai-6.x branch 5 times, most recently from 29582f2 to a92e52e Compare February 11, 2026 15:54
@renovate renovate Bot force-pushed the renovate/ai-6.x branch 4 times, most recently from 010a401 to c035fb0 Compare February 20, 2026 07:56
@renovate renovate Bot force-pushed the renovate/ai-6.x branch from c035fb0 to 919cce1 Compare February 21, 2026 04:08
@renovate renovate Bot force-pushed the renovate/ai-6.x branch from 919cce1 to 59a0c6c Compare March 1, 2026 06:56
@renovate renovate Bot force-pushed the renovate/ai-6.x branch from 59a0c6c to a101760 Compare March 8, 2026 08:59
@renovate renovate Bot force-pushed the renovate/ai-6.x branch from a101760 to fe24c41 Compare March 31, 2026 16:37
@renovate renovate Bot force-pushed the renovate/ai-6.x branch 2 times, most recently from cfc4925 to 4836831 Compare April 19, 2026 03:16
@renovate renovate Bot force-pushed the renovate/ai-6.x branch from 4836831 to b4645dc Compare May 1, 2026 06:49
@renovate renovate Bot force-pushed the renovate/ai-6.x branch from b4645dc to a5718b2 Compare May 2, 2026 16:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants