Skip to content

chore(deps): bump jsondiffpatch and ai#7

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-a1b0a7c9d5
Closed

chore(deps): bump jsondiffpatch and ai#7
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-a1b0a7c9d5

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Removes jsondiffpatch. It's no longer used after updating ancestor dependency ai. These dependencies need to be updated together.

Removes jsondiffpatch

Updates ai from 4.3.19 to 6.0.191

Release notes

Sourced from ai's releases.

ai@6.0.191

Patch Changes

  • Updated dependencies [27a1b22]
    • @​ai-sdk/gateway@​3.0.120

ai@6.0.190

Patch Changes

  • Updated dependencies [33b10a2]
  • Updated dependencies [f6e4146]
    • @​ai-sdk/gateway@​3.0.119

ai@6.0.189

Patch Changes

  • 356c3cf: fix(ai): make input optional on input-streaming UIMessagePart variants

ai@6.0.188

Patch Changes

  • c98715a: Add allowSystemInMessages option to ToolLoopAgent.

    This exposes the same option that exists on streamText and generateText, whether role: "system" messages are allowed in the prompt or messages fields. When unset, system messages are rejected because they can create a prompt injection attack risk. Ideally, use the instructions option instead. Set to true to allow system messages, or false to explicitly reject them.

    const agent = new ToolLoopAgent({
      model,
      allowSystemInMessages: true,
    });
    await agent.generate({
    messages: [
    { role: "system", content: "Server context" },
    { role: "user", content: "Hello" },
    ],
    });

    The option can also be returned from prepareCall for dynamic per-call configuration.

ai@5.0.192

Patch Changes

  • Updated dependencies [544fbab]
  • Updated dependencies [1bdb6f7]
    • @​ai-sdk/gateway@​2.0.93
Changelog

Sourced from ai's changelog.

6.0.191

Patch Changes

  • Updated dependencies [27a1b22]
    • @​ai-sdk/gateway@​3.0.120

6.0.190

Patch Changes

  • Updated dependencies [33b10a2]
  • Updated dependencies [f6e4146]
    • @​ai-sdk/gateway@​3.0.119

6.0.189

Patch Changes

  • 356c3cf: fix(ai): make input optional on input-streaming UIMessagePart variants

6.0.188

Patch Changes

  • c98715a: Add allowSystemInMessages option to ToolLoopAgent.

    This exposes the same option that exists on streamText and generateText, whether role: "system" messages are allowed in the prompt or messages fields. When unset, system messages are rejected because they can create a prompt injection attack risk. Ideally, use the instructions option instead. Set to true to allow system messages, or false to explicitly reject them.

    const agent = new ToolLoopAgent({
      model,
      allowSystemInMessages: true,
    });
    await agent.generate({
    messages: [
    { role: "system", content: "Server context" },
    { role: "user", content: "Hello" },
    ],
    });

    The option can also be returned from prepareCall for dynamic per-call configuration.

6.0.187

Patch Changes

  • Updated dependencies [6f4bb06]

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ai since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [jsondiffpatch](https://github.com/benjamine/jsondiffpatch). It's no longer used after updating ancestor dependency [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai). These dependencies need to be updated together.


Removes `jsondiffpatch`

Updates `ai` from 4.3.19 to 6.0.191
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/ai@6.0.191/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@6.0.191/packages/ai)

---
updated-dependencies:
- dependency-name: jsondiffpatch
  dependency-version:
  dependency-type: indirect
- dependency-name: ai
  dependency-version: 6.0.191
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 25, 2026

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@paolovalletta-exelab
Copy link
Copy Markdown
Contributor

Superseded by #8 (ai-sdk group), which is the proper full-scope bump for ai v4 -> v6 along with the three @ai-sdk/* provider majors. Left aside in #16 since it requires dedicated review on ai-gateway.

@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github May 25, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/multi-a1b0a7c9d5 branch May 25, 2026 14:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant