[dependabot]

Bumps @ai-sdk/provider-utils from 4.0.2 to 4.0.62.

Release notes

Sourced from @​ai-sdk/provider-utils's releases.

@​ai-sdk/provider-utils@​4.0.62

Patch Changes

• 1183cc4: Block .internal hostnames in download URL validation.
• d726591: Encode provider-returned identifiers in follow-up request paths with a shared encodePathSegment helper.

Changelog

Sourced from @​ai-sdk/provider-utils's changelog.

4.0.62

Patch Changes

• 1183cc4: Block .internal hostnames in download URL validation.
• d726591: Encode provider-returned identifiers in follow-up request paths with a shared encodePathSegment helper.

4.0.61

Patch Changes

• 5aa3086: feat(openai-compatible): support URL-based image responses

  Add opt-in URL validation and credential origin handling to getFromApi for URL-based image responses. Validate redirect targets, strip unsafe request headers, and drop credentials on cross-origin redirects while preserving existing unvalidated requests.

4.0.60

Patch Changes

• Updated dependencies [739e9f6]
  • @​ai-sdk/provider@​3.0.19

4.0.59

Patch Changes

• d5e7d82: fix(provider-utils): keep case-sensitive url paths and query values

4.0.58

Patch Changes

• 604b4d3: docs(provider-utils): clarify how ToolApprovalResponse.reason is handled for approved and denied tool calls

4.0.57

Patch Changes

• a9cea74: Keep default Node.js downloads protected by DNS validation and connection pinning when frameworks or instrumentation wrap global fetch before or after the SDK loads.
• a9cea74: fix(mcp): prevent SSRF in OAuth metadata discovery
• a9cea74: fix(provider-utils): make lazy Undici import visible to deployment tracers

4.0.56

Patch Changes

• 29dc427: fix(provider-utils): preserve streamed tool calls with unreliable IDs and indices

4.0.55

... (truncated)

Commits

• 9ef21a8 Version Packages (#23625)
• 1183cc4 [v6.0] fix(provider-utils): block .internal download hostnames (#23681)
• d726591 [v6.0] fix: share URL path segment encoding (#23687)
• f0300b8 Version Packages (#23417)
• 5aa3086 Backport: feat(openai-compatible): support URL-based image responses (#23405)
• 68ad66c Version Packages (#23409)
• 67f3038 Version Packages (#23351)
• d5e7d82 Backport: fix(provider-utils): keep case-sensitive url paths and query values...
• 886e59d Version Packages (#23121)
• 604b4d3 Backport: docs: clarify how tool approval reasons are handled (#23112)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/provider-utils since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
blocknote	Error		Oct 21, 2026 7:32am UTC
blocknote-website	Error		Oct 21, 2026 7:32am UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: aab5c1e5-1e39-4312-ad41-d505e7801242

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

Looks like @ai-sdk/provider-utils is up-to-date now, so this is no longer needed.