chore(deps-dev): bump @ai-sdk/openai from 2.0.20 to 3.0.53#786
chore(deps-dev): bump @ai-sdk/openai from 2.0.20 to 3.0.53#786dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
There was a problem hiding this comment.
This is a major version bump (v2 → v3) of a devDependency used in e2e tests — worth a quick human check to confirm the e2e tests still pass with the new API.
Extended reasoning...
Overview
This PR bumps @ai-sdk/openai from 2.0.20 to 3.0.52 (a major version bump: v2 → v3) in package.json and pnpm-lock.yaml. The package is a devDependency and is consumed only in tests/e2e/vercel-ai-sdk.e2e.test.ts via import { openai } from "@ai-sdk/openai".
Security risks
None identified. This is a third-party AI provider client used only in test code, with no auth or crypto handling.
Level of scrutiny
Moderate. Although the change is confined to devDependencies and test files, major version bumps can introduce breaking API changes. The single consumer (vercel-ai-sdk.e2e.test.ts) uses the openai named export, which could have changed in v3. Additionally, transitive deps shift: @ai-sdk/provider moves from 2.0.0 → 3.0.8 and @ai-sdk/provider-utils from 3.0.5 → 4.0.23, and a new dep @standard-schema/spec is introduced.
Other factors
No bugs were found by the automated scan. The lockfile changes are internally consistent. A human reviewer should verify the e2e tests pass with the upgraded package before merging.
14a0867 to
5eeff40
Compare
5eeff40 to
261b77e
Compare
261b77e to
eebdc09
Compare
eebdc09 to
7e6dc86
Compare
7e6dc86 to
3ad5288
Compare
3ad5288 to
930ae76
Compare
930ae76 to
a12c7f5
Compare
a12c7f5 to
d02b77f
Compare
Bumps [@ai-sdk/openai](https://github.com/vercel/ai/tree/HEAD/packages/openai) from 2.0.20 to 3.0.53. - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/@ai-sdk/openai@3.0.53/packages/openai/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/commits/@ai-sdk/openai@3.0.53/packages/openai) --- updated-dependencies: - dependency-name: "@ai-sdk/openai" dependency-version: 3.0.52 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
d02b77f to
0e6fde6
Compare
Bumps @ai-sdk/openai from 2.0.20 to 3.0.53.
Release notes
Sourced from @ai-sdk/openai's releases.
Changelog
Sourced from @ai-sdk/openai's changelog.
... (truncated)
Commits
f4faec7Version Packages (#14440)953385dBackport: fix(ai): default undefined tool-call input to empty object in conve...99327b1Version Packages (#14212)d42076dBackport: Add AI Gateway hint to provider READMEs (#14199)c3a057dVersion Packages (#14153)8aefbbbVersion Packages (#14078)7372f61Version Packages (#13936)bc01093Backport: fix(openai): support file-url parts in tool output content (#13933)a141a1eVersion Packages (#13762)9c548deBackport: feat(openai): add additional GPT-5.4 models (#13755)