deps(example): bump the dependencies group across 1 directory with 3 updates #1228

dependabot · 2024-07-30T19:21:36Z

Bumps the dependencies group with 3 updates in the /examples/nextjs-14-openai directory: ai, openai and tailwindcss.

Updates ai from 3.2.35 to 3.2.40

Release notes

ai@3.2.40

Patch Changes

f56b7e66: feat (ai/ui): add toDataStreamResponse to LangchainAdapter.

ai@3.2.39

Patch Changes

b694f2f9: feat (ai/svelte): add tool calling support to useChat

Updated dependencies [b694f2f9]

@ai-sdk/svelte@0.0.26

ai@3.2.38

Patch Changes

5c4b8cfc: chore (ai/core): rename ai stream methods to data stream (in streamText, LangChainAdapter).

c450fcf7: feat (ui): invoke useChat onFinish with finishReason and tokens

e4a1719f: chore (ai/ui): rename streamMode to streamProtocol

10158bf2: fix (ai/core): generateObject.doGenerate sets object telemetry attribute

Updated dependencies [c450fcf7]

Updated dependencies [e4a1719f]

@ai-sdk/ui-utils@0.0.21

@ai-sdk/svelte@0.0.25

@ai-sdk/react@0.0.31

@ai-sdk/solid@0.0.24

@ai-sdk/vue@0.0.25

ai@3.2.37

Patch Changes

b2bee4c5: fix (ai/ui): send data, body, headers in useChat().reload

Updated dependencies [b2bee4c5]

@ai-sdk/svelte@0.0.24

@ai-sdk/react@0.0.30

@ai-sdk/solid@0.0.23

ai@3.2.36

Patch Changes

a8d1c9e9: feat (ai/core): parallel image download

cfa360a8: feat (ai/core): add telemetry support to embedMany function.

49808ca5: feat (ai/core): add telemetry to streamObject

Updated dependencies [a8d1c9e9]

@ai-sdk/provider-utils@1.0.5

@ai-sdk/provider@0.0.14

@ai-sdk/react@0.0.29

@ai-sdk/svelte@0.0.23

@ai-sdk/ui-utils@0.0.20

@ai-sdk/vue@0.0.24

@ai-sdk/solid@0.0.22

Commits

72626a2 Version Packages (#2476)
66011be fix (provider/mistral): fix tool calling (#2481)
f56b7e6 feat (ai/ui): add toDataStreamResponse to LangchainAdapter. (#2475)
de29ee5 fix (docs): fix packages/core readme typo (#2472)
0685258 examples (fastapi): set x-vercel-ai-data-stream to v1 (#2471)
0ec1b11 fix (docs): add Svelte support for chatbot with tool calls (#2469)
1374eb5 Version Packages (#2468)
85df478 fix (build): change name/version of fastapi package (#2467)
b694f2f feat (ai/svelte): add tool calling support to useChat (#2466)
3c54750 examples (fastapi): add example for python as backend (#2458)
Additional commits viewable in compare view

Updates openai from 4.53.0 to 4.53.2

Release notes

Sourced from openai's releases.

v4.53.2

4.53.2 (2024-07-26)

Full Changelog: v4.53.1...v4.53.2

Chores

docs: fix incorrect client var names (#955) (cc91be8)

v4.53.1

4.53.1 (2024-07-25)

Full Changelog: v4.53.0...v4.53.1

Bug Fixes

compat: remove ReadableStream polyfill redundant since node v16 (#954) (78b2a83)

Chores

tests: update prism version (#948) (9202c91)

Changelog

Sourced from openai's changelog.

4.53.2 (2024-07-26)

Full Changelog: v4.53.1...v4.53.2

Chores

docs: fix incorrect client var names (#955) (cc91be8)

4.53.1 (2024-07-25)

Full Changelog: v4.53.0...v4.53.1

Bug Fixes

compat: remove ReadableStream polyfill redundant since node v16 (#954) (78b2a83)

Chores

tests: update prism version (#948) (9202c91)

Commits

e258161 release: 4.53.2
f696b2a chore(docs): fix incorrect client var names (#955)
83c1d17 release: 4.53.1
f7b3584 fix(compat): remove ReadableStream polyfill redundant since node v16 (#954)
5b76771 chore(tests): update prism version (#948)
See full diff in compare view

Updates tailwindcss from 3.4.6 to 3.4.7

Release notes

Sourced from tailwindcss's releases.

v3.4.7

Fixed

Fix class detection in Slim templates with attached attributes and ID (#14019)

Ensure attribute values in data-* and aria-* modifiers are always quoted in the generated CSS (#14037)

Changelog

Sourced from tailwindcss's changelog.

[3.4.7] - 2024-07-25

Fixed

Fix class detection in Slim templates with attached attributes and ID (#14019)

Ensure attribute values in data-* and aria-* modifiers are always quoted in the generated CSS (#14037)

Commits

9824cb6 Update version in package.json
aa6c10f Add missing heading to changelog
245058c Update changelog for v3.4.7
605d8cd Update CHANGELOG.md
680c55c Normalize attribute selector for data-* and aria-* modifiers (#14037)
866860e Print eventual lightning CSS parsing errors when the CSS matcher fail (#14034)
bdc87ae Fix class detection in Slim templates with attached attributes and IDs (#14019)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates Bumps the dependencies group with 3 updates in the /examples/nextjs-14-openai directory: [ai](https://github.com/vercel/ai), [openai](https://github.com/openai/openai-node) and [tailwindcss](https://github.com/tailwindlabs/tailwindcss). Updates `ai` from 3.2.35 to 3.2.40 - [Release notes](https://github.com/vercel/ai/releases) - [Commits](https://github.com/vercel/ai/compare/ai@3.2.35...ai@3.2.40) Updates `openai` from 4.53.0 to 4.53.2 - [Release notes](https://github.com/openai/openai-node/releases) - [Changelog](https://github.com/openai/openai-node/blob/master/CHANGELOG.md) - [Commits](openai/openai-node@v4.53.0...v4.53.2) Updates `tailwindcss` from 3.4.6 to 3.4.7 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/v3.4.7/CHANGELOG.md) - [Commits](tailwindlabs/tailwindcss@v3.4.6...v3.4.7) --- updated-dependencies: - dependency-name: ai dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: openai dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: tailwindcss dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

trunk-io · 2024-07-30T19:21:39Z

😎 Merged successfully - details.

socket-security · 2024-07-30T19:22:06Z

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/ai@3.2.40	environment, network Transitive: eval, unsafe	`+45`	26.7 MB	vercel-release-bot
npm/openai@4.53.2	Transitive: network	`+12`	7.48 MB	dschnurr, dschnurr-openai, jeevnayak, ...2 more

🚮 Removed packages: npm/ai@3.2.35, npm/openai@4.53.0, npm/tailwindcss@3.4.6

View full report↗︎

socket-security · 2024-07-30T19:22:10Z

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring: npm/ai@3.2.40

[**View full report↗︎**](https://socket.dev/dashboard/org/arcjet/diff/5394f5e5-5a2c-46cb-b390-fefd1fb53bf2/a4729dcc-07f9-4f11-a8a8-624b1fa0be8d) ### Next steps

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

blaine-arcjet · 2024-07-30T20:09:12Z

@SocketSecurity ignore npm/ai@3.2.40

dependabot bot requested a review from a team as a code owner July 30, 2024 19:21

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 30, 2024

dependabot bot requested a review from blaine-arcjet July 30, 2024 19:21

dependabot bot assigned blaine-arcjet Jul 30, 2024

dependabot bot mentioned this pull request Jul 30, 2024

deps(example): bump the dependencies group across 1 directory with 3 updates #1219

Closed

blaine-arcjet approved these changes Jul 30, 2024

View reviewed changes

trunk-io bot merged commit d2fb68a into main Jul 30, 2024
20 checks passed

trunk-io bot deleted the dependabot/npm_and_yarn/examples/nextjs-14-openai/dependencies-8e4d26851b branch July 30, 2024 20:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps(example): bump the dependencies group across 1 directory with 3 updates #1228

deps(example): bump the dependencies group across 1 directory with 3 updates #1228

dependabot bot commented on behalf of github Jul 30, 2024

trunk-io bot commented Jul 30, 2024 •

edited

Loading

socket-security bot commented Jul 30, 2024 •

edited

Loading

socket-security bot commented Jul 30, 2024 •

edited

Loading

blaine-arcjet commented Jul 30, 2024

deps(example): bump the dependencies group across 1 directory with 3 updates #1228

deps(example): bump the dependencies group across 1 directory with 3 updates #1228

Conversation

dependabot bot commented on behalf of github Jul 30, 2024

ai@3.2.40

Patch Changes

ai@3.2.39

Patch Changes

ai@3.2.38

Patch Changes

ai@3.2.37

Patch Changes

ai@3.2.36

Patch Changes

v4.53.2

4.53.2 (2024-07-26)

Chores

v4.53.1

4.53.1 (2024-07-25)

Bug Fixes

Chores

4.53.2 (2024-07-26)

Chores

4.53.1 (2024-07-25)

Bug Fixes

Chores

v3.4.7

Fixed

[3.4.7] - 2024-07-25

Fixed

trunk-io bot commented Jul 30, 2024 • edited Loading

socket-security bot commented Jul 30, 2024 • edited Loading

socket-security bot commented Jul 30, 2024 • edited Loading

blaine-arcjet commented Jul 30, 2024

trunk-io bot commented Jul 30, 2024 •

edited

Loading

socket-security bot commented Jul 30, 2024 •

edited

Loading

socket-security bot commented Jul 30, 2024 •

edited

Loading