chore(deps): bump @ai-sdk/react from 3.0.242 to 4.0.47 - #1569
chore(deps): bump @ai-sdk/react from 3.0.242 to 4.0.47#1569dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react) from 3.0.242 to 4.0.47. - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.47/packages/react) --- updated-dependencies: - dependency-name: "@ai-sdk/react" dependency-version: 4.0.47 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 19a08df644
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| "@ai-sdk/mcp": "1.0.52", | ||
| "@ai-sdk/openai": "~3.0.74", | ||
| "@ai-sdk/react": "~3.0.210", | ||
| "@ai-sdk/react": "~4.0.47", |
There was a problem hiding this comment.
Commit the matching bun.lock update
When the app image is built, the root Dockerfile copies package.json and bun.lock together and then runs bun install --frozen-lockfile (Dockerfile:15-21), but this commit changes @ai-sdk/react in package.json while leaving the root bun.lock pinned to ~3.0.210/@ai-sdk/react@3.0.210. That makes the lockfile inconsistent with the manifest, so clean Docker/CI installs cannot reproduce this dependency bump; regenerate and commit bun.lock with the package change.
Useful? React with 👍 / 👎.
| "@ai-sdk/provider": "~3.0.10", | ||
| "@ai-sdk/provider-utils": "~4.0.30", | ||
| "@ai-sdk/react": "~3.0.210", | ||
| "@ai-sdk/react": "~4.0.47", |
There was a problem hiding this comment.
Upgrade the AI SDK stack together
This override forces all consumers onto @ai-sdk/react v4, but the repo is still pinned to ai v6 and @assistant-ui/react-ai-sdk v1.x; the locked adapter declares @ai-sdk/react: ^3.0.207 and ai: ^6.0.205, and Nexus mounts that adapter via useChatRuntime in both chat pages. When those Nexus routes load after the lockfile is regenerated, the v6 assistant-ui adapter is paired with the v7 React client instead of its supported v3 client, so the chat runtime can break unless ai/assistant-ui are migrated together or this package remains on v3.
Useful? React with 👍 / 👎.
|
🤖 pr-fix routine: blocked — marking I picked this PR up because 4 checks are red. I could not make progress, for two independent reasons. 1. Environmental blocker — cannot regenerate
|
Bumps @ai-sdk/react from 3.0.242 to 4.0.47.
Changelog
Sourced from @ai-sdk/react's changelog.
... (truncated)
Commits
3fb63ebVersion Packages (#18234)eb3d1afVersion Packages (#18208)a56fbc0Version Packages (#18083)2ab3f34Version Packages (#18023)c527d7bVersion Packages (#18020)232a45aVersion Packages (#18004)8fd84f0Version Packages (#17983)3c98985Version Packages (#17868)54d4d7aVersion Packages (#17796)799faf7Version Packages (#17653)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)