Skip to content

chore(deps): update dependency ai to v5.0.190 - #1056

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ai-5.x
Open

chore(deps): update dependency ai to v5.0.190#1056
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ai-5.x

Conversation

@renovate

@renovaterenovateBot commented Jan 6, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

PackageTypeUpdateChangeOpenSSF
ai (source)dependenciespatch5.0.1175.0.190OpenSSF Scorecard

Release Notes

vercel/ai (ai)

v5.0.190

Compare Source

Patch Changes

v5.0.188

Compare Source

Patch Changes
  • 1760d76: fix URL of hero animation in README

v5.0.187

Compare Source

Patch Changes

v5.0.186

Compare Source

Patch Changes

v5.0.185

Compare Source

Patch Changes

v5.0.184

Compare Source

Patch Changes
  • cb911d2: fix(ai): add allowSystemInMessages option and warn by default when system messages are found in prompt or messages

v5.0.183

Compare Source

Patch Changes

v5.0.182

Compare Source

Patch Changes

v5.0.181

Compare Source

Patch Changes

v5.0.180

Compare Source

Patch Changes

v5.0.179

Compare Source

Patch Changes
  • 5543cd1: Add AI Gateway hint to provider READMEs

v5.0.178

Compare Source

Patch Changes

v5.0.176

Compare Source

Patch Changes

v5.0.175

Compare Source

Patch Changes

v5.0.174

Compare Source

Patch Changes

v5.0.173

Compare Source

Patch Changes

v5.0.172

Compare Source

Patch Changes

v5.0.171

Compare Source

Patch Changes

v5.0.170

Compare Source

Patch Changes

v5.0.169

Compare Source

Patch Changes

v5.0.168

Compare Source

Patch Changes

v5.0.167

Compare Source

Patch Changes

v5.0.166

Compare Source

Patch Changes

v5.0.165

Compare Source

Patch Changes

v5.0.164

Compare Source

Patch Changes

v5.0.163

Compare Source

Patch Changes

v5.0.162

Compare Source

Patch Changes

v5.0.161

Compare Source

Patch Changes

v5.0.160

Compare Source

Patch Changes

v5.0.159

Compare Source

Patch Changes

v5.0.158

Compare Source

Patch Changes

v5.0.157

Compare Source

Patch Changes

v5.0.156

Compare Source

Patch Changes

v5.0.155

Compare Source

Patch Changes

v5.0.154

Compare Source

Patch Changes

v5.0.153

Compare Source

Patch Changes
  • c59a31c: Remove custom User-Agent header from HttpChatTransport to fix CORS preflight failures in Safari and Firefox

v5.0.152

Compare Source

Patch Changes

v5.0.151

Compare Source

Patch Changes

v5.0.150

Compare Source

Patch Changes

v5.0.149

Compare Source

Patch Changes
  • c66afc5: fix(security): validate redirect targets in download functions to prevent SSRF bypass

    download now validates the final URL after following HTTP redirects, preventing attackers from bypassing SSRF protections via open redirects to internal/private addresses.

v5.0.148

Compare Source

Patch Changes

v5.0.147

Compare Source

Patch Changes

v5.0.146

Compare Source

Patch Changes

v5.0.145

Compare Source

Patch Changes

v5.0.144

Compare Source

Patch Changes

v5.0.143

Compare Source

Patch Changes

v5.0.142

Compare Source

Patch Changes

v5.0.141

Compare Source

Patch Changes

v5.0.140

Compare Source

Patch Changes

v5.0.139

Compare Source

Patch Changes

v5.0.138

Compare Source

Patch Changes

v5.0.137

Compare Source

Patch Changes

v5.0.136

Compare Source

Patch Changes

v5.0.135

Compare Source

Patch Changes

v5.0.134

Compare Source

Patch Changes

v5.0.133

Compare Source

Patch Changes

v5.0.132

Compare Source

Patch Changes

v5.0.131

Compare Source

Patch Changes

v5.0.130

Compare Source

Patch Changes
  • 20565b8: security: prevent unbounded memory growth in download functions

    The download() and downloadBlob() functions now enforce a default 2 GiB size limit when downloading from user-provided URLs. Downloads that exceed this limit are aborted with a DownloadError instead of consuming unbounded memory and crashing the process. The abortSignal parameter is now passed through to fetch() in all download call sites.

    Added download option to transcribe() and experimental_generateVideo() for providing a custom download function. Use the new createDownload({ maxBytes }) factory to configure download size limits.

  • Updated dependencies [20565b8]

v5.0.129

Compare Source

Patch Changes

v5.0.128

Compare Source

Patch Changes

v5.0.127

Compare Source

Patch Changes

v5.0.126

Compare Source

Patch Changes

v5.0.125

Compare Source

Patch Changes

v5.0.124

Compare Source

Patch Changes

v5.0.123

Compare Source

Patch Changes

v5.0.122

Compare Source

Patch Changes

v5.0.121

Compare Source

Patch Changes

v5.0.120

Compare Source

Patch Changes

v5.0.119

Compare Source

Patch Changes

v5.0.118

Compare Source

Patch Changes
  • 42bad72: https://ai-sdk.dev -> https://v5.ai-sdk.dev

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
    • Only on Sunday and Saturday (* * * * 0,6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovaterenovateBot added the dependencies Dependency updates label Jan 6, 2026
@renovate
renovateBot enabled auto-merge (squash) January 6, 2026 02:11
@github-actionsgithub-actionsBot added qa:running QA workflow is currently running status:approved Pull request has been approved labels Jan 6, 2026

@cubic-dev-aicubic-dev-aiBot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.118chore(deps): update dependency ai to v5.0.119Jan 10, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.119chore(deps): update dependency ai to v5.0.120Jan 13, 2026
@renovate
renovateBotforce-pushed the renovate/ai-5.x branch 2 times, most recently from 0921fe1 to fca7cd2CompareJanuary 13, 2026 06:43
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.120chore(deps): update dependency ai to v5.0.121Jan 13, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.121chore(deps): update dependency ai to v5.0.122Jan 21, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.122chore(deps): update dependency ai to v5.0.123Jan 22, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.123chore(deps): update dependency ai to v5.0.124Jan 30, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.124chore(deps): update dependency ai to v5.0.125Feb 2, 2026
@renovate
renovateBotforce-pushed the renovate/ai-5.x branch 2 times, most recently from 98fdd1f to 269da45CompareFebruary 4, 2026 23:14
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.125chore(deps): update dependency ai to v5.0.126Feb 4, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.126chore(deps): update dependency ai to v5.0.127Feb 5, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.127chore(deps): update dependency ai to v5.0.128Feb 5, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.128chore(deps): update dependency ai to v5.0.129Feb 7, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.140chore(deps): update dependency ai to v5.0.141Feb 26, 2026
@renovate
renovateBotforce-pushed the renovate/ai-5.x branch from 3835c42 to 8882b98CompareMarch 2, 2026 19:12
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.141chore(deps): update dependency ai to v5.0.142Mar 2, 2026
@renovate
renovateBotforce-pushed the renovate/ai-5.x branch from 8882b98 to ca5536cCompareMarch 8, 2026 09:50
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.142chore(deps): update dependency ai to v5.0.150Mar 8, 2026
@renovate
renovateBotforce-pushed the renovate/ai-5.x branch from ca5536c to a42f847CompareMarch 9, 2026 20:09
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.150chore(deps): update dependency ai to v5.0.151Mar 9, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.151chore(deps): update dependency ai to v5.0.152Mar 10, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.152chore(deps): update dependency ai to v5.0.153Mar 11, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.153chore(deps): update dependency ai to v5.0.154Mar 13, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.154chore(deps): update dependency ai to v5.0.155Mar 18, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.155chore(deps): update dependency ai to v5.0.156Mar 18, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.156chore(deps): update dependency ai to v5.0.157Mar 20, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.157chore(deps): update dependency ai to v5.0.158Mar 23, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.158chore(deps): update dependency ai to v5.0.159Mar 23, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.159chore(deps): update dependency ai to v5.0.160Mar 24, 2026
@renovaterenovateBot changed the title chore(deps): update dependency ai to v5.0.160chore(deps): update dependency ai to v5.0.161Mar 27, 2026
@socket-security

socket-securityBot commented Mar 31, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

DiffPackageSupply Chain
Security
VulnerabilityQualityMaintenanceLicense
Addedai@​5.0.17910010010099100

View full report

@socket-security

socket-securityBot commented Mar 31, 2026

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesDependency updatesqa:runningQA workflow is currently runningstatus:approvedPull request has been approved

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants