Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 5 updates#52

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-cd7eec3ec2
Open

chore(deps): bump the production-dependencies group across 1 directory with 5 updates#52
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/production-dependencies-cd7eec3ec2

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 29, 2026

Bumps the production-dependencies group with 5 updates in the / directory:

Package From To
@ai-sdk/anthropic 2.0.77 3.0.76
@ai-sdk/google 2.0.70 3.0.71
@ai-sdk/openai 2.0.103 3.0.63
ai 5.0.179 6.0.177
protobufjs 8.0.1 8.0.3

Updates @ai-sdk/anthropic from 2.0.77 to 3.0.76

Release notes

Sourced from @​ai-sdk/anthropic's releases.

@​ai-sdk/google@​3.0.71

Patch Changes

  • 59530cf: fix(google): emit Vertex no-args streaming tool calls and preserve thoughtSignature

    Vertex emits a no-args function call as a single chunk shaped { functionCall: { name: 'X' } } with no args, no partialArgs, and no willContinue. The streaming parser had no branch for this shape, so the call was dropped along with any thoughtSignature it carried. For Gemini 3 thinking models this caused the next multi-turn step to 400 with missing thought_signature. The unary (doGenerate) path had the same drop.

    Both paths now emit the call as a complete tool call with '{}' input and propagate thoughtSignature provider metadata.

    Fixes #14847.

@​ai-sdk/rsc@​3.0.0-canary.131

Patch Changes

  • ai@7.0.0-canary.130

@​ai-sdk/langchain@​3.0.0-canary.130

Patch Changes

  • ai@7.0.0-canary.130

@​ai-sdk/llamaindex@​3.0.0-canary.130

Patch Changes

  • ai@7.0.0-canary.130

@​ai-sdk/rsc@​3.0.0-canary.129

Patch Changes

  • Updated dependencies [d848405]
    • @​ai-sdk/provider-utils@​5.0.0-canary.37
    • ai@7.0.0-canary.128

@​ai-sdk/langchain@​3.0.0-canary.128

Patch Changes

  • ai@7.0.0-canary.128

@​ai-sdk/llamaindex@​3.0.0-canary.128

Patch Changes

  • ai@7.0.0-canary.128

@​ai-sdk/rsc@​3.0.0-canary.128

Patch Changes

  • Updated dependencies [e95e38d]
  • Updated dependencies [016e877]
  • Updated dependencies [ca99fea]
  • Updated dependencies [ca39020]

... (truncated)

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

3.0.76

Patch Changes

  • Updated dependencies [f591416]
    • @​ai-sdk/provider-utils@​4.0.27

3.0.75

Patch Changes

  • 3f06680: Remove stale effort-2025-11-24 beta header — the extended thinking effort parameter is GA and no longer requires the beta flag. Vertex AI's strict validator was actively rejecting requests with this header.

3.0.74

Patch Changes

  • Updated dependencies [7beadf0]
    • @​ai-sdk/provider-utils@​4.0.26

3.0.73

Patch Changes

  • f8c9ae4: feat(anthropic): sanitize the unsupported JSON schema validation properties
  • a727da4: chore: ensure consistent import handling and avoid import duplicates or cycles
  • Updated dependencies [a727da4]
    • @​ai-sdk/provider-utils@​4.0.25
    • @​ai-sdk/provider@​3.0.10

3.0.72

Patch Changes

  • a7f3c72: trigger release for all packages after provenance setup
  • Updated dependencies [a7f3c72]
    • @​ai-sdk/provider@​3.0.9
    • @​ai-sdk/provider-utils@​4.0.24

3.0.71

Patch Changes

  • 95b4fe0: fix(provider/anthropic): stop adding fine-grained-tool-streaming-2025-05-14 beta for claude-opus-4-7

3.0.70

Patch Changes

  • 2ff8d57: feat(provider/anthropic): add support for Opus 4.7 and relevant API enhancements

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/anthropic since your current version.


Updates @ai-sdk/google from 2.0.70 to 3.0.71

Release notes

Sourced from @​ai-sdk/google's releases.

@​ai-sdk/google@​3.0.71

Patch Changes

  • 59530cf: fix(google): emit Vertex no-args streaming tool calls and preserve thoughtSignature

    Vertex emits a no-args function call as a single chunk shaped { functionCall: { name: 'X' } } with no args, no partialArgs, and no willContinue. The streaming parser had no branch for this shape, so the call was dropped along with any thoughtSignature it carried. For Gemini 3 thinking models this caused the next multi-turn step to 400 with missing thought_signature. The unary (doGenerate) path had the same drop.

    Both paths now emit the call as a complete tool call with '{}' input and propagate thoughtSignature provider metadata.

    Fixes #14847.

Changelog

Sourced from @​ai-sdk/google's changelog.

3.0.71

Patch Changes

  • 59530cf: fix(google): emit Vertex no-args streaming tool calls and preserve thoughtSignature

    Vertex emits a no-args function call as a single chunk shaped { functionCall: { name: 'X' } } with no args, no partialArgs, and no willContinue. The streaming parser had no branch for this shape, so the call was dropped along with any thoughtSignature it carried. For Gemini 3 thinking models this caused the next multi-turn step to 400 with missing thought_signature. The unary (doGenerate) path had the same drop.

    Both paths now emit the call as a complete tool call with '{}' input and propagate thoughtSignature provider metadata.

    Fixes #14847.

3.0.70

Patch Changes

  • 4f3f564: fix(provider/google): fix lack of image consistency when using Interactions API in stateless mode

3.0.69

Patch Changes

  • bb377ba: fix(google): omit passing includeServerSideToolInvocations for Vertex tool_config
  • Updated dependencies [f591416]
    • @​ai-sdk/provider-utils@​4.0.27

3.0.68

Patch Changes

  • e0f8c9e: feat(provider/google): add support for the Gemini Interactions API

3.0.67

Patch Changes

  • Updated dependencies [7beadf0]
    • @​ai-sdk/provider-utils@​4.0.26

3.0.66

Patch Changes

  • a727da4: chore: ensure consistent import handling and avoid import duplicates or cycles
  • Updated dependencies [a727da4]
    • @​ai-sdk/provider-utils@​4.0.25
    • @​ai-sdk/provider@​3.0.10

3.0.65

... (truncated)

Commits
  • e70aab9 Version Packages (#15138)
  • 59530cf Backport: fix(google): emit no-args streaming tool calls and preserve thought...
  • 0288286 Version Packages (#15105)
  • e3ccdb5 Version Packages (#15094)
  • 4f3f564 Backport: fix(provider/google): fix lack of image consistency when using Inte...
  • bb377ba Backport: fix(google): omit passing includeServerSideToolInvocations for Vert...
  • 3a6aef7 Version Packages (#15072)
  • e0f8c9e Backport: feat(provider/google): add support for the Gemini Interactions API ...
  • 8a46a3c Version Packages (#14875)
  • 8e650ab Version Packages (#14824)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/google since your current version.


Updates @ai-sdk/openai from 2.0.103 to 3.0.63

Release notes

Sourced from @​ai-sdk/openai's releases.

@​ai-sdk/openai-compatible@​3.0.0-canary.44

Patch Changes

  • Updated dependencies [d848405]
    • @​ai-sdk/provider-utils@​5.0.0-canary.37

@​ai-sdk/openai-compatible@​3.0.0-canary.43

Patch Changes

  • Updated dependencies [ca39020]
    • @​ai-sdk/provider-utils@​5.0.0-canary.36
Changelog

Sourced from @​ai-sdk/openai's changelog.

3.0.63

Patch Changes

  • Updated dependencies [f591416]
    • @​ai-sdk/provider-utils@​4.0.27

3.0.62

Patch Changes

  • 65edcca: feat: add allowedTools provider option for OpenAI Responses

3.0.61

Patch Changes

  • b93f9b4: feat(provider/openai): forward imageDetail providerOptions on tool-result image content

3.0.60

Patch Changes

  • 6dcd8e6: feat(openai): add GPT-5.5 chat model IDs

3.0.59

Patch Changes

  • 38966ab: fix(openai, openai-compatible): only send null content for assistant messages with tool calls

3.0.58

Patch Changes

  • 2370948: feat(openai): preserve namespace on function_call output items

3.0.57

Patch Changes

  • d33e7cc: chore(provider/openai): add type for image model options for type-safe processing

3.0.56

Patch Changes

  • Updated dependencies [7beadf0]
    • @​ai-sdk/provider-utils@​4.0.26

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/openai since your current version.


Updates ai from 5.0.179 to 6.0.177

Release notes

Sourced from ai's releases.

ai@6.0.177

Patch Changes

  • Updated dependencies [5c73af8]
    • @​ai-sdk/gateway@​3.0.112

ai@5.0.186

Patch Changes

  • Updated dependencies [c261259]
    • @​ai-sdk/gateway@​2.0.88
Changelog

Sourced from ai's changelog.

6.0.177

Patch Changes

  • Updated dependencies [5c73af8]
    • @​ai-sdk/gateway@​3.0.112

6.0.176

Patch Changes

  • f591416: feat(ai): add toolMetadata for tool specific metdata
  • Updated dependencies [f591416]
    • @​ai-sdk/provider-utils@​4.0.27
    • @​ai-sdk/gateway@​3.0.111

6.0.175

Patch Changes

  • Updated dependencies [9a88b1d]
    • @​ai-sdk/gateway@​3.0.110

6.0.174

Patch Changes

  • Updated dependencies [49f6d44]
    • @​ai-sdk/gateway@​3.0.109

6.0.173

Patch Changes

  • 7beadf0: feat(mcp): propagate the server name through dynamic tool parts
  • Updated dependencies [7beadf0]
    • @​ai-sdk/provider-utils@​4.0.26
    • @​ai-sdk/gateway@​3.0.108

6.0.172

Patch Changes

  • Updated dependencies [982af78]
    • @​ai-sdk/gateway@​3.0.107

6.0.171

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ai since your current version.


Updates protobufjs from 8.0.1 to 8.0.3

Release notes

Sourced from protobufjs's releases.

protobufjs: v8.0.3

8.0.3 (2026-04-27)

Bug Fixes

protobufjs: v8.0.2

8.0.2 (2026-04-27)

Bug Fixes

Changelog

Sourced from protobufjs's changelog.

8.0.3 (2026-04-27)

Bug Fixes

8.0.2 (2026-04-27)

Bug Fixes

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 29, 2026
@dependabot dependabot Bot requested a review from yasserstudio as a code owner April 29, 2026 08:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 29, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 29, 2026

Bundle Size Report

Package dist size
@gpc-cli/cli 3.4M
@gpc-cli/core 1.1M
@gpc-cli/api 344K
@gpc-cli/auth 44K
@gpc-cli/config 44K

Largest CLI ESM chunk: 40K

Sizes are uncompressed. Published npm tarballs are ~30-40% smaller.

@socket-security
Copy link
Copy Markdown

socket-security Bot commented Apr 29, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​ai-sdk/​google@​2.0.70 ⏵ 3.0.7172 -1610088 +498 +1100
Updated@​ai-sdk/​openai@​2.0.103 ⏵ 3.0.6373 +210088 +398100
Updated@​ai-sdk/​anthropic@​2.0.77 ⏵ 3.0.7680 +310088 +398 +1100
Updatedprotobufjs@​8.0.1 ⏵ 8.0.393 +110010097100
Updatedai@​5.0.179 ⏵ 6.0.177100 +910010099 +1100

View full report

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-cd7eec3ec2 branch 2 times, most recently from 4a2f9f1 to a3a499c Compare April 30, 2026 14:27
…y with 5 updates

Bumps the production-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic) | `2.0.77` | `3.0.76` |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `2.0.70` | `3.0.71` |
| [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `2.0.103` | `3.0.63` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `5.0.179` | `6.0.177` |
| [protobufjs](https://github.com/protobufjs/protobuf.js) | `8.0.1` | `8.0.3` |



Updates `@ai-sdk/anthropic` from 2.0.77 to 3.0.76
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/anthropic@3.0.76/packages/anthropic/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/anthropic@3.0.76/packages/anthropic)

Updates `@ai-sdk/google` from 2.0.70 to 3.0.71
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/google@3.0.71/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@3.0.71/packages/google)

Updates `@ai-sdk/openai` from 2.0.103 to 3.0.63
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@3.0.63/packages/openai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@3.0.63/packages/openai)

Updates `ai` from 5.0.179 to 6.0.177
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@6.0.177/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@6.0.177/packages/ai)

Updates `protobufjs` from 8.0.1 to 8.0.3
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md)
- [Commits](protobufjs/protobuf.js@protobufjs-v8.0.1...protobufjs-v8.0.3)

---
updated-dependencies:
- dependency-name: "@ai-sdk/anthropic"
  dependency-version: 3.0.72
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@ai-sdk/google"
  dependency-version: 3.0.65
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@ai-sdk/openai"
  dependency-version: 3.0.54
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: ai
  dependency-version: 6.0.169
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: protobufjs
  dependency-version: 8.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-cd7eec3ec2 branch from a3a499c to 3d1e5c4 Compare May 8, 2026 21:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants