[dependabot]

Bumps the ai-sdk group with 6 updates:

Package	From	To
@ai-sdk/anthropic	4.0.96	4.0.97
@ai-sdk/deepseek	3.0.79	3.0.80
@ai-sdk/google	4.0.111	4.0.112
@ai-sdk/openai-compatible	3.0.84	3.0.85
@ai-sdk/openai	4.0.108	4.0.109
ai	7.0.162	7.0.163

Updates @ai-sdk/anthropic from 4.0.96 to 4.0.97

Release notes

Sourced from @​ai-sdk/anthropic's releases.

@​ai-sdk/anthropic@​4.0.97

Patch Changes

• fd7e8a7: Preserve the order of text and complete function calls in streamed Google responses, including standalone thought signatures on empty text or reasoning parts.

  Keep provider metadata on empty text parts when converting results to response messages so it can be passed back in subsequent requests.

  Omit foreign-provider empty signature text when replaying history through Anthropic or Bedrock, preserving Bedrock’s existing native reasoning-history handling.

• 8291ccf: Add MiniMax serviceTier support for standard and priority admission. Omit tiers belonging to another known provider with an unsupported-setting warning instead of forwarding incompatible values. Expose the applied serviceTier, when returned, in Anthropic-compatible generation, stream and batch metadata without changing existing metadata construction types.

• 9754014: Add typed streaming heartbeat parts. Anthropic emits them only with includePings: true (disabled by default), without requiring raw chunks. Core forwards pings through stream retries without storing them as generated content or sending them to UI message streams. Consumers with exhaustive stream-part switches must handle the new ping union variant when upgrading, even when the opt-in is disabled. Typed pings do not flush partial words during stream smoothing.

• 4b8f00e: Add a supportsNativeStructuredOutput opt-in to the Vertex Anthropic provider so auto can use native structured output for Claude 4.5 and newer when enabled by Google Cloud policy. Keep tool emulation as the default and avoid adding the structured-output beta header for providers without strict tool support.

• 8b11ff6: Support deleting files, retrieving metadata, and streaming downloads of generated files through the Anthropic Files API. Metadata reads and uploads expose consistent media type, size, creation time, expiration, and provider metadata when available. Downloads preserve Anthropic’s restriction to files generated by tools or skills.

• Updated dependencies [36802d4]

• Updated dependencies [e0143b0]

• Updated dependencies [934100c]

• Updated dependencies [892af4d]

• Updated dependencies [89aff56]

• Updated dependencies [41465fd]

• Updated dependencies [9754014]

• Updated dependencies [4bb73b0]

• Updated dependencies [2e44144]

  • @​ai-sdk/provider@​4.0.36
  • @​ai-sdk/provider-utils@​5.0.75

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

4.0.97

Patch Changes

• fd7e8a7: Preserve the order of text and complete function calls in streamed Google responses, including standalone thought signatures on empty text or reasoning parts.

  Keep provider metadata on empty text parts when converting results to response messages so it can be passed back in subsequent requests.

  Omit foreign-provider empty signature text when replaying history through Anthropic or Bedrock, preserving Bedrock’s existing native reasoning-history handling.

• 8291ccf: Add MiniMax serviceTier support for standard and priority admission. Omit tiers belonging to another known provider with an unsupported-setting warning instead of forwarding incompatible values. Expose the applied serviceTier, when returned, in Anthropic-compatible generation, stream and batch metadata without changing existing metadata construction types.

• 9754014: Add typed streaming heartbeat parts. Anthropic emits them only with includePings: true (disabled by default), without requiring raw chunks. Core forwards pings through stream retries without storing them as generated content or sending them to UI message streams. Consumers with exhaustive stream-part switches must handle the new ping union variant when upgrading, even when the opt-in is disabled. Typed pings do not flush partial words during stream smoothing.

• 4b8f00e: Add a supportsNativeStructuredOutput opt-in to the Vertex Anthropic provider so auto can use native structured output for Claude 4.5 and newer when enabled by Google Cloud policy. Keep tool emulation as the default and avoid adding the structured-output beta header for providers without strict tool support.

• 8b11ff6: Support deleting files, retrieving metadata, and streaming downloads of generated files through the Anthropic Files API. Metadata reads and uploads expose consistent media type, size, creation time, expiration, and provider metadata when available. Downloads preserve Anthropic’s restriction to files generated by tools or skills.

• Updated dependencies [36802d4]

• Updated dependencies [e0143b0]

• Updated dependencies [934100c]

• Updated dependencies [892af4d]

• Updated dependencies [89aff56]

• Updated dependencies [41465fd]

• Updated dependencies [9754014]

• Updated dependencies [4bb73b0]

• Updated dependencies [2e44144]

  • @​ai-sdk/provider@​4.0.36
  • @​ai-sdk/provider-utils@​5.0.75

Commits

• bdc3f91 Version Packages (#24424)
• 9754014 feat(anthropic): forward streaming ping events by introducing new stream part...
• 4b8f00e feat(google-vertex): add Anthropic native structured output opt-in (#23862)
• 8291ccf feat(anthropic,minimax): support MiniMax tiers and applied-tier metadata (#19...
• 8b11ff6 feat(anthropic): add FilesV4 support for file operations (#21521)
• fd7e8a7 fix(google): preserve streamed tool ordering and signature history (#24349)
• See full diff in compare view

Updates @ai-sdk/deepseek from 3.0.79 to 3.0.80

Release notes

Sourced from @​ai-sdk/deepseek's releases.

@​ai-sdk/deepseek@​3.0.80

Patch Changes

• 7139593: Centralize DeepSeek model capabilities and endpoint policies in a shared catalog, preserving request behavior and generating the model capability table from the catalog.

  Preserve unspecified strict-tool support for endpoints such as Azure, allowing strict tools through while retaining explicit endpoint restrictions.

• Updated dependencies [36802d4]

• Updated dependencies [e0143b0]

• Updated dependencies [934100c]

• Updated dependencies [892af4d]

• Updated dependencies [89aff56]

• Updated dependencies [41465fd]

• Updated dependencies [9754014]

• Updated dependencies [4bb73b0]

• Updated dependencies [2e44144]

  • @​ai-sdk/provider@​4.0.36
  • @​ai-sdk/provider-utils@​5.0.75

Changelog

Sourced from @​ai-sdk/deepseek's changelog.

3.0.80

Patch Changes

• 7139593: Centralize DeepSeek model capabilities and endpoint policies in a shared catalog, preserving request behavior and generating the model capability table from the catalog.

  Preserve unspecified strict-tool support for endpoints such as Azure, allowing strict tools through while retaining explicit endpoint restrictions.

• Updated dependencies [36802d4]

• Updated dependencies [e0143b0]

• Updated dependencies [934100c]

• Updated dependencies [892af4d]

• Updated dependencies [89aff56]

• Updated dependencies [41465fd]

• Updated dependencies [9754014]

• Updated dependencies [4bb73b0]

• Updated dependencies [2e44144]

  • @​ai-sdk/provider@​4.0.36
  • @​ai-sdk/provider-utils@​5.0.75

Commits

• bdc3f91 Version Packages (#24424)
• 7139593 refactor(deepseek): adopt the model capabilities catalog (#24469)
• See full diff in compare view

Updates @ai-sdk/google from 4.0.111 to 4.0.112

Release notes

Sourced from @​ai-sdk/google's releases.

@​ai-sdk/google@​4.0.112

Patch Changes

• fd7e8a7: Preserve the order of text and complete function calls in streamed Google responses, including standalone thought signatures on empty text or reasoning parts.

  Keep provider metadata on empty text parts when converting results to response messages so it can be passed back in subsequent requests.

  Omit foreign-provider empty signature text when replaying history through Anthropic or Bedrock, preserving Bedrock’s existing native reasoning-history handling.

• ef2dfb5: fix: pass through seed: 0 instead of dropping it in image and video models. KlingAI now reports seed: 0 as an unsupported setting like any other seed.

• 892af4d: feat (provider/google): implement server-side realtime extensions

  GoogleRealtimeModel supports the existing getServerWebSocketConfig() contract, returning the unconstrained Gemini Live endpoint with resolved credential headers. Each server connection can create its own event parser. Reported gross token totals include thinking and tool-use counts, with cached input portions and available modality counts normalized without guessing missing values. Usage in a completion frame is attached to response-done; other snapshots use custom events with rawType: 'usageMetadata' and typed usage, preserving lifecycle ordering without inferring response associations.

• 3c6fb43: Forward explicit speech language codes to Gemini TTS for single- and multi-speaker requests, including the shared Vertex Gemini adapter. Omitted languages and language: 'auto' retain automatic detection without an unsupported-language warning.

• Updated dependencies [36802d4]

• Updated dependencies [e0143b0]

• Updated dependencies [934100c]

• Updated dependencies [892af4d]

• Updated dependencies [89aff56]

• Updated dependencies [41465fd]

• Updated dependencies [9754014]

• Updated dependencies [4bb73b0]

• Updated dependencies [2e44144]

  • @​ai-sdk/provider@​4.0.36
  • @​ai-sdk/provider-utils@​5.0.75

Changelog

Sourced from @​ai-sdk/google's changelog.

4.0.112

Patch Changes

• fd7e8a7: Preserve the order of text and complete function calls in streamed Google responses, including standalone thought signatures on empty text or reasoning parts.

  Keep provider metadata on empty text parts when converting results to response messages so it can be passed back in subsequent requests.

  Omit foreign-provider empty signature text when replaying history through Anthropic or Bedrock, preserving Bedrock’s existing native reasoning-history handling.

• ef2dfb5: fix: pass through seed: 0 instead of dropping it in image and video models. KlingAI now reports seed: 0 as an unsupported setting like any other seed.

• 892af4d: feat (provider/google): implement server-side realtime extensions

  GoogleRealtimeModel supports the existing getServerWebSocketConfig() contract, returning the unconstrained Gemini Live endpoint with resolved credential headers. Each server connection can create its own event parser. Reported gross token totals include thinking and tool-use counts, with cached input portions and available modality counts normalized without guessing missing values. Usage in a completion frame is attached to response-done; other snapshots use custom events with rawType: 'usageMetadata' and typed usage, preserving lifecycle ordering without inferring response associations.

• 3c6fb43: Forward explicit speech language codes to Gemini TTS for single- and multi-speaker requests, including the shared Vertex Gemini adapter. Omitted languages and language: 'auto' retain automatic detection without an unsupported-language warning.

• Updated dependencies [36802d4]

• Updated dependencies [e0143b0]

• Updated dependencies [934100c]

• Updated dependencies [892af4d]

• Updated dependencies [89aff56]

• Updated dependencies [41465fd]

• Updated dependencies [9754014]

• Updated dependencies [4bb73b0]

• Updated dependencies [2e44144]

  • @​ai-sdk/provider@​4.0.36
  • @​ai-sdk/provider-utils@​5.0.75

Commits

• bdc3f91 Version Packages (#24424)
• 892af4d feat (provider): server-side realtime extensions for RealtimeModelV4 (#16137)
• 3c6fb43 feat(provider/google): forward speech language to Gemini TTS (#17656)
• ef2dfb5 fix: pass through seed: 0 in image/video models (#24466)
• fd7e8a7 fix(google): preserve streamed tool ordering and signature history (#24349)
• See full diff in compare view

Updates @ai-sdk/openai-compatible from 3.0.84 to 3.0.85

Release notes

Sourced from @​ai-sdk/openai-compatible's releases.

@​ai-sdk/openai-compatible@​3.0.85

Patch Changes

• add01ab: fix(openai-compatible): keep raw verbosity provider option when textVerbosity is not set

  Previously, an unset textVerbosity always wrote verbosity: undefined to the request body, which silently dropped a raw verbosity passed through provider options. verbosity is now only written from textVerbosity when it has a value; textVerbosity still takes precedence when both are set.

• 5f19ea5: Accept inline text file data as text content, matching text files supplied as bytes or base64.

• Updated dependencies [36802d4]

• Updated dependencies [e0143b0]

• Updated dependencies [934100c]

• Updated dependencies [892af4d]

• Updated dependencies [89aff56]

• Updated dependencies [41465fd]

• Updated dependencies [9754014]

• Updated dependencies [4bb73b0]

• Updated dependencies [2e44144]

  • @​ai-sdk/provider@​4.0.36
  • @​ai-sdk/provider-utils@​5.0.75

Changelog

Sourced from @​ai-sdk/openai-compatible's changelog.

3.0.85

Patch Changes

• add01ab: fix(openai-compatible): keep raw verbosity provider option when textVerbosity is not set

  Previously, an unset textVerbosity always wrote verbosity: undefined to the request body, which silently dropped a raw verbosity passed through provider options. verbosity is now only written from textVerbosity when it has a value; textVerbosity still takes precedence when both are set.

• 5f19ea5: Accept inline text file data as text content, matching text files supplied as bytes or base64.

• Updated dependencies [36802d4]

• Updated dependencies [e0143b0]

• Updated dependencies [934100c]

• Updated dependencies [892af4d]

• Updated dependencies [89aff56]

• Updated dependencies [41465fd]

• Updated dependencies [9754014]

• Updated dependencies [4bb73b0]

• Updated dependencies [2e44144]

  • @​ai-sdk/provider@​4.0.36
  • @​ai-sdk/provider-utils@​5.0.75

Commits

• bdc3f91 Version Packages (#24424)
• 5f19ea5 fix(openai-compatible): accept inline text file data (#24306)
• add01ab fix(openai-compatible): keep raw verbosity provider option (#24445)
• See full diff in compare view

Updates @ai-sdk/openai from 4.0.108 to 4.0.109

Release notes

Sourced from @​ai-sdk/openai's releases.

@​ai-sdk/openai@​4.0.109

Patch Changes

• 27528db: Expose customTool through azure.tools for Azure Responses models, sharing the OpenAI custom tool factory and its raw string input support.

• 7bb309d: add memoryLimit and networkPolicy properties in codeInterpreter tool

• 7a90522: Add Secure MCP tunnel support to the OpenAI MCP tool via tunnelId. Tunnel targets cannot be combined with serverUrl or connectorId; existing URL and connector configurations remain compatible.

• 6549344: feat(openai): support GPT Image 2.6 models with complexity, markup-guided edits (markup), animated GIF output (outputFormat: 'gif', frameCount, frameDurationMs), and safetyIdentifier for image models

• 5f9bb8e: feat (provider/openai): forward the moderation option to /images/edits

• 934100c: Report the actual OpenAI Chat HTTP endpoint (also used by Azure Chat and Bedrock Mantle Chat) through optional request metadata and model-call end events. Record its host and port on OpenTelemetry chat spans without exposing URL credentials, paths, queries, or fragments. Expose only the sanitized HTTP origin in text and object generation results and step/finish callbacks. Providers that do not report an endpoint leave these attributes unset.

• 892af4d: feat (provider/openai): implement server-side realtime extensions

  OpenAIRealtimeModel now implements getServerWebSocketConfig(), returning the upstream realtime WebSocket URL for conversation and transcription intents plus header auth derived from the model's configured credentials. Dedicated transcription sessions serialize with session.type: "transcription" and the selected realtime model id. Translation is rejected until the normalized realtime codec supports its distinct wire protocol. The event mapper now populates normalized usage on response-done and input-transcription-completed (gross input/output token counts with cached portions reported separately; duration usage for duration-billed transcription).

  Transcription serialization honors the explicit transcription model and rejects unsupported output settings. Gross token totals and reported modality/cache counts are retained; duration uses seconds. OpenAI Live retains its existing connection API and rejects unsupported intents.

• 243bf22: Forward per-message providerOptions.openai.name on Chat Completions system, developer, user, and assistant messages. Validate names as strings and warn when configured on unsupported tool messages.

• 5cc6d28: Expose azure.tools.shell for local and hosted shell execution through the Azure Responses API.

• 41465fd: Expose optional transcription word timings separately from segments and accept shared timestampGranularities. Explicit provider timing settings take precedence. OpenAI now sends timestamp_granularities only with verbose_json and warns when a requested timing is unavailable or excluded.

• Updated dependencies [36802d4]

• Updated dependencies [e0143b0]

• Updated dependencies [934100c]

• Updated dependencies [892af4d]

• Updated dependencies [89aff56]

• Updated dependencies [41465fd]

• Updated dependencies [9754014]

• Updated dependencies [4bb73b0]

• Updated dependencies [2e44144]

  • @​ai-sdk/provider@​4.0.36
  • @​ai-sdk/provider-utils@​5.0.75

Changelog

Sourced from @​ai-sdk/openai's changelog.

4.0.109

Patch Changes

• 27528db: Expose customTool through azure.tools for Azure Responses models, sharing the OpenAI custom tool factory and its raw string input support.

• 7bb309d: add memoryLimit and networkPolicy properties in codeInterpreter tool

• 7a90522: Add Secure MCP tunnel support to the OpenAI MCP tool via tunnelId. Tunnel targets cannot be combined with serverUrl or connectorId; existing URL and connector configurations remain compatible.

• 6549344: feat(openai): support GPT Image 2.6 models with complexity, markup-guided edits (markup), animated GIF output (outputFormat: 'gif', frameCount, frameDurationMs), and safetyIdentifier for image models

• 5f9bb8e: feat (provider/openai): forward the moderation option to /images/edits

• 934100c: Report the actual OpenAI Chat HTTP endpoint (also used by Azure Chat and Bedrock Mantle Chat) through optional request metadata and model-call end events. Record its host and port on OpenTelemetry chat spans without exposing URL credentials, paths, queries, or fragments. Expose only the sanitized HTTP origin in text and object generation results and step/finish callbacks. Providers that do not report an endpoint leave these attributes unset.

• 892af4d: feat (provider/openai): implement server-side realtime extensions

  OpenAIRealtimeModel now implements getServerWebSocketConfig(), returning the upstream realtime WebSocket URL for conversation and transcription intents plus header auth derived from the model's configured credentials. Dedicated transcription sessions serialize with session.type: "transcription" and the selected realtime model id. Translation is rejected until the normalized realtime codec supports its distinct wire protocol. The event mapper now populates normalized usage on response-done and input-transcription-completed (gross input/output token counts with cached portions reported separately; duration usage for duration-billed transcription).

  Transcription serialization honors the explicit transcription model and rejects unsupported output settings. Gross token totals and reported modality/cache counts are retained; duration uses seconds. OpenAI Live retains its existing connection API and rejects unsupported intents.

• 243bf22: Forward per-message providerOptions.openai.name on Chat Completions system, developer, user, and assistant messages. Validate names as strings and warn when configured on unsupported tool messages.

• 5cc6d28: Expose azure.tools.shell for local and hosted shell execution through the Azure Responses API.

• 41465fd: Expose optional transcription word timings separately from segments and accept shared timestampGranularities. Explicit provider timing settings take precedence. OpenAI now sends timestamp_granularities only with verbose_json and warns when a requested timing is unavailable or excluded.

• Updated dependencies [36802d4]

• Updated dependencies [e0143b0]

• Updated dependencies [934100c]

• Updated dependencies [892af4d]

• Updated dependencies [89aff56]

• Updated dependencies [41465fd]

• Updated dependencies [9754014]

• Updated dependencies [4bb73b0]

• Updated dependencies [2e44144]

  • @​ai-sdk/provider@​4.0.36
  • @​ai-sdk/provider-utils@​5.0.75

Commits

• bdc3f91 Version Packages (#24424)
• 6549344 feat(openai): support GPT Image 2.6 models and image options (#24560)
• 892af4d feat (provider): server-side realtime extensions for RealtimeModelV4 (#16137)
• 5cc6d28 feat(provider/azure): add shell in azure Responses tools (#12959)
• 41465fd feat(ai): expose transcription word timings separately from segments (#23543)
• 243bf22 feat(openai): support Chat Completions message names (#11020)
• 7a90522 feat(openai): support Secure MCP tunnels (#17929)
• 27528db feat(provider/azure): custom tool in azure Responses tools (#12964)
• 7bb309d feat(provider/openai): add memoryLimit and networkPolicy in `codeInterpre...
• 5f9bb8e feat (provider/openai): forward the moderation option to /images/edits (#20745)
• Additional commits viewable in compare view

Updates ai from 7.0.162 to 7.0.163

Release notes

Sourced from ai's releases.

ai@7.0.163

Patch Changes

• 5d18351: fix(ai): detect downloaded audio types from bytes when servers return a generic or non-audio content type such as application/octet-stream

• 8da48db: Respect recordInputs and recordOutputs when delivering telemetry events to integrations and the ai:telemetry channel. Filter nested content and omit raw span results when content recording is disabled, while preserving application results.

• fd7e8a7: Preserve the order of text and complete function calls in streamed Google responses, including standalone thought signatures on empty text or reasoning parts.

  Keep provider metadata on empty text parts when converting results to response messages so it can be passed back in subsequent requests.

  Omit foreign-provider empty signature text when replaying history through Anthropic or Bedrock, preserving Bedrock’s existing native reasoning-history handling.

• 36802d4: Support native URL transcription with an optional provider capability, keeping existing file-generation contracts unchanged. Groq sends HTTP(S) audio URLs through its url parameter without downloading and re-uploading them, avoiding the attachment upload limit. Supplying a custom download function retains local download behavior.

  For telemetry integrations, TranscriptionEndEvent.audio.byteLength and audio.mediaType can now be undefined when a provider fetches the audio URL natively. Check for missing values before using them as a number or string. Downloaded and inline audio continue to report their metadata; streaming transcription metadata is unchanged.

  Strip media fragments before sending URLs to Groq. If Groq rejects a redirect, fall back to the existing secure local downloader and file upload rather than failing previously working URL inputs. Other provider errors are preserved.

• 933dae3: fix (ai): download deprecated file-url and image-url tool result content

  Tool result content parts that use the deprecated file-url and image-url types were converted to file parts with { type: 'url' } data, but they were never passed to the download function. When the model does not support the URL, the provider received a bare URL instead of the file contents, even though the replacement file part with { type: 'url' } data was downloaded and inlined.

  Downloaded legacy URL parts now use the same media type normalization as file parts, resolving generic types from the response header or image bytes. Legacy base64 data URLs also normalize to inline data with the media type from their data URL, matching replacement file parts.

• e0143b0: feat(ai): support provider-owned realtime transports

  Add an optional createTransport interface and provider connection capability.

• 934100c: Report the actual OpenAI Chat HTTP endpoint (also used by Azure Chat and Bedrock Mantle Chat) through optional request metadata and model-call end events. Record its host and port on OpenTelemetry chat spans without exposing URL credentials, paths, queries, or fragments. Expose only the sanitized HTTP origin in text and object generation results and step/finish callbacks. Providers that do not report an endpoint leave these attributes unset.

• c389374: fix(ai): infer union output types when passing a union of schemas to Output.object and Output.array

  Previously, passing a schema whose type is a union of schemas (e.g. a schema selected from a map at runtime) failed to type-check because the output type was inferred from the first union member only. The output type is now inferred as the union of the schemas' output types.

• 892af4d: feat (ai): re-export realtime server-connection and usage types

  Adds Experimental_RealtimeServerConnection, Experimental_RealtimeSessionIntent, and Experimental_RealtimeUsage aliases for the new experimental RealtimeModelV4 server-side spec types.

• 1a1da8d: stream steering messages to the ui and keep them in converted messages

• 41465fd: Expose optional transcription word timings separately from segments and accept shared timestampGranularities. Explicit provider timing settings take precedence. OpenAI now sends timestamp_granularities only with verbose_json and warns when a requested timing is unavailable or excluded.

• 9754014: Add typed streaming heartbeat parts. Anthropic emits them only with includePings: true (disabled by default), without requiring raw chunks. Core forwards pings through stream retries without storing them as generated content or sending them to UI message streams. Consumers with exhaustive stream-part switches must handle the new ping union variant when upgrading, even when the opt-in is disabled. Typed pings do not flush partial words during stream smoothing.

• 2e44144: Represent videos delivered directly to caller-managed storage with an explicit uploaded outcome. Video generation reports uploadedVideos without downloading or synthesizing video bytes; access video only when videos is nonempty.

• Updated dependencies [722d4a9]

• Updated dependencies [acea2b5]

• Updated dependencies [89aff56]

... (truncated)

Changelog

Sourced from ai's changelog.

7.0.163

Patch Changes

• 5d18351: fix(ai): detect downloaded audio types from bytes when servers return a generic or non-audio content type such as application/octet-stream

• 8da48db: Respect recordInputs and recordOutputs when delivering telemetry events to integrations and the ai:telemetry channel. Filter nested content and omit raw span results when content recording is disabled, while preserving application results.

• fd7e8a7: Preserve the order of text and complete function calls in streamed Google responses, including standalone thought signatures on empty text or reasoning parts.

  Keep provider metadata on empty text parts when converting results to response messages so it can be passed back in subsequent requests.

  Omit foreign-provider empty signature text when replaying history through Anthropic or Bedrock, preserving Bedrock’s existing native reasoning-history handling.

• 36802d4: Support native URL transcription with an optional provider capability, keeping existing file-generation contracts unchanged. Groq sends HTTP(S) audio URLs through its url parameter without downloading and re-uploading them, avoiding the attachment upload limit. Supplying a custom download function retains local download behavior.

  For telemetry integrations, TranscriptionEndEvent.audio.byteLength and audio.mediaType can now be undefined when a provider fetches the audio URL natively. Check for missing values before using them as a number or string. Downloaded and inline audio continue to report their metadata; streaming transcription metadata is unchanged.

  Strip media fragments before sending URLs to Groq. If Groq rejects a redirect, fall back to the existing secure local downloader and file upload rather than failing previously working URL inputs. Other provider errors are preserved.

• 933dae3: fix (ai): download deprecated file-url and image-url tool result content

  Tool result content parts that use the deprecated file-url and image-url types were converted to file parts with { type: 'url' } data, but they were never passed to the download function. When the model does not support the URL, the provider received a bare URL instead of the file contents, even though the replacement file part with { type: 'url' } data was downloaded and inlined.

  Downloaded legacy URL parts now use the same media type normalization as file parts, resolving generic types from the response header or image bytes. Legacy base64 data URLs also normalize to inline data with the media type from their data URL, matching replacement file parts.

• e0143b0: feat(ai): support provider-owned realtime transports

  Add an optional createTransport interface and provider connection capability.

• 934100c: Report the actual OpenAI Chat HTTP endpoint (also used by Azure Chat and Bedrock Mantle Chat) through optional request metadata and model-call end events. Record its host and port on OpenTelemetry chat spans without exposing URL credentials, paths, queries, or fragments. Expose only the sanitized HTTP origin in text and object generation results and step/finish callbacks. Providers that do not report an endpoint leave these attributes unset.

• c389374: fix(ai): infer union output types when passing a union of schemas to Output.object and Output.array

  Previously, passing a schema whose type is a union of schemas (e.g. a schema selected from a map at runtime) failed to type-check because the output type was inferred from the first union member only. The output type is now inferred as the union of the schemas' output types.

• 892af4d: feat (ai): re-export realtime server-connection and usage types

  Adds Experimental_RealtimeServerConnection, Experimental_RealtimeSessionIntent, and Experimental_RealtimeUsage aliases for the new experimental RealtimeModelV4 server-side spec types.

• 1a1da8d: stream steering messages to the ui and keep them in converted messages

• 41465fd: Expose optional transcription word timings separately from segments and accept shared timestampGranularities. Explicit provider timing settings take precedence. OpenAI now sends timestamp_granularities only with verbose_json and warns when a requested timing is unavailable or excluded.

• 9754014: Add typed streaming heartbeat parts. Anthropic emits them only with includePings: true (disabled by default), without requiring raw chunks. Core forwards pings through stream retries without storing them as generated content or sending them to UI message streams. Consumers with exhaustive stream-part switches must handle the new ping union variant when upgrading, even when the opt-in is disabled. Typed pings do not flush partial words during stream smoothing.

• 2e44144: Represent videos delivered directly to caller-managed storage with an explicit uploaded outcome. Video generation reports uploadedVideos without downloading or synthesizing video bytes; access video only when videos is nonempty.

• Updated dependencies [722d4a9]

• Updated dependencies [acea2b5]

... (truncated)

Commits

• bdc3f91 Version Packages (#24424)
• 892af4d feat (provider): server-side realtime extensions for RealtimeModelV4 (#16137)
• 9754014 feat(anthropic): forward streaming ping events by introducing new stream part...
• c389374 fix(ai): infer union output types (#24513)
• 36802d4 feat(groq): support native URL transcription (#24475)
• 1a1da8d feat(ai): stream steering messages to the ui (#24405)
• 2e44144 feat(xai): add support for video output.upload_url delivery (#17496)
• 41465fd feat(ai): expose transcription word timings separately from segments (#23543)
• 5d18351 fix: detect audio formats when URL downloads return a generic content type (#...
• 8da48db fix(ai): honor telemetry recording flags in tracing channel (#24504)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions