Skip to content

build(deps): bump ai from 7.0.34 to 7.0.48 - #81

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/ai-7.0.48
Closed

build(deps): bump ai from 7.0.34 to 7.0.48#81
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/ai-7.0.48

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor

Bumps ai from 7.0.34 to 7.0.48.

Changelog

Sourced from ai's changelog.

7.0.48

Patch Changes

  • Updated dependencies [bdd5e28]
    • @​ai-sdk/gateway@​4.0.37

7.0.47

Patch Changes

  • Updated dependencies [5fc7da5]
  • Updated dependencies [93b2acd]
    • @​ai-sdk/provider-utils@​5.0.18
    • @​ai-sdk/gateway@​4.0.36

7.0.46

Patch Changes

  • Updated dependencies [4f2e064]
    • @​ai-sdk/gateway@​4.0.35

7.0.45

Patch Changes

  • d6ce0ee: feat(ai): support experimental_toolCallers in streamText
  • fa95504: feat(ai): support experimental tool callers in ToolLoopAgent
  • 349afe7: Warn when generateText receives streaming-only firstChunkMs or chunkMs timeout settings.
  • Updated dependencies [fa95504]
    • @​ai-sdk/provider-utils@​5.0.17
    • @​ai-sdk/gateway@​4.0.34

7.0.44

Patch Changes

  • 015acb4: fix telemetry attribution for language model calls that resolve to a different response model

7.0.43

Patch Changes

  • b192878: feat: add experimental_toolCaller routing to generateText for code mode
  • Updated dependencies [d8210b6]
  • Updated dependencies [af3f400]
  • Updated dependencies [b192878]
    • @​ai-sdk/provider-utils@​5.0.16
    • @​ai-sdk/gateway@​4.0.33

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.


Summary by cubic

Upgrade ai from 7.0.34 to 7.0.48 to pick up experimental tool-caller support, a telemetry fix, and warnings for streaming-only timeout options in generateText. Transitive updates to @ai-sdk/gateway, @ai-sdk/provider-utils, and @ai-sdk/provider (plus undici) are reflected in bun.lock; no app code changes.

Written for commit 1896d00. Summary will update on new commits.

Review in cubic

Bumps [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) from 7.0.34 to 7.0.48.
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.48/packages/ai)

---
updated-dependencies:
- dependency-name: ai
  dependency-version: 7.0.48
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 5, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedai@​7.0.34 ⏵ 7.0.4899 +1310010099100

View full report

ualtinok added a commit that referenced this pull request Aug 10, 2026
TypeScript 7.0.2, Biome 2.5.6, @opencode-ai/plugin 1.18.11, ai 7.0.48,
and jdx/mise-action 4.2.4. Supersedes #66, #71, #76, #79, and #81, which
each carried the same lockfile and could not land independently.

TypeScript 7.0.2 is now the stable release rather than the prerelease
that was previously declined. The only TypeScript peer range left in the
tree belongs to bun-ffi-structs, a transitive dependency of @opentui/core
that pins ^5 and is already unsatisfied today with no observable effect.

Also replaces the fixed 50ms sleeps in the account-add tests with polling
on the observable effect. The completion runs detached and performs
lock-based file I/O, so its duration tracks machine load; the fixed tick
failed once under contention during this batch. The two tests asserting
that an add is REJECTED keep a sleep, since an absence has no effect to
poll for, and use a longer one.
@dependabot @github

dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like ai is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 10, 2026
@dependabot
dependabot Bot deleted the dependabot/bun/ai-7.0.48 branch August 10, 2026 21:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants