Skip to content

chore: bump the runtime-patch-minor group across 1 directory with 6 updates - #60

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/runtime-patch-minor-f813d0f80a
Open

chore: bump the runtime-patch-minor group across 1 directory with 6 updates#60
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/runtime-patch-minor-f813d0f80a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the runtime-patch-minor group with 6 updates in the / directory:

Package From To
@ai-sdk/google 4.0.23 4.0.93
@slack/web-api 8.0.0 8.2.0
ai 7.0.36 7.0.137
p-retry 8.0.0 8.0.1
pino 10.3.1 10.4.0
zod 4.4.3 4.6.5

Updates @ai-sdk/google from 4.0.23 to 4.0.93

Changelog

Sourced from @​ai-sdk/google's changelog.

4.0.93

Patch Changes

  • 5cf13d2: feat: map the top level embedding dimensions to provider settings
  • Updated dependencies [4dbc902]
    • @​ai-sdk/provider@​4.0.26
    • @​ai-sdk/provider-utils@​5.0.58

4.0.92

Patch Changes

  • Updated dependencies [9184a35]
    • @​ai-sdk/provider@​4.0.25
    • @​ai-sdk/provider-utils@​5.0.57

4.0.91

Patch Changes

  • 32ff7ad: Preserve tool errors in OpenAI Chat Completions and Responses by wrapping their payloads in an error object. Send Google tool errors and denied executions under functionResponse.response.error.

4.0.90

Patch Changes

  • Updated dependencies [d3bcad9]
    • @​ai-sdk/provider@​4.0.24
    • @​ai-sdk/provider-utils@​5.0.56

4.0.89

Patch Changes

  • fc1e19e: fix: limit jsonl rows to 64mb during batch result downloads

  • 8c0e699: feat(google): preserve file search custom metadata in retrieved context grounding chunks

  • 753f2e1: feat(google): add the 'gemini-nano-banana-2.1' model ID

  • 268225c: feat(provider): add a portable max reasoning level with native provider mappings, compatibility coercions, and budget-based fallback support.

    Compatibility notes:

    • TypeScript source compatibility: Adding max widens LanguageModelV4CallOptions['reasoning'] and the derived ReasoningLevel type. Third-party providers and consumers with exhaustive switches or Record<ReasoningLevel, ...> mappings must handle max before upgrading. Ordinary calls using existing reasoning levels remain accepted.
    • Amazon Bedrock: Existing Nova 2 calls using portable reasoning: 'xhigh' now send maxReasoningEffort: 'high' instead of the unsupported 'max', and return a compatibility warning. Anthropic and OpenAI Bedrock effort mappings retain their existing xhigh behavior. Partial Bedrock reasoning configurations continue to preserve explicit values and derive missing fields; explicit effort/budget overrides and disabled thinking no longer emit warnings for portable mappings that are not sent.
    • Fireworks: Existing portable minimal and xhigh calls keep their request mappings to low and high, respectively, and now return compatibility warnings in generation and streaming results. Portable max maps to high with the same warning behavior.

    Release classification: This remains a patch changeset under the repository's explicit release policy, which uses patch releases for both fixes and features. The TypeScript source-compatibility caveat for exhaustive consumers is disclosed above. Maintainers can override this classification with a major label if they decide to align the provider-spec addition with a future AI SDK major release.

  • Updated dependencies [fc1e19e]

  • Updated dependencies [5094ebd]

... (truncated)

Commits

Updates @slack/web-api from 8.0.0 to 8.2.0

Release notes

Sourced from @​slack/web-api's releases.

@​slack/web-api@​8.2.0

Minor Changes

Patch Changes

  • Updated dependencies [ca6f416]
  • Updated dependencies [abf184e]
  • Updated dependencies [d420d00]
  • Updated dependencies [52eeb05]
    • @​slack/types@​3.2.0

@​slack/web-api@​8.1.1

Patch Changes

  • 0ee1d99: fix: revert internal packages requiring esm loading for backward compatible support (#2711)

@​slack/web-api@​8.1.0

Minor Changes

  • 955e6b9: feat(web-api): add support for admin.users.getExpiration

  • 4322e14: feat(web-api): add agents.sessions.rename and agents.sessions.setStatus

  • 4ba30a1: feat(web-api): add session_status to chat.stopStream arguments

  • bff3398: feat(web-api): add webapi response changes as of 2026-08-21

    Regenerate response types with new stable response properties (e.g. agent_session on message-bearing responses, ListView grouping/sort/filter fields, bots.info connector/workflow flags).

    Two fields are removed from UsersListResponse, neither of which is a real success-response property:

    • Member.is_connector_bot — not returned by users.list; this flag is surfaced on bots.info (added here to BotsInfoResponse).
    • arg — an error-response echo field, not part of a successful users.list body.

  • f5fd35a: feat(web-api): add blocks.validate method

Patch Changes

  • Updated dependencies [916d8e9]
  • Updated dependencies [f5e9a01]
    • @​slack/types@​3.1.0
Commits
  • a98047a chore: release (#2726)
  • c523063 feat(web-api): add agents.conversations.* methods (#2748)
  • e22facd fix(socket-mode): route ping/pong diagnostics by identity, not instanceof (#2...
  • 4dfe5eb chore(deps-dev): bump @​biomejs/biome from 2.5.13 to 2.5.14 (#2750)
  • 6d9bad8 chore(deps-dev): bump typedoc-plugin-markdown from 4.13.0 to 4.13.1 (#2749)
  • 334e6a6 feat(socket-mode): support undici v8 as a peer dependency (#2694)
  • 7d415e4 chore(deps-dev): bump @​changesets/cli from 3.0.2 to 3.0.3 (#2746)
  • 600fca5 chore(deps-dev): bump @​biomejs/biome from 2.5.12 to 2.5.13 (#2745)
  • f4c3e7e chore(deps-dev): bump tsx from 4.23.12 to 4.23.13 (#2741)
  • d420d00 feat(types): allow raw_number cells in TableBlock rows (#2737)
  • Additional commits viewable in compare view

Updates ai from 7.0.36 to 7.0.137

Changelog

Sourced from ai's changelog.

7.0.137

Patch Changes

  • e27cc64: fix(ai): discard unrelated message state when reading resumed streams

7.0.136

Patch Changes

  • 7b5497c: Fix streaming output timeouts: stop chunkMs and firstChunkMs when the model response ends, so long-running local tools do not trigger model output timeouts. Give each retry fresh output timeout budgets. stepMs continues to cover the complete step, including local tools.
  • Updated dependencies [e280aa1]
    • @​ai-sdk/gateway@​4.0.110

7.0.135

Patch Changes

  • 5ddbb70: fix(ai): prevent duplicate continuation requests for repeated tool approval responses
  • 7c40a09: feat(ai): log warning when default step limit stops a tool loop
  • 4dbc902: feat(ai): add a top level 'dimensions' setting for embeddding functions
  • ff18b73: fix(ai): wait for chat stream cleanup when stopping
  • 9be846c: feat(ai): add a persistent WebSocket chat transport with correlated streaming, serialized backpressure, cancellation, validated protocol frames, explicit lifecycle, and sequence-based resume support
  • Updated dependencies [5cf13d2]
  • Updated dependencies [4dbc902]
  • Updated dependencies [908fd12]
    • @​ai-sdk/gateway@​4.0.109
    • @​ai-sdk/provider@​4.0.26
    • @​ai-sdk/provider-utils@​5.0.58

7.0.134

Patch Changes

  • 8281ec4: fix(ai): propagate async sendAutomaticallyWhen failures from tool updates
  • 46c2b05: fix(ai): preserve provider-executed tool calls when resuming streams

7.0.133

Patch Changes

  • 9184a35: Add ordered text, file, and JSON parts to experimental decision state. Support image input in OpenAI Decisions and language model adapters. Gateway retains its existing string and JSON request format and rejects files, as does TypeSafe AI.

    Arrays passed directly as state now contain decision state parts. Wrap JSON arrays in an object or a json part.

    Normalize all public state forms into an array of parts before calling decision providers. Providers receive text and JSON objects as text and json parts.

    Serialize decision file bytes as base64 in OpenTelemetry state attributes. Model-call spans record normalized state parts, while outer spans retain public state inputs.

    Preserve native JSON state in TypeSafe AI when state contains one JSON part. Label shared state in language-model decision prompts.

... (truncated)

Commits
  • 98fac2b Version Packages (#22428)
  • e27cc64 fix: prevent readUIMessageStream from adopting content from an unrelated assi...
  • e00b1b1 Version Packages (#22348)
  • e280aa1 feat(gateway): send image files in decision state (#22286)
  • 7b5497c fix(ai): clear chunkMs timeout during tool execution (#22341)
  • 50203a8 Version Packages (#22320)
  • 4dbc902 feat(ai): add a top level 'dimensions' setting for embeddding functions (#22335)
  • 9be846c feat: add a persistent WebSocket ChatTransport with correlated streaming, ser...
  • ff18b73 fix: chat.stop() resolving before active stream processing and callback-drive...
  • 7c40a09 feat(ai): log warning when default step limit stops a tool loop (#22329)
  • Additional commits viewable in compare view

Updates p-retry from 8.0.0 to 8.0.1

Release notes

Sourced from p-retry's releases.

v8.0.1

  • Fix error for invalid fractional retry counts 3c22035

sindresorhus/p-retry@v8.0.0...v8.0.1

Commits

Updates pino from 10.3.1 to 10.4.0

Release notes

Sourced from pino's releases.

v10.4.0

What's Changed

... (truncated)

Commits
  • b29dbe9 Bumped v10.4.0
  • 6ba157b docs: fix the pino-pretty flush explanation after thread-stream#198 (#2524)
  • 6429c14 docs: Note that serializers run on child bindings at creation time (#2518)
  • 6c71bc9 Add bindings method to browser logger (#2504)
  • b557f72 ci: pin lock-threads to upstream v6.0.2 to fix token validation failure (#2525)
  • 1de1212 docs: document the APIs that are unavailable in the browser (#2521)
  • af2fe10 Delete .github/dependabot.yml (#2517)
  • 5aa6230 build(deps-dev): bump eslint-plugin-n from 18.2.2 to 18.3.0 (#2515)
  • 6f5af07 build(deps-dev): bump docsify-cli from 4.4.4 to 5.0.0 (#2513)
  • 2ffe576 ci: check pull requests target main (#2500)
  • Additional commits viewable in compare view

Updates zod from 4.4.3 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

  • d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post
  • f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • 56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)
  • ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"
  • cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""
  • 0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5
  • 59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

  • d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)
  • ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)
  • 2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

  • 413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged
  • 75d63ee1 docs: show only the .properties() method form in the 4.6 post
  • 46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

v4.6.1

A patch on top of 4.6.0.

v4.6.0

Zod 4.6 is now available.

npm install zod@latest

At a glance:

... (truncated)

Commits
  • 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
  • 0f3f5ee 4.6.5
  • cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
  • ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
  • 56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
  • de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
  • f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
  • d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
  • 2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
  • 743aedb 4.6.4
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore: bump the runtime-patch-minor group across 1 directory with 6 u…
a64e21f 
…pdates

Bumps the runtime-patch-minor group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ai-sdk/google](https://github.com/vercel/ai/tree/HEAD/packages/google) | `4.0.23` | `4.0.93` |
| [@slack/web-api](https://github.com/slackapi/node-slack-sdk) | `8.0.0` | `8.2.0` |
| [ai](https://github.com/vercel/ai/tree/HEAD/packages/ai) | `7.0.36` | `7.0.137` |
| [p-retry](https://github.com/sindresorhus/p-retry) | `8.0.0` | `8.0.1` |
| [pino](https://github.com/pinojs/pino) | `10.3.1` | `10.4.0` |
| [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.6.5` |



Updates `@ai-sdk/google` from 4.0.23 to 4.0.93
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/google/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/@ai-sdk/google@4.0.93/packages/google)

Updates `@slack/web-api` from 8.0.0 to 8.2.0
- [Release notes](https://github.com/slackapi/node-slack-sdk/releases)
- [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@8.0.0...@slack/web-api@8.2.0)

Updates `ai` from 7.0.36 to 7.0.137
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/packages/ai/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/commits/ai@7.0.137/packages/ai)

Updates `p-retry` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/sindresorhus/p-retry/releases)
- [Commits](sindresorhus/p-retry@v8.0.0...v8.0.1)

Updates `pino` from 10.3.1 to 10.4.0
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v10.3.1...v10.4.0)

Updates `zod` from 4.4.3 to 4.6.5
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.5)

---
updated-dependencies:
- dependency-name: "@ai-sdk/google"
  dependency-version: 4.0.93
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-patch-minor
- dependency-name: "@slack/web-api"
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-patch-minor
- dependency-name: ai
  dependency-version: 7.0.137
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-patch-minor
- dependency-name: p-retry
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: runtime-patch-minor
- dependency-name: pino
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-patch-minor
- dependency-name: zod
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: runtime-patch-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants