fix(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@ai-sdk/provider (source)	4.0.1 → 4.0.18
@anthropic-ai/sdk	0.107.0 → 0.128.0
@commitlint/cli (source)	21.1.0 → 21.2.3
@commitlint/config-conventional (source)	21.1.0 → 21.2.3
@jest/globals (source)	30.4.1 → 30.5.2
@tsconfig/node24 (source)	24.0.4 → 24.0.5
@types/node (source)	26.0.1 → 26.6.2
ai (source)	7.0.8 → 7.0.114
giget	3.3.0 → 3.3.1
jest (source)	30.4.2 → 30.5.2
openai	6.45.0 → 6.49.0
semantic-release	25.0.5 → 25.0.9
ts-jest (source)	29.4.11 → 29.4.13
yargs (source)	18.0.0 → 18.2.0

---

Release Notes

vercel/ai (@​ai-sdk/provider)

v4.0.18

Compare Source

Patch Changes

• ffb0e76: fix(provider): preserve opaque file URI strings for provider serialization

v4.0.17

Compare Source

Patch Changes

• a7dd893: Add experimental evaluation model aliases and registry resolution. customProvider accepts evaluationModels, registries expose evaluationModel, and experimental_evaluate accepts string IDs when an evaluation-capable default provider is explicitly configured. Evaluation never implicitly falls back to Gateway. Model-resolution errors now identify evaluationModel while stable provider contracts remain unchanged.

v4.0.16

Compare Source

Patch Changes

• d06bb2a: Allow readonly arrays and objects containing them to be used as JSON values.
• 123d71f: Add experimental_evaluate and the isolated experimental v4 evaluation model specification for Choice, Score, and Boolean questions against shared state. Includes typed answers, optional Choice/Score distributions, required Boolean probabilities, validation, retries, cancellation, and Experimental_EvaluationUnsupportedQuestionTypeError for unsupported questions.

v4.0.15

Compare Source

Patch Changes

• 5c0054d: Add optional browser-direct WebRTC for experimental client-delegated Live conversations alongside the existing WebSocket path. Exchange SDP through an application endpoint with api.session, configure server-owned data-channel permissions, and preserve committed React session ownership. Capture follows the selected sender track, borrowed tracks remain caller-owned, and disconnect recovery and finalization stay bounded. Applications continue to handle client delegation and submit context; Live session updates and Responses delegation remain unsupported.

  Serialize microphone sender changes and close the peer if detachment fails, without stopping borrowed tracks. Validate nonempty SDP setup answers with a bounded response body, and document the same-origin broker authentication contract.

• 39535af: Add experimental OpenAI Live provider support through the unified openai.experimental_realtime factory for server WebSocket sessions with client delegation. Applications own their agents and tools, receive continuous audio/transcript events and delegation metadata, and return context through validated channels. Support immutable startup options, microphone mute controls, graceful session close, and cumulative voice usage. Responses delegation and Live session updates reject before sending.

  Route known Live model IDs to Live, allow an OpenAI-specific api override for early-access models, and preserve legacy Realtime defaults for unknown IDs. Token minting follows the same selection rules and rejects Live before requesting unsupported credentials. Extend the realtime v4 specification with optional server WebSocket configuration, per-connection raw-event parsers, and model-wide startup/finalization capabilities. This provider layer supplies connection settings and protocol mapping for server adapters; browser lifecycle and UI integration belong to the core runtime and framework hooks.

  Preserve Realtime client event IDs for session updates and audio appends, and correlate server errors with the originating client event.

v4.0.14

Compare Source

Patch Changes

• 5ec21a6: fix: reject unsupported batch request types
• 7469a3b: feat: support image generation requests in batches

v4.0.13

Compare Source

Patch Changes

• 9942196: feat: add batch cancel and list APIs

v4.0.12

Compare Source

Patch Changes

• 912fb01: feat: add batch cancel and list APIs

v4.0.11

Compare Source

Patch Changes

• a4ba394: feat: support per-request models in batch
• 45099da: Retry unclassified empty image results, preserve retry-attempt accounting, add provider-independent result retryability classification, and mark Google and Google Vertex prompt blocks as terminal.

v4.0.10

Compare Source

Patch Changes

• 5190b67: feat(provider): extend the FilesV4 interface with optional getFileMetadata, downloadFile (streaming), and deleteFile operations, plus abortSignal/headers call options and a { type: 'stream' } upload data variant; upload results now expose byteSize, createdAt, and expiresAt (also surfaced by the core uploadFile() helper, which now forwards abortSignal/headers); add postMultipartStreamToApi (streaming multipart uploads with deterministic part ordering and failure-path stream teardown), deleteFromApi, and createBinaryStreamResponseHandler to provider-utils

v4.0.9

Compare Source

Patch Changes

• aa45741: fix(provider/anthropic): preserve native message batch request counts in provider metadata and support the full language-model option surface in batch requests

v4.0.8

Compare Source

Patch Changes

• 591d25b: feat: add batch completion webhooks. experimental_startTextBatch accepts a webhookUrl, and the gateway provider registers it through the batch callbackUrl contract and exports typed async-job metadata. Direct Anthropic and OpenAI batch providers return an unsupported warning when the option is provided.

v4.0.7

Compare Source

Patch Changes

• ad6a650: feat(video): allow aspectRatio: 'adaptive' on generateVideo

  Some video models derive the output ratio from the input and reject explicit
  {width}:{height} values — BytePlus Seedance 2.5 does this for first-frame,
  first-and-last-frame, editing, and extension tasks. aspectRatio on
  VideoModelV3CallOptions, VideoModelV4CallOptions, and
  experimental_generateVideo is now `${number}:${number}` | 'adaptive', so
  those calls no longer need a type assertion. Support is provider-specific.

v4.0.6

Compare Source

Patch Changes

• 3469d0c: feat: add batch APIs

v4.0.5

Compare Source

Patch Changes

• 79e133c: async APIs for generateVideo (poll, webhook)

  Adds an asynchronous start/status flow to the experimental video model
  interface (VideoModelV4): models may now implement doStart, doStatus,
  and handleWebhookOption instead of (or in addition to) doGenerate, and
  experimental_generateVideo accepts poll and webhook options to
  orchestrate completion via polling or webhooks. Polling configuration can use
  a custom delay implementation for durable workflow compatibility.

v4.0.4

Compare Source

Patch Changes

• 1e2f324: feat: add experimental speech translation model specification (Experimental_SpeechTranslationModelV4) and experimental_streamTranslate for streaming speech-to-speech translation

v4.0.3

Compare Source

Patch Changes

• 0f93c57: feat (video): support video (not just image) reference inputs in inputReferences for reference-to-video generation

v4.0.2

Compare Source

Patch Changes

• 5c5c0f5: Add experimental streaming transcription support for transcription models, including OpenAI gpt-realtime-whisper and xAI WebSocket STT.

anthropics/anthropic-sdk-typescript (@​anthropic-ai/sdk)

v0.128.0

Full Changelog: sdk-v0.127.0...sdk-v0.128.0

Features

• api: add support for claude-opus-5-5, inline tool definitions and MCP tool-list pinning (beta) (eff2748)

Bug Fixes

• api: share one evaluated_permission enum across Managed Agents events (0c1cc0f)
• tools: addTools() takes effect straight away (#​773) (1ccdad0)
• tools: leave reply-only params off the tool runner's compaction request (#​769) (8afc336)

Chores

• docs: add descriptions to the Dreams API reference (ea4ddd1)
• docs: add descriptions to the User Profiles API reference (ea4ddd1)
• docs: add memory store descriptions to the Managed Agents API reference (ea4ddd1)
• docs: improve descriptions in the Dreams API reference (971c54a)
• docs: simplify the session thread agent type description (ccf71a2)
• docs: update diagnostics field descriptions on beta messages (c0b8746)
• internal: add property-based tests for partial JSON parsing (#​776) (3ffac09)

v0.127.0

Full Changelog: sdk-v0.126.0...sdk-v0.127.0

Features

• api: add group with display_name to rate limits, deprecate group_type (2575d97)
• tools: add compactBeforeNextTurn() to the tool runner (#​682) (9f75ca6)

Bug Fixes

• BetaMessageStream: stop coercing a null compaction_delta content into "null" (#​655) (dbd6845)
• client: don't retry requests whose body is a stream or iterator (eebc1b9)
• client: join multiple anthropic-beta values with a comma and no space (#​638) (e0cb1ff)
• client: make pagination exports on the client namespace type-only (5adea1f)
• internal: drop jest from tsconfig types (60588af)
• middleware: echo a streamed compaction summary in the fallback continuation (#​657) (2e0f004)
• tools: keep $defs when transformJSONSchema root is a $ref (#​687) (57a9f30)

Performance Improvements

• client: skip formatting request details when debug logging is off (2b29ed2)

Chores

• ci: publish releases from Node 24 with its bundled npm (6b3c6f5)
• docs: add descriptions for enum values and path parameters (cb254c4)
• docs: clarify the compaction tool_changes and tool change descriptions (5a695eb)
• internal: build the sub-packages with TypeScript 6.0.3 (8a69ff5)
• internal: build with TypeScript 6.0.3 and typescript-eslint 8.58.0 (01f3ee6)
• internal: keep lib/internal out of the published exports map (763fb43)
• internal: re-export pagination classes with a plain export list (c77bdc3)
• internal: share a single Simplify type util (31d5e75)
• internal: switch unit tests from jest to vitest (110542d, 788c9c6)

v0.126.0

Full Changelog: sdk-v0.125.0...sdk-v0.126.0

Features

• api: add auto mode tool permissions for Managed Agents (7829b43)
• api: add compaction parameter and signed compaction blocks (beta) (05fd878)
• api: add enum types for workspace data-residency geo fields (89c5920)
• api: add thinking_mismatch_allowed entries to input_transformations (beta) (1f32871)
• api: add url_sources to the web fetch tool (ee23dd2)
• api: add workspace_id parameter to user profiles methods (f5b9fb7)

Bug Fixes

• api: mark usage iteration model as nullable (bec3bec)
• api: use one input transformation type for message and delta event (e016d25)
• client: ignore invalid Retry-After values and validate maxRetries (7829b43)
• client: retry connection errors in the async client and stop blocking in the coroutine retry loop (7829b43)
• client: stop waiting for a retry as soon as the request is aborted (941aaea)
• client: use the default backoff when Retry-After is out of range (1090c44)
• internal: stop a declaration file using a type that needs TypeScript 5.7 (e32a956)

Performance Improvements

• add "sideEffects": false so bundlers can drop unused modules (f804366)
• mark classes as pure so bundlers can drop unused ones (f804366)

Chores

• docs: clarify that session_thread_id on tool use events is informational (a07ecf3)
• docs: correct the compaction beta's parameter descriptions (eb9abd2)
• internal: move the sub-packages off ts-node and modernise their tsconfig (1d7cd91)
• internal: move tsconfig off settings deprecated in TypeScript 6 (e0d58f6)
• internal: pin the pnpm version with an integrity hash (f804366)
• internal: root package drops ts-node; repo root becomes ESM (3f371a1)
• internal: stop using ts-node for the publish script and the ecosystem test runner (2e589c8)
• tests: stop the mock server without failing a passing test run (a364c12)

Documentation

• api: clarify usage.iterations entry typing under server-side fallback (c5f0ef3)
• api: compaction instructions replace the server's summarization prompt (941aaea)
• api: fix typo in temperature deprecation message (4a8b49b)
• stop documenting unions with their first variant's description (fa06caf)

v0.125.0

Full Changelog: sdk-v0.124.0...sdk-v0.125.0

Features

• api: add auto mode tool permissions for Managed Agents (7f5e2c6)
• api: add content_too_large web_fetch tool error code (f06416e)
• api: add the user-profiles-2026-09-04 beta value and external_user_details to user profiles (318d42d)
• api: support mounting public GitHub repositories without an authorization_token in Managed Agents sessions (9e2d945)

Chores

• client: clean up the unused idempotency request option (4ce2772)
• docs: correct the environment scope field description (835c677)
• internal: restore package version (b43a7f6)
• internal: stop stamping the package version into generated files (80ace5e)
• tests: restore empty test package marker files (4f27519)

v0.124.0

Full Changelog: sdk-v0.123.0...sdk-v0.124.0

Features

• api: add Claude Tag category and user breakdowns to usage reports (669ff22)
• api: add named types for organization compliance settings state (54be8da)
• api: add support for sending a workspace ID on more endpoints (a11e6f1)

Bug Fixes

• repair custom-code merge in messages resources (#​455) (7ac43b9)
• tools: create agent-toolset files and directories owner-only (#​485) (a9c2298)

Chores

• internal: bundle the mock server spec and update breaking-change detection (8752d02)
• internal: codegen related update (a63afbc)
• tests: reword the skip reason on the path-level query param tests (999bee5)

Documentation

• api: update a few doc strings (2ef3d59)

v0.123.0

Full Changelog: sdk-v0.122.0...sdk-v0.123.0

Features

• api: beta user profiles: add external_user_onboarded_at, remove relationship in favor of access_type (3efb1a1)
• api: manual updates (c6f0bda)
• api: organization compliance settings, user-profile order_by, memory-store and toolset schema updates (8e2f0c2)

Bug Fixes

• keep credential file access out of non-Node bundles (ab6a4b2)

Chores

• internal: codegen related update (788ea8b)

Documentation

• changelog: detail the beta files/skills GA-shape change (#​1175) (4951de0)

v0.122.0

Full Changelog: sdk-v0.121.0...sdk-v0.122.0

Features

• api: beta files/skills namespaces use GA shapes; drop dated beta header pins (45d693a)

Bug Fixes

• client: classify cross-realm DOMException abort/timeout errors correctly (1bd6395)
• client: use configured logger for SSE parse errors (80eeaf7)
• sessions: make event accumulator forward-compatible with new event types (#​410) (2d084fd)
• tools: let read return a view_range of a file over the size cap (#​427) (56b3260)
• uploads: default bare Blob filename on skills endpoints (#​422) (e111649)
• webhooks: require headers to be passed to unwrap() (3230804)

Chores

• internal: codegen related update (c2f327a)

Documentation

• api: clarify pagination on the organization rate-limit list endpoints (d6015b9)
• document TypeScript 5.0 as the minimum supported version (788e721)

v0.121.0

Full Changelog: sdk-v0.120.0...sdk-v0.121.0

Features

• api: add updates thinking display mode (beta) (22274ea)
• api: add missing anthropic-beta values (0779f02)
• api: add support for Organization API endpoints (8b61e7a)
• helpers: support Standard Schema for structured outputs and tools (7880078)

Bug Fixes

• tools: keep the tool runner going on pause_turn (#​288) (f040dc9)
• types: don't reference NodeJS.ProcessEnv from published types (#​367) (fd38dfd)

Chores

• docs: clarify skill version latest support and memory version retention (7405a69)
• examples: remove redundant main().catch boilerplate (154ace7)
• internal: cancel superseded CI runs (0532c98)
• internal: codegen related update (228ff1e)
• internal: minor workflow reformat (41b6c31)
• internal: tighten publint and attw lint checks (e3fbd62)

Documentation

• api: clarify session thread agent and usage.iterations compaction descriptions (beta) (6e852a7)
• examples: use adaptive thinking in thinking examples (3dd7699)

v0.120.0

Full Changelog: sdk-v0.119.0...sdk-v0.120.0

Features

• api: managed agents web search config and self hosted sandbox memory (ba8ec50)

Chores

• internal: use a single pnpm workspace lockfile (#​359) (3c32145)

v0.119.0

Full Changelog: sdk-v0.118.0...sdk-v0.119.0

Features

• api: Files and Skills APIs are now GA; add computer use and browser use toolsets (ab41aa3)

v0.118.0

Full Changelog: sdk-v0.117.1...sdk-v0.118.0

Features

• api: additions to files and memory stores (fdc0379)
• api: updates to skill, files, and user profiles (671e6b1)
• client: add helpers for accessing the workspace ID in response headers (28aa5af)

Bug Fixes

• api: remove unsupported mid_conv_system content block (ae6ca94)
• session-runner: retry tool-result sends for at least the lease TTL (#​339) (7dc6325)

Chores

• internal: bump zod to 4.4.3 (#​334) (faa5b7b)
• internal: remove leftover prism references (a163b96)
• stop shipping the v0.50 migration guide and migrate CLI (53992d7)

Documentation

• tools: warn that blocking tool bodies stall the worker heartbeat (#​299) (908fdb5)

v0.117.1

Full Changelog: sdk-v0.117.0...sdk-v0.117.1

Chores

• ci: allow manually re-publishing a package to npm from the release workflow (af60c1f)
• internal: tag uploaded preview builds with the branch name (#​295) (228f44e)

v0.116.0

Compare Source

Full Changelog: sdk-v0.115.0...sdk-v0.116.0

Features

• api: add mid-conversation-tool-changes-2026-07-01 beta (70e04f6)
• api: add support for session budgets, advisor tool, pinned inference location and skills auto-loading from GitHub (1336a4a)
• tools: make bash timeout and abort errors matchable by class (#​259) (201b12e)

Bug Fixes

• client: use hardcoded User-Agent strings instead of constructor names (0b97f04)

Chores

• api: remove retired Claude Opus 4.1 models (11b685c)
• docs: small updates to descriptions (413cc5f)
• docs: updates to a few documentation strings (c38a1de)
• internal/deps: bump @​babel/core and @​babel/helpers to 7.29.7 (#​261) (3164934)
• internal/deps: install tsc-multi from the npm registry (#​265) (c787f90)
• internal: codegen related update (73b3d61)

v0.115.0

Compare Source

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

• api: add claude-opus-5 model (cdd3606)
• api: add tool addition/removal blocks and tool_change events (cdd3606)
• api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

• client: release abort listeners when requests settle (#​1129) (b85e902)

v0.114.0

Compare Source

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

• api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

v0.113.0

Compare Source

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

• api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

v0.112.5

Compare Source

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

• api: add support for new refusal category (479efe8)
• internal: codegen related update (830fb74)

v0.112.4

Compare Source

Full Changelog: sdk-v0.112.3...sdk-v0.112.4

Bug Fixes

• aws: preserve AWS options and auth mode across withOptions() (#​214) (3f7665c)

Chores

• docs: small updates (97f68a8)

v0.112.3

Compare Source

Full Changelog: sdk-v0.112.2...sdk-v0.112.3

Chores

• docs: small updates (79fd6c7)

v0.112.2

Compare Source

Full Changelog: sdk-v0.112.1...sdk-v0.112.2

Chores

• client: docs updates (fdb3a65)

v0.112.1

Compare Source

Full Changelog: sdk-v0.112.0...sdk-v0.112.1

v0.112.0

Compare Source

Full Changelog: sdk-v0.111.0...sdk-v0.112.0

Features

• api: add support for MCP Tunnels (597ac41)

v0.111.0

Compare Source

Full Changelog: sdk-v0.110.0...sdk-v0.111.0

Features

• api: add support for dreaming (77b28a6)
• tools: gate session tool calls on evaluated_permission; bound idle by server stop_reason (68a6d7b)

Chores

• docs: small updates to field descriptions (e25b885)
• docs: update model example (a33f3f0)
• docs: updates to descriptions and examples (eac4bac

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.