chore(deps): bump @ai-sdk/react from 3.0.227 to 4.0.27

[dependabot]

Bumps @ai-sdk/react from 3.0.227 to 4.0.27.

Release notes

Sourced from @​ai-sdk/react's releases.

@​ai-sdk/react@​4.0.27

Patch Changes

• Updated dependencies [27d294d]
  • ai@7.0.26

@​ai-sdk/react@​4.0.26

Patch Changes

• Updated dependencies [4be62c1]
• Updated dependencies [7805e4a]
• Updated dependencies [7805e4a]
• Updated dependencies [f8e82fd]
• Updated dependencies [cd12954]
  • @​ai-sdk/provider-utils@​5.0.9
  • ai@7.0.25
  • @​ai-sdk/mcp@​2.0.12

@​ai-sdk/react@​4.0.24

Patch Changes

• Updated dependencies [930f949]
  • ai@7.0.23

Changelog

Sourced from @​ai-sdk/react's changelog.

4.0.27

Patch Changes

• Updated dependencies [27d294d]
  • ai@7.0.26

4.0.26

Patch Changes

• Updated dependencies [4be62c1]
• Updated dependencies [7805e4a]
• Updated dependencies [7805e4a]
• Updated dependencies [f8e82fd]
• Updated dependencies [cd12954]
  • @​ai-sdk/provider-utils@​5.0.9
  • ai@7.0.25
  • @​ai-sdk/mcp@​2.0.12

4.0.25

Patch Changes

• Updated dependencies [e193290]
• Updated dependencies [e193290]
  • @​ai-sdk/provider-utils@​5.0.8
  • ai@7.0.24
  • @​ai-sdk/mcp@​2.0.11

4.0.24

Patch Changes

• Updated dependencies [930f949]
  • ai@7.0.23

4.0.23

Patch Changes

• Updated dependencies [8f89c25]
  • ai@7.0.22

4.0.22

Patch Changes

• Updated dependencies [308a519]
  • ai@7.0.21

... (truncated)

Commits

• 2ba5f8a Version Packages (#17181)
• cb68fa6 Version Packages (#17175)
• cc3ab3a Version Packages (#17172)
• de63ba0 Version Packages (#17163)
• b162ae4 Version Packages (#17106)
• c2913fb Version Packages (#17092)
• 58d77ca Version Packages (#17043)
• d26bf99 fix: Prevent duplicate React crashes in next-openai-pages when run from the m...
• 405116e Version Packages (#16937)
• f0d9a6c Version Packages (#16898)
• Additional commits viewable in compare view

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

[krishagel]

🤖 pr-fix routine: blocked, same root cause as #1209/#1214/#1216/#1208/#1217/#1218/#1076

Both failing checks here have the identical signature already diagnosed on the other stuck Dependabot PRs:

1. Test, Lint, and Type Check and Validate CDK Infrastructure fail with:

   warn: Bun currently does not support nested "overrides"
      at /home/runner/work/aistudio/aistudio/package.json:270:15
   error: lockfile had changes, but lockfile is frozen
   note: try re-running without --frozen-lockfile and commit the updated lockfile
   

   Dependabot bumped root package.json (@ai-sdk/react 3.0.227 → 4.0.27) but did not regenerate root bun.lock, so bun install --frozen-lockfile rejects it in CI. I re-verified in this run: this routine's execution environment has no network egress to registry.npmjs.org (Host not in allowlist), so the lockfile can't be regenerated from here.

2. claude-review fails with:

   Action failed with error: Workflow initiated by non-human actor: dependabot (type: Bot).
   Add bot to allowed_bots list or use '*' to allow all bots.
   

   Fixing this requires editing the claude-review GitHub Actions workflow config under .github/workflows/**, a protected path this autonomous routine is not permitted to touch.

No human review comments or REQUESTED_CHANGES are present — the only PR comment was an unrelated Codex usage-limit notice.

A human will need to either:

1. Run bun install locally at the repo root on this branch and push the updated bun.lock, or
2. Comment ·@·d·ependabot r·ecreate and see if a fresh PR includes the lockfile update, or
3. Add dependabot to the claude-review workflow's allowed_bots list, and/or update this routine's environment network allowlist to include the npm registry.

The routine will not pick this PR up again until a human removes the pr-fix-stuck label.

---

Generated by Claude Code

[krishagel]

🔬 Deferred as part of the AI SDK v7 cluster — see the full triage and migration plan on #1214. These majors are interdependent (shared provider-spec version) and can only land via one consolidated migration branch, which requires live-provider E2E verification not available in the current environment. Labeled pr-fix-skip; do not hand back to the pr-fix routine.

[dependabot]

Superseded by #1569.