chore(deps): bump @openrouter/ai-sdk-provider from 1.5.4 to 2.2.3#74
chore(deps): bump @openrouter/ai-sdk-provider from 1.5.4 to 2.2.3#74dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
dependabot
bot
added
dependencies
![sentry[bot]](https://avatars.githubusercontent.com/in/12637?s=60&v=4){kind=small}
| @@ -82,7 +82,7 @@ | |||
| "@octokit/graphql": "9.0.2", | |||
| "@octokit/rest": "catalog:", | |||
| "@openauthjs/openauth": "catalog:", | |||
| "@openrouter/ai-sdk-provider": "1.5.4", | |||
| "@openrouter/ai-sdk-provider": "2.2.3", | |||
There was a problem hiding this comment.
Bug: The @openrouter/ai-sdk-provider dependency was updated, but the corresponding version-specific patch in patchedDependencies was not. The patch will no longer be applied, causing a silent regression.
Severity: HIGH
Suggested Fix
Create a new patch file for @openrouter/ai-sdk-provider version 2.2.3 that includes the necessary modifications. Update the patchedDependencies entry in the root package.json to point to the new patch file for version 2.2.3. After updating, run the package manager's install command to apply the patch and update the lockfile.
Prompt for AI Agent
Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.
Location: packages/altimate-code/package.json#L85
Potential issue: The version of the `@openrouter/ai-sdk-provider` dependency was updated
to `2.2.3`, but the corresponding entry in `patchedDependencies` in the root
`package.json` was not updated. The existing patch is specifically for version `1.5.4`.
As a result, the patch, which adds the `providerMetadata.openrouter.reasoning_details`
field to `reasoning-end` stream events, will no longer be applied. This will cause a
silent regression where any code consuming
`providerMetadata?.openrouter?.reasoning_details` will receive `undefined`, leading to
malfunctioning features that rely on these reasoning details from OpenRouter streams.
Did we get this right? 👍 / 👎 to inform future reviews.
Bumps [@openrouter/ai-sdk-provider](https://github.com/OpenRouterTeam/ai-sdk-provider) from 1.5.4 to 2.2.3. - [Release notes](https://github.com/OpenRouterTeam/ai-sdk-provider/releases) - [Changelog](https://github.com/OpenRouterTeam/ai-sdk-provider/blob/main/CHANGELOG.md) - [Commits](OpenRouterTeam/ai-sdk-provider@v1.5.4...2.2.3) --- updated-dependencies: - dependency-name: "@openrouter/ai-sdk-provider" dependency-version: 2.2.3 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/openrouter/ai-sdk-provider-2.2.3
branch
from
19c929b to
fa555e1
Compare
| "@opencode-ai/sdk": "workspace:*", | ||
| "@opencode-ai/util": "workspace:*", | ||
| "@openrouter/ai-sdk-provider": "1.5.4", | ||
| "@openrouter/ai-sdk-provider": "2.2.3", |
There was a problem hiding this comment.
Bug: The patchedDependencies entry for @openrouter/ai-sdk-provider was not updated to 2.2.3, causing the patch to fail and breaking related functionality.
Severity: HIGH
Suggested Fix
Update the patchedDependencies entry in the root package.json to reference the new version 2.2.3. This may require regenerating the patch for the new version. After updating the package.json, run bun install to update the bun.lockb file with the correct dependency and patch information.
Prompt for AI Agent
Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.
Location: packages/opencode/package.json#L86
Potential issue: The version of the `@openrouter/ai-sdk-provider` dependency was updated
from `1.5.4` to `2.2.3`, but the corresponding entry in `patchedDependencies` in the
root `package.json` was not updated. The patch is keyed to the specific version `1.5.4`.
When `bun install` runs, it will install version `2.2.3` but will fail to apply the
patch because the version in the patch key does not match. This will lead to the loss of
functionality provided by the patch, such as support for `reasoning_details` in
OpenRouter.
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/openrouter/ai-sdk-provider-2.2.3
branch
1 participant
Bumps @openrouter/ai-sdk-provider from 1.5.4 to 2.2.3.
Release notes
Sourced from
@openrouter/ai-sdk-provider's releases.... (truncated)
Changelog
Sourced from
@openrouter/ai-sdk-provider's changelog.... (truncated)
Commits
7c043a0Version Packages (#410)7b21d68fix: compute missing token usage detail fields (noCache, text, cacheWrite) (#...e878b92Version Packages (#408)f7139f1feat: supportfilesparameter in image generation for image editing (#405)260a42dVersion Packages (#404)e3908c6feat: add support forauto-routerplugin (#403)918eb4eVersion Packages (#401)ad0c2e1fix: always use array content for system messages with block-level cache cont...bf935d3Version Packages (#400)50c932cfeat: add support for reasoning effort values xhigh, minimal, none (#398)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)