Skip to content

chore: bump @ai-sdk/provider-utils from 4.0.2 to 4.0.61 - #3218

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ai-sdk/provider-utils-4.0.61
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ai-sdk/provider-utils-4.0.61

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor

Bumps @ai-sdk/provider-utils from 4.0.2 to 4.0.61.

Changelog

Sourced from @​ai-sdk/provider-utils's changelog.

4.0.61

Patch Changes

  • 5aa3086: feat(openai-compatible): support URL-based image responses

    Add opt-in URL validation and credential origin handling to getFromApi for URL-based image responses. Validate redirect targets, strip unsafe request headers, and drop credentials on cross-origin redirects while preserving existing unvalidated requests.

4.0.60

Patch Changes

  • Updated dependencies [739e9f6]
    • @​ai-sdk/provider@​3.0.19

4.0.59

Patch Changes

  • d5e7d82: fix(provider-utils): keep case-sensitive url paths and query values

4.0.58

Patch Changes

  • 604b4d3: docs(provider-utils): clarify how ToolApprovalResponse.reason is handled for approved and denied tool calls

4.0.57

Patch Changes

  • a9cea74: Keep default Node.js downloads protected by DNS validation and connection pinning when frameworks or instrumentation wrap global fetch before or after the SDK loads.
  • a9cea74: fix(mcp): prevent SSRF in OAuth metadata discovery
  • a9cea74: fix(provider-utils): make lazy Undici import visible to deployment tracers

4.0.56

Patch Changes

  • 29dc427: fix(provider-utils): preserve streamed tool calls with unreliable IDs and indices

4.0.55

Patch Changes

  • 3983fea: fix(provider): preserve media types on tool result file URLs and match full MIME types exactly when checking native URL support.
  • Updated dependencies [3983fea]
    • @​ai-sdk/provider@​3.0.18

4.0.54

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/provider-utils since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@ai-sdk/provider-utils](https://github.com/vercel/ai/tree/HEAD/packages/provider-utils) from 4.0.2 to 4.0.61.
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/provider-utils@4.0.61/packages/provider-utils/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/provider-utils@4.0.61/packages/provider-utils)

---
updated-dependencies:
- dependency-name: "@ai-sdk/provider-utils"
  dependency-version: 4.0.61
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Oct 20, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
blocknote Error Error Oct 20, 2026 5:17pm UTC
blocknote-website Error Error Oct 20, 2026 5:17pm UTC

Request Review

@dependabot dependabot Bot added the npm dependencies Bumps dependencies label Oct 20, 2026
@coderabbitai

coderabbitai Bot commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: eb08ee2a-a896-49ee-ad3d-8fce40ea435e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #3222.

@dependabot dependabot Bot closed this Oct 21, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/ai-sdk/provider-utils-4.0.61 branch October 21, 2026 07:32
@github-actions

Copy link
Copy Markdown
PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-10-21 07:32 UTC

This branch had an error being deployed

2 failed deployments
Preview – blocknote — 8594ea94 Deployed Oct 20, 2026 by vercel[bot]
Preview – blocknote-website — 8594ea94 Deployed Oct 20, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

npm dependencies Bumps dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants