chore(deps): bump @ai-sdk/provider-utils and ai in /samples/nextjs-claude/ui

[dependabot]

Bumps @ai-sdk/provider-utils to 5.0.53 and updates ancestor dependency ai. These dependencies need to be updated together.

Updates @ai-sdk/provider-utils from 1.0.22 to 5.0.53

Release notes

Sourced from @​ai-sdk/provider-utils's releases.

@​ai-sdk/provider-utils@​5.0.53

Patch Changes

• 8c65988: feat(ai): add telemetry to speech generation and transcription, including provider usage propagation and experimental streaming lifecycle callbacks
• 527a163: fix: validate hostname parts using isValidHostnamePart
• Updated dependencies [8c65988]
  • @​ai-sdk/provider@​4.0.21

@​ai-sdk/provider-utils@​5.0.52

Patch Changes

• ede5b89: chore: migrate package builds from tsup to tsdown
• Updated dependencies [ede5b89]
  • @​ai-sdk/provider@​4.0.20

@​ai-sdk/provider-utils@​4.0.57

Patch Changes

• a9cea74: Keep default Node.js downloads protected by DNS validation and connection pinning when frameworks or instrumentation wrap global fetch before or after the SDK loads.
• a9cea74: fix(mcp): prevent SSRF in OAuth metadata discovery
• a9cea74: fix(provider-utils): make lazy Undici import visible to deployment tracers

@​ai-sdk/provider-utils@​3.0.41

Patch Changes

• 2b1c2df: Keep default Node.js downloads protected by DNS validation and connection pinning when frameworks or instrumentation wrap global fetch before or after the SDK loads.
• 2b1c2df: fix(mcp): prevent SSRF in OAuth metadata discovery
• 2b1c2df: fix(provider-utils): make lazy Undici import visible to deployment tracers

Changelog

Sourced from @​ai-sdk/provider-utils's changelog.

5.0.53

Patch Changes

• 8c65988: feat(ai): add telemetry to speech generation and transcription, including provider usage propagation and experimental streaming lifecycle callbacks
• 527a163: fix: validate hostname parts using isValidHostnamePart
• Updated dependencies [8c65988]
  • @​ai-sdk/provider@​4.0.21

5.0.52

Patch Changes

• ede5b89: chore: migrate package builds from tsup to tsdown
• Updated dependencies [ede5b89]
  • @​ai-sdk/provider@​4.0.20

5.0.51

Patch Changes

• c2511c1: fix: use standards-compliant User-Agent header

5.0.50

Patch Changes

• e3605f6: Fix streamed tool calls with missing, blank, or repeated IDs.
• Updated dependencies [525efc5]
  • @​ai-sdk/provider@​4.0.19

5.0.49

Patch Changes

• af9597b: Compile packages for ES2022 runtime target
• bc49f78: Preserve original opaque URI strings in tagged file URLs during prompt conversion. Match explicit supported URL MIME types exactly so unsupported subtypes are not forwarded to providers.

5.0.48

Patch Changes

• be877ff: Add fetchUntrustedUrl, an opt-in fetch helper that withholds credentials and unknown custom headers from untrusted first-hop URLs. A matching configured credentialedOrigin (or trustedOrigin when omitted) allows sanitized caller headers. Otherwise only allowlisted metadata is sent; callers can explicitly allow additional non-credential metadata with untrustedFirstHopHeaders.

  The helper shares URL validation, DNS pinning, and redirect protection with

... (truncated)

Commits

• eb93c81 Version Packages (#21822)
• 527a163 fix: validate hostname parts (#21842)
• 8c65988 feat: support telemetry for speech generation and streaming and non-streaming...
• 161a7fd Version Packages (#21718)
• ede5b89 chore: move from tsup to tsdown (#21642)
• 1040e97 Version Packages (#21638)
• c2511c1 fix: use standards-compliant User-Agent header (#21344)
• 20ad146 Version Packages (#21569)
• e3605f6 fix: prevent unreliable streamed tool-call labels from aborting, corrupting, ...
• ee3169b Version Packages (#21508)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/provider-utils since your current version.

Updates ai from 3.4.33 to 7.0.126

Release notes

Sourced from ai's releases.

ai@7.0.126

Patch Changes

• 4f3d236: fix: clear tool approvals when addToolOutput runs

ai@7.0.124

Patch Changes

• 8c65988: feat(ai): add telemetry to speech generation and transcription, including provider usage propagation and experimental streaming lifecycle callbacks
• Updated dependencies [8c65988]
• Updated dependencies [e25994e]
• Updated dependencies [527a163]
• Updated dependencies [e74afc5]
  • @​ai-sdk/provider@​4.0.21
  • @​ai-sdk/provider-utils@​5.0.53
  • @​ai-sdk/gateway@​4.0.102

ai@7.0.123

Patch Changes

• 05cdac6: fix(ai): keep idle UI message streams open with optional SSE heartbeats
• 4514fc1: fix(ai): prune all tool content when retaining zero trailing messages
• ede5b89: chore: migrate package builds from tsup to tsdown
• 2a625cf: fix(ai): preserve partial reasoning tags when streamed text parts end
• 50a26d5: fix(ai): ignore pending tool approvals superseded by user messages
• Updated dependencies [040033b]
• Updated dependencies [ede5b89]
  • @​ai-sdk/gateway@​4.0.101
  • @​ai-sdk/provider@​4.0.20
  • @​ai-sdk/provider-utils@​5.0.52

ai@6.0.299

Patch Changes

• Updated dependencies [a2749a2]
  • @​ai-sdk/gateway@​3.0.208

ai@6.0.298

Patch Changes

• a9cea74: Keep default Node.js downloads protected by DNS validation and connection pinning when frameworks or instrumentation wrap global fetch before or after the SDK loads.
• Updated dependencies [a9cea74]
• Updated dependencies [a9cea74]
• Updated dependencies [a9cea74]
  • @​ai-sdk/provider-utils@​4.0.57
  • @​ai-sdk/gateway@​3.0.207

ai@6.0.297

Patch Changes

... (truncated)

Changelog

Sourced from ai's changelog.

7.0.126

Patch Changes

• 4f3d236: fix: clear tool approvals when addToolOutput runs

7.0.125

Patch Changes

• ff3dcef: feat(ai): add convertDataPart to agent UI stream helpers

7.0.124

Patch Changes

• 8c65988: feat(ai): add telemetry to speech generation and transcription, including provider usage propagation and experimental streaming lifecycle callbacks
• Updated dependencies [8c65988]
• Updated dependencies [e25994e]
• Updated dependencies [527a163]
• Updated dependencies [e74afc5]
  • @​ai-sdk/provider@​4.0.21
  • @​ai-sdk/provider-utils@​5.0.53
  • @​ai-sdk/gateway@​4.0.102

7.0.123

Patch Changes

• 05cdac6: fix(ai): keep idle UI message streams open with optional SSE heartbeats
• 4514fc1: fix(ai): prune all tool content when retaining zero trailing messages
• ede5b89: chore: migrate package builds from tsup to tsdown
• 2a625cf: fix(ai): preserve partial reasoning tags when streamed text parts end
• 50a26d5: fix(ai): ignore pending tool approvals superseded by user messages
• Updated dependencies [040033b]
• Updated dependencies [ede5b89]
  • @​ai-sdk/gateway@​4.0.101
  • @​ai-sdk/provider@​4.0.20
  • @​ai-sdk/provider-utils@​5.0.52

7.0.122

Patch Changes

• f3575f8: Clarify that provider-executed tool execution errors bypass the UI stream's onError callback to preserve provider error data and harness runtime messages. Stream errors and invalid tool calls still use the callback. Runtime behavior is unchanged.
• 27ab8d4: Encode chat IDs in default stream reconnection URLs so slashes, query delimiters, and fragments stay within the ID. Reject standalone . and .. IDs before fetching. Custom URLs returned by prepareReconnectToStreamRequest remain unchanged.
• Updated dependencies [870f509]
• Updated dependencies [a75f1fd]
  • @​ai-sdk/gateway@​4.0.100

... (truncated)

Commits

• 45e1fbc Version Packages (#21880)
• ce87e49 Version Packages (#21868)
• 4f3d236 fix: clear tool approvals when addToolOutput runs (#21879)
• ff3dcef feat(ai): add convertDataPart to agent UI stream helpers (#21816)
• eb93c81 Version Packages (#21822)
• 8c65988 feat: support telemetry for speech generation and streaming and non-streaming...
• 161a7fd Version Packages (#21718)
• 4514fc1 fix: prune tool content when retaining zero trailing messages (#21732)
• 2a625cf fix: preserve streamed text ending with a partial reasoning tag (#21726)
• 05cdac6 fix: idle UI message streams failing to flush promptly or remain open behind ...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ai since your current version.

Samples Checklist

✅ All good!

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: d5073030-18f7-434e-b2df-99e005e189ba

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

_{Comment @coderabbitai help to get the list of available commands.}