fix(deps): update dependency ai to v5.0.154 by renovate[bot] · Pull Request #8449 · prisma/prisma-examples

c66afc5: fix(security): validate redirect targets in download functions to prevent SSRF bypass

download now validates the final URL after following HTTP redirects, preventing attackers from bypassing SSRF protections via open redirects to internal/private addresses.

`v5.0.148`

Compare Source

Patch Changes

Updated dependencies [392dc94]
- @ai-sdk/gateway@2.0.54

`v5.0.147`

Compare Source

Patch Changes

Updated dependencies [7a57a71]
- @ai-sdk/gateway@2.0.53

`v5.0.146`

Compare Source

Patch Changes

6a2f01b: Add URL validation to download to prevent blind SSRF attacks. Private/internal IP addresses, localhost, and non-HTTP protocols are now rejected before fetching.
Updated dependencies [6a2f01b]
Updated dependencies [17d64e3]
- @ai-sdk/provider-utils@3.0.22
- @ai-sdk/gateway@2.0.52

`v5.0.145`

Compare Source

Patch Changes

Updated dependencies [201bb12]
- @ai-sdk/gateway@2.0.51

`v5.0.144`

Compare Source

Patch Changes

Updated dependencies [c4a324b]
- @ai-sdk/gateway@2.0.50

`v5.0.143`

Compare Source

Patch Changes

Updated dependencies [4fa740a]
- @ai-sdk/gateway@2.0.49

`v5.0.142`

Compare Source

Patch Changes

Updated dependencies [8ea21c1]
- @ai-sdk/gateway@2.0.48

`v5.0.141`

Compare Source

Patch Changes

Updated dependencies [4db4318]
- @ai-sdk/gateway@2.0.47

`v5.0.140`

Compare Source

Patch Changes

Updated dependencies [3749ed6]
- @ai-sdk/gateway@2.0.46

`v5.0.139`

Compare Source

Patch Changes

Updated dependencies [9212b2d]
- @ai-sdk/gateway@2.0.45

`v5.0.138`

Compare Source

Patch Changes

Updated dependencies [42815ac]
- @ai-sdk/gateway@2.0.44

`v5.0.137`

Compare Source

Patch Changes

Updated dependencies [5e921ed]
- @ai-sdk/gateway@2.0.43

`v5.0.136`

Compare Source

Patch Changes

Updated dependencies [9baf5ea]
- @ai-sdk/gateway@2.0.42

`v5.0.135`

Compare Source

Patch Changes

Updated dependencies [fe42fd3]
Updated dependencies [8b5473c]
- @ai-sdk/gateway@2.0.41

`v5.0.134`

Compare Source

Patch Changes

Updated dependencies [9545c46]
- @ai-sdk/gateway@2.0.40

`v5.0.133`

Compare Source

Patch Changes

Updated dependencies [b4ac032]
- @ai-sdk/gateway@2.0.39

`v5.0.132`

Compare Source

Patch Changes

Updated dependencies [8aac221]
- @ai-sdk/gateway@2.0.38

`v5.0.131`

Compare Source

Patch Changes

Updated dependencies [3f04ffe]
- @ai-sdk/gateway@2.0.37

`v5.0.130`

Compare Source

Patch Changes

20565b8: security: prevent unbounded memory growth in download functions

The download() and downloadBlob() functions now enforce a default 2 GiB size limit when downloading from user-provided URLs. Downloads that exceed this limit are aborted with a DownloadError instead of consuming unbounded memory and crashing the process. The abortSignal parameter is now passed through to fetch() in all download call sites.

Added download option to transcribe() and experimental_generateVideo() for providing a custom download function. Use the new createDownload({ maxBytes }) factory to configure download size limits.
Updated dependencies [20565b8]
- @ai-sdk/provider-utils@3.0.21
- @ai-sdk/gateway@2.0.36

`v5.0.129`

Patch Changes

Updated dependencies [a207442]
- @ai-sdk/gateway@2.0.35

`v5.0.128`

Patch Changes

Updated dependencies [7e6c81a]
- @ai-sdk/gateway@2.0.34

`v5.0.127`

Patch Changes

Updated dependencies [db2e810]
- @ai-sdk/gateway@2.0.33

`v5.0.126`

Compare Source

Patch Changes

Updated dependencies [beba89c]
- @ai-sdk/gateway@2.0.32

`v5.0.125`

Compare Source

Patch Changes

Updated dependencies [8d8fdd2]
- @ai-sdk/gateway@2.0.31

`v5.0.124`

Compare Source

Patch Changes

Updated dependencies [fad90dd]
Updated dependencies [8479fe8]
Updated dependencies [0d3fc21]
Updated dependencies [53e891c]
- @ai-sdk/gateway@2.0.30

`v5.0.123`

Compare Source

Patch Changes

Updated dependencies [5253b83]
- @ai-sdk/gateway@2.0.29

`v5.0.122`

Compare Source

Patch Changes

Updated dependencies [9158228]
- @ai-sdk/gateway@2.0.28

`v5.0.121`

Compare Source

Patch Changes

Updated dependencies [74676fa]
- @ai-sdk/gateway@2.0.27

`v5.0.120`

Compare Source

Patch Changes

Updated dependencies [655377e]
- @ai-sdk/gateway@2.0.26

`v5.0.119`

Compare Source

Patch Changes

Updated dependencies [f6b46d2]
- @ai-sdk/gateway@2.0.25

`v5.0.118`

Compare Source

Patch Changes

42bad72: https://ai-sdk.dev -> https://v5.ai-sdk.dev

`v5.0.117`

Compare Source

Patch Changes

4953414: fix: trigger new release for @ai-v5 dist-tag
Updated dependencies [4953414]
- @ai-sdk/gateway@2.0.24
- @ai-sdk/provider@2.0.1
- @ai-sdk/provider-utils@3.0.20

`v5.0.116`

Compare Source

Patch Changes

Updated dependencies [e3de981]
- @ai-sdk/gateway@2.0.23

`v5.0.115`

Compare Source

Patch Changes

Updated dependencies [1bcc2d7]
- @ai-sdk/gateway@2.0.22

`v5.0.114`

Compare Source

Patch Changes

fc633bd: fix header loss when statusText is undefined in writeHead

`v5.0.113`

Compare Source

Patch Changes

7e6fb4d: fix(gateway): throw error with user-friendly message in non-production environments if AI_GATEWAY_API_KEY is not configured

`v5.0.112`

Compare Source

Patch Changes

Updated dependencies [041a4fc]
- @ai-sdk/gateway@2.0.21

Patch Changes

Updated dependencies [51bbaa1]
- @ai-sdk/gateway@2.0.19

`v5.0.109`

Compare Source

Patch Changes

427547a: Improve ai gateway error message when api key is not present

`v5.0.108`

Compare Source

Patch Changes

03cafbc: chore(ai): export ContentPart type

`v5.0.107`

Compare Source

Patch Changes

21c9f90: fix(ai): remove unused mode setting from generateObject and streamObject

`v5.0.106`

Compare Source

Patch Changes

Updated dependencies [667f74c]
- @ai-sdk/gateway@2.0.18

`v5.0.105`

Compare Source

Patch Changes

1063aca: fix(ai): Preverse providerMetadata in tool-call and tool-result parts

`v5.0.104`

Compare Source

Patch Changes

d1dbe5d: move DelayedPromise into provider utils
Updated dependencies [d1dbe5d]
- @ai-sdk/provider-utils@3.0.18
- @ai-sdk/gateway@2.0.17

`v5.0.103`

Compare Source

Patch Changes

Updated dependencies [e609736]
- @ai-sdk/gateway@2.0.16

`v5.0.102`

Compare Source

Patch Changes

83b2c4b: fix(ai): prune messages properly when toolCalls set to 'before-last-message'

`v5.0.101`

Compare Source

Patch Changes

Updated dependencies [c5a42ec]
- @ai-sdk/gateway@2.0.15

`v5.0.100`

Compare Source

Patch Changes

Updated dependencies [c9520e5]
Updated dependencies [2382c89]
- @ai-sdk/gateway@2.0.14

`v5.0.99`

Compare Source

Patch Changes

15cfac8: feat: export GatewayModelId and use to type LanguageModel

`v5.0.98`

Compare Source

Patch Changes

Updated dependencies [8c54c71]
- @ai-sdk/gateway@2.0.13

`v5.0.97`

Compare Source

Patch Changes

Updated dependencies [6465dc3]
- @ai-sdk/gateway@2.0.12

`v5.0.96`

Compare Source

Patch Changes

c89268c: fix(provider/google): preserve thoughtSignature through tool execution

`v5.0.95`

Compare Source

Patch Changes

a20e687: feat(provider/gateway): add support for image models
Updated dependencies [a20e687]
- @ai-sdk/gateway@2.0.11

`v5.0.94`

Compare Source

Patch Changes

Updated dependencies [646dc54]
- @ai-sdk/gateway@2.0.10

`v5.0.93`

Compare Source

Patch Changes

Updated dependencies [29fbd2d]
- @ai-sdk/gateway@2.0.9

`v5.0.92`

Compare Source

Patch Changes

250edbd: Added finishReason on useChat onFinish callbck

`v5.0.91`

Compare Source

Patch Changes

Updated dependencies [056c471]
- @ai-sdk/provider-utils@3.0.17
- @ai-sdk/gateway@2.0.8

`v5.0.90`

Compare Source

Patch Changes

818b144: fix not catching of empty arrays in validateUIMessage

`v5.0.89`

Compare Source

Patch Changes

7cfada6: feat(ai): chat.addToolResult() is now chat.addToolOutput()

`v5.0.88`

Compare Source

Patch Changes

Updated dependencies [46dcc02]
- @ai-sdk/gateway@2.0.7

`v5.0.87`

Compare Source

Patch Changes

51aa5de: backport: test server
Updated dependencies [51aa5de]
- @ai-sdk/provider-utils@3.0.16
- @ai-sdk/gateway@2.0.6

`v5.0.86`

Compare Source

Patch Changes

0f92046: fix(ui): Don't resend messages for providerExecuted tools in lastAssistantMessageIsCompleteWithToolCalls and lastAssistantMessageIsCompleteWithApprovalResponses

`v5.0.85`

Compare Source

Patch Changes

Updated dependencies [f2da310]
- @ai-sdk/provider-utils@3.0.15
- @ai-sdk/gateway@2.0.5

`v5.0.84`

Compare Source

Patch Changes

a017497: fix(ai): do not mutate middleware array argument when wrapping

`v5.0.83`

Compare Source

Patch Changes

Updated dependencies [872543c]
- @ai-sdk/gateway@2.0.4

`v5.0.82`

Compare Source

Patch Changes

Updated dependencies [949718b]
- @ai-sdk/provider-utils@3.0.14
- @ai-sdk/gateway@2.0.3

`v5.0.81`

Compare Source

Patch Changes

1e05490: fix(ai): do not drop custom headers in HttpChatTransport
1e05490: refactor: consolidate header normalization across packages, remove duplicates, preserve custom headers
Updated dependencies [1e05490]
- @ai-sdk/provider-utils@3.0.13
- @ai-sdk/gateway@2.0.2

`v5.0.80`

Compare Source

Patch Changes

c7688ec: fix(ai): correct type field in arrayOutputStrategy from 'enum' to 'array'

`v5.0.79`

Compare Source

Patch Changes

22ab538: feat(ai): add OAuth for MCP clients + refactor to new package

This change replaces

import { experimental_createMCPClient } from 'ai';
import { Experimental_StdioMCPTransport } from 'ai/mcp-stdio';

with

import { experimental_createMCPClient } from '@&#8203;ai-sdk/mcp';
import { Experimental_StdioMCPTransport } from '@&#8203;ai-sdk/mcp/mcp-stdio';

`v5.0.78`

Compare Source

Patch Changes

Updated dependencies [f1a8734]
- @ai-sdk/gateway@2.0.1

`v5.0.77`

Compare Source

Patch Changes

3568ebc: feat(ai): add convertDataPart option to convertToModelMessages

Add optional convertDataPart callback for converting custom data parts (URLs, code files, etc.) to text or file parts that models can process. Fully type-safe using existing UIMessage generics.

`v5.0.76`

Compare Source

Patch Changes

87b03d5: feat(ui): add isDataUIPart helper

`v5.0.75`

Compare Source

Patch Changes

Updated dependencies [76678cd]
- @ai-sdk/gateway@2.0.0

`v5.0.74`

Compare Source

Patch Changes

Updated dependencies [11a8867]
- @ai-sdk/gateway@1.0.41

`v5.0.73`

Compare Source

Patch Changes

734c4c3: fix(ai): add missing export for LoadSettingError

`v5.0.72`

Compare Source

Patch Changes

1b94257: fix(ui): do not submit automatically when server return with error

`v5.0.71`

Compare Source

Patch Changes

bc90c3c: feat(ai): add pruneMessages helper function

`v5.0.70`

Compare Source

Patch Changes

Updated dependencies [f6a9bf3]
- @ai-sdk/gateway@1.0.40

`v5.0.69`

Compare Source

Patch Changes

1bacc1f: fix(ai): handle backpressure in writeToServerResponse

`v5.0.68`

Compare Source

Patch Changes

Updated dependencies [17f9872]
- @ai-sdk/provider-utils@3.0.12
- @ai-sdk/gateway@1.0.39

`v5.0.67`

Compare Source

Patch Changes

Updated dependencies [227ca94]
- @ai-sdk/gateway@1.0.38

`v5.0.66`

Compare Source

Patch Changes

Updated dependencies [ec5a0a0]
- @ai-sdk/gateway@1.0.37

`v5.0.65`

Compare Source

Patch Changes

Updated dependencies [638a561]
- @ai-sdk/gateway@1.0.36

`v5.0.64`

Compare Source

Patch Changes

e33947b: fix(ai): mcp errors to be jsonrpc 2.0 compliant

`v5.0.63`

Compare Source

Patch Changes

22609f8: fix(ai): only parse experimental_output in generateText when finishReason is stop
b552c94: fix(core): Fix image download behavior when the initial model is swapped out during prepareStep

`v5.0.62`

Compare Source

Patch Changes

6f0644c: chore: use import * from zod/v4
6f0644c: chore: load zod schemas lazily
Updated dependencies [6f0644c]
Updated dependencies [6f0644c]
- @ai-sdk/provider-utils@3.0.11
- @ai-sdk/gateway@1.0.35

`v5.0.61`

Compare Source

Patch Changes

Updated dependencies [143f65b]
- @ai-sdk/gateway@1.0.34

`v5.0.60`

Compare Source

Patch Changes

Updated dependencies [cffad55]
- @ai-sdk/gateway@1.0.33

`v5.0.59`

Compare Source

Patch Changes

Updated dependencies [bcdba23]
- @ai-sdk/gateway@1.0.32

`v5.0.58`

Compare Source

Patch Changes

Updated dependencies [b92e1cd]
- @ai-sdk/gateway@1.0.31

`v5.0.57`

Compare Source

Patch Changes

c319849: fixed docs and exported NoSpeechGeneratedError

`v5.0.56`

Compare Source

Patch Changes

b1d8458: fix(ai): align logic of text-end with reasoning-end

`v5.0.55`

Compare Source

Patch Changes

85da29e: fix(ai): remove outdated jsdoc param descriptions

`v5.0.54`

Compare Source

Patch Changes

bc5ed71: chore: update zod peer depenedency version
Updated dependencies [bc5ed71]
- @ai-sdk/provider-utils@3.0.10
- @ai-sdk/gateway@1.0.30

`v5.0.53`

Compare Source

Patch Changes

d335191: Extend addToolResult to support error results

`v5.0.52`

Compare Source

Patch Changes

c56822d: fix(ai): update uiMessageChunkSchema to satisfy the UIMessageChunk type
930399b: fix(ai): download files when intermediate file cannot be downloaded
Updated dependencies [7ca78f1]
- @ai-sdk/gateway@1.0.29

`v5.0.51`

Compare Source

Patch Changes

27645bb: Export parseJsonEventStream and uiMessageChunkSchema from "ai" package
Updated dependencies [322901b]
- @ai-sdk/gateway@1.0.28

`v5.0.50`

Compare Source

Patch Changes

Updated dependencies [c5f403a]
- @ai-sdk/gateway@1.0.27

`v5.0.49`

Compare Source

Patch Changes

Updated dependencies [e304478]
- @ai-sdk/gateway@1.0.26

`v5.0.48`

Compare Source

Patch Changes

Updated dependencies [4d3ff64]
- @ai-sdk/gateway@1.0.25

`v5.0.47`

Compare Source

Patch Changes

Updated dependencies [c86e0f7]
Updated dependencies [6bbae01]
- @ai-sdk/gateway@1.0.24

`v5.0.46`

Compare Source

Patch Changes

c580fbd: Add safeValidateUIMessages utility to validate UI messages without throwing, returning a success/failure result object like Zod’s safeParse

`v5.0.45`

Compare Source

Patch Changes

76024fc: fix(ai): fix static tool call and result detection when dynamic is undefined
93d8b60: fix(ai): do not filter zero-length text parts that have provider options
d8eb31f: fix(ai): fix webp image detection from base64

`v5.0.44`

Compare Source

Patch Changes

Updated dependencies [f49f924]
- @ai-sdk/gateway@1.0.23

`v5.0.43`

Compare Source

Patch Changes

0294b58: feat(ai): set ai, @ai-sdk/provider-utils, and runtime in user-agent header
Updated dependencies [0294b58]
- @ai-sdk/provider-utils@3.0.9
- @ai-sdk/gateway@1.0.22

`v5.0.42`

Compare Source

Patch Changes

de5c066: fix(ai): forwarded providerExecuted flag in validateUIMessages

`v5.0.41`

Compare Source

Patch Changes

cd91e4b: fix(ai): use correct type for reasoning outputs

`v5.0.40`

Compare Source

Patch Changes

Updated dependencies [4ee3719]
- @ai-sdk/gateway@1.0.21

`v5.0.39`

Compare Source

Patch Changes

a0a725f: feat (ai): export createGateway

`v5.0.38`

Compare Source

Patch Changes

Updated dependencies [350a328]
- @ai-sdk/gateway@1.0.20

`v5.0.37`

Compare Source

Patch Changes

d6785d7: feat (ai): add tool and agent helpers

`v5.0.36`

Compare Source

Patch Changes

ccc2ded: feat (ai): export gateway provider

`v5.0.35`

Compare Source

Patch Changes

99c946a: export missing type

Configuration

📅 Schedule: Branch creation - "before 8am every weekday,every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot force-pushed the renovate/ai-5.x branch from 28fc36c to 5ad0371 Compare March 11, 2026 17:26

renovate bot changed the title ~~fix(deps): update dependency ai to v5.0.152~~ fix(deps): update dependency ai to v5.0.153 Mar 11, 2026

renovate bot force-pushed the renovate/ai-5.x branch from 5ad0371 to c7a8ff5 Compare March 13, 2026 15:22

fix(deps): update dependency ai to v5.0.154

3ed7af4

renovate bot force-pushed the renovate/ai-5.x branch from c7a8ff5 to 3ed7af4 Compare March 13, 2026 20:00

renovate bot changed the title ~~fix(deps): update dependency ai to v5.0.153~~ fix(deps): update dependency ai to v5.0.154 Mar 13, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update dependency ai to v5.0.154#8449

fix(deps): update dependency ai to v5.0.154#8449
renovate[bot] wants to merge 1 commit intolatestfrom
renovate/ai-5.x

renovate bot commented Mar 11, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Mar 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

renovate bot commented Mar 11, 2026 •

edited

Loading