Skip to content

chore(deps): update dependency ai to v7.0.102 - #8

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ai-7.0.x
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ai-7.0.x

Conversation

@renovate

@renovate renovate Bot commented Sep 18, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Change Age Confidence
ai (source) 7.0.667.0.102 age confidence

Release Notes

vercel/ai (ai)

v7.0.102

Compare Source

Patch Changes
  • 5c0054d: Add optional browser-direct WebRTC for experimental client-delegated Live conversations alongside the existing WebSocket path. Exchange SDP through an application endpoint with api.session, configure server-owned data-channel permissions, and preserve committed React session ownership. Capture follows the selected sender track, borrowed tracks remain caller-owned, and disconnect recovery and finalization stay bounded. Applications continue to handle client delegation and submit context; Live session updates and Responses delegation remain unsupported.

    Serialize microphone sender changes and close the peer if detachment fails, without stopping borrowed tracks. Validate nonempty SDP setup answers with a bounded response body, and document the same-origin broker authentication contract.

  • 39535af: Add experimental OpenAI Live provider support through the unified openai.experimental_realtime factory for server WebSocket sessions with client delegation. Applications own their agents and tools, receive continuous audio/transcript events and delegation metadata, and return context through validated channels. Support immutable startup options, microphone mute controls, graceful session close, and cumulative voice usage. Responses delegation and Live session updates reject before sending.

    Route known Live model IDs to Live, allow an OpenAI-specific api override for early-access models, and preserve legacy Realtime defaults for unknown IDs. Token minting follows the same selection rules and rejects Live before requesting unsupported credentials. Extend the realtime v4 specification with optional server WebSocket configuration, per-connection raw-event parsers, and model-wide startup/finalization capabilities. This provider layer supplies connection settings and protocol mapping for server adapters; browser lifecycle and UI integration belong to the core runtime and framework hooks.

    Preserve Realtime client event IDs for session updates and audio appends, and correlate server errors with the originating client event.

  • 8b92ba9: fix(ai): settle automatically denied tool calls in UI streams

  • 4b306c2: Report abnormal realtime WebSocket close codes and reasons through the session error path.

  • 4b306c2: Add the client-delegation-first realtime WebSocket runtime with session lifecycle, exact final duration, bounded event queues and command acknowledgement tracking, transcripts, context append, and reversible capture. Continuous sessions support PCM16 audio-chunk playback over an application relay with a recoverable live-edge buffer policy. Legacy turn-based WebSockets retain queued playback and frontend tool handling.

    Remove the deferred managed Responses coordinator, autoContinueTools option, backend usage state, and Live tool-result aliases. Continuous text and delegation handling belong to the application; sendTextMessage and addToolOutput reject continuous sessions. Server-confirmed provider delegation and turn-based audio-delta on the continuous profile fail explicitly. maxPlaybackBufferSeconds is supported only for continuous PCM sessions.

    Fence callbacks, startup publications, tool results, and teardown by connection attempt. Validate token setup before opening a client-secret socket, require explicit relay transport mode, and include WebSocket URL, protocol values, and runtime timeouts/buffer settings in React session configuration keys.

    Retain immediate local capture for explicit legacy preconnect streams, including owned-track cleanup and capture continuity through asynchronous setup. Signal transport closing before draining accepted terminal events, share reentrant close settlement, and cancel stale readiness and deadlines. Enforce 128 KiB frame and combined buffered-send budgets only for Live continuous sessions, using actual encoded wire bytes; oversized manual operations remain recoverable while startup and automatic audio failures close the session. Legacy startup, text, tool output, and audio retain their pre-Live behavior without these byte caps. Live pending-audio overflow drains accepted terminal usage within the existing one-second drain window. Validate final provider-transformed WebSocket URL syntax without removing native authentication query parameters.

  • Updated dependencies [5c0054d]

  • Updated dependencies [39535af]

v7.0.101

Compare Source

Patch Changes
  • 6aa7c54: fix(ai): serialize tool output JSON values

v7.0.100

Compare Source

Patch Changes

v7.0.99

Compare Source

Patch Changes

v7.0.98

Compare Source

Patch Changes

v7.0.97

Compare Source

Patch Changes

v7.0.96

Compare Source

Patch Changes

v7.0.95

Compare Source

Patch Changes
  • 27f6d7a: fix(ai): reject embedding model responses that contain no embeddings

v7.0.94

Compare Source

Patch Changes

v7.0.93

Compare Source

Patch Changes
  • df6c009: fix(ai): use new message ID when replacing a message in sendMessage
  • 6ee74a3: fix(ai): preserve tool part titles when validating UI messages
  • f13d371: fix(ai): preserve provider metadata when converting failed tool calls
  • d4485fe: feat(ai): support minItems and maxItems in array outputs
  • 4f201cc: chore(ai): formally include already supported onLanguageModelCallStart and onLanguageModelCallEnd in ToolLoopAgentSettings type
  • 8cdb2a7: fix(ai): decode text data URLs in Node.js
  • 0f2281e: fix(ai): reject embedding responses whose count does not match the input values
  • fc8e8ac: fix(ai): preserve image call diagnostics when no image is generated
  • ee8391e: fix(ai): support abort signals when the global AbortSignal is not a constructor
  • Updated dependencies [3cfc1fc]

v7.0.92

Compare Source

Patch Changes
  • a51cc94: fix(ai): preserve provider metadata from empty smooth stream deltas
  • d1904d3: fix(ai): surface fallback errors for empty HTTP response bodies
  • 84e5a79: fix(ai): skip smoothStream delays while the document is hidden
  • a8e8ad0: fix(ai): expose call ID and abort reason in streamText onAbort callbacks
  • Updated dependencies [a7e324b]

v7.0.91

Compare Source

Patch Changes
  • 802af1e: Add configurable recovery for provider errors received after streamText response streaming begins. Explicitly configuring streamRetries enables isolated retry attempts, including one bounded callback-directed recovery through StreamTextOnErrorRetryCallback with streamRetries: 0; recovered results and metadata reflect only the successful attempt, while the existing StreamTextOnErrorCallback contract and logging-only observer behavior remain compatible.
  • Updated dependencies [5484f27]
  • Updated dependencies [36eb7ee]
  • Updated dependencies [622fa7f]

v7.0.90

Compare Source

Patch Changes

v7.0.89

Compare Source

Patch Changes
  • 5190b67: feat(provider): extend the FilesV4 interface with optional getFileMetadata, downloadFile (streaming), and deleteFile operations, plus abortSignal/headers call options and a { type: 'stream' } upload data variant; upload results now expose byteSize, createdAt, and expiresAt (also surfaced by the core uploadFile() helper, which now forwards abortSignal/headers); add postMultipartStreamToApi (streaming multipart uploads with deterministic part ordering and failure-path stream teardown), deleteFromApi, and createBinaryStreamResponseHandler to provider-utils
  • Updated dependencies [5190b67]

v7.0.88

Compare Source

Patch Changes
  • 8b6b756: fix(ai): prevent generateText from accepting responses that violate required tool choices
  • e07b577: feat: add tool calling support to batch

v7.0.87

Compare Source

Patch Changes
  • 850d863: fix(ai): preserve approval descriptors in UI message streams

v7.0.86

Compare Source

Patch Changes

v7.0.85

Compare Source

Patch Changes
  • 55a9981: Ensure canonical hashes preserve undefined array element positions.
  • dd32de2: fix(ai): sum Gateway image-generation costs across split requests
  • aa45741: fix(provider/anthropic): preserve native message batch request counts in provider metadata and support the full language-model option surface in batch requests
  • cc29073: feat(ai): expose individual image generation calls
  • Updated dependencies [d2507af]
  • Updated dependencies [aa45741]

v7.0.84

Compare Source

Patch Changes

v7.0.83

Compare Source

Patch Changes
  • 8dd86a9: Validate persisted typed tool calls against current input and output schemas.
    Schema-incompatible empty or error inputs and terminal history from unavailable
    tools remain loadable as dynamic tool parts instead of exposing unvalidated
    values under current static tool types.
  • fda13b3: Allow chats to continue automatically after tool approval denials reach the output-denied state.
  • 957146c: add operation-level outcomes to UI message stream end callbacks
  • ce6849a: fix(ai): handle stitchable stream cancellation before an inner stream is registered

v7.0.82

Compare Source

Patch Changes
  • 3e125ba: Allow manual tool approval statuses to include a reason and preserve it across
    core, model, and UI approval requests. OPA requires-approval decisions now
    surface their reason to human approvers. UI request chunks serialize the
    optional reason, while UI messages retain it as approval.requestReason
    separately from an approver's response reason.
  • Updated dependencies [0e7994c]
  • Updated dependencies [3e125ba]

v7.0.79

Compare Source

Patch Changes
  • b251584: Preserve active text and reasoning parts when another merged UI message stream finishes a step, and align workflow stream normalization with the explicit part end chunks.
  • 591d25b: feat: add batch completion webhooks. experimental_startTextBatch accepts a webhookUrl, and the gateway provider registers it through the batch callbackUrl contract and exports typed async-job metadata. Direct Anthropic and OpenAI batch providers return an unsupported warning when the option is provided.
  • 9de0baf: Parse structured generateText output when providers omit finishReason but return text.
  • Updated dependencies [591d25b]

v7.0.78

Compare Source

Patch Changes
  • 96970bb: Continue approved generateText, streamText, and WorkflowAgent turns with a model-visible tool error when revalidated tool input is invalid.
  • Updated dependencies [e12e068]

v7.0.77

Compare Source

Patch Changes

v7.0.76

Compare Source

Patch Changes
  • c6d57f3: fix(ai): prevent duplicate text and reasoning part ids
  • 677a707: fix(ai): allow nullish metadata schemas for UI messages with branded IDs

v7.0.74

Compare Source

Patch Changes

v7.0.73

Patch Changes

v7.0.71

Patch Changes
  • 9a37469: Prevent exceptions in streaming onChunk and onError callbacks from terminating the stream or masking provider errors.
  • Updated dependencies [936719b]

v7.0.70

Patch Changes
  • 9566914: Stop multi-step text generation for client tool approval even when a provider-executed tool has a deferred result.
  • b181020: fix: reject streamObject result promises and report failed completion when the provider stream errors
  • 7054073: Filter preliminary tool outputs when ignoreIncompleteToolCalls is enabled.
  • a828527: Prevent automatic tool execution when a model call ends with an unsafe finish reason.
  • d3cc3fe: Clear partial UI message parts when a WorkflowAgent model-call step is retried.
  • Updated dependencies [e6087c9]

v7.0.69

Patch Changes

v7.0.68

Patch Changes

v7.0.67

Patch Changes

Configuration

📅 Schedule: (in timezone Europe/Warsaw)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@coldtea-pr-lens

coldtea-pr-lens Bot commented Sep 18, 2026

Copy link
Copy Markdown

◈ PR Lens

🟢 +0 new · 🟠 ~1 changed · 🔴 -0 removed · 0 flows · 3 files · commit 8ed69e0


Architecture

Architecture diagram for agntn/urls at 8ed69e0

1 component touched across 3 lanes.

Open the interactive canvas


Data flow

No data-flow sequence changed in this PR.


View

  • Architecture lens
  • Data flow lens
  • Expand every detail

Tip

Add .github/workflows/pr-lens.yml with coldteadotai/pr-lens/packages/action@v0 and your model provider's key as its api-key to run PR Lens from your own CI. Any /chat/completions endpoint works.

🪧 More tips
  • Run npx skills add coldteadotai/pr-lens, then tell your coding agent: "Diagram the change you just made with PR Lens and attach it to the pull request."
  • Run npx @coldtea/pr-lens-cli analyze --base origin/main on a branch, then npx @coldtea/pr-lens-cli render .pr-lens/graph.json. Same lenses, your own model key, before the pull request exists.
  • Untick Architecture lens or Data flow lens under View to hide a diagram, or tick Expand every detail to open every section. The comment redraws in a few seconds.
  • Click the link under each diagram to open it on a canvas you can zoom, pan and step through.
  • The diagrams are links. Click one to open it on the canvas, then press W or click play to walk through the change.
  • Open a diagram on the canvas, then press W or click play to walk through the change one step at a time.
  • The CLI's render reads .github/pr-lens.yml and applies your renames, exclusions and lane pins at draw time.
  • Set github.comment.collapsed: true in .github/pr-lens.yml to fold the comment behind one View architecture and data flow row. Drawing still runs on every push.
  • Push a commit and the comment redraws for the new head. A slow older run never overwrites a newer one.
  • Switch GitHub to dark mode and the diagrams follow. The moving dots are this pull request's data in motion.

Thanks for using PR Lens! It's built by Coldtea, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

@coderabbitai

coderabbitai Bot commented Sep 18, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: QUIET

Plan: Advanced

Run ID: 6f66b2e8-e621-40c3-b7fe-691746fbacb2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@renovate
renovate Bot force-pushed the renovate/ai-7.0.x branch 2 times, most recently from b17ab17 to 8ed69e0 Compare September 19, 2026 09:15
@renovate
renovate Bot force-pushed the renovate/ai-7.0.x branch from 8ed69e0 to f252ede Compare September 19, 2026 17:59
@macroscopeapp

macroscopeapp Bot commented Sep 19, 2026

Copy link
Copy Markdown

Approvability

Verdict: Approved at f252ede

Macroscope's review found this PR approvable — This is a narrowly scoped automated dependency update confined to ignored dependency metadata, with no source, workflow, security-sensitive, or deployment changes in scope. Its impact is limited to dependency resolution during installation and builds.

Notes:

  • No code objects were reviewed. Approvability was decided on eligibility alone.

You can add or adjust custom eligibility rules. Learn more.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants