Skip to content

chore(deps):(deps): bump the production-patches group across 1 directory with 4 updates#342

Closed
dependabot[bot] wants to merge 1 commit intostagingfrom
dependabot/npm_and_yarn/production-patches-79922deea9
Closed

chore(deps):(deps): bump the production-patches group across 1 directory with 4 updates#342
dependabot[bot] wants to merge 1 commit intostagingfrom
dependabot/npm_and_yarn/production-patches-79922deea9

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2026

Bumps the production-patches group with 4 updates in the / directory: @ai-sdk/openai, @iconify-json/lucide, ai and express-rate-limit.

Updates @ai-sdk/openai from 3.0.48 to 3.0.49

Release notes

Sourced from @​ai-sdk/openai's releases.

@​ai-sdk/openai@​3.0.49

Patch Changes

  • bc01093: fix(openai): support file-url parts in tool output content
Commits

Updates @iconify-json/lucide from 1.2.100 to 1.2.101

Commits

Updates ai from 6.0.141 to 6.0.142

Release notes

Sourced from ai's releases.

ai@6.0.142

Patch Changes

  • 6f75953: feat(ai): add new isLoopFinished stop condition helper for unlimited steps
  • Updated dependencies [70322b4]
    • @​ai-sdk/gateway@​3.0.84
Commits
  • 1d18256 Version Packages (#13973)
  • 70322b4 Backport: chore(provider/gateway): update gateway model settings files v6 (#1...
  • 6f75953 Backport: feat(ai): add new isLoopFinished stop condition helper for unlimi...
  • cf15595 Backport: refactor: generalize image and video generation examples (#13960)
  • 62cb3b5 Version Packages (#13954)
  • ff854a2 Backport: fix(amazon-bedrock): add tool search beta for Anthropic (#13951)
  • 58c95db Version Packages (#13948)
  • afb6886 Backport: feat (provider/google-vertex): add support for maas models (#13945)
  • 7372f61 Version Packages (#13936)
  • bc01093 Backport: fix(openai): support file-url parts in tool output content (#13933)
  • Additional commits viewable in compare view

Updates express-rate-limit from 8.3.1 to 8.3.2

Release notes

Sourced from express-rate-limit's releases.

v8.3.2

You can view the changelog here.

Commits
  • c4dbb42 8.3.2
  • 8f1cc66 v8.3.2 changelog
  • 601b87f Fix skipFailedRequests for for connections that close very early (#611)
  • 014c2f3 chore(deps-dev): bump the development-dependencies group with 6 updates (#612)
  • 4e8b18b Remove Zuplo sponsorship details from README (#613)
  • 31dab19 test: use numeric range for reset timestamp assertion (#610)
  • f82ad13 chore(deps-dev): bump the development-dependencies group with 2 updates (#609)
  • fa0b098 docs: fix broken link
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Bump production dependencies to pull in small fixes and features: improved OpenAI tool output handling, a new ai stop helper, and a rate-limit fix for early-closed connections.

  • Dependencies
    • @ai-sdk/openai 3.0.48 → 3.0.49 — supports file-url parts in tool output content.
    • ai 6.0.141 → 6.0.142 — adds isLoopFinished stop condition helper.
    • express-rate-limit 8.3.1 → 8.3.2 — fixes skipFailedRequests with very early connection closes.
    • @iconify-json/lucide 1.2.100 → 1.2.101 — updates icon set data.

Written for commit 3f6f816. Summary will update on new commits.

…ory with 4 updates

Bumps the production-patches group with 4 updates in the / directory: [@ai-sdk/openai](https://github.com/vercel/ai), [@iconify-json/lucide](https://github.com/iconify/icon-sets), [ai](https://github.com/vercel/ai) and [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit).


Updates `@ai-sdk/openai` from 3.0.48 to 3.0.49
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/openai@3.0.48...@ai-sdk/openai@3.0.49)

Updates `@iconify-json/lucide` from 1.2.100 to 1.2.101
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `ai` from 6.0.141 to 6.0.142
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/ai@6.0.141...ai@6.0.142)

Updates `express-rate-limit` from 8.3.1 to 8.3.2
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.3.1...v8.3.2)

---
updated-dependencies:
- dependency-name: "@ai-sdk/openai"
  dependency-version: 3.0.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patches
- dependency-name: "@iconify-json/lucide"
  dependency-version: 1.2.101
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patches
- dependency-name: ai
  dependency-version: 6.0.142
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patches
- dependency-name: express-rate-limit
  dependency-version: 8.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-patches
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 1, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 1, 2026

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel
Copy link
Copy Markdown

vercel bot commented Apr 1, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
pixelated Ready Ready Preview, Comment Apr 1, 2026 8:52am

Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 2, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 2, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/production-patches-79922deea9 branch April 2, 2026 05:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants