Skip to content

chore(deps): update dependency ai to v6.0.172#3226

Merged
renovate[bot] merged 1 commit intomainfrom
renovate/ai-6.x-lockfile
Apr 30, 2026
Merged

chore(deps): update dependency ai to v6.0.172#3226
renovate[bot] merged 1 commit intomainfrom
renovate/ai-6.x-lockfile

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 30, 2026

This PR contains the following updates:

Package Change Age Confidence
ai (source) 6.0.1706.0.172 age confidence

Release Notes

vercel/ai (ai)

v6.0.172

Compare Source

v6.0.171

Compare Source

Patch Changes
  • 48f842a: fix(ai): enforce callOptionsSchema at runtime in ToolLoopAgent

    ToolLoopAgentSettings.callOptionsSchema was declared and documented as a runtime schema for options, but tool-loop-agent.ts never invoked it. Any invariant a developer encoded in the schema was silently bypassed at runtime, and unchecked options flowed straight into prepareCall and any instructions template that interpolated them.

    ToolLoopAgent.prepareCall now validates caller-supplied options against callOptionsSchema (when set) via safeValidateTypes, throwing InvalidArgumentError on failure before forwarding to prepareCall / generateText / streamText.

  • a727da4: chore: ensure consistent import handling and avoid import duplicates or cycles

  • 5fee301: fix(mcp): prevent prototype pollution by using secureJsonParse

  • Updated dependencies [a727da4]


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot enabled auto-merge (squash) April 30, 2026 22:00
@github-actions github-actions Bot added the type: chore Routine tasks like conversions, reorganization, and maintenance work. label Apr 30, 2026
@renovate renovate Bot merged commit 0321464 into main Apr 30, 2026
10 checks passed
@renovate renovate Bot deleted the renovate/ai-6.x-lockfile branch April 30, 2026 22:03
xihale pushed a commit to xihale/forgecode that referenced this pull request May 3, 2026
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: chore Routine tasks like conversions, reorganization, and maintenance work.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants