Skip to content

chore(deps-dev): bump @ai-sdk/openai from 2.0.20 to 3.0.49#763

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ai-sdk/openai-3.0.49
Closed

chore(deps-dev): bump @ai-sdk/openai from 2.0.20 to 3.0.49#763
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ai-sdk/openai-3.0.49

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 31, 2026

Bumps @ai-sdk/openai from 2.0.20 to 3.0.49.

Release notes

Sourced from @​ai-sdk/openai's releases.

@​ai-sdk/openai@​3.0.49

Patch Changes

  • bc01093: fix(openai): support file-url parts in tool output content
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 31, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented Mar 31, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
langfuse-js Ready Ready Preview Apr 9, 2026 5:00pm

Request Review

Comment thread package.json
@@ -33,7 +33,7 @@
},
"devDependencies": {
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Provider protocol version mismatch between ai core and @ai-sdk/openai

This major version bump introduces a provider protocol mismatch. The lockfile reveals that after this change, the installed packages use two different, incompatible versions of the shared provider protocol:

Package @ai-sdk/provider @ai-sdk/provider-utils
ai@5.0.52 (core) 2.0.0 3.0.9
@ai-sdk/anthropic@2.0.6 2.0.0 3.0.5
@ai-sdk/openai@3.0.49 3.0.8 4.0.21

Before this bump, @ai-sdk/openai@2.0.20 also used @ai-sdk/provider@2.0.0 and @ai-sdk/provider-utils@3.0.5, keeping it aligned with the rest of the stack.

Now @ai-sdk/openai@3.x is ahead of the core ai@5.x on the provider protocol. When generateText/streamText/etc. from ai@5.x receives a model object from openai("gpt-3.5-turbo"), it calls methods on it according to the @ai-sdk/provider@2.x interface. If the interface changed in v3, those calls can fail at runtime. All the E2E tests in tests/e2e/vercel-ai-sdk.e2e.test.ts exercise this code path.

The companion @ai-sdk/anthropic package is pinned to ^2, which aligns correctly with the core. Consider pinning @ai-sdk/openai back to ^2 until the ai core is updated to use @ai-sdk/provider@3.x, or verifying that the AI SDK officially supports this @ai-sdk/openai@3.x + ai@5.x combination.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/ai-sdk/openai-3.0.49 branch from a07dc95 to cd3b005 Compare April 1, 2026 11:07
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/ai-sdk/openai-3.0.49 branch from cd3b005 to 3e4eb14 Compare April 1, 2026 11:18
Bumps [@ai-sdk/openai](https://github.com/vercel/ai) from 2.0.20 to 3.0.49.
- [Release notes](https://github.com/vercel/ai/releases)
- [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vercel/ai/compare/@ai-sdk/openai@2.0.20...@ai-sdk/openai@3.0.49)

---
updated-dependencies:
- dependency-name: "@ai-sdk/openai"
  dependency-version: 3.0.49
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/ai-sdk/openai-3.0.49 branch from 3e4eb14 to 40c8cdc Compare April 9, 2026 16:58
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 10, 2026

Superseded by #782.

@dependabot dependabot Bot closed this Apr 10, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/ai-sdk/openai-3.0.49 branch April 10, 2026 14:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants