From 0334f43a7214117f6c76843cbf3987ba9b291735 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 22 Jul 2026 15:48:52 +0000 Subject: [PATCH 1/4] Bump js-yaml from 5.2.0 to 5.2.1 Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.2.0 to 5.2.1. - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/5.2.0...5.2.1) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.2.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- package-lock.json | 8 ++++---- package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index 0c983a663..edbb8274c 100644 --- a/package-lock.json +++ b/package-lock.json @@ -183,7 +183,7 @@ "ip-range-check": "0.2.0", "is-base64": "1.1.0", "isolated-vm": "6.1.2", - "js-yaml": "5.2.0", + "js-yaml": "5.2.1", "jsdom": "23.2.0", "json-server": "1.0.0-beta.15", "json-to-pretty-yaml": "1.2.2", @@ -39291,9 +39291,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "5.2.0", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.0.tgz", - "integrity": "sha512-YeLUMlvR4Ou1B119LIaM0r65JvbOBooJDc9yEu0dClb/uSC5P4FrLU8OCCz/HXWvtPoIrR0dRzABTjo1sTN9Bw==", + "version": "5.2.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.1.tgz", + "integrity": "sha512-zfLtNfQqxVqq3uaTqSkh4x4hZw3KHobGUA0fJUj4wawW8bsQLTVqpHdXSIzidh7o+4lEW36tANuAGdaFx6Zgnw==", "funding": [ { "type": "github", diff --git a/package.json b/package.json index c9b7ce558..b9b13be02 100644 --- a/package.json +++ b/package.json @@ -207,7 +207,7 @@ "ip-range-check": "0.2.0", "is-base64": "1.1.0", "isolated-vm": "6.1.2", - "js-yaml": "5.2.0", + "js-yaml": "5.2.1", "jsdom": "23.2.0", "json-server": "1.0.0-beta.15", "json-to-pretty-yaml": "1.2.2", From e6d815f913254fd65ac7d98a73279e3996ea13fe Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 22 Jul 2026 15:51:06 +0000 Subject: [PATCH 2/4] Update THIRD_PARTY_LICENSES.txt --- THIRD_PARTY_LICENSES.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/THIRD_PARTY_LICENSES.txt b/THIRD_PARTY_LICENSES.txt index 92888dcee..d1d41d319 100644 --- a/THIRD_PARTY_LICENSES.txt +++ b/THIRD_PARTY_LICENSES.txt @@ -6082,7 +6082,7 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. The following npm package may be included in this product: - - js-yaml@5.2.0 + - js-yaml@5.2.1 This package contains the following license: From 1813cf5dcbc87e51a5066247adcfc6aa4ad9c19f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marcelo=20Gon=C3=A7alves?= Date: Thu, 23 Jul 2026 08:44:17 +0100 Subject: [PATCH 3/4] Run npm audit fix --- package-lock.json | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/package-lock.json b/package-lock.json index 9f9bae43e..490b1ba8c 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1008,9 +1008,9 @@ } }, "node_modules/@assistant-ui/react-ai-sdk/node_modules/@ai-sdk/gateway": { - "version": "2.0.117", - "resolved": "https://registry.npmjs.org/@ai-sdk/gateway/-/gateway-2.0.117.tgz", - "integrity": "sha512-OubKzzPrWqodgrlZRsldskPno7MFvHnYZAxp+Sm7os1adQ2+VdfxEz4Kjowm6PJUmhHv8EyEAKM8NQX3YtDsig==", + "version": "2.0.118", + "resolved": "https://registry.npmjs.org/@ai-sdk/gateway/-/gateway-2.0.118.tgz", + "integrity": "sha512-9MZXPd1wiELUvAfHXdotmCp2tt6NWoT6OACkRvK1xQy9DG7XeOZ9ZPqFmCqcu5DcmN92BGpA/GtmilrOM+hVJQ==", "license": "Apache-2.0", "dependencies": { "@ai-sdk/provider": "2.0.3", @@ -1054,13 +1054,13 @@ } }, "node_modules/@assistant-ui/react-ai-sdk/node_modules/@ai-sdk/react": { - "version": "2.0.220", - "resolved": "https://registry.npmjs.org/@ai-sdk/react/-/react-2.0.220.tgz", - "integrity": "sha512-N9SVy3nHh3jqjpjKtbdgOUX5HnbWndRJI1UPod5bQcWbe6r8u1fW2Xmfwtff0WT6VNwSK9jxqk/KZNw0Yw0mwQ==", + "version": "2.0.221", + "resolved": "https://registry.npmjs.org/@ai-sdk/react/-/react-2.0.221.tgz", + "integrity": "sha512-g3O7b732jmiRkTqX7HA0sYKiV2W5T31LImXeZrb7CrrD4v8sPc6h4AOw2hA1NC2PXZ6R14oB/Rjiy6T5BiHADQ==", "license": "Apache-2.0", "dependencies": { "@ai-sdk/provider-utils": "3.0.30", - "ai": "5.0.218", + "ai": "5.0.219", "swr": "^2.2.5", "throttleit": "2.1.0" }, @@ -1096,12 +1096,12 @@ } }, "node_modules/@assistant-ui/react-ai-sdk/node_modules/ai": { - "version": "5.0.218", - "resolved": "https://registry.npmjs.org/ai/-/ai-5.0.218.tgz", - "integrity": "sha512-h8rPBtp24iPybJpaadpu9/R6TyXqzxXYZj/r7HfMoCgNJn+0TxSBgDjSUjVVxDyS2wOyOtEJBdadsM19N59hYQ==", + "version": "5.0.219", + "resolved": "https://registry.npmjs.org/ai/-/ai-5.0.219.tgz", + "integrity": "sha512-bFjV5roRz/CqcSuFR+cfOU35O/7Z9U/2y5DyMIJUx6igkAdIMJ3HWNh+tOf9Gsrqiqbbjs7YMMidHi2HsW2PMg==", "license": "Apache-2.0", "dependencies": { - "@ai-sdk/gateway": "2.0.117", + "@ai-sdk/gateway": "2.0.118", "@ai-sdk/provider": "2.0.3", "@ai-sdk/provider-utils": "3.0.30", "@opentelemetry/api": "1.9.0" From a57beaa871c4bf3294c5227a4e69cbaff745ed69 Mon Sep 17 00:00:00 2001 From: MarceloRGonc <14873578+MarceloRGonc@users.noreply.github.com> Date: Thu, 23 Jul 2026 07:53:02 +0000 Subject: [PATCH 4/4] Update THIRD_PARTY_LICENSES.txt --- THIRD_PARTY_LICENSES.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/THIRD_PARTY_LICENSES.txt b/THIRD_PARTY_LICENSES.txt index 4f6682416..d7d8e83e4 100644 --- a/THIRD_PARTY_LICENSES.txt +++ b/THIRD_PARTY_LICENSES.txt @@ -19508,7 +19508,7 @@ The following npm packages may be included in this product: - @ai-sdk/cohere@3.0.39 - @ai-sdk/deepinfra@2.0.55 - @ai-sdk/deepseek@2.0.39 - - @ai-sdk/gateway@2.0.117 + - @ai-sdk/gateway@2.0.118 - @ai-sdk/gateway@3.0.132 - @ai-sdk/gateway@3.0.133 - @ai-sdk/google-vertex@3.0.142 @@ -19525,11 +19525,11 @@ The following npm packages may be included in this product: - @ai-sdk/provider-utils@3.0.30 - @ai-sdk/provider@2.0.3 - @ai-sdk/provider@3.0.10 - - @ai-sdk/react@2.0.220 + - @ai-sdk/react@2.0.221 - @ai-sdk/react@3.0.210 - @ai-sdk/togetherai@2.0.56 - @ai-sdk/xai@3.0.96 - - ai@5.0.218 + - ai@5.0.219 - ai@6.0.206 - ai@6.0.208