Skip to content

build(deps): bump ai from 6.0.206 to 7.0.31#250

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ai-6.0.208
Open

build(deps): bump ai from 6.0.206 to 7.0.31#250
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ai-6.0.208

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor

Bumps ai from 6.0.206 to 7.0.31.

Release notes

Sourced from ai's releases.

ai@6.0.235

Patch Changes

  • Updated dependencies [5d7b986]
    • @​ai-sdk/gateway@​3.0.157
Changelog

Sourced from ai's changelog.

7.0.31

Patch Changes

  • 70f18c3: fix(ai): emit denied tool output state for client-rejected approvals
  • cd06458: fix(ai): call onInputStart before onInputAvailable during non-streaming tool calls
  • Updated dependencies [cd06458]
    • @​ai-sdk/provider-utils@​5.0.11
    • @​ai-sdk/gateway@​4.0.23

7.0.30

Patch Changes

  • Updated dependencies [341616a]
  • Updated dependencies [70fc45c]
    • @​ai-sdk/gateway@​4.0.22

7.0.29

Patch Changes

  • Updated dependencies [7069785]
  • Updated dependencies [4bf9ac2]
    • @​ai-sdk/gateway@​4.0.21

7.0.28

Patch Changes

  • 0bc8d4f: Fix chat onFinish handling when overlapping requests clear the active response before a resume stream finishes.

7.0.27

Patch Changes

  • ac01b79: Allow validating assistant UI messages with empty parts so persisted errored responses remain loadable.
  • 2696562: experimental_streamTranscribe result promises now resolve without consuming fullStream: accessing any result promise consumes the stream internally. Previously await result.text alone deadlocked on transform backpressure. Because live transcription streams can be unbounded, fullStream is explicitly single-consumer (no replay buffering): access it once, before any result promise, when both stream parts and final results are needed.
  • Updated dependencies [31c7be8]
  • Updated dependencies [4d096f6]
    • @​ai-sdk/provider-utils@​5.0.10
    • @​ai-sdk/gateway@​4.0.20

7.0.26

Patch Changes

  • 27d294d: feat(ai): group orphaned tool calls after tool approvals under parent span

7.0.25

... (truncated)

Commits
  • 9352ac1 Version Packages (#17417)
  • 70f18c3 fix: transition client-denied tool approvals to output-denied (#17438)
  • cd06458 fix: ensure tool input lifecycle callbacks start before input becomes availab...
  • 2667d27 Version Packages (#17351)
  • 6427ca9 Version Packages (#17324)
  • 3649694 Version Packages (#17251)
  • 0bc8d4f fix: prevent Chat resume-stream onFinish errors when requests overlap (#16620)
  • 6976682 Version Packages (#17196)
  • 2696562 fix(ai): streamTranscribe result promises resolve without consuming fullStrea...
  • ac01b79 fix: UI message validation rejects persisted assistant responses with empty p...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 29, 2026
@dependabot
dependabot Bot requested a review from qnbs as a code owner June 29, 2026 23:49
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 29, 2026
@vercel

vercel Bot commented Jun 29, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
worldscript-studio Ready Ready Preview, Comment Jul 26, 2026 5:52pm

@deepsource-io

deepsource-io Bot commented Jun 29, 2026

Copy link
Copy Markdown

DeepSource Code Review

We reviewed changes in 79aace8...f10c679 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Code Review Summary

Analyzer Status Updated (UTC) Details
Docker Jun 29, 2026 11:49p.m. Review ↗
JavaScript Jun 29, 2026 11:49p.m. Review ↗
CSS Jun 29, 2026 11:49p.m. Review ↗
Rust Jun 29, 2026 11:49p.m. Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

@socket-security

socket-security Bot commented Jun 29, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​ai@​7.0.319910010099100

View full report

@codeant-ai

codeant-ai Bot commented Jul 26, 2026

Copy link
Copy Markdown

🏁 CodeAnt Quality Gate Results

Commit: 440ad096
Scan Time: 2026-07-26 17:44:39 UTC

✅ Overall Status: PASSED

Quality Gate Details

Quality Gate Status Details
Secrets ✅ PASSED 0 secrets found
Duplicate Code ✅ PASSED 0.0% duplicated
SAST ✅ PASSED No security issues
Bugs ✅ PASSED Rating S: No bugs
IAC ✅ PASSED Rating S: No issues

View Full Results

Bumps [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) from 6.0.206 to 7.0.31.
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.31/packages/ai)

---
updated-dependencies:
- dependency-name: ai
  dependency-version: 6.0.208
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump ai from 6.0.206 to 6.0.208 build(deps): bump ai from 6.0.206 to 7.0.31 Jul 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ai-6.0.208 branch from f10c679 to 440ad09 Compare July 26, 2026 17:44
@codecov

codecov Bot commented Jul 26, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants