Skip to content

chore(deps): update patch dependencies (patch) - #134

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/patch-patch-dependencies
Open

chore(deps): update patch dependencies (patch)#134
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/patch-patch-dependencies

Conversation

@renovate

@renovate renovate Bot commented Nov 9, 2026

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@modelcontextprotocol/sdk (source) 1.32.1 → 1.32.2 age confidence
@nuxt/content (source) 3.16.1 → 3.16.2 age confidence
ai (source) 7.0.127 → 7.0.163 age confidence
h3 2.0.1 → 2.0.8 age confidence
nuxt (source) 4.6.3 → 4.6.4 age confidence
obuild 0.4.43 → 0.4.45 age confidence
typebox 1.4.3 → 1.4.4 age confidence
wrangler (source) 4.156.0 → 4.156.2 age confidence
zod (source) 4.6.5 → 4.6.7 age confidence

Release Notes

modelcontextprotocol/typescript-sdk (@​modelcontextprotocol/sdk)

v1.32.2

Compare Source

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@1.32.1...1.32.2

nuxt/content (@​nuxt/content)

v3.16.2

Compare Source

Bug Fixes
Performance Improvements
vercel/ai (ai)

v7.0.163

Compare Source

Patch Changes

  • 5d18351: fix(ai): detect downloaded audio types from bytes when servers return a generic or non-audio content type such as application/octet-stream

  • 8da48db: Respect recordInputs and recordOutputs when delivering telemetry events to integrations and the ai:telemetry channel. Filter nested content and omit raw span results when content recording is disabled, while preserving application results.

  • fd7e8a7: Preserve the order of text and complete function calls in streamed Google responses, including standalone thought signatures on empty text or reasoning parts.

    Keep provider metadata on empty text parts when converting results to response messages so it can be passed back in subsequent requests.

    Omit foreign-provider empty signature text when replaying history through Anthropic or Bedrock, preserving Bedrock’s existing native reasoning-history handling.

  • 36802d4: Support native URL transcription with an optional provider capability, keeping existing file-generation contracts unchanged. Groq sends HTTP(S) audio URLs through its url parameter without downloading and re-uploading them, avoiding the attachment upload limit. Supplying a custom download function retains local download behavior.

    For telemetry integrations, TranscriptionEndEvent.audio.byteLength and audio.mediaType can now be undefined when a provider fetches the audio URL natively. Check for missing values before using them as a number or string. Downloaded and inline audio continue to report their metadata; streaming transcription metadata is unchanged.

    Strip media fragments before sending URLs to Groq. If Groq rejects a redirect, fall back to the existing secure local downloader and file upload rather than failing previously working URL inputs. Other provider errors are preserved.

  • 933dae3: fix (ai): download deprecated file-url and image-url tool result content

    Tool result content parts that use the deprecated file-url and image-url
    types were converted to file parts with { type: 'url' } data, but they were
    never passed to the download function. When the model does not support the URL,
    the provider received a bare URL instead of the file contents, even though the
    replacement file part with { type: 'url' } data was downloaded and inlined.

    Downloaded legacy URL parts now use the same media type normalization as file
    parts, resolving generic types from the response header or image bytes.
    Legacy base64 data URLs also normalize to inline data with the media type from
    their data URL, matching replacement file parts.

  • e0143b0: feat(ai): support provider-owned realtime transports

    Add an optional createTransport interface and provider connection capability.

  • 934100c: Report the actual OpenAI Chat HTTP endpoint (also used by Azure Chat and Bedrock Mantle Chat) through optional request metadata and model-call end events. Record its host and port on OpenTelemetry chat spans without exposing URL credentials, paths, queries, or fragments. Expose only the sanitized HTTP origin in text and object generation results and step/finish callbacks. Providers that do not report an endpoint leave these attributes unset.

  • c389374: fix(ai): infer union output types when passing a union of schemas to Output.object and Output.array

    Previously, passing a schema whose type is a union of schemas (e.g. a schema selected from a map at runtime) failed to type-check because the output type was inferred from the first union member only. The output type is now inferred as the union of the schemas' output types.

  • 892af4d: feat (ai): re-export realtime server-connection and usage types

    Adds Experimental_RealtimeServerConnection, Experimental_RealtimeSessionIntent, and Experimental_RealtimeUsage aliases for the new experimental RealtimeModelV4 server-side spec types.

  • 1a1da8d: stream steering messages to the ui and keep them in converted messages

  • 41465fd: Expose optional transcription word timings separately from segments and accept shared timestampGranularities. Explicit provider timing settings take precedence. OpenAI now sends timestamp_granularities only with verbose_json and warns when a requested timing is unavailable or excluded.

  • 9754014: Add typed streaming heartbeat parts. Anthropic emits them only with includePings: true (disabled by default), without requiring raw chunks. Core forwards pings through stream retries without storing them as generated content or sending them to UI message streams. Consumers with exhaustive stream-part switches must handle the new ping union variant when upgrading, even when the opt-in is disabled. Typed pings do not flush partial words during stream smoothing.

  • 2e44144: Represent videos delivered directly to caller-managed storage with an explicit uploaded outcome. Video generation reports uploadedVideos without downloading or synthesizing video bytes; access video only when videos is nonempty.

  • Updated dependencies [722d4a9]

  • Updated dependencies [acea2b5]

  • Updated dependencies [89aff56]

  • Updated dependencies [41465fd]

  • Updated dependencies [2e44144]

  • Updated dependencies [36802d4]

  • Updated dependencies [ef2dfb5]

  • Updated dependencies [e0143b0]

  • Updated dependencies [934100c]

  • Updated dependencies [892af4d]

  • Updated dependencies [892af4d]

  • Updated dependencies [89aff56]

  • Updated dependencies [32acf43]

  • Updated dependencies [41465fd]

  • Updated dependencies [9754014]

  • Updated dependencies [4bb73b0]

  • Updated dependencies [2e44144]

v7.0.162

Compare Source

Patch Changes
  • 857ca45: Restore server-defined tool metadata, dynamic status, and title when validating tool approval continuations so approval policies receive the same tool definition fields as new model calls.
  • 4d6d830: Support a single telemetry operation for durable WorkflowAgent runs, including the prompt, final output, steps, and tools. Events recorded in the workflow are reported on completion or suspension with their original timestamps. For OpenTelemetry, pass the same OpenTelemetryIdGenerator instance as the tracer provider's idGenerator and sampler and as new OpenTelemetry({ durable }). This explicit bridge carries parent trace context and sampling across steps, reports model spans live with provider requests nested beneath them, and reconstructs the enclosing invoke_agent tree when the run completes. Without the bridge, existing live per-model tracing is preserved. Add typed experimental durable context hooks for telemetry integrations; remove reliance on process-global ID-generator detection.
  • Updated dependencies [fa15312]

v7.0.161

Compare Source

Patch Changes
  • 51ca5b7: fix(ai): support cross-realm Uint8Array and ArrayBuffer in DefaultGeneratedFile
  • 51ca5b7: fix(ai): handle cross-realm Uint8Array and ArrayBuffer in data-content and file-part-data
  • 51ca5b7: fix(ai): support cross-realm binary buffers and circular structures in cloneModelMessages
  • Updated dependencies [51ca5b7]
  • Updated dependencies [dc6f1c3]
  • Updated dependencies [4ae6986]

v7.0.160

Compare Source

Patch Changes

  • a71172d: fix(ai): clarify inverted smoothStream prefix error message

  • cf27969: add steering.queue() to send a message once the current task is done

  • 17b6923: fix(ai): validate streamed data parts against dataPartSchemas

    processUIMessageStream looked up dataPartSchemas by the full chunk type (data-weather) instead of the bare part name (weather), so useChat / Chat never validated streamed data parts. Invalid data parts now raise a TypeValidationError.

  • Updated dependencies [2099d45]

  • Updated dependencies [d05ff62]

v7.0.159

Compare Source

Patch Changes

v7.0.158

Compare Source

Patch Changes

  • 8ba3a5c: fix(ai): repair partial JSON that ends with a minus sign at the start of an array

  • 5c247e9: feat(sandbox): add stat, listDirectory, and deleteFile to Experimental_SandboxSession, and specify that relative paths in every method resolve against the directory run and spawn start in

    The just-bash and Vercel Sandbox adapters implement the new methods. Both now resolve a relative workingDirectory for run and spawn against the sandbox's working directory, and the just-bash adapter rejects writes to a directory instead of replacing it with a file.

  • Updated dependencies [7716e18]

  • Updated dependencies [f850782]

  • Updated dependencies [5c247e9]

  • Updated dependencies [dcd2f8d]

v7.0.157

Compare Source

Patch Changes
  • 0cc4921: graduate LanguageModelStreamPart to stable and deprecate Experimental_LanguageModelStreamPart
  • 077cfb3: feat(ai): Graduate filterActiveTools from experimental. It is now exported as filterActiveTools; experimental_filterActiveTools remains as a deprecated alias.
  • eb768e2: Fix Next.js Edge Runtime warnings from Node.js runtime detection used by telemetry tracing.
  • Updated dependencies [9ca8bcf]
  • Updated dependencies [61a315e]

v7.0.156

Compare Source

Patch Changes

v7.0.155

Compare Source

Patch Changes

  • b6b9dca: chore(ai): remove runtime validation of inputs that TypeScript types already guarantee

    streamText, generateText, generateObject and streamObject no longer validate messages against the ModelMessage schema. This removes a cost that grew linearly with message history and was paid on every streamText step. Type checks on call settings, steering messages, tool caller configuration, smoothStream chunking, experimental_streamSpeech text input, the shape of decide state and questions, and the batch reference version have also been removed. Value constraints that types cannot express, such as integer ranges, non-empty collections, unknown keys, and non-finite numbers or cycles in decide JSON input, are still validated.

  • Updated dependencies [57086ff]

  • Updated dependencies [01d7a03]

  • Updated dependencies [95348b3]

v7.0.154

Compare Source

Patch Changes
  • 47236dd: add onStepError callback to generateText, streamText, ToolLoopAgent and telemetry integrations, and onError and onAbort to ToolLoopAgent
  • c8e8866: Add aiVersion to telemetry events so tracing-channel subscribers and telemetry integrations can identify the emitting ai package version, including in bundled applications and applications with multiple SDK versions.
  • 1cf95c6: add experimental steering to generateText, streamText and ToolLoopAgent
  • Updated dependencies [e64ed82]

v7.0.153

Compare Source

Patch Changes
  • 5475347: Fix non-streaming Responses API structured output failing when multiple assistant messages contain JSON. Providers can supply separate structured-output text for parsing, allowing OpenAI and Azure Responses models to select the last final_answer while preserving all generated content, annotations, conversation history, and token usage.
  • Updated dependencies [5475347]
  • Updated dependencies [e729d58]

v7.0.152

Compare Source

Patch Changes

v7.0.151

Compare Source

Patch Changes

v7.0.150

Compare Source

Patch Changes

  • 8e18d59: feat(ai): add experimental_streamSpeech

    Streams speech audio from a string, or an array, iterable, or stream of text deltas and/or text parts (each with an optional voice and providerOptions) using speech models that implement the experimental Experimental_StreamingSpeechModelV4 extension. Returns a single-consumer audioStream / fullStream plus usage, warnings, responses, and providerMetadata promises. Provider error parts are non-fatal and reported through onError (default console.error). A user abort or a cancel rejects the result promises immediately. Exports the Experimental_SpeechTextPart, Experimental_SpeechStreamPart, Experimental_SpeechStreamUsage, and Experimental_StreamSpeechResult types, adds an optional cause to NoSpeechGeneratedError, and adds Experimental_MockStreamingSpeechModelV4 to ai/test.

  • Updated dependencies [8202f5b]

  • Updated dependencies [85d84a1]

v7.0.149

Compare Source

Patch Changes

  • 1727442: fix(ai): process only the first approval response per tool call, so repeated or conflicting responses in the final tool message no longer execute a tool twice or both execute and deny it

  • 0a5d0e7: Fix toolChoice: 'none' by forwarding it to the Hugging Face Responses API and rejecting tool calls before local execution in generateText, streamText, and WorkflowAgent. Streamed tool parts are withheld so client-side tools cannot act on them, and repairToolCall and experimental_refineToolInput are not invoked for rejected tool calls.

  • 10026d1: Add the interrupted finish reason for provider streams that end without a completion signal. Preserve partial output without introducing an error solely for interruption, and stop tool execution, agent continuation, and automatic UI follow-ups for interrupted responses, including late tool results and approvals. Provider detection and emission will be added separately.

    Compatibility notice: Adding interrupted to the public finish-reason types can break type checking after upgrading, even though this is a patch release. Exhaustive switches (for example, using an assertNever fallback) and mappings such as Record<FinishReason, string> must handle the new value. Update any custom validation or application logic that assumes the existing set of finish reasons is exhaustive.

    When providers begin emitting interrupted, a stream ending without a completion signal will preserve partial output and report this finish reason without emitting an error solely for the interruption. Applications that need to detect incomplete responses should check finishReason === 'interrupted' as well as their existing error handling.

  • Updated dependencies [101ce42]

  • Updated dependencies [e104368]

  • Updated dependencies [eb1f056]

  • Updated dependencies [10026d1]

  • Updated dependencies [5893e99]

v7.0.148

Compare Source

Patch Changes

v7.0.147

Compare Source

Patch Changes

v7.0.146

Compare Source

Patch Changes
  • 0c2a9de: Add maxOutputTokens and reasoning to experimental decision calls and forward them to language-model-backed decisions. Language-model adapters keep reasoning disabled when omitted. Native decision providers warn when either setting is unsupported.
  • 3785b2e: fix(ai): remove orphaned reasoning, including consecutive summary and reasoning-file parts, when pruning tool calls
  • ab8eb61: Fix optional tools adding an incorrect undefined member to tool call, result, error, denied output, and execution event types.
  • Updated dependencies [9d13c4d]
  • Updated dependencies [0c2a9de]
  • Updated dependencies [200c47f]

v7.0.145

Compare Source

Patch Changes

v7.0.144

Compare Source

Patch Changes
  • 60cc252: feat(perplexity): add decisions api support
  • 0ed59e2: Fix streamText return types for reusable options and ReturnType by moving low-memory streaming to experimental_streamTextLowMemory. Replace experimental streamText({ experimental_lowMemory: true, ...options }) calls with experimental_streamTextLowMemory(options).
  • Updated dependencies [60cc252]
  • Updated dependencies [6b7fb8f]

v7.0.143

Compare Source

Patch Changes
  • 8a5233b: Generate default chat IDs on first access so useChat() can prerender without reading a random value when the ID is not used during rendering.
  • 894e130: fix(ai): add experimental_lowMemory: true to streamText for single-consumer streaming without a replay buffer or retained final-content results, reducing memory retention.
  • 0957554: Add box decision question type with image bounds for TypeSafe AI.
  • Updated dependencies [0957554]

v7.0.142

Compare Source

Patch Changes
  • 130e871: Restore raw OpenAI custom-tool input deltas for consumers that forward them to Responses API clients. Mark streamed input with inputEncoding: 'text' so UI clients can display it progressively without JSON parsing. Preserve the encoding when partial UI messages are saved and resumed. Final provider tool-call inputs remain JSON-encoded.
  • Updated dependencies [130e871]
  • Updated dependencies [5bdb816]

v7.0.141

Compare Source

Patch Changes

v7.0.140

Compare Source

Patch Changes

v7.0.139

Compare Source

Patch Changes

v7.0.138

Patch Changes

  • eab278a: fix: resume interrupted chat streams when the page becomes visible again

    useChat with resume: true no longer starts a second resume request on mount when the chat is already submitted or streaming, e.g. when remounting with a shared Chat instance mid-stream.

  • 26d64e9: fix(ai): update tool outputs in the message containing the matching tool call

  • 75b3ea2: fix(ai): prevent duplicate message parts when resuming replayed streams

  • 69f4b82: fix(ai): prevent global type conflicts across SDK versions

  • e57803c: Add an optional shared citation representation to generated text and text-end stream events, separate from retrieved sources. Preserve citations in core result content and UI message text parts, including validation and persistence, without changing content or stream event discriminants.

  • 4c705d9: Fix validation of rounded choice probabilities in experimental_decide.

  • 5150d50: fix(ai): update streaming chat messages by stable ID

  • 9aef724: fix(workflow): report incomplete no-output model streams as errors

  • 7d0458b: fix(ai): reject approved tool calls without results before sending later context to providers

  • Updated dependencies [9667bf2]

  • Updated dependencies [e57803c]

  • Updated dependencies [81663cc]

v7.0.137

Patch Changes
  • e27cc64: fix(ai): discard unrelated message state when reading resumed streams

v7.0.136

Patch Changes
  • 7b5497c: Fix streaming output timeouts: stop chunkMs and firstChunkMs when the model response ends, so long-running local tools do not trigger model output timeouts. Give each retry fresh output timeout budgets. stepMs continues to cover the complete step, including local tools.
  • Updated dependencies [e280aa1]

v7.0.135

Patch Changes
  • 5ddbb70: fix(ai): prevent duplicate continuation requests for repeated tool approval responses
  • 7c40a09: feat(ai): log warning when default step limit stops a tool loop
  • 4dbc902: feat(ai): add a top level 'dimensions' setting for embeddding functions
  • ff18b73: fix(ai): wait for chat stream cleanup when stopping
  • 9be846c: feat(ai): add a persistent WebSocket chat transport with correlated streaming, serialized backpressure, cancellation, validated protocol frames, explicit lifecycle, and sequence-based resume support
  • Updated dependencies [5cf13d2]
  • Updated dependencies [4dbc902]
  • Updated dependencies [908fd12]

v7.0.134

Patch Changes
  • 8281ec4: fix(ai): propagate async sendAutomaticallyWhen failures from tool updates
  • 46c2b05: fix(ai): preserve provider-executed tool calls when resuming streams

v7.0.133

Patch Changes

  • 9184a35: Add ordered text, file, and JSON parts to experimental decision state. Support image input in OpenAI Decisions and language model adapters. Gateway retains its existing string and JSON request format and rejects files, as does TypeSafe AI.

    Arrays passed directly as state now contain decision state parts. Wrap JSON arrays in an object or a json part.

    Normalize all public state forms into an array of parts before calling decision providers. Providers receive text and JSON objects as text and json parts.

    Serialize decision file bytes as base64 in OpenTelemetry state attributes. Model-call spans record normalized state parts, while outer spans retain public state inputs.

    Preserve native JSON state in TypeSafe AI when state contains one JSON part. Label shared state in language-model decision prompts.

  • Updated dependencies [9184a35]

v7.0.132

Patch Changes
  • 3ebefff: feat(ai): introduce 'onUIMessageStepEnd' callback to persist messages

v7.0.131

Patch Changes

v7.0.130

Compare Source

Patch Changes

v7.0.129

Compare Source

Patch Changes

  • e37d213: feat(ai): emit deprecation warnings with stable codes and deduplicate them

  • 73d8343: fix(ai): preserve V2 provider-reported total tokens in raw usage

  • 268225c: feat(provider): add a portable max reasoning level with native provider mappings, compatibility coercions, and budget-based fallback support.

    Compatibility notes:

    • TypeScript source compatibility: Adding max widens LanguageModelV4CallOptions['reasoning'] and the derived ReasoningLevel type. Third-party providers and consumers with exhaustive switches or Record<ReasoningLevel, ...> mappings must handle max before upgrading. Ordinary calls using existing reasoning levels remain accepted.
    • Amazon Bedrock: Existing Nova 2 calls using portable reasoning: 'xhigh' now send maxReasoningEffort: 'high' instead of the unsupported 'max', and return a compatibility warning. Anthropic and OpenAI Bedrock effort mappings retain their existing xhigh behavior. Partial Bedrock reasoning configurations continue to preserve explicit values and derive missing fields; explicit effort/budget overrides and disabled thinking no longer emit warnings for portable mappings that are not sent.
    • Fireworks: Existing portable minimal and xhigh calls keep their request mappings to low and high, respectively, and now return compatibility warnings in generation and streaming results. Portable max maps to high with the same warning behavior.

    Release classification: This remains a patch changeset under

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Warsaw)

  • Branch creation
    • "before 6am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Nov 9, 2026
@renovate
renovate Bot requested a review from oritwoen as a code owner November 9, 2026 00:24
@renovate

renovate Bot commented Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml
Error: ERR_PNPM_UNUSED_PATCH

  × installing dependencies
  ╰─▶ The following patches were not used: rolldown-plugin-dts@0.28.6
  help: Either remove them from "patchedDependencies" or update them to match
        packages in your dependencies.

@coldtea-pr-lens

coldtea-pr-lens Bot commented Nov 9, 2026

Copy link
Copy Markdown

Note

renovate[bot] opened this pull request, so PR Lens left it undrawn. Comment @pr-lens draw to draw it

github.comment.notice: false in .github/pr-lens.yml turns this note off

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@oritwoen oritwoen Awaiting requested review from oritwoen oritwoen is a code owner

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants