Skip to content

chore(deps): bump @ai-sdk/amazon-bedrock from 4.0.133 to 5.0.17 - #1213

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/ai-sdk/amazon-bedrock-5.0.17
Closed

chore(deps): bump @ai-sdk/amazon-bedrock from 4.0.133 to 5.0.17#1213
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/ai-sdk/amazon-bedrock-5.0.17

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps @ai-sdk/amazon-bedrock from 4.0.133 to 5.0.17.

Release notes

Sourced from @​ai-sdk/amazon-bedrock's releases.

@​ai-sdk/google-vertex@​5.0.16

Patch Changes

  • Updated dependencies [308a519]
    • @​ai-sdk/anthropic@​4.0.12

@​ai-sdk/google-vertex@​5.0.15

Patch Changes

  • Updated dependencies [e40118c]
    • @​ai-sdk/google@​4.0.12

@​ai-sdk/svelte@​4.0.224

Patch Changes

  • ai@6.0.224

@​ai-sdk/svelte@​4.0.223

Patch Changes

  • ai@6.0.223
Changelog

Sourced from @​ai-sdk/amazon-bedrock's changelog.

5.0.17

Patch Changes

  • Updated dependencies [308a519]
    • @​ai-sdk/anthropic@​4.0.12

5.0.16

Patch Changes

  • Updated dependencies [b2b1bb9]
    • @​ai-sdk/openai@​4.0.11

5.0.15

Patch Changes

  • 5cd0e38: feat(amazon-bedrock): add providerOptions schema and type for Bedrock image model requests
  • Updated dependencies [fdb6d5d]
  • Updated dependencies [0f93c57]
    • @​ai-sdk/openai@​4.0.10
    • @​ai-sdk/provider@​4.0.3
    • @​ai-sdk/anthropic@​4.0.11
    • @​ai-sdk/provider-utils@​5.0.7

5.0.14

Patch Changes

  • Updated dependencies [ac306ed]
    • @​ai-sdk/provider-utils@​5.0.6
    • @​ai-sdk/openai@​4.0.9
    • @​ai-sdk/anthropic@​4.0.10

5.0.13

Patch Changes

  • cf06314: fix(bedrock): wrap invalid tool input in object
  • Updated dependencies [2e45d9c]
    • @​ai-sdk/anthropic@​4.0.9

5.0.12

Patch Changes

  • Updated dependencies [b51ed36]
    • @​ai-sdk/openai@​4.0.8

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@ai-sdk/amazon-bedrock](https://github.com/vercel/ai/tree/HEAD/packages/amazon-bedrock) from 4.0.133 to 5.0.17.
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/amazon-bedrock/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/amazon-bedrock@5.0.17/packages/amazon-bedrock)

---
updated-dependencies:
- dependency-name: "@ai-sdk/amazon-bedrock"
  dependency-version: 5.0.17
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 13, 2026
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

@krishagel krishagel added the pr-fix-stuck pr-fix routine gave up — human attention needed label Jul 15, 2026 — with Claude

Copy link
Copy Markdown
Member

🤖 pr-fix routine: nothing actionable in this environment

CI is failing on Test, Lint, and Type Check and Validate CDK Infrastructure, both at the same first step:

bun install --frozen-lockfile
error: lockfile had changes, but lockfile is frozen
note: try re-running without --frozen-lockfile and commit the updated lockfile

This is Dependabot's version bump (@ai-sdk/amazon-bedrock 4.0.133 → 5.0.17) landing in package.json without a matching bun.lock update. The fix is mechanical — regenerate the lockfile — but doing that correctly requires resolving the new dependency tree against registry.npmjs.org, and this routine's cloud session has that host blocked at the egress-proxy level (confirmed: curl https://registry.npmjs.org403, proxy docs say "organization policy denial — do not retry or route around it"). There is no way to hand-author a valid bun.lock entry (integrity hashes, resolved transitive deps) without registry access, so I can't produce a correct fix from here.

No other actionable review feedback exists on this PR (the only comment is a bot notice that Codex's review-usage limit was reached; no REQUESTED_CHANGES).

The routine will not pick this PR up again until a human removes pr-fix-stuck. To resolve: run bun install locally (or in an environment with npm registry access) on this branch, commit the updated bun.lock, and push — or close/merge via Dependabot's own rebase if it can regenerate the lockfile itself.

Note: several other open Dependabot PRs in this repo (#1220, #1218, #1217, #1216, #1215, #1214, #1209, #1208, #1076) are already pr-fix-stuck and almost certainly hit this exact same registry-access limitation.


Generated by Claude Code

@krishagel

Copy link
Copy Markdown
Member

🔬 Deferred as part of the AI SDK v7 cluster — see the full triage and migration plan on #1214. These majors are interdependent (shared provider-spec version) and can only land via one consolidated migration branch, which requires live-provider E2E verification not available in the current environment. Labeled pr-fix-skip; do not hand back to the pr-fix routine.

@krishagel krishagel added pr-fix-skip Do not let the pr-fix routine touch this PR and removed pr-fix-stuck pr-fix routine gave up — human attention needed labels Jul 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #1572.

@dependabot dependabot Bot closed this Aug 3, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev/ai-sdk/amazon-bedrock-5.0.17 branch August 3, 2026 17:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code pr-fix-skip Do not let the pr-fix routine touch this PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant