Skip to content

Bump the ai-sdk group with 5 updates - #1

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ai-sdk-254d5a6327
Closed

Bump the ai-sdk group with 5 updates#1
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ai-sdk-254d5a6327

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 13, 2026

Copy link
Copy Markdown

Bumps the ai-sdk group with 5 updates:

Package From To
@ai-sdk/anthropic 1.2.12 3.0.43
@ai-sdk/google 1.2.22 3.0.29
@ai-sdk/mistral 1.2.8 3.0.20
@ai-sdk/openai 1.3.24 3.0.28
ai 4.3.19 6.0.85

Updates @ai-sdk/anthropic from 1.2.12 to 3.0.43

Release notes

Sourced from @​ai-sdk/anthropic's releases.

@​ai-sdk/google@​3.0.29

Patch Changes

  • Updated dependencies [4024a3a]
    • @​ai-sdk/provider-utils@​4.0.15

@​ai-sdk/google@​3.0.28

Patch Changes

  • 5a307f5: feat(provider/google-vertex): allow using Gemini image models with generateImage

@​ai-sdk/openai@​3.0.28

Patch Changes

  • Updated dependencies [4024a3a]
    • @​ai-sdk/provider-utils@​4.0.15

@​ai-sdk/google@​3.0.27

Patch Changes

  • 051361b: fix(vertex): add fallback for providerOptions keyname

@​ai-sdk/groq@​3.0.24

Patch Changes

  • Updated dependencies [4024a3a]
    • @​ai-sdk/provider-utils@​4.0.15

@​ai-sdk/provider-utils@​3.0.21

Patch Changes

  • 20565b8: security: prevent unbounded memory growth in download functions

    The download() and downloadBlob() functions now enforce a default 2 GiB size limit when downloading from user-provided URLs. Downloads that exceed this limit are aborted with a DownloadError instead of consuming unbounded memory and crashing the process. The abortSignal parameter is now passed through to fetch() in all download call sites.

    Added download option to transcribe() and experimental_generateVideo() for providing a custom download function. Use the new createDownload({ maxBytes }) factory to configure download size limits.

@​ai-sdk/mistral@​3.0.20

Patch Changes

  • Updated dependencies [4024a3a]
    • @​ai-sdk/provider-utils@​4.0.15

@​ai-sdk/perplexity@​3.0.19

Patch Changes

  • Updated dependencies [4024a3a]
    • @​ai-sdk/provider-utils@​4.0.15

@​ai-sdk/klingai@​3.0.3

... (truncated)

Commits
  • 7ef42ca Version Packages (#12508)
  • 4024a3a fix/unbounded download dos (#12445)
  • ee508b4 docs(contribting): correct provider method names for v3 spec and clarity (#12...
  • 244bee8 refactor(provider/amazon-bedrock): finish fixture migration for doGenerate te...
  • 17fd267 Version Packages (#12505)
  • 5a307f5 feat(provider/google-vertex): allow using Gemini image models with `generateI...
  • e73beb8 Version Packages (#12500)
  • fdf784f docs: use presentImages in single image generation example that wasn't usin...
  • 924250c Version Packages (#12499)
  • 4fc66bc chore(examples): update vulnerable mcp dependency version (#12469)
  • Additional commits viewable in compare view

Updates @ai-sdk/google from 1.2.22 to 3.0.29

Release notes

Sourced from @​ai-sdk/google's releases.

@​ai-sdk/google@​3.0.29

Patch Changes

  • Updated dependencies [4024a3a]
    • @​ai-sdk/provider-utils@​4.0.15

@​ai-sdk/google@​3.0.28

Patch Changes

  • 5a307f5: feat(provider/google-vertex): allow using Gemini image models with generateImage

@​ai-sdk/google@​3.0.27

Patch Changes

  • 051361b: fix(vertex): add fallback for providerOptions keyname

@​ai-sdk/google@​2.0.53

Patch Changes

  • Updated dependencies [20565b8]
    • @​ai-sdk/provider-utils@​3.0.21
Commits
  • 7ef42ca Version Packages (#12508)
  • 4024a3a fix/unbounded download dos (#12445)
  • ee508b4 docs(contribting): correct provider method names for v3 spec and clarity (#12...
  • 244bee8 refactor(provider/amazon-bedrock): finish fixture migration for doGenerate te...
  • 17fd267 Version Packages (#12505)
  • 5a307f5 feat(provider/google-vertex): allow using Gemini image models with `generateI...
  • e73beb8 Version Packages (#12500)
  • fdf784f docs: use presentImages in single image generation example that wasn't usin...
  • 924250c Version Packages (#12499)
  • 4fc66bc chore(examples): update vulnerable mcp dependency version (#12469)
  • Additional commits viewable in compare view

Updates @ai-sdk/mistral from 1.2.8 to 3.0.20

Release notes

Sourced from @​ai-sdk/mistral's releases.

@​ai-sdk/mistral@​3.0.20

Patch Changes

  • Updated dependencies [4024a3a]
    • @​ai-sdk/provider-utils@​4.0.15

@​ai-sdk/mistral@​2.0.28

Patch Changes

  • Updated dependencies [20565b8]
    • @​ai-sdk/provider-utils@​3.0.21
Commits
  • 7ef42ca Version Packages (#12508)
  • 4024a3a fix/unbounded download dos (#12445)
  • ee508b4 docs(contribting): correct provider method names for v3 spec and clarity (#12...
  • 244bee8 refactor(provider/amazon-bedrock): finish fixture migration for doGenerate te...
  • 17fd267 Version Packages (#12505)
  • 5a307f5 feat(provider/google-vertex): allow using Gemini image models with `generateI...
  • e73beb8 Version Packages (#12500)
  • fdf784f docs: use presentImages in single image generation example that wasn't usin...
  • 924250c Version Packages (#12499)
  • 4fc66bc chore(examples): update vulnerable mcp dependency version (#12469)
  • Additional commits viewable in compare view

Updates @ai-sdk/openai from 1.3.24 to 3.0.28

Release notes

Sourced from @​ai-sdk/openai's releases.

@​ai-sdk/openai@​3.0.28

Patch Changes

  • Updated dependencies [4024a3a]
    • @​ai-sdk/provider-utils@​4.0.15

@​ai-sdk/openai@​2.0.90

Patch Changes

  • Updated dependencies [20565b8]
    • @​ai-sdk/provider-utils@​3.0.21

@​ai-sdk/openai-compatible@​2.0.30

Patch Changes

  • Updated dependencies [4024a3a]
    • @​ai-sdk/provider-utils@​4.0.15
Commits
  • 7ef42ca Version Packages (#12508)
  • 4024a3a fix/unbounded download dos (#12445)
  • ee508b4 docs(contribting): correct provider method names for v3 spec and clarity (#12...
  • 244bee8 refactor(provider/amazon-bedrock): finish fixture migration for doGenerate te...
  • 17fd267 Version Packages (#12505)
  • 5a307f5 feat(provider/google-vertex): allow using Gemini image models with `generateI...
  • e73beb8 Version Packages (#12500)
  • fdf784f docs: use presentImages in single image generation example that wasn't usin...
  • 924250c Version Packages (#12499)
  • 4fc66bc chore(examples): update vulnerable mcp dependency version (#12469)
  • Additional commits viewable in compare view

Updates ai from 4.3.19 to 6.0.85

Release notes

Sourced from ai's releases.

ai@6.0.85

Patch Changes

  • Updated dependencies [e858654]
    • @​ai-sdk/gateway@​3.0.45

ai@6.0.84

Patch Changes

  • 4024a3a: security: prevent unbounded memory growth in download functions

    The download() and downloadBlob() functions now enforce a default 2 GiB size limit when downloading from user-provided URLs. Downloads that exceed this limit are aborted with a DownloadError instead of consuming unbounded memory and crashing the process. The abortSignal parameter is now passed through to fetch() in all download call sites.

    Added download option to transcribe() and experimental_generateVideo() for providing a custom download function. Use the new createDownload({ maxBytes }) factory to configure download size limits.

  • Updated dependencies [4024a3a]

    • @​ai-sdk/provider-utils@​4.0.15
    • @​ai-sdk/gateway@​3.0.44

ai@6.0.83

Patch Changes

  • Updated dependencies [b424e50]
    • @​ai-sdk/gateway@​3.0.43

ai@6.0.82

Patch Changes

  • Updated dependencies [1819bc1]
    • @​ai-sdk/gateway@​3.0.42

ai@5.0.131

Patch Changes

  • Updated dependencies [3f04ffe]
    • @​ai-sdk/gateway@​2.0.37

ai@5.0.130

Patch Changes

  • 20565b8: security: prevent unbounded memory growth in download functions

    The download() and downloadBlob() functions now enforce a default 2 GiB size limit when downloading from user-provided URLs. Downloads that exceed this limit are aborted with a DownloadError instead of consuming unbounded memory and crashing the process. The abortSignal parameter is now passed through to fetch() in all download call sites.

    Added download option to transcribe() and experimental_generateVideo() for providing a custom download function. Use the new createDownload({ maxBytes }) factory to configure download size limits.

  • Updated dependencies [20565b8]

    • @​ai-sdk/provider-utils@​3.0.21
    • @​ai-sdk/gateway@​2.0.36
Commits
  • 0be03a4 Version Packages (#12543)
  • e858654 fix (provider/gateway): image/video error handler (#12506)
  • e5dc2ba refactor(provider/revai): migrate tests to fixture-based pattern (#12528)
  • 03d9b27 refactor(provider/fal): migrate transcription tests to fixture-based pattern ...
  • d695488 refactor(provider/elevenlabs): migrate transcription tests to fixture pattern...
  • bcf4d5d refactor(provider/deepgram): migrate transcription tests to fixture pattern (...
  • 0a72ae4 test(provider/google-vertex): migrate to fixture-based tests (#12497)
  • fabdb4d Version Packages (#12519)
  • 7ccb902 fix(provider/xai): handle inconsistent cached token reporting (#12485)
  • 55c969c refactor(provider/openai): migrate all tests to fixture pattern (#12514)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 13, 2026
Bumps the ai-sdk group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/anthropic](https://github.com/vercel/ai) | `1.2.12` | `3.0.43` |
| [@ai-sdk/google](https://github.com/vercel/ai) | `1.2.22` | `3.0.29` |
| [@ai-sdk/mistral](https://github.com/vercel/ai) | `1.2.8` | `3.0.20` |
| [@ai-sdk/openai](https://github.com/vercel/ai) | `1.3.24` | `3.0.28` |
| [ai](https://github.com/vercel/ai) | `4.3.19` | `6.0.85` |


Updates `@ai-sdk/anthropic` from 1.2.12 to 3.0.43
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/anthropic@1.2.12...@ai-sdk/anthropic@3.0.43)

Updates `@ai-sdk/google` from 1.2.22 to 3.0.29
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/google@1.2.22...@ai-sdk/google@3.0.29)

Updates `@ai-sdk/mistral` from 1.2.8 to 3.0.20
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/mistral@1.2.8...@ai-sdk/mistral@3.0.20)

Updates `@ai-sdk/openai` from 1.3.24 to 3.0.28
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/openai@1.3.24...@ai-sdk/openai@3.0.28)

Updates `ai` from 4.3.19 to 6.0.85
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@4.3.19...ai@6.0.85)

---
updated-dependencies:
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 3.0.43
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ai-sdk
- dependency-name: "@ai-sdk/google"
  dependency-version: 3.0.29
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ai-sdk
- dependency-name: "@ai-sdk/mistral"
  dependency-version: 3.0.20
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ai-sdk
- dependency-name: "@ai-sdk/openai"
  dependency-version: 3.0.28
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ai-sdk
- dependency-name: ai
  dependency-version: 6.0.85
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ai-sdk
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ai-sdk-254d5a6327 branch from 636af61 to 146c26c Compare February 13, 2026 13:24
@dependabot @github

dependabot Bot commented on behalf of github Feb 13, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Feb 13, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/ai-sdk-254d5a6327 branch February 13, 2026 13:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants