Skip to content

fix(deps): update routine updates - #259

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/routine-updates
Open

fix(deps): update routine updates#259
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/routine-updates

Conversation

@renovate

@renovate renovate Bot commented Oct 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@ai-sdk/mcp (source) 2.0.81 → 2.0.88 age confidence dependencies patch 2.0.90 (+1)
@ai-sdk/provider (source) 4.0.31 → 4.0.35 age confidence dependencies patch
@ai-sdk/provider-utils (source) 5.0.65 → 5.0.72 age confidence dependencies patch 5.0.74 (+1)
@convex-dev/agent (source) 0.7.8 → 0.7.9 age confidence dependencies patch
@convex-dev/workpool (source) 0.4.14 → 0.4.15 age confidence dependencies patch
@effect/platform-node (source) 4.0.5 → 4.1.2 age confidence devDependencies minor
@samebase/alchemy-convex (source) 0.19.0 → 0.20.0 age confidence devDependencies minor 0.21.0
@samebase/sidebars (source) 0.1.2 → 0.1.3 age confidence dependencies patch
@tanstack/react-query (source) 5.104.5 → 5.105.1 age confidence dependencies minor 5.105.3 (+1)
@tanstack/react-router (source) 1.170.45 → 1.170.46 age confidence dependencies patch
@tanstack/react-start (source) 1.169.3 → 1.169.4 age confidence dependencies patch
@tanstack/router-plugin (source) 1.168.47 → 1.168.48 age confidence devDependencies patch
@types/node (source) ^24.19.2 → ^26.0.0 age confidence devDependencies major
actions/setup-node v6 → v7 age confidence action major
ai (source) 7.0.148 → 7.0.159 age confidence dependencies patch 7.0.162 (+2)
convex (source) 1.48.0 → 1.49.0 age confidence dependencies minor
convex-helpers 0.1.128 → 0.1.133 age confidence dependencies patch
convex-test (source) 0.0.57 → 0.0.66 age confidence devDependencies patch 0.0.67
dotenv 18.0.8 → 18.0.9 age confidence devDependencies patch
effect (source) 4.0.5 → 4.1.2 age confidence devDependencies minor
firecrawl 4.50.0 → 4.51.0 age confidence dependencies minor
guarded-fetch>undici (source) 7.30.1 → 8.12.3 age confidence pnpm-workspace.overrides major
hls.js 1.7.3 → 1.7.4 age confidence dependencies patch
lucide-react (source) 1.61.0 → 1.66.0 age confidence dependencies minor 1.67.0
mediabunny (source) 1.62.0 → 1.65.0 age confidence dependencies minor
node (source) 24 → 26 age confidence major
node 24.x → 26.x age confidence uses-with major
openai 7.40.0 → 7.47.0 age confidence dependencies minor
pnpm (source) 12.15.0+sha512.b3951d6d6ff4a9f13dc7cf56cd28d2b8eb37dbcc9c68e52e1e1191873ea9f82a017287ab50baadc5ccc494f036c67c0e47eb13608c2fa36f47711b61ea128e61 → 12.16.1 age confidence packageManager minor
posthog-js (source) 1.438.13 → 1.444.0 age confidence dependencies minor 1.444.4 (+3)
shadcn (source) 4.22.1 → 4.23.0 age confidence devDependencies minor
typegpu (source) 0.12.8 → 0.12.9 age confidence dependencies patch
unplugin-typegpu (source) 0.12.6 → 0.12.7 age confidence devDependencies patch
vite (source) 1.3.0 → 1.4.0 age confidence pnpm.catalog.default minor
vite-plus (source) 1.3.0 → 1.4.0 age confidence pnpm.catalog.default minor

Release Notes

vercel/ai (@​ai-sdk/mcp)

v2.0.88

Compare Source

Patch Changes

  • c3af430: Handle MCP 2026-07-28 input-required results through the registered elicitation handler and retry the original tool, prompt, or resource request with its answers and request state.

    Preserve the browser fetch receiver in MCP HTTP and SSE transports to prevent illegal-invocation errors.

  • 1afa510: Graduate StdioMCPTransport, MCPClient.listPrompts, MCPClient.getPrompt, and MCPAppRenderer to stable APIs. Deprecate their experimental names while retaining them as compatible aliases. MCP events remain experimental.

  • Updated dependencies [7716e18]

  • Updated dependencies [5c247e9]

  • Updated dependencies [dcd2f8d]

v2.0.87

Compare Source

Patch Changes

v2.0.86

Compare Source

Patch Changes
  • ade2a33: Improve unsupported-version discovery errors when a server advertises a compatible legacy version. Include the requested and advertised versions and explain how to explicitly select legacy initialization with protocolVersionDiscovery: false, while preserving the original error details and avoiding automatic legacy fallback.
  • Updated dependencies [57086ff]
  • Updated dependencies [95348b3]

v2.0.85

Compare Source

Patch Changes

v2.0.84

Compare Source

Patch Changes
  • 84d7880: Fix MCP tool output conversion throwing on primitive or nullish results returned by output schemas or execute wrappers. Convert strings to text and normalize undefined outputs to JSON null while preserving MCP content conversion.
  • e729d58: chore(docs): update README.md for consistent format and to avoid duplication
  • Updated dependencies [5475347]
  • Updated dependencies [e729d58]

v2.0.83

Compare Source

Patch Changes

v2.0.82

Compare Source

Patch Changes
vercel/ai (@​ai-sdk/provider)

v4.0.35

Compare Source

Patch Changes
  • dcd2f8d: Introduce a model entry contract with named capability sections and request configuration. Consolidate the OpenAI and Anthropic model catalogs so existing request behavior and generated capability documentation use the same source of truth. Catalogs also declare the provider options each provider accepts and which models support them.

v4.0.34

Compare Source

Patch Changes
  • 5475347: Fix non-streaming Responses API structured output failing when multiple assistant messages contain JSON. Providers can supply separate structured-output text for parsing, allowing OpenAI and Azure Responses models to select the last final_answer while preserving all generated content, annotations, conversation history, and token usage.
  • e729d58: chore(docs): update README.md for consistent format and to avoid duplication

v4.0.33

Compare Source

Patch Changes

  • 85d84a1: feat(provider): add experimental streaming speech model spec

    Adds Experimental_StreamingSpeechModelV4, a SpeechModelV4 extension with doStream() that takes the input text as a stream of text parts (each with an optional per-part voice and providerOptions) and returns a stream of audio parts, plus Experimental_-prefixed stream option, text part, part, result, and usage types. The stable SpeechModelV4 is unchanged.

v4.0.32

Compare Source

Patch Changes

  • 10026d1: Add the interrupted finish reason for provider streams that end without a completion signal. Preserve partial output without introducing an error solely for interruption, and stop tool execution, agent continuation, and automatic UI follow-ups for interrupted responses, including late tool results and approvals. Provider detection and emission will be added separately.

    Compatibility notice: Adding interrupted to the public finish-reason types can break type checking after upgrading, even though this is a patch release. Exhaustive switches (for example, using an assertNever fallback) and mappings such as Record<FinishReason, string> must handle the new value. Update any custom validation or application logic that assumes the existing set of finish reasons is exhaustive.

    When providers begin emitting interrupted, a stream ending without a completion signal will preserve partial output and report this finish reason without emitting an error solely for the interruption. Applications that need to detect incomplete responses should check finishReason === 'interrupted' as well as their existing error handling.

vercel/ai (@​ai-sdk/provider-utils)

v5.0.72

Compare Source

Patch Changes

  • 7716e18: Support promises and synchronous or asynchronous callbacks in provider API key and token settings. Resolve credentials per authenticated request while preserving existing authentication behavior and synchronous credential serialization.

    The experimental OpenAI Live getServerWebSocketConfig() method can now resolve asynchronously. Await its result before using the connection settings.

  • 5c247e9: feat(sandbox): add stat, listDirectory, and deleteFile to Experimental_SandboxSession, and specify that relative paths in every method resolve against the directory run and spawn start in

    The just-bash and Vercel Sandbox adapters implement the new methods. Both now resolve a relative workingDirectory for run and spawn against the sandbox's working directory, and the just-bash adapter rejects writes to a directory instead of replacing it with a file.

  • Updated dependencies [dcd2f8d]

v5.0.71

Compare Source

Patch Changes

  • 61a315e: fix: map the top-level reasoning option consistently across providers

    Providers now resolve reasoning the same way:

    1. A provider-specific reasoning setting in providerOptions is sent unchanged. OpenAI no longer drops providerOptions.openai.reasoningEffort values that are not in its list for the model, and Fireworks no longer rewrites providerOptions.fireworks.reasoningEffort. Fireworks also sends top-level reasoning values directly instead of rounding them to 'high' at most, except for model families known to reject 'none' (GPT-OSS, GLM-5.3, Muse Spark) or 'minimal' (Nemotron, Inkling).
    2. Otherwise, reasoning maps to the closest level the model supports, rounding down, and rounds up only when there is no lower level. For example, 'xhigh' now maps to 'high' instead of 'max' on Anthropic and Bedrock models without xhigh effort, and 'medium' maps to 'low' instead of 'high' on DeepSeek, Kimi K3, and Mistral GLM-5.3 models.
    3. 'none' on a model that cannot disable reasoning maps to the model's lowest level with a compatibility warning, instead of being dropped or sending a request the API rejects. This affects GPT-6 models without 'none', xAI grok-4.5 and later, Groq GPT-OSS, Kimi K3, Perplexity, QuiverAI, Bedrock OpenAI gpt-oss models, and Gemini 2.5 Pro (minimum thinking budget). Gemini 3 and Anthropic and Bedrock between_tools mappings now emit the compatibility warning too.

    mapReasoningToProviderEffort now accepts any reasoning value, returns an optional providerOptionsEffort unchanged, and rounds levels that are missing from the effort map to the closest supported level. mapReasoningToProviderBudget maps 'none' to the minimum reasoning budget, always returns a budget, and uses the default percentage for levels missing from budgetPercentages. OpenAICompatibleChatConfig adds an optional mapReasoning function for mapping the top-level reasoning option.

v5.0.70

Compare Source

Patch Changes
  • 57086ff: chore(provider-utils): export types for Experimental_SandboxSession's method inputs
  • 95348b3: feat(provider-utils): change Experimental_SandboxSession's spawn() method to support optional stdin arg for a process with writable input stream

v5.0.69

Compare Source

Patch Changes
  • e64ed82: use native Buffer base64 encoding when available. encoding a Uint8Array backed by a detached ArrayBuffer now throws a TypeError in runtimes with Buffer instead of returning an empty string

v5.0.68

Compare Source

Patch Changes

v5.0.67

Compare Source

Patch Changes

  • 8202f5b: feat(gateway): implement experimental streaming speech in the gateway provider

    GatewaySpeechModel implements Experimental_StreamingSpeechModelV4 and streams speech over the AI Gateway speech WebSocket (/speech-model, ai-gateway-speech.v1 subprotocol). @ai-sdk/provider-utils adds the experimental speech-stream envelope (experimental_parseSpeechStreamClientFrame, experimental_serializeSpeechStreamPart, experimental_parseSpeechStreamPart) shared by clients and servers, plus the EXPERIMENTAL_SPEECH_STREAM_* frame type constants and Experimental_SpeechStream* frame types. Text-delta frames carry each text part's voice and providerOptions; the start frame carries outputFormat as an audio format object. Adds gateway.experimental_speech, callable like speech(modelId), with a server-side getToken() that mints a speech-bound short-lived client secret for browser use.

  • Updated dependencies [85d84a1]

v5.0.66

Compare Source

Patch Changes
convex/agent (@​convex-dev/agent)

v0.7.9

Compare Source

  • Uses built-in pagination instead of the paginator for listing threads by
    userId, as well as listing files and embeddings. Impact: If a user is
    currently paginating, their cursor will not be valid and their paginated query
    will reset to the first page. Also, if you called listThreadsByUserId,
    getFilesToDelete, or paginate vectors from a query that already makes
    another pagination call, it will now fail, since each query is only allowed
    one built-in .paginate call currently.
  • Fix TS2590 when constructing Agent or calling startGeneration with large model
    (#​424) catalogs or model id unions (#​414, #​417)
  • Pass embedding providerMetadata to usageHandler (#​393)
  • Require ai 7.0.129 or later. Before 7.0.119 a provider error before the first
    chunk failed the action with an unhandled rejection (#​387), and before 7.0.129
    approvals dropped provider options
  • Don't leave a failed delta write or stream cleanup as an unhandled rejection
    (#​366)
  • Fix useUIMessages and useThreadMessages freezing when a page ends partway
    through a message (#​395)
  • Run approved tools when excludeToolMessages is set: listMessages with
    upToAndIncludingMessageId keeps that order's tool messages (#​409, #​427)
convex/workpool (@​convex-dev/workpool)

v0.4.15

Compare Source

  • Upgrades @​convex-dev/batch-worker to 0.3. Requires Convex 1.43 or later.
  • Records each pendingStart ID on its work document, so the next minor version
    can report status accurately for work already in flight. Not backwards
    compatible due to this schema change.
  • Adds a one-off migration that records the queue entry on work enqueued before
    this version and removes queue entries whose work is gone. Before upgrading to
    0.5, deploy this version and run
    npx convex run --component workpool migrations:backfillPendingStartIds,
    replacing workpool with each component instance's name.
Effect-TS/effect (@​effect/platform-node)

v4.1.2

Compare Source

Patch Changes

v4.1.1

Compare Source

Patch Changes

v4.1.0

Compare Source

Minor Changes
  • #​8829 8f23668 Thanks @​fubhy! - Replace effect/Crypto with family-specific effect/crypto/* services, opaque keys, CryptoError, a configurable WebCrypto reference and key schemas in effect/Schema. Encoding secret or private keys through byte/format schemas requires { allowEncode: true }.
Breaking changes
  • Use SecureRandom for randomness and UUIDs, and Digest with algorithm values such as Digest.sha256 for hashing. Replace effect/testing/TestCrypto with Layer.mock for the required services.
  • Provide crypto explicitly; it is no longer included in the runtime *Services bundles. NodeCrypto, BunCrypto, DenoCrypto and BrowserCrypto offer individual family layers and a combined layer, supplying SecureRandom where needed. Core modules offer layerWebCrypto.
  • Provide Digest.Digest instead of Crypto.Crypto to SqlMessageStorage and SingleRunner, and instead of EventLogEncryption to SqlEventLogServerEncrypted.makeStorage and layerStorage. Replace EventLogEncryption.sha256String with digest.digestHex(Digest.sha256, bytes).

Existing workflow ID, activity idempotency key and event log table-name encodings are unchanged.

Event log encryption, identity key derivation and session authentication now run on Aead, Digest, Signature and SecureRandom. EventLogEncryption.make and EventLogEncryption.layer take those services from context, so Node apps can use the NodeCrypto layers. EventLogEncryption.layerSubtle and the session auth functions use the Web Crypto layers on the WebCrypto reference instead of globalThis.crypto. Existing identities, derived signing keys and encrypted batches are unchanged.

UUIDv7 and ULID generation is now monotonic below the maximum 48-bit timestamp, including within a millisecond and across clock rollback. Ordering is per SecureRandom instance; the unsafe helpers and model UUIDv7 defaults share per-realm ordering.

  • #​10087 472c469 Thanks @​effect-bot! - Node.js 22.19.0 (required by undici 8) is now the minimum for @effect/platform-node, @effect/platform-node-shared, @effect/opentelemetry and @effect/docgen, up from 18.

    NodeSocket WebSocket clients now use Node's global WebSocket instead of ws, so client-only usage no longer bundles ws.

    Breaking: ws moved to a new NodeWS module.

    • NodeSocket.NodeWS and BunSocket.NodeWS are removed. Import NodeWS from @effect/platform-node or @effect/platform-node-shared (on Bun, import ws directly). Use NodeWS.WebSocket in place of NodeSocket.NodeWS.default.
    • NodeSocket.layerWebSocketConstructorWS is removed. Use NodeWS.layerWebSocketConstructor.

    Behaviour changes for clients that pass handshake headers, which previously used ws. Use NodeWS.layerWebSocketConstructor to keep the old behaviour:

    • Reads cannot be paused. Incoming frames are buffered without limit, and a configured highWaterMark fails the socket with a SocketReadError.
    • Connection errors are a generic ErrorEvent, so SocketOpenError causes lack the underlying error code.
    • The Socket.WebSocket service is a global WebSocket, so ws instanceof checks and ws-only methods such as terminate() and ping() no longer apply.
    • A custom Host header is ignored.
    • Outgoing messages are not compressed. Incoming permessage-deflate messages are still decompressed.
    • Connections use undici's global dispatcher instead of http.globalAgent / https.globalAgent.
Patch Changes

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/routine-updates branch from b403cdf to b6716f8 Compare October 30, 2026 21:54
@renovate
renovate Bot force-pushed the renovate/routine-updates branch from b6716f8 to 164dc84 Compare October 30, 2026 21:58
@renovate
renovate Bot force-pushed the renovate/routine-updates branch from 164dc84 to 79403ea Compare October 31, 2026 16:59
@renovate
renovate Bot force-pushed the renovate/routine-updates branch from 79403ea to f2ab70b Compare October 31, 2026 21:26
@renovate
renovate Bot force-pushed the renovate/routine-updates branch from f2ab70b to 02450af Compare October 31, 2026 21:28
@renovate
renovate Bot force-pushed the renovate/routine-updates branch from 02450af to 35ee46b Compare November 1, 2026 03:12
@renovate
renovate Bot force-pushed the renovate/routine-updates branch from 35ee46b to 4344271 Compare November 3, 2026 07:13

This branch had an error being deployed

1 failed deployment
preview — 43442716 Deployed Nov 3, 2026 by renovate[bot] via Deploy the preview #139
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants