Skip to content

Update all dependencies#136

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all
Open

Update all dependencies#136
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 27, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@t3-oss/env-nextjs (source) 0.13.80.13.11 age confidence
ai (source) ^5.0.0^6.0.0 age confidence
autoprefixer 10.4.2210.4.27 age confidence
bun-types (source) 1.3.41.3.12 age confidence
eslint-config-next (source) 16.0.716.2.3 age confidence
geist (source) 1.5.11.7.0 age confidence
postcss (source) 8.5.68.5.9 age confidence
react-syntax-highlighter 16.1.016.1.1 age confidence
tailwind-merge 3.4.03.5.0 age confidence
typescript (source) 5.9.36.0.2 age confidence
zod (source) 4.1.134.3.6 age confidence

Release Notes

t3-oss/t3-env (@​t3-oss/env-nextjs)

v0.13.11

Compare Source

Patch Changes

v0.13.10

Compare Source

Patch Changes

v0.13.9

Compare Source

Patch Changes
vercel/ai (ai)

v6.0.158

Compare Source

Patch Changes
  • 295beba: fix(ai): fix lastAssistantMessageIsCompleteWithApprovalResponses to no longer ignore providerExecuted tool approvals

v6.0.157

Compare Source

Patch Changes
  • ff11aee: fix(ai): fix providerExecuted tool approvals being passed to language model twice

v6.0.156

Compare Source

Patch Changes

v6.0.155

Compare Source

Patch Changes
  • 06764c5: fix(ai): skip passing invalid JSON inputs to response messages

v6.0.154

Compare Source

Patch Changes

v6.0.153

Compare Source

Patch Changes
  • f152133: feat (ai/core): support plain string model IDs in rerank() function

    The rerank() function now accepts plain model strings (e.g., 'cohere/rerank-v3.5') in addition to RerankingModel objects, matching the behavior of generateText, embed, and other core functions.

v6.0.152

Compare Source

Patch Changes
  • d42076d: Add AI Gateway hint to provider READMEs

v6.0.151

Compare Source

Patch Changes

v6.0.150

Compare Source

Patch Changes

v6.0.149

Compare Source

Patch Changes

v6.0.148

Compare Source

Patch Changes

v6.0.147

Compare Source

Patch Changes

v6.0.146

Compare Source

Patch Changes

v6.0.145

Compare Source

Patch Changes

v6.0.144

Compare Source

Patch Changes

v6.0.143

Compare Source

Patch Changes

v6.0.142

Compare Source

Patch Changes

v6.0.141

Compare Source

Patch Changes

v6.0.140

Compare Source

Patch Changes

v6.0.139

Compare Source

Patch Changes

v6.0.138

Compare Source

Patch Changes

v6.0.137

Compare Source

Patch Changes

v6.0.136

Compare Source

Patch Changes

v6.0.135

Compare Source

Patch Changes
  • df6a330: chore(ai): remove all experimental agent events

v6.0.134

Compare Source

Patch Changes
  • ed6876b: chore(ai): remove all experimental embed events

v6.0.133

Compare Source

Patch Changes

v6.0.132

Compare Source

Patch Changes

v6.0.131

Compare Source

Patch Changes
  • 14f25f9: feat(ai): introduce experimental callbacks for embed function

v6.0.130

Compare Source

Patch Changes

v6.0.129

Compare Source

Patch Changes

v6.0.128

Compare Source

Patch Changes

v6.0.127

Compare Source

Patch Changes

v6.0.126

Compare Source

Patch Changes
  • 578615a: Remove custom User-Agent header from HttpChatTransport to fix CORS preflight failures in Safari and Firefox

v6.0.125

Compare Source

Patch Changes

v6.0.124

Patch Changes

v6.0.122

Compare Source

Patch Changes

v6.0.121

Compare Source

Patch Changes

v6.0.120

Compare Source

Patch Changes
  • 78c0e26: feat(ai): pass result provider metadata across the stream

v6.0.119

Patch Changes
  • ab286f1: fix(ai): doStream should reflect transformed values
  • d68b122: feat(ai): add missing usage attributes

v6.0.118

Patch Changes
  • 64ac0fd: fix(security): validate redirect targets in download functions to prevent SSRF bypass

    Both downloadBlob and download now validate the final URL after following HTTP redirects, preventing attackers from bypassing SSRF protections via open redirects to internal/private addresses.

  • Updated dependencies [64ac0fd]

v6.0.117

Patch Changes

v6.0.116

Patch Changes

v6.0.115

Patch Changes

v6.0.114

Compare Source

Patch Changes
  • 2291047: fix(ai): fix missing support for image thought signatures (e.g. for Gemini image models)

v6.0.113

Compare Source

Patch Changes
  • 70d3980: fix(ai): use errorMode 'text' in approval continuation to preserve tool error messages

v6.0.112

Compare Source

Patch Changes

v6.0.111

Compare Source

Patch Changes
  • 2129c82: feat(ai): register global telemetry integrations

v6.0.110

Compare Source

Patch Changes

v6.0.109

Compare Source

Patch Changes

v6.0.108

Compare Source

Patch Changes
  • 2a4f512: feat(ai): add telemetry interface and registry

v6.0.107

Compare Source

Patch Changes

v6.0.106

Compare Source

Patch Changes

v6.0.105

Compare Source

Patch Changes

v6.0.104

Compare Source

Patch Changes

v6.0.103

Compare Source

Patch Changes

v6.0.102

Compare Source

Patch Changes

v6.0.101

Compare Source

Patch Changes
  • 5230482: fix(ai): Don't create duplicate tool parts when models call non-existent tools

v6.0.100

Compare Source

Patch Changes
  • b7fba77: feat(ai): add event notifiers to core functions

v6.0.99

Compare Source

Patch Changes

v6.0.98

Compare Source

Patch Changes

v6.0.97

Compare Source

Patch Changes
  • ebfdad1: feat(ai): experimental callbacks in ToolLoopAgent

v6.0.96

Compare Source

Patch Changes
  • 30c9de6: feat(ai): experimental callbacks for streamText

v6.0.95

Compare Source

Patch Changes

v6.0.94

Compare Source

Patch Changes

v6.0.93

Compare Source

Patch Changes
  • d3769ec: feat(ai): add experimental callbacks in generateText

v6.0.92

Compare Source

Patch Changes

v6.0.91

Compare Source

Patch Changes

v6.0.90

Patch Changes
  • 98e83ab: Fix useChat status briefly flashing to submitted on page load when resume: true is set and there is no active stream to resume. The reconnectToStream check is now performed before setting status to submitted, so status stays ready when the server responds with 204 (no active stream).

v6.0.89

Patch Changes

v6.0.88

Patch Changes

v6.0.87

Compare Source

Patch Changes

v6.0.86

Compare Source

Patch Changes

v6.0.85

Compare Source

Patch Changes

v6.0.84

Compare Source

Patch Changes
  • 4024a3a: security: prevent unbounded memory growth in download functions

    The download() and downloadBlob() functions now enforce a default 2 GiB size limit when downloading from user-provided URLs. Downloads that exceed this limit are aborted with a DownloadError instead of consuming unbounded memory and crashing the process. The abortSignal parameter is now passed through to fetch() in all download call sites.

    Added download option to transcribe() and experimental_generateVideo() for providing a custom download function. Use the new createDownload({ maxBytes }) factory to configure download size limits.

  • Updated dependencies [4024a3a]

v6.0.83

Compare Source

Patch Changes

v6.0.82

Compare Source

Patch Changes

v6.0.81

Compare Source

Patch Changes
  • ee4beee: feat(ai): add onStepFinish callback to createUIMessageStream

v6.0.80

Compare Source

Patch Changes

v6.0.79

Compare Source

Patch Changes

v6.0.78

Compare Source

Patch Changes
  • 59fcf30: fix(ai): make experimental_context required in ToolLoopAgentOnFinishCallback

    This fixes a type inconsistency where ToolLoopAgentOnFinishCallback had experimental_context as optional while StreamTextOnFinishCallback and GenerateTextOnFinishCallback had it as required. Since ToolLoopAgent delegates to streamText/generateText, and both always pass experimental_context when invoking the callback, the types should match.

v6.0.77

Compare Source

Patch Changes

v6.0.76

Compare Source

Patch Changes

v6.0.75

Compare Source

Patch Changes

v6.0.74

Compare Source

Patch Changes
  • 471009b: fix(ai): pass reasoning text in telemetry

v6.0.73

Compare Source

Patch Changes

v6.0.72

Compare Source

Patch Changes

v6.0.71

Compare Source

Patch Changes

v6.0.70

Compare Source

Patch Changes

v6.0.69

Compare Source

Patch Changes
  • d659305: fix(ai): auto-populate originalMessages in createAgentUIStream

v6.0.68

Compare Source

Patch Changes
  • 8bf2660: chore(ai): export DefaultGeneratedFile

v6.0.67

Compare Source

Patch Changes

v6.0.66

Compare Source

Patch Changes

v6.0.65

Compare Source

Patch Changes

v6.0.64

Compare Source

Patch Changes
  • ce9daa3: Fixed 'reasoning part reasoning-0 not found' error by ensuring 'reasoning-start' event is emitted for empty thinking blocks (eg. )

v6.0.63

Compare Source

Patch Changes
  • be95579: fix(ui): respect Promise<false> when returned by sendAutomaticallyWhen

v6.0.62

Compare Source

Patch Changes

v6.0.61

Compare Source

Patch Changes

v6.0.60

Compare Source

Patch Changes
  • 5fc42fa: feat(ai): add experimental retention setting

v6.0.59

Compare Source

Patch Changes

v6.0.58

Compare Source

Patch Changes

v6.0.57

Compare Source

Patch Changes
  • 65865d8: Fix handling of error results in deferrable tools

v6.0.56

Compare Source

Patch Changes

v6.0.55

Compare Source

Patch Changes
  • 43a74df: chore(ai): add skill to README

v6.0.54

Compare Source

Patch Changes
  • 2f8ac87: docs(ai): fix incorrect and outdated jsdoc

v6.0.53

Compare Source

Patch Changes

v6.0.52

Compare Source

Patch Changes

v6.0.51

Compare Source

Patch Changes
  • ea0feb5: fix(ai): clean up step timeout when error occurs in streamText

v6.0.50

Compare Source

Patch Changes

v6.0.49

Compare Source

Patch Changes
  • ded661b: feat(ai): add onStepFinish to agent.generate and agent.stream

v6.0.48

Compare Source

Patch Changes

v6.0.47

Compare Source

Patch Changes

v6.0.46

Compare Source

v6.0.45

Compare Source

Patch Changes

v6.0.44

Compare Source

Patch Changes

v6.0.43

Compare Source

Patch Changes
  • 2dc9bfa: fix(ai): handle provider-executed tools and tool-approval-response in validation

    • Skip validation for tool calls with providerExecuted: true (deferred results)
    • Map approvalId to toolCallId for proper tool-approval-response handling
    • Filter out empty tool messages after content filtering
    • Fixes MissingToolResultError for async and approval-based tool flows

v6.0.42

Compare Source

Patch Changes

v6.0.41

Compare Source

Patch Changes

v6.0.40

Compare Source

Patch Changes
  • ab57783: Add usage information to onFinish callback in useChat

v6.0.39

Compare Source

Patch Changes
  • 4e28ba0: fix(ai): propagate providerMetadata during input-streaming state

    Provider-executed tools (like MCP tools) need to send metadata during the streaming phase, but the implementation only set callProviderMetadata when part.state === "input-available". This fix removes the overly-restrictive state check and adds callProviderMetadata to the input-streaming state types and schemas.

v6.0.38

Compare Source

Patch Changes

v6.0.37

Compare Source

Patch Changes
  • b5dab9b: fix(ai): maintain OpenTelemetry context across async generator yields

    Fixes an issue where OpenTelemetry context was lost at async generator yield boundaries, causing nested ToolLoopAgent spans to escape to the parent agent's level in observability platforms.

    The fix ensures that when recordSpan is used with async generators (e.g., in tool execution), the active context is explicitly maintained using context.with(), preventing span hierarchy corruption in nested agent scenarios.

    Closes #​11720

v6.0.36

Compare Source

Patch Changes

v6.0.35

Compare Source

Patch Changes
  • d7e7f1f: Add descriptive error messages for malformed UIMessageStream chunks.

v6.0.34

Compare Source

Patch Changes

v6.0.33

Compare Source

Patch Changes
  • 0ca078c: fix(ai): pass providerMetadata in smooth stream to p

Configuration

📅 Schedule: (in timezone Asia/Manila)

  • Branch creation
    • "before 2am"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/all branch 9 times, most recently from b372a82 to 6ac13be Compare April 6, 2026 17:28
@renovate renovate bot force-pushed the renovate/all branch 9 times, most recently from ef1e6ad to bdf6fa0 Compare April 10, 2026 17:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants