Skip to content

[Snyk] Security upgrade ai from 6.0.208 to 6.0.214 - #22

Open
ykstorm wants to merge 1 commit into
mainfrom
snyk-fix-f8b99fd7dd99a333b864044a163dc6c7
Open

[Snyk] Security upgrade ai from 6.0.208 to 6.0.214#22
ykstorm wants to merge 1 commit into
mainfrom
snyk-fix-f8b99fd7dd99a333b864044a163dc6c7

Conversation

@ykstorm

@ykstorm ykstorm commented Jul 21, 2026

Copy link
Copy Markdown
Owner

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • package.json
  • package-lock.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JS-AISDKPROVIDERUTILS-16735288
  666  

Breaking Change Risk

Merge Risk: Low

Notice: This assessment is enhanced by AI.


Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

@ykstorm

ykstorm commented Jul 21, 2026

Copy link
Copy Markdown
Owner Author

Merge Risk: Low

This is a patch version upgrade for the ai package (Vercel AI SDK). The changes between versions 6.0.208 and 6.0.214 consist of bug fixes and the addition of new, optional features.

Key changes include:

  • Fixes for streaming behavior in Node.js and audio stream cancellation on failure.
  • Addition of new optional features, such as options for video generation and retry logic for tool calls.

No breaking changes, API removals, or mandatory modifications are documented in this version range.

Source: GitHub CHANGELOG.md

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

@vercel

vercel Bot commented Jul 21, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
anchor Error Error Jul 21, 2026 6:24pm

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

@coderabbitai

coderabbitai Bot commented Jul 21, 2026

Copy link
Copy Markdown

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 3c35ff70-0715-4881-853a-e52542b0a629

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch snyk-fix-f8b99fd7dd99a333b864044a163dc6c7

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants