Skip to content

chore(deps): bump @ai-sdk/react from 3.0.242 to 4.0.47 - #1569

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/ai-sdk/react-4.0.47
Open

chore(deps): bump @ai-sdk/react from 3.0.242 to 4.0.47#1569
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/ai-sdk/react-4.0.47

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps @ai-sdk/react from 3.0.242 to 4.0.47.

Changelog

Sourced from @​ai-sdk/react's changelog.

4.0.47

Patch Changes

  • Updated dependencies [015acb4]
    • ai@7.0.44

4.0.46

Patch Changes

  • Updated dependencies [d8210b6]
  • Updated dependencies [b192878]
  • Updated dependencies [97f0565]
    • @​ai-sdk/provider-utils@​5.0.16
    • ai@7.0.43
    • @​ai-sdk/mcp@​2.0.20

4.0.45

Patch Changes

  • Updated dependencies [1659cd5]
  • Updated dependencies [60f97f6]
  • Updated dependencies [6a5bdff]
  • Updated dependencies [6de2ec1]
    • @​ai-sdk/provider-utils@​5.0.15
    • ai@7.0.42
    • @​ai-sdk/mcp@​2.0.19

4.0.44

Patch Changes

  • Updated dependencies [2e2224b]
    • ai@7.0.41

4.0.43

Patch Changes

  • Updated dependencies [c3782a6]
    • ai@7.0.40

4.0.42

Patch Changes

  • Updated dependencies [0c464d9]
  • Updated dependencies [09a52cb]

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) from 3.0.242 to 4.0.47.
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.47/packages/react)

---
updated-dependencies:
- dependency-name: "@ai-sdk/react"
  dependency-version: 4.0.47
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 19a08df644

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread package.json
"@ai-sdk/mcp": "1.0.52",
"@ai-sdk/openai": "~3.0.74",
"@ai-sdk/react": "~3.0.210",
"@ai-sdk/react": "~4.0.47",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Commit the matching bun.lock update

When the app image is built, the root Dockerfile copies package.json and bun.lock together and then runs bun install --frozen-lockfile (Dockerfile:15-21), but this commit changes @ai-sdk/react in package.json while leaving the root bun.lock pinned to ~3.0.210/@ai-sdk/react@3.0.210. That makes the lockfile inconsistent with the manifest, so clean Docker/CI installs cannot reproduce this dependency bump; regenerate and commit bun.lock with the package change.

Useful? React with 👍 / 👎.

Comment thread package.json
"@ai-sdk/provider": "~3.0.10",
"@ai-sdk/provider-utils": "~4.0.30",
"@ai-sdk/react": "~3.0.210",
"@ai-sdk/react": "~4.0.47",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Upgrade the AI SDK stack together

This override forces all consumers onto @ai-sdk/react v4, but the repo is still pinned to ai v6 and @assistant-ui/react-ai-sdk v1.x; the locked adapter declares @ai-sdk/react: ^3.0.207 and ai: ^6.0.205, and Nexus mounts that adapter via useChatRuntime in both chat pages. When those Nexus routes load after the lockfile is regenerated, the v6 assistant-ui adapter is paired with the v7 React client instead of its supported v3 client, so the chat runtime can break unless ai/assistant-ui are migrated together or this package remains on v3.

Useful? React with 👍 / 👎.

Copy link
Copy Markdown
Member

🤖 pr-fix routine: blocked — marking pr-fix-stuck

I picked this PR up because 4 checks are red. I could not make progress, for two independent reasons.

1. Environmental blocker — cannot regenerate bun.lock

All four failing checks (Test, Lint, and Type Check, Validate CDK Infrastructure, Auth Edge Production Artifact, Unified Content PostgreSQL Lifecycle) die at the same step:

error: lockfile had changes, but lockfile is frozen
note: try re-running without --frozen-lockfile and commit the updated lockfile

That is exactly the P1 review comment above — the fix is to regenerate and commit bun.lock. The routine's sandbox has registry.npmjs.org blocked by egress policy:

< HTTP/2 403
< x-deny-reason: host_not_allowed

so bun install cannot resolve anything and no lockfile can be produced here. This needs to be run from a machine with npm access.

2. Substantive blocker — this bump cannot land on its own

Even with a regenerated lockfile, I don't think this should merge alone. Confirming the P2 review comment against the repo rather than taking it on faith:

  • bun.lock:258@assistant-ui/react-ai-sdk@1.3.37 declares direct dependencies "@ai-sdk/react": "^3.0.207" and "ai": "^6.0.205".
  • package.json:313 — the overrides block force-resolves @ai-sdk/react to ~4.0.47 for every consumer, including that adapter, while ai stays pinned at ~6.0.208.
  • That adapter's useChatRuntime is mounted on both Nexus chat routes: app/(protected)/nexus/page.tsx:389 and app/(protected)/nexus/decision-capture/page.tsx:167.

So merging this pairs a v7-generation React client with a v6-generation assistant-ui adapter on the Nexus conversation path — the subsystem CLAUDE.md specifically calls out as having broken multiple times. Not something to land on a green-CI signal alone.

Context: this is one of 8 related PRs

The rest of the AI SDK v7 family is already marked pr-fix-stuck for the same reason — #1570 (ai 6→7), #1572 (amazon-bedrock), #1573 (google), #1574 (openai), #1575 (mcp), #1576 (azure). This PR is the last unstuck member. The realistic path is one coordinated ai v6→v7 migration that bumps the whole stack together, migrates the Nexus useChatRuntime usage, and waits on an @assistant-ui/react-ai-sdk release that supports @ai-sdk/react v4 — then closes these individual dependabot PRs.

The routine will not pick this up again until someone removes pr-fix-stuck.


Generated by Claude Code

@krishagel krishagel added the pr-fix-stuck pr-fix routine gave up — human attention needed label Aug 5, 2026 — with Claude
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code pr-fix-stuck pr-fix routine gave up — human attention needed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant