Skip to content

chore(deps, agent-service): update agent-service patch updates - #7263

Merged
aglinxinyuan merged 2 commits into
apache:mainfrom
renovate-bot:renovate/agent-service-patch-updates
Aug 3, 2026
Merged

chore(deps, agent-service): update agent-service patch updates#7263
aglinxinyuan merged 2 commits into
apache:mainfrom
renovate-bot:renovate/agent-service-patch-updates

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@ai-sdk/openai (source) 4.0.17 → 4.0.27 age confidence
ai (source) 7.0.33 → 7.0.48 age confidence
tsx (source) 4.23.1 → 4.23.5 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

vercel/ai (@​ai-sdk/openai)

v4.0.27

Compare Source

Patch Changes

v4.0.26

Compare Source

Patch Changes

v4.0.25

Compare Source

Patch Changes

  • beaecb3: fix(provider/openai): resolve responses doStream at response.in_progress instead of first output token

    The early-stream-error peek treated response.in_progress as an unknown chunk, so doStream did not resolve until the first output item arrived — delaying stream availability (and downstream TTFB for proxies/gateways) by the model's full time-to-first-token. response.in_progress is now modeled in the chunk schema and marks the request as accepted: the peek keeps watching for error frames for a short grace window (50ms) so quota/rate-limit errors flushed alongside response.in_progress still throw as retryable APICallErrors, while healthy streams become available right after upstream acknowledges the request.

  • b192878: feat: add experimental_toolCaller routing to generateText for code mode

  • Updated dependencies [d8210b6]

  • Updated dependencies [b192878]

v4.0.24

Compare Source

Patch Changes

v4.0.23

Compare Source

Patch Changes
  • 96a237d: Add blocked domain filters to the OpenAI and Azure Responses API web search tools.

v4.0.22

Compare Source

Patch Changes
  • c49380c: feat: add experimental streaming speech translation models (openai.translation('gpt-realtime-translate') over the OpenAI Realtime translations WebSocket and google.translation('gemini-3.5-live-translate-preview') over the Gemini Live API). connectToWebSocket in @ai-sdk/provider-utils now passes close code and reason to onClose (additive, optional parameter).
  • Updated dependencies [0c464d9]
  • Updated dependencies [c49380c]

v4.0.21

Compare Source

Patch Changes

v4.0.20

Compare Source

Patch Changes
  • 1f6dd3a: Add OpenAI Responses Programmatic Tool Calling with hosted program tools, function caller controls, structured output schemas, and multi-step continuation support.

v4.0.19

Compare Source

Patch Changes
  • 34c53c0: Apply reasoning, service tier, and image defaults to recognizable future OpenAI model family versions.

v4.0.18

Compare Source

Patch Changes
  • bc43dc2: Preserve stored tool search output item IDs from provider metadata.
vercel/ai (ai)

v7.0.48

Compare Source

Patch Changes

v7.0.47

Compare Source

Patch Changes

v7.0.46

Compare Source

Patch Changes

v7.0.45

Compare Source

Patch Changes

v7.0.44

Compare Source

Patch Changes
  • 015acb4: fix telemetry attribution for language model calls that resolve to a different response model

v7.0.43

Compare Source

Patch Changes

v7.0.42

Compare Source

Patch Changes
  • 1659cd5: Prevent validated downloads on Node.js from reaching private or internal services through DNS aliases or DNS rebinding by validating and pinning every resolved address at connection time.
  • 60f97f6: support overriding model call settings for individual prepareStep invocations
  • 6a5bdff: Fix validated Node.js downloads when the HTTP connector requests a single DNS address.
  • 6de2ec1: Preserve provider metadata from empty text deltas in streamText.
  • Updated dependencies [1659cd5]
  • Updated dependencies [6a5bdff]
  • Updated dependencies [0012529]

v7.0.41

Compare Source

Patch Changes
  • 2e2224b: Route the warning system information banner to stderr so it does not corrupt application output written to stdout.
  • Updated dependencies [bf216b3]

v7.0.40

Compare Source

Patch Changes
  • c3782a6: Deprecate Experimental_GeneratedImage in favor of GeneratedFile.

v7.0.39

Compare Source

Patch Changes

v7.0.38

Compare Source

Patch Changes

v7.0.37

Compare Source

Patch Changes

v7.0.36

Compare Source

Patch Changes

  • 7fa85b2: fix(ai): use injective serialization for tool approval HMAC payload

    The tool approval signature (experimental_toolApprovalSecret) built its HMAC
    payload by joining fields with \n. Because fields such as toolName and
    toolCallId can themselves contain a newline, distinct field tuples could
    serialize to identical bytes, allowing a signed approval to verify against a
    different tuple. The payload is now serialized with JSON.stringify (with a
    versioned domain-separation prefix), which escapes delimiter/control characters
    and makes the encoding injective.

    Verification remains backwards compatible: a signature in the old format still
    verifies, but only when no field contains the \n delimiter (the condition
    that made the old format ambiguous), so a pending approval that straddles an
    upgrade is not rejected while the collision stays closed.

v7.0.35

Compare Source

Patch Changes
  • 7f6650b: Return response piping promises so callers can catch stream read and write errors.
  • 106ea59: feat(ai): add per-step first content timeout for streaming generations
  • Updated dependencies [2112ff1]

v7.0.34

Compare Source

Patch Changes
privatenumber/tsx (tsx)

v4.23.5

Compare Source

v4.23.4

Compare Source

Bug Fixes
  • cli: allow async process.once() signal handlers to finish (#​827) (2afc7bb)

This release is also available on:

v4.23.3

Compare Source

Bug Fixes

This release is also available on:

v4.23.2

Compare Source

Configuration

📅 Schedule: (in timezone Etc/UTC)

  • Branch creation
    • "before 8am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate Bot added the dependencies Pull requests that update a dependency file label Aug 3, 2026
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

Automated Reviewer Suggestions

Based on the git blame history of the changed files, we recommend the following reviewers:

  • No candidates found from git blame history.

@codecov-commenter

codecov-commenter commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.73%. Comparing base (1dc78e9) to head (5a26544).

Additional details and impacted files 
@@            Coverage Diff            @@
##               main    #7263   +/-   ##
=========================================
  Coverage     82.73%   82.73%           
  Complexity     4090     4090           
=========================================
  Files          1162     1162           
  Lines         46302    46302           
  Branches       5162     5162           
=========================================
  Hits          38309    38309           
  Misses         6302     6302           
  Partials       1691     1691
Flag Coverage Δ *Carryforward flag
access-control-service 70.00% <ø> (ø) Carriedforward from 1dc78e9
agent-service 83.65% <ø> (ø)
amber 79.53% <ø> (ø) Carriedforward from 1dc78e9
computing-unit-managing-service 43.60% <ø> (ø) Carriedforward from 1dc78e9
config-service 65.97% <ø> (ø) Carriedforward from 1dc78e9
file-service 67.74% <ø> (ø) Carriedforward from 1dc78e9
frontend 83.55% <ø> (ø) Carriedforward from 1dc78e9
notebook-migration-service 78.89% <ø> (ø) Carriedforward from 1dc78e9
pyamber 97.36% <ø> (ø) Carriedforward from 1dc78e9
workflow-compiling-service 26.31% <ø> (ø) Carriedforward from 1dc78e9

*This pull request uses carry forward flags. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@aglinxinyuan
aglinxinyuan requested a review from Copilot August 3, 2026 00:30
Copilot AI reviewed Aug 3, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates a small set of agent-service NPM dependencies (patch-level Renovate bumps) and keeps the lockfile and bundled-license inventory in sync so the agent-service build and licensing drift checks remain consistent.

Changes:

  • Bump @ai-sdk/openai from 4.0.17 to 4.0.27 and ai from 7.0.33 to 7.0.48.
  • Bump tsx from 4.23.1 to 4.23.5.
  • Update bun.lock and agent-service/LICENSE-binary to reflect the resolved dependency graph changes (including new undici@7.29.0 via @ai-sdk/provider-utils).

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File Description
agent-service/package.json Updates direct dependency versions for the agent-service.
agent-service/bun.lock Updates resolved dependency versions/hashes to match the new direct versions.
agent-service/LICENSE-binary Updates the bundled third-party dependency inventory to match the new resolved set (incl. undici).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@forking-renovate

forking-renovate Bot commented Aug 3, 2026

Copy link
Copy Markdown

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate-bot and others added 2 commits August 2, 2026 20:37
@renovate-bot @aglinxinyuan
chore(deps, agent-service): update agent-service patch updates
1f5c606
@aglinxinyuan
chore(deps, agent-service): sync LICENSE-binary with bumped npm deps
5a26544 
ai 7.0.48 pulls in undici@7.29.0 (MIT) as a new bundled transitive
dep, and the ai-sdk packages moved versions. Refresh the claimed
versions and add the undici bullet so check_binary_deps.py passes.
@aglinxinyuan
aglinxinyuan force-pushed the renovate/agent-service-patch-updates branch from f178b90 to 5a26544 Compare August 3, 2026 03:37
@aglinxinyuan
aglinxinyuan enabled auto-merge August 3, 2026 03:39
@aglinxinyuan
aglinxinyuan added this pull request to the merge queue Aug 3, 2026
Merged via the queue into apache:main with commit 5637427 Aug 3, 2026
21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments
@aglinxinyuan aglinxinyuan aglinxinyuan approved these changes

Assignees

@renovate-bot renovate-bot

Labels

agent-service dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@renovate-bot @codecov-commenter @aglinxinyuan