Skip to content

chore(deps): bump ai from 7.0.26 to 7.0.40 - #152

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ai-7.0.40
Open

chore(deps): bump ai from 7.0.26 to 7.0.40#152
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ai-7.0.40

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps ai from 7.0.26 to 7.0.40.

Release notes

Sourced from ai's releases.

ai@7.0.40

Patch Changes

  • c3782a6: Deprecate Experimental_GeneratedImage in favor of GeneratedFile.

ai@7.0.39

Patch Changes

  • 09a52cb: Promote the repairText option to stable on generateObject and streamObject, with a deprecated experimental_repairText alias for backwards compatibility.
  • Updated dependencies [0c464d9]
  • Updated dependencies [c49380c]
    • @​ai-sdk/provider-utils@​5.0.14
    • @​ai-sdk/gateway@​4.0.30

ai@7.0.38

Patch Changes

  • 7bd6bdd: Avoid synthesizing client tool errors for invalid provider-executed tool calls.
  • 1e2f324: feat: add experimental speech translation model specification (Experimental_SpeechTranslationModelV4) and experimental_streamTranslate for streaming speech-to-speech translation
  • Updated dependencies [d9d2a11]
  • Updated dependencies [1e2f324]
    • @​ai-sdk/gateway@​4.0.29
    • @​ai-sdk/provider@​4.0.4
    • @​ai-sdk/provider-utils@​5.0.13
Changelog

Sourced from ai's changelog.

7.0.40

Patch Changes

  • c3782a6: Deprecate Experimental_GeneratedImage in favor of GeneratedFile.

7.0.39

Patch Changes

  • 09a52cb: Promote the repairText option to stable on generateObject and streamObject, with a deprecated experimental_repairText alias for backwards compatibility.
  • Updated dependencies [0c464d9]
  • Updated dependencies [c49380c]
    • @​ai-sdk/provider-utils@​5.0.14
    • @​ai-sdk/gateway@​4.0.30

7.0.38

Patch Changes

  • 7bd6bdd: Avoid synthesizing client tool errors for invalid provider-executed tool calls.
  • 1e2f324: feat: add experimental speech translation model specification (Experimental_SpeechTranslationModelV4) and experimental_streamTranslate for streaming speech-to-speech translation
  • Updated dependencies [d9d2a11]
  • Updated dependencies [1e2f324]
    • @​ai-sdk/gateway@​4.0.29
    • @​ai-sdk/provider@​4.0.4
    • @​ai-sdk/provider-utils@​5.0.13

7.0.37

Patch Changes

  • Updated dependencies [0a7c7f4]
    • @​ai-sdk/gateway@​4.0.28

7.0.36

Patch Changes

  • 7fa85b2: fix(ai): use injective serialization for tool approval HMAC payload

    The tool approval signature (experimental_toolApprovalSecret) built its HMAC payload by joining fields with \n. Because fields such as toolName and toolCallId can themselves contain a newline, distinct field tuples could serialize to identical bytes, allowing a signed approval to verify against a different tuple. The payload is now serialized with JSON.stringify (with a versioned domain-separation prefix), which escapes delimiter/control characters and makes the encoding injective.

    Verification remains backwards compatible: a signature in the old format still

... (truncated)

Commits

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ai-7.0.40 branch from a9d4acb to cbc3a70 Compare July 28, 2026 13:20
Bumps [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) from 7.0.26 to 7.0.40.
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.40/packages/ai)

---
updated-dependencies:
- dependency-name: ai
  dependency-version: 7.0.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ai-7.0.40 branch from cbc3a70 to 783ad3f Compare July 28, 2026 13:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants