Bump the npm_and_yarn group across 2 directories with 3 updates#518
Bump the npm_and_yarn group across 2 directories with 3 updates#518dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
dependabot
bot
added
dependencies
|
--- |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/packages/indexer/npm_and_yarn-effff4c025
branch
3 times, most recently
from
65c13b8 to
c1eba37
Compare
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/packages/indexer/npm_and_yarn-effff4c025
branch
3 times, most recently
from
63852ec to
47dc977
Compare
Bumps the npm_and_yarn group with 2 updates in the /packages/indexer directory: [ai](https://github.com/vercel/ai) and [zx](https://github.com/google/zx). Bumps the npm_and_yarn group with 1 update in the /packages/web directory: [js-yaml](https://github.com/nodeca/js-yaml). Updates `ai` from 4.3.19 to 5.0.52 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/compare/ai@4.3.19...ai@5.0.52) Updates `zx` from 8.8.1 to 8.8.5 - [Release notes](https://github.com/google/zx/releases) - [Commits](google/zx@8.8.1...8.8.5) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) --- updated-dependencies: - dependency-name: ai dependency-version: 5.0.52 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: zx dependency-version: 8.8.5 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/packages/indexer/npm_and_yarn-effff4c025
branch
from
47dc977 to
0061444
Compare
|
@codex review |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 00614449b3
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| "@subsquid/typeorm-store": "^1.5.1", | ||
| "@subsquid/util-internal": "^3.2.0", | ||
| "ai": "^4.3.19", | ||
| "ai": "^5.0.52", |
There was a problem hiding this comment.
You’ve bumped ai to ^5.0.52 here, but @openrouter/ai-sdk-provider still resolves @ai-sdk/provider 1.1.3 (see packages/indexer/yarn.lock lines 1026–1032), while ai v5 pulls @ai-sdk/provider 2.0.0 (lines 1982–1989). In TextPlus, the OpenRouter model is passed directly into generateObject from ai, so the runtime now mixes two provider interfaces; when AI features run (OPENROUTER_API_KEY set), the model can fail to satisfy the v2 API expected by ai and throw at runtime. Consider upgrading @openrouter/ai-sdk-provider to a v2-compatible release or pinning ai back to v4 to keep a single provider interface.
Useful? React with 👍 / 👎.
Bumps the npm_and_yarn group with 2 updates in the /packages/indexer directory: ai and zx.
Bumps the npm_and_yarn group with 1 update in the /packages/web directory: js-yaml.
Updates
aifrom 4.3.19 to 5.0.52Commits
63d5f66Version Packages (#8895)930399bBackport: fix(ai): download files when intermediate file cannot be downloaded...7ca78f1Backport: feat(provider/gateway): Add new Qwen models to Gateway model string...1cfc209Backport: feat(provider/openai):OpenAILanguageModelOptionstype (#8858)347b7ecci: renamev5.0branch torelease-v*85909a9Backport: chore(ai): update test message (#8875)c56822dBackport: fix(ai): updateuiMessageChunkSchemato satisfy the `UIMessageChu...1461adfBackport: chore(examples): remove redundant OpenAI reasoning examples (#8871)6bd07dfVersion Packages (#8853)a45d61aci(release): remove incorrect changeset bump for@ai-sdk/basetenUpdates
zxfrom 8.8.1 to 8.8.5Release notes
Sourced from zx's releases.
Commits
1ca9270chore: pr template formatting (#1359)52b01a1chore: update pr template (#1358)70ecf23chore: update issue templates (#1357)8b08fc0chore: bump version to 8.8.5 (#1356)6045c34chore: update globby to v15 (#1354)a4d1bc2fix: checksnode_modulesref on linking (#1355)9ef6d3cfix(cli): prevent external node_modules deletion with --prefer-local (#1349)cc2a4f7ci: update zizmor to v1.15.1 (#1353)b47a5f0ci: refactor smoke tests naming (#1352)1fb8c9fci: update gh actions (#1351)Updates
js-yamlfrom 4.1.0 to 4.1.1Changelog
Sourced from js-yaml's changelog.
Commits
cc482e74.1.1 released50968b8dist rebuildd092d86lint fix383665ffix prototype pollution in merge (<<)0d3ca7aREADME.md: HTTP => HTTPS (#678)49baadddoc: 'empty' style option for !!nullba3460eFix demo link (#618)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.