chore(deps): update dependency ai to v7.0.36

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
ai (source)	7.0.35 → 7.0.36

---

Release Notes

vercel/ai (ai)

v7.0.36

Compare Source

Patch Changes

• 7fa85b2: fix(ai): use injective serialization for tool approval HMAC payload

  The tool approval signature (experimental_toolApprovalSecret) built its HMAC
  payload by joining fields with \n. Because fields such as toolName and
  toolCallId can themselves contain a newline, distinct field tuples could
  serialize to identical bytes, allowing a signed approval to verify against a
  different tuple. The payload is now serialized with JSON.stringify (with a
  versioned domain-separation prefix), which escapes delimiter/control characters
  and makes the encoding injective.

  Verification remains backwards compatible: a signature in the old format still
  verifies, but only when no field contains the \n delimiter (the condition
  that made the old format ambiguous), so a pending approval that straddles an
  upgrade is not rejected while the collision stays closed.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend,every weekday after 5pm,every weekday before 8am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.