Skip to content

Bump the npm group with 3 updates - #690

Merged
ilvalerione merged 1 commit into
4.xfrom
dependabot/npm_and_yarn/npm-93e8aa2098
Oct 16, 2026
Merged

Bump the npm group with 3 updates#690
ilvalerione merged 1 commit into
4.xfrom
dependabot/npm_and_yarn/npm-93e8aa2098

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 3 updates: @ai-sdk/react, ai and vite.

Updates @ai-sdk/react from 4.0.136 to 4.0.140

Changelog

Sourced from @​ai-sdk/react's changelog.

4.0.140

Patch Changes

  • Updated dependencies [e27cc64]
    • ai@7.0.137

4.0.139

Patch Changes

  • Updated dependencies [7b5497c]
  • Updated dependencies [b5b0416]
    • ai@7.0.136
    • @​ai-sdk/mcp@​2.0.73

4.0.138

Patch Changes

  • Updated dependencies [5ddbb70]
  • Updated dependencies [7c40a09]
  • Updated dependencies [4dbc902]
  • Updated dependencies [ff18b73]
  • Updated dependencies [9be846c]
    • ai@7.0.135
    • @​ai-sdk/provider@​4.0.26
    • @​ai-sdk/mcp@​2.0.72
    • @​ai-sdk/provider-utils@​5.0.58

4.0.137

Patch Changes

  • Updated dependencies [8281ec4]
  • Updated dependencies [46c2b05]
    • ai@7.0.134
Commits

Updates ai from 7.0.133 to 7.0.137

Changelog

Sourced from ai's changelog.

7.0.137

Patch Changes

  • e27cc64: fix(ai): discard unrelated message state when reading resumed streams

7.0.136

Patch Changes

  • 7b5497c: Fix streaming output timeouts: stop chunkMs and firstChunkMs when the model response ends, so long-running local tools do not trigger model output timeouts. Give each retry fresh output timeout budgets. stepMs continues to cover the complete step, including local tools.
  • Updated dependencies [e280aa1]
    • @​ai-sdk/gateway@​4.0.110

7.0.135

Patch Changes

  • 5ddbb70: fix(ai): prevent duplicate continuation requests for repeated tool approval responses
  • 7c40a09: feat(ai): log warning when default step limit stops a tool loop
  • 4dbc902: feat(ai): add a top level 'dimensions' setting for embeddding functions
  • ff18b73: fix(ai): wait for chat stream cleanup when stopping
  • 9be846c: feat(ai): add a persistent WebSocket chat transport with correlated streaming, serialized backpressure, cancellation, validated protocol frames, explicit lifecycle, and sequence-based resume support
  • Updated dependencies [5cf13d2]
  • Updated dependencies [4dbc902]
  • Updated dependencies [908fd12]
    • @​ai-sdk/gateway@​4.0.109
    • @​ai-sdk/provider@​4.0.26
    • @​ai-sdk/provider-utils@​5.0.58

7.0.134

Patch Changes

  • 8281ec4: fix(ai): propagate async sendAutomaticallyWhen failures from tool updates
  • 46c2b05: fix(ai): preserve provider-executed tool calls when resuming streams
Commits
  • 98fac2b Version Packages (#22428)
  • e27cc64 fix: prevent readUIMessageStream from adopting content from an unrelated assi...
  • e00b1b1 Version Packages (#22348)
  • e280aa1 feat(gateway): send image files in decision state (#22286)
  • 7b5497c fix(ai): clear chunkMs timeout during tool execution (#22341)
  • 50203a8 Version Packages (#22320)
  • 4dbc902 feat(ai): add a top level 'dimensions' setting for embeddding functions (#22335)
  • 9be846c feat: add a persistent WebSocket ChatTransport with correlated streaming, ser...
  • ff18b73 fix: chat.stop() resolving before active stream processing and callback-drive...
  • 7c40a09 feat(ai): log warning when default step limit stops a tool loop (#22329)
  • Additional commits viewable in compare view

Updates vite from 8.3.3 to 8.3.4

Release notes

Sourced from vite's releases.

v8.3.4

Features

  • bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

  • avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
  • build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
  • build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
  • bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
  • client: skip rewriting unchanged adopted styles (#23697) (fa71469)
  • css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
  • deps: update all non-major dependencies (#23648) (8a4c19c)
  • deps: update rolldown-related dependencies (#23649) (794516d)
  • dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
  • don't treat modules ending with js-like query as js (#23687) (fcb6f12)
  • html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
  • html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
  • optimizer: scan deep imports with custom extensions (#23678) (8579189)
  • remove input option unescaping for now (#23694) (facc2fb)
  • server: match static aliases on path boundaries (#23643) (b28db28)
  • watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

  • module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

  • bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)
Changelog

Sourced from vite's changelog.

8.3.4 (2026-10-08)

Features

  • bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

  • avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
  • build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
  • build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
  • bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
  • client: skip rewriting unchanged adopted styles (#23697) (fa71469)
  • css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
  • deps: update all non-major dependencies (#23648) (8a4c19c)
  • deps: update rolldown-related dependencies (#23649) (794516d)
  • dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
  • don't treat modules ending with js-like query as js (#23687) (fcb6f12)
  • html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
  • html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
  • optimizer: scan deep imports with custom extensions (#23678) (8579189)
  • remove input option unescaping for now (#23694) (facc2fb)
  • server: match static aliases on path boundaries (#23643) (b28db28)
  • watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

  • module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

  • bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)
Commits
  • b6c20f6 release: v8.3.4 (#23702)
  • b28db28 fix(server): match static aliases on path boundaries (#23643)
  • bc0f21c feat(bundled-dev): support import.meta.hot.acceptExports (#23463)
  • fa71469 fix(client): skip rewriting unchanged adopted styles (#23697)
  • 2a8c0f0 fix(build): correct preloads when chunkImportMap is enabled with non-root bas...
  • 3a7f2ae fix(html): avoid adding filesystem root to watcher (#23689)
  • facc2fb fix: remove input option unescaping for now (#23694)
  • 70d56ea fix(dev): a restart requested during a restart used to be dropped (fix #23392...
  • cf52011 fix(css): resolve imported preprocessors from their file path with lightningc...
  • fcb6f12 fix: don't treat modules ending with js-like query as js (#23687)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm group with 3 updates
f9a1513 
Bumps the npm group with 3 updates: [@ai-sdk/react](https://github.com/vercel/ai/tree/HEAD/packages/react), [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `@ai-sdk/react` from 4.0.136 to 4.0.140
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/react@4.0.140/packages/react)

Updates `ai` from 7.0.133 to 7.0.137
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.137/packages/ai)

Updates `vite` from 8.3.3 to 8.3.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite)

---
updated-dependencies:
- dependency-name: "@ai-sdk/react"
  dependency-version: 4.0.140
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: ai
  dependency-version: 7.0.137
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vite
  dependency-version: 8.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 14, 2026
@ilvalerione
ilvalerione merged commit 25af0ac into 4.x Oct 16, 2026
13 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-93e8aa2098 branch October 16, 2026 08:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ilvalerione