chore(deps): bump the npm-patches group with 9 updates by dependabot[bot] · Pull Request #154 · Iron-Mark/Hackathon-HireProof

dependabot · 2026-09-02T04:59:55Z

Bumps the npm-patches group with 9 updates:

Package	From	To
@ai-sdk/gateway	`4.0.28`	`4.0.68`
@ai-sdk/openai	`4.0.45`	`4.0.51`
@cursor/sdk	`1.0.22`	`1.0.30`
@upstash/redis	`1.38.0`	`1.38.3`
ai	`7.0.37`	`7.0.84`
framer-motion	`12.42.0`	`12.42.2`
sharp	`0.35.3`	`0.35.4`
@openai/codex-sdk	`0.146.0`	`0.146.1`
@types/react-dom	`19.2.3`	`19.2.5`

Updates @ai-sdk/gateway from 4.0.28 to 4.0.68

Changelog

Sourced from @ai-sdk/gateway's changelog.

4.0.68

Patch Changes

805bbfc: chore(provider/gateway): update gateway model settings files

90192f1: Mark transient network errors that occur while reading successful response bodies as retryable.

Updated dependencies [90192f1]

@ai-sdk/provider-utils@5.0.33

4.0.67

Patch Changes

0e7994c: chore(provider/gateway): update gateway model settings files

Updated dependencies [3e125ba]

@ai-sdk/provider-utils@5.0.32

4.0.66

Patch Changes

81bebaf: Add GLM-5.3-Flash model support to the Z.AI provider and AI Gateway.

4.0.65

Patch Changes

80227cf: chore(provider/gateway): update gateway model settings files

a9782e1: fix: align batch result parsing, request counts, and lifecycle behavior across providers

5533946: Remove the internal-only relevance_score and citation_number fields from published Tako Search response types and schemas. Code that reads either field must be updated; Gateway responses still pass the values through at runtime, but they are no longer typed. Also document data surcharge controls.

Updated dependencies [a9782e1]

Updated dependencies [35841f5]

Updated dependencies [d2f3353]

@ai-sdk/provider-utils@5.0.31

4.0.64

Patch Changes

591d25b: feat: add batch completion webhooks. experimental_startTextBatch accepts a webhookUrl, and the gateway provider registers it through the batch callbackUrl contract and exports typed async-job metadata. Direct Anthropic and OpenAI batch providers return an unsupported warning when the option is provided.

Updated dependencies [591d25b]

@ai-sdk/provider@4.0.8

@ai-sdk/provider-utils@5.0.30

4.0.63

Patch Changes

... (truncated)

Commits

0a0f271 Version Packages (#19857)
90192f1 fix: mark response body network errors as retryable (#19890)
805bbfc chore(provider/gateway): update gateway model settings files (#19863)
c93fa8d Version Packages (#19748)
34c4710 Version Packages (#19716)
81bebaf feat(provider/zai,gateway): add GLM-5.3-Flash model support (#19701)
a01c481 Version Packages (#19478)
35841f5 feat: normalize mid-stream provider error events into public typed errors wit...
80227cf chore(provider/gateway): update gateway model settings files (#19507)
a9782e1 fix(batch): align result parsing, request counts, and behavior across provide...
Additional commits viewable in compare view

Updates @ai-sdk/openai from 4.0.45 to 4.0.51

Changelog

Sourced from @ai-sdk/openai's changelog.

4.0.51

Patch Changes

Updated dependencies [90192f1]

@ai-sdk/provider-utils@5.0.33

4.0.50

Patch Changes

e6a2992: Fix Responses history serialization for regular functions named tool_search.

4.0.49

Patch Changes

2523403: Normalize non-object replayed Chat Completions tool arguments to empty objects.

Updated dependencies [3e125ba]

@ai-sdk/provider-utils@5.0.32

4.0.48

Patch Changes

a9782e1: fix: align batch result parsing, request counts, and lifecycle behavior across providers

eee6200: Signal schema-invalid known Responses stream events and preserve the error finish reason.

35841f5: feat: normalize mid-stream provider error events across supported providers into public StreamProviderError instances and preserve provider-owned type, code, status, retry, and raw payload metadata

d2f3353: Split OpenAI and Azure OpenAI embedding requests by a conservative UTF-8 byte budget derived from their aggregate token limit, in addition to input count limits.

Updated dependencies [a9782e1]

Updated dependencies [35841f5]

Updated dependencies [d2f3353]

@ai-sdk/provider-utils@5.0.31

4.0.47

Patch Changes

591d25b: feat: add batch completion webhooks. experimental_startTextBatch accepts a webhookUrl, and the gateway provider registers it through the batch callbackUrl contract and exports typed async-job metadata. Direct Anthropic and OpenAI batch providers return an unsupported warning when the option is provided.

2214258: Prevent negative text output token counts when providers report reasoning tokens. Perplexity reasoning tokens are now treated as separate from completion tokens.

Updated dependencies [591d25b]

@ai-sdk/provider@4.0.8

@ai-sdk/provider-utils@5.0.30

4.0.46

Patch Changes

Updated dependencies [b74971f]

@ai-sdk/provider-utils@5.0.29

Commits

0a0f271 Version Packages (#19857)
0379422 Version Packages (#19778)
e6a2992 fix: replay regular functions named tool_search correctly in OpenAI Responses...
c93fa8d Version Packages (#19748)
2523403 fix: prevent strict Chat Completions backends from rejecting malformed persis...
a01c481 Version Packages (#19478)
35841f5 feat: normalize mid-stream provider error events into public typed errors wit...
d2f3353 fix: split large embedding batches that exceed provider aggregate token limit...
a9782e1 fix(batch): align result parsing, request counts, and behavior across provide...
eee6200 fix: OpenAI Responses streams silently dropping schema-invalid known events a...
Additional commits viewable in compare view

Updates @cursor/sdk from 1.0.22 to 1.0.30

Commits

See full diff in compare view

Updates @upstash/redis from 1.38.0 to 1.38.3

Release notes

Sourced from @upstash/redis's releases.

@upstash/redis@1.38.3

Patch Changes

f020866: Send an Upstash-Telemetry-Retry header with the retry count on retried requests so retry rates are visible in server-side telemetry

777dc30: Trim telemetry header values before deduplicating so whitespace around existing values does not defeat the dedup check

@upstash/redis@1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

What's Changed

DX-2861: trim telemetry dedup values by @ytkimirti in upstash/redis-js#1442

Full Changelog: https://github.com/upstash/redis-js/compare/@upstash/redis@1.38.2...@upstash/redis@1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

@upstash/redis@1.38.2

Patch Changes

c0f5ad7: Deduplicate telemetry header values so repeated mergeTelemetry calls no longer append the same sdk, platform or runtime tag multiple times

@upstash/redis@1.38.1

Patch Changes

bd7a19f: Add a quick tip about creating a database via https://upstash.com/start-redis to the warnings shown when the Redis url or token is missing. On Cloudflare, the warning shown when both the url and the token are missing now names both wrangler secret put commands instead of only one.

Commits

74da1df chore: version packages (#1443)
f020866 DX-2960: send Upstash-Telemetry-Retry header with the attempt number (DX-2960...
777dc30 fix: trim telemetry values before dedup and cover distinct-version case (#1442)
fc3089b chore: version packages (#1441)
c0f5ad7 fix: deduplicate telemetry header values in mergeTelemetry (#1440)
e45fb78 chore: version packages (#1439)
bd7a19f DX-2866: add start-redis tip to missing url/token warnings (#1438)
8cf6209 fix: stabilize flaky evalshaRo test by waiting for script replication
3024bb2 DX-2750: add ai sdk telemetry to redis search example (#1437)
bf3f48a chore: add resource section to README (#1435)
Additional commits viewable in compare view

Updates ai from 7.0.37 to 7.0.84

Changelog

Sourced from ai's changelog.

7.0.84

Patch Changes

6669d69: Expose parsed structured output in streamText end callbacks.

a6463ca: fix(ai): allow tool approval secrets in ToolLoopAgent settings and prepareCall

e604532: fix(ai): handle stateful and empty-match regular expressions in smoothStream

Updated dependencies [805bbfc]

Updated dependencies [90192f1]

@ai-sdk/gateway@4.0.68

@ai-sdk/provider-utils@5.0.33

7.0.83

Patch Changes

8dd86a9: Validate persisted typed tool calls against current input and output schemas. Schema-incompatible empty or error inputs and terminal history from unavailable tools remain loadable as dynamic tool parts instead of exposing unvalidated values under current static tool types.

fda13b3: Allow chats to continue automatically after tool approval denials reach the output-denied state.

957146c: add operation-level outcomes to UI message stream end callbacks

ce6849a: fix(ai): handle stitchable stream cancellation before an inner stream is registered

7.0.82

Patch Changes

3e125ba: Allow manual tool approval statuses to include a reason and preserve it across core, model, and UI approval requests. OPA requires-approval decisions now surface their reason to human approvers. UI request chunks serialize the optional reason, while UI messages retain it as approval.requestReason separately from an approver's response reason.

Updated dependencies [0e7994c]

Updated dependencies [3e125ba]

@ai-sdk/gateway@4.0.67

@ai-sdk/provider-utils@5.0.32

7.0.81

Patch Changes

Updated dependencies [81bebaf]

@ai-sdk/gateway@4.0.66

7.0.80

Patch Changes

35841f5: feat: normalize mid-stream provider error events across supported providers into public StreamProviderError instances and preserve provider-owned type, code, status, retry, and raw payload metadata

... (truncated)

Commits

0a0f271 Version Packages (#19857)
e604532 fix: prevent smoothStream custom RegExp chunking from merging chunks or loopi...
6669d69 fix: include parsed structured output in streamText end callbacks (#17717)
a6463ca fix: ToolLoopAgent types reject supported tool approval secrets (#19883)
9a68261 feat(open-responses): support experimental extension codecs (#18900)
0379422 Version Packages (#19778)
8dd86a9 fix: reject stale persisted tool inputs without blocking unparsed or unavaila...
fda13b3 fix: continue chats automatically after denied tool approvals (#19771)
ce6849a fix(ai): handle stitchable stream cancellation before an inner stream is regi...
957146c fix: UI message stream end callbacks cannot distinguish failed responses from...
Additional commits viewable in compare view

Updates framer-motion from 12.42.0 to 12.42.2

Changelog

Sourced from framer-motion's changelog.

[12.42.2] 2026-07-01

Fixed

animateView: Cropped group layers now animate border-radius from the old to new radius.

[12.42.1] 2026-06-30

Fixed

animateView: Old layer fade out now cancelled when defining .new().

Commits

40e8756 v12.42.2
718ccc7 Merge pull request #3768 from motiondivision/view-cropped-corner-radius
19195a4 Dedupe corner-radius longhands; merge crop box/radii measurements
5299aa6 Resolve cropped-clip radius timing once; fix transition-option leak
937cdf3 Animate cropped view-transition group corner radius
fd2d6f6 v12.42.1
2223d87 Hold the old layer when only a non-opacity .new() is set
See full diff in compare view

Updates sharp from 0.35.3 to 0.35.4

Release notes

Sourced from sharp's releases.

v0.35.4

https://github.com/lovell/sharp-libvips/releases/tag/v1.3.3

Bound resize dimensions to coordinate limit.

Bound composite left and top to coordinate limit. #4564 @metsw24-max

Round palette bit depth up for png and gif colours. #4569 @metsw24-max

Ensure tiff.subifd input option is used. #4572 @metsw24-max

Ensure info.pages is correct when limiting input page range. #4578 @metsw24-max

Improve support for input Streams finishing before output is requested. #4584 @Jaybhade

v0.35.4-rc.0

Upgrade to libvips v8.18.6 for upstream bug fixes.

Bound resize dimensions to coordinate limit.

Bound composite left and top to coordinate limit. #4564 @metsw24-max

Round palette bit depth up for png and gif colours. #4569 @metsw24-max

Ensure tiff.subifd input option is used. #4572 @metsw24-max

Ensure info.pages is correct when limiting input page range. #4578 @metsw24-max

Improve support for input Streams finishing before output is requested. #4584 @Jaybhade

Commits

7f1a0a2 Release v0.35.4
f927818 Upgrade to sharp-libvips v1.3.3
e802092 Prerelease v0.35.4-rc.0
e13eb2f CI: Fix wasm32 build (#4589)
a82a0b3 Upgrade to libvips v8.18.6
8044fe4 Bound resize dimensions to coordinate limit
147f859 Docs: changelog entries for #4578 #4584
ee5bfb8 Tests: use yauzl directly rather than via extract-zip wrapper
7a77889 Bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0 (#4588)
ea5bef2 Improve support for input Streams finishing before output is requested (#4584)
Additional commits viewable in compare view

Updates @openai/codex-sdk from 0.146.0 to 0.146.1

Commits

See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.5

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-patches group with 9 updates: | Package | From | To | | --- | --- | --- | | [@ai-sdk/gateway](https://github.com/vercel/ai/tree/HEAD/packages/gateway) | `4.0.28` | `4.0.68` | | [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) | `4.0.45` | `4.0.51` | | [@cursor/sdk](https://github.com/cursor/cursor) | `1.0.22` | `1.0.30` | | [@upstash/redis](https://github.com/upstash/redis-js) | `1.38.0` | `1.38.3` | | [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.37` | `7.0.84` | | [framer-motion](https://github.com/motiondivision/motion) | `12.42.0` | `12.42.2` | | [sharp](https://github.com/lovell/sharp) | `0.35.3` | `0.35.4` | | [@openai/codex-sdk](https://github.com/openai/codex/tree/HEAD/sdk/typescript) | `0.146.0` | `0.146.1` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.5` | Updates `@ai-sdk/gateway` from 4.0.28 to 4.0.68 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/gateway/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/gateway@4.0.68/packages/gateway) Updates `@ai-sdk/openai` from 4.0.45 to 4.0.51 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/openai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@4.0.51/packages/openai) Updates `@cursor/sdk` from 1.0.22 to 1.0.30 - [Commits](https://github.com/cursor/cursor/commits) Updates `@upstash/redis` from 1.38.0 to 1.38.3 - [Release notes](https://github.com/upstash/redis-js/releases) - [Commits](https://github.com/upstash/redis-js/compare/@upstash/redis@1.38.0...@upstash/redis@1.38.3) Updates `ai` from 7.0.37 to 7.0.84 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/ai@7.0.84/packages/ai) Updates `framer-motion` from 12.42.0 to 12.42.2 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v12.42.0...v12.42.2) Updates `sharp` from 0.35.3 to 0.35.4 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](lovell/sharp@v0.35.3...v0.35.4) Updates `@openai/codex-sdk` from 0.146.0 to 0.146.1 - [Commits](https://github.com/openai/codex/commits/rust-v0.146.1/sdk/typescript) Updates `@types/react-dom` from 19.2.3 to 19.2.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) --- updated-dependencies: - dependency-name: "@ai-sdk/gateway" dependency-version: 4.0.68 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patches - dependency-name: "@ai-sdk/openai" dependency-version: 4.0.51 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patches - dependency-name: "@cursor/sdk" dependency-version: 1.0.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patches - dependency-name: "@upstash/redis" dependency-version: 1.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patches - dependency-name: ai dependency-version: 7.0.84 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patches - dependency-name: framer-motion dependency-version: 12.42.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patches - dependency-name: sharp dependency-version: 0.35.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patches - dependency-name: "@openai/codex-sdk" dependency-version: 0.146.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patches - dependency-name: "@types/react-dom" dependency-version: 19.2.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patches ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-09-02T05:00:01Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
hireproof	Ready	Preview	Sep 2, 2026 5:00am UTC

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 2, 2026

vercel Bot deployed to Preview September 2, 2026 05:00 View deployment

Iron-Mark merged commit bd51e4f into dev Sep 2, 2026
8 checks passed

Iron-Mark deleted the dependabot/npm_and_yarn/dev/npm-patches-ba48a381bf branch September 2, 2026 05:01

Iron-Mark mentioned this pull request Sep 2, 2026

ci: auto-merge verified patch groups #155

Merged

Navigation Menu

Uh oh!

chore(deps): bump the npm-patches group with 9 updates - #154

chore(deps): bump the npm-patches group with 9 updates#154
Iron-Mark merged 1 commit into
devfrom
dependabot/npm_and_yarn/dev/npm-patches-ba48a381bf

dependabot Bot commented on behalf of github Sep 2, 2026

Uh oh!

vercel Bot commented Sep 2, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 2, 2026

4.0.68

Patch Changes

4.0.67

Patch Changes

4.0.66

Patch Changes

4.0.65

Patch Changes

4.0.64

Patch Changes

4.0.63

Patch Changes

4.0.51

Patch Changes

4.0.50

Patch Changes

4.0.49

Patch Changes

4.0.48

Patch Changes

4.0.47

Patch Changes

4.0.46

Patch Changes

@​upstash/redis@​1.38.3

Patch Changes

@​upstash/redis@​1.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

What's Changed

@​upstash/redis@​1.38.2

Patch Changes

@​upstash/redis@​1.38.1

Patch Changes

7.0.84

Patch Changes

7.0.83

Patch Changes

7.0.82

Patch Changes

7.0.81

Patch Changes

7.0.80

Patch Changes

[12.42.2] 2026-07-01

Fixed

[12.42.1] 2026-06-30

Fixed

v0.35.4

v0.35.4-rc.0

Uh oh!

vercel Bot commented Sep 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@upstash/redis@1`.38.3

`@upstash/redis@1`.38.3-canary-20260807072941-777dc30585ae61e5826bb95f5a957e6dea277900

`@upstash/redis@1`.38.2

`@upstash/redis@1`.38.1

vercel Bot commented Sep 2, 2026 •

edited

Loading