renovate-bot opened a new pull request, #7263: URL: https://github.com/apache/texera/pull/7263
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@ai-sdk/openai](https://ai-sdk.dev/docs) ([source](https://redirect.github.com/vercel/ai/tree/HEAD/packages/openai)) | [`4.0.17` → `4.0.27`](https://renovatebot.com/diffs/npm/@ai-sdk%2fopenai/4.0.17/4.0.27) |  |  | | [ai](https://ai-sdk.dev/docs) ([source](https://redirect.github.com/vercel/ai/tree/HEAD/packages/ai)) | [`7.0.33` → `7.0.48`](https://renovatebot.com/diffs/npm/ai/7.0.33/7.0.48) |  |  | | [tsx](https://tsx.hirok.io) ([source](https://redirect.github.com/privatenumber/tsx)) | [`4.23.1` → `4.23.5`](https://renovatebot.com/diffs/npm/tsx/4.23.1/4.23.5) |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/6912) for more information. --- ### Release Notes <details> <summary>vercel/ai (@​ai-sdk/openai)</summary> ### [`v4.0.27`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/openai/CHANGELOG.md#4027) [Compare Source](https://redirect.github.com/vercel/ai/compare/@ai-sdk/[email protected]...@ai-sdk/[email protected]) ##### Patch Changes - [`5fc7da5`](https://redirect.github.com/vercel/ai/commit/5fc7da5): chore: centralize empty language model usage creation in provider utilities. - [`93b2acd`](https://redirect.github.com/vercel/ai/commit/93b2acd): chore: centralize response metadata conversion - Updated dependencies \[[`5fc7da5`](https://redirect.github.com/vercel/ai/commit/5fc7da5)] - Updated dependencies \[[`93b2acd`](https://redirect.github.com/vercel/ai/commit/93b2acd)] - [@​ai-sdk/provider-utils](https://redirect.github.com/ai-sdk/provider-utils)@​5.0.18 ### [`v4.0.26`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/openai/CHANGELOG.md#4026) [Compare Source](https://redirect.github.com/vercel/ai/compare/@ai-sdk/[email protected]...@ai-sdk/[email protected]) ##### Patch Changes - [`f7c4a38`](https://redirect.github.com/vercel/ai/commit/f7c4a38): Serialize file upload expiry settings in the multipart field shape accepted by OpenAI. - Updated dependencies \[[`fa95504`](https://redirect.github.com/vercel/ai/commit/fa95504)] - [@​ai-sdk/provider-utils](https://redirect.github.com/ai-sdk/provider-utils)@​5.0.17 ### [`v4.0.25`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/openai/CHANGELOG.md#4025) [Compare Source](https://redirect.github.com/vercel/ai/compare/@ai-sdk/[email protected]...@ai-sdk/[email protected]) ##### Patch Changes - [`beaecb3`](https://redirect.github.com/vercel/ai/commit/beaecb3): fix(provider/openai): resolve responses doStream at response.in\_progress instead of first output token The early-stream-error peek treated `response.in_progress` as an unknown chunk, so `doStream` did not resolve until the first output item arrived — delaying stream availability (and downstream TTFB for proxies/gateways) by the model's full time-to-first-token. `response.in_progress` is now modeled in the chunk schema and marks the request as accepted: the peek keeps watching for error frames for a short grace window (50ms) so quota/rate-limit errors flushed alongside `response.in_progress` still throw as retryable `APICallError`s, while healthy streams become available right after upstream acknowledges the request. - [`b192878`](https://redirect.github.com/vercel/ai/commit/b192878): feat: add experimental\_toolCaller routing to generateText for code mode - Updated dependencies \[[`d8210b6`](https://redirect.github.com/vercel/ai/commit/d8210b6)] - Updated dependencies \[[`b192878`](https://redirect.github.com/vercel/ai/commit/b192878)] - [@​ai-sdk/provider-utils](https://redirect.github.com/ai-sdk/provider-utils)@​5.0.16 ### [`v4.0.24`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/openai/CHANGELOG.md#4024) [Compare Source](https://redirect.github.com/vercel/ai/compare/@ai-sdk/[email protected]...@ai-sdk/[email protected]) ##### Patch Changes - Updated dependencies \[[`1659cd5`](https://redirect.github.com/vercel/ai/commit/1659cd5)] - Updated dependencies \[[`6a5bdff`](https://redirect.github.com/vercel/ai/commit/6a5bdff)] - [@​ai-sdk/provider-utils](https://redirect.github.com/ai-sdk/provider-utils)@​5.0.15 ### [`v4.0.23`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/openai/CHANGELOG.md#4023) [Compare Source](https://redirect.github.com/vercel/ai/compare/@ai-sdk/[email protected]...@ai-sdk/[email protected]) ##### Patch Changes - [`96a237d`](https://redirect.github.com/vercel/ai/commit/96a237d): Add blocked domain filters to the OpenAI and Azure Responses API web search tools. ### [`v4.0.22`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/openai/CHANGELOG.md#4022) [Compare Source](https://redirect.github.com/vercel/ai/compare/@ai-sdk/[email protected]...@ai-sdk/[email protected]) ##### Patch Changes - [`c49380c`](https://redirect.github.com/vercel/ai/commit/c49380c): feat: add experimental streaming speech translation models (`openai.translation('gpt-realtime-translate')` over the OpenAI Realtime translations WebSocket and `google.translation('gemini-3.5-live-translate-preview')` over the Gemini Live API). `connectToWebSocket` in `@ai-sdk/provider-utils` now passes close code and reason to `onClose` (additive, optional parameter). - Updated dependencies \[[`0c464d9`](https://redirect.github.com/vercel/ai/commit/0c464d9)] - Updated dependencies \[[`c49380c`](https://redirect.github.com/vercel/ai/commit/c49380c)] - [@​ai-sdk/provider-utils](https://redirect.github.com/ai-sdk/provider-utils)@​5.0.14 ### [`v4.0.21`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/openai/CHANGELOG.md#4021) [Compare Source](https://redirect.github.com/vercel/ai/compare/@ai-sdk/[email protected]...@ai-sdk/[email protected]) ##### Patch Changes - Updated dependencies \[[`1e2f324`](https://redirect.github.com/vercel/ai/commit/1e2f324)] - [@​ai-sdk/provider](https://redirect.github.com/ai-sdk/provider)@​4.0.4 - [@​ai-sdk/provider-utils](https://redirect.github.com/ai-sdk/provider-utils)@​5.0.13 ### [`v4.0.20`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/openai/CHANGELOG.md#4020) [Compare Source](https://redirect.github.com/vercel/ai/compare/@ai-sdk/[email protected]...@ai-sdk/[email protected]) ##### Patch Changes - [`1f6dd3a`](https://redirect.github.com/vercel/ai/commit/1f6dd3a): Add OpenAI Responses Programmatic Tool Calling with hosted program tools, function caller controls, structured output schemas, and multi-step continuation support. ### [`v4.0.19`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/openai/CHANGELOG.md#4019) [Compare Source](https://redirect.github.com/vercel/ai/compare/@ai-sdk/[email protected]...@ai-sdk/[email protected]) ##### Patch Changes - [`34c53c0`](https://redirect.github.com/vercel/ai/commit/34c53c0): Apply reasoning, service tier, and image defaults to recognizable future OpenAI model family versions. ### [`v4.0.18`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/openai/CHANGELOG.md#4018) [Compare Source](https://redirect.github.com/vercel/ai/compare/@ai-sdk/[email protected]...@ai-sdk/[email protected]) ##### Patch Changes - [`bc43dc2`](https://redirect.github.com/vercel/ai/commit/bc43dc2): Preserve stored tool search output item IDs from provider metadata. </details> <details> <summary>vercel/ai (ai)</summary> ### [`v7.0.48`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7048) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.48) ##### Patch Changes - Updated dependencies \[[`bdd5e28`](https://redirect.github.com/vercel/ai/commit/bdd5e28)] - [@​ai-sdk/gateway](https://redirect.github.com/ai-sdk/gateway)@​4.0.37 ### [`v7.0.47`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7047) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.47) ##### Patch Changes - Updated dependencies \[[`5fc7da5`](https://redirect.github.com/vercel/ai/commit/5fc7da5)] - Updated dependencies \[[`93b2acd`](https://redirect.github.com/vercel/ai/commit/93b2acd)] - [@​ai-sdk/provider-utils](https://redirect.github.com/ai-sdk/provider-utils)@​5.0.18 - [@​ai-sdk/gateway](https://redirect.github.com/ai-sdk/gateway)@​4.0.36 ### [`v7.0.46`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7046) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.46) ##### Patch Changes - Updated dependencies \[[`4f2e064`](https://redirect.github.com/vercel/ai/commit/4f2e064)] - [@​ai-sdk/gateway](https://redirect.github.com/ai-sdk/gateway)@​4.0.35 ### [`v7.0.45`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7045) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.45) ##### Patch Changes - [`d6ce0ee`](https://redirect.github.com/vercel/ai/commit/d6ce0ee): feat(ai): support experimental\_toolCallers in streamText - [`fa95504`](https://redirect.github.com/vercel/ai/commit/fa95504): feat(ai): support experimental tool callers in ToolLoopAgent - [`349afe7`](https://redirect.github.com/vercel/ai/commit/349afe7): Warn when `generateText` receives streaming-only `firstChunkMs` or `chunkMs` timeout settings. - Updated dependencies \[[`fa95504`](https://redirect.github.com/vercel/ai/commit/fa95504)] - [@​ai-sdk/provider-utils](https://redirect.github.com/ai-sdk/provider-utils)@​5.0.17 - [@​ai-sdk/gateway](https://redirect.github.com/ai-sdk/gateway)@​4.0.34 ### [`v7.0.44`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7044) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.44) ##### Patch Changes - [`015acb4`](https://redirect.github.com/vercel/ai/commit/015acb4): fix telemetry attribution for language model calls that resolve to a different response model ### [`v7.0.43`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7043) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.43) ##### Patch Changes - [`b192878`](https://redirect.github.com/vercel/ai/commit/b192878): feat: add experimental\_toolCaller routing to generateText for code mode - Updated dependencies \[[`d8210b6`](https://redirect.github.com/vercel/ai/commit/d8210b6)] - Updated dependencies \[[`af3f400`](https://redirect.github.com/vercel/ai/commit/af3f400)] - Updated dependencies \[[`b192878`](https://redirect.github.com/vercel/ai/commit/b192878)] - [@​ai-sdk/provider-utils](https://redirect.github.com/ai-sdk/provider-utils)@​5.0.16 - [@​ai-sdk/gateway](https://redirect.github.com/ai-sdk/gateway)@​4.0.33 ### [`v7.0.42`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7042) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.42) ##### Patch Changes - [`1659cd5`](https://redirect.github.com/vercel/ai/commit/1659cd5): Prevent validated downloads on Node.js from reaching private or internal services through DNS aliases or DNS rebinding by validating and pinning every resolved address at connection time. - [`60f97f6`](https://redirect.github.com/vercel/ai/commit/60f97f6): support overriding model call settings for individual `prepareStep` invocations - [`6a5bdff`](https://redirect.github.com/vercel/ai/commit/6a5bdff): Fix validated Node.js downloads when the HTTP connector requests a single DNS address. - [`6de2ec1`](https://redirect.github.com/vercel/ai/commit/6de2ec1): Preserve provider metadata from empty text deltas in `streamText`. - Updated dependencies \[[`1659cd5`](https://redirect.github.com/vercel/ai/commit/1659cd5)] - Updated dependencies \[[`6a5bdff`](https://redirect.github.com/vercel/ai/commit/6a5bdff)] - Updated dependencies \[[`0012529`](https://redirect.github.com/vercel/ai/commit/0012529)] - [@​ai-sdk/provider-utils](https://redirect.github.com/ai-sdk/provider-utils)@​5.0.15 - [@​ai-sdk/gateway](https://redirect.github.com/ai-sdk/gateway)@​4.0.32 ### [`v7.0.41`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7041) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.41) ##### Patch Changes - [`2e2224b`](https://redirect.github.com/vercel/ai/commit/2e2224b): Route the warning system information banner to stderr so it does not corrupt application output written to stdout. - Updated dependencies \[[`bf216b3`](https://redirect.github.com/vercel/ai/commit/bf216b3)] - [@​ai-sdk/gateway](https://redirect.github.com/ai-sdk/gateway)@​4.0.31 ### [`v7.0.40`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7040) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.40) ##### Patch Changes - [`c3782a6`](https://redirect.github.com/vercel/ai/commit/c3782a6): Deprecate `Experimental_GeneratedImage` in favor of `GeneratedFile`. ### [`v7.0.39`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7039) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.39) ##### Patch Changes - [`09a52cb`](https://redirect.github.com/vercel/ai/commit/09a52cb): Promote the `repairText` option to stable on `generateObject` and `streamObject`, with a deprecated `experimental_repairText` alias for backwards compatibility. - Updated dependencies \[[`0c464d9`](https://redirect.github.com/vercel/ai/commit/0c464d9)] - Updated dependencies \[[`c49380c`](https://redirect.github.com/vercel/ai/commit/c49380c)] - [@​ai-sdk/provider-utils](https://redirect.github.com/ai-sdk/provider-utils)@​5.0.14 - [@​ai-sdk/gateway](https://redirect.github.com/ai-sdk/gateway)@​4.0.30 ### [`v7.0.38`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7038) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.38) ##### Patch Changes - [`7bd6bdd`](https://redirect.github.com/vercel/ai/commit/7bd6bdd): Avoid synthesizing client tool errors for invalid provider-executed tool calls. - [`1e2f324`](https://redirect.github.com/vercel/ai/commit/1e2f324): feat: add experimental speech translation model specification (`Experimental_SpeechTranslationModelV4`) and `experimental_streamTranslate` for streaming speech-to-speech translation - Updated dependencies \[[`d9d2a11`](https://redirect.github.com/vercel/ai/commit/d9d2a11)] - Updated dependencies \[[`1e2f324`](https://redirect.github.com/vercel/ai/commit/1e2f324)] - [@​ai-sdk/gateway](https://redirect.github.com/ai-sdk/gateway)@​4.0.29 - [@​ai-sdk/provider](https://redirect.github.com/ai-sdk/provider)@​4.0.4 - [@​ai-sdk/provider-utils](https://redirect.github.com/ai-sdk/provider-utils)@​5.0.13 ### [`v7.0.37`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7037) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.37) ##### Patch Changes - Updated dependencies \[[`0a7c7f4`](https://redirect.github.com/vercel/ai/commit/0a7c7f4)] - [@​ai-sdk/gateway](https://redirect.github.com/ai-sdk/gateway)@​4.0.28 ### [`v7.0.36`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7036) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.36) ##### Patch Changes - [`7fa85b2`](https://redirect.github.com/vercel/ai/commit/7fa85b2): fix(ai): use injective serialization for tool approval HMAC payload The tool approval signature (`experimental_toolApprovalSecret`) built its HMAC payload by joining fields with `\n`. Because fields such as `toolName` and `toolCallId` can themselves contain a newline, distinct field tuples could serialize to identical bytes, allowing a signed approval to verify against a different tuple. The payload is now serialized with `JSON.stringify` (with a versioned domain-separation prefix), which escapes delimiter/control characters and makes the encoding injective. Verification remains backwards compatible: a signature in the old format still verifies, but only when no field contains the `\n` delimiter (the condition that made the old format ambiguous), so a pending approval that straddles an upgrade is not rejected while the collision stays closed. ### [`v7.0.35`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7035) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.35) ##### Patch Changes - [`7f6650b`](https://redirect.github.com/vercel/ai/commit/7f6650b): Return response piping promises so callers can catch stream read and write errors. - [`106ea59`](https://redirect.github.com/vercel/ai/commit/106ea59): feat(ai): add per-step first content timeout for streaming generations - Updated dependencies \[[`2112ff1`](https://redirect.github.com/vercel/ai/commit/2112ff1)] - [@​ai-sdk/gateway](https://redirect.github.com/ai-sdk/gateway)@​4.0.27 ### [`v7.0.34`](https://redirect.github.com/vercel/ai/blob/HEAD/packages/ai/CHANGELOG.md#7034) [Compare Source](https://redirect.github.com/vercel/ai/compare/[email protected]@7.0.34) ##### Patch Changes - Updated dependencies \[[`7c16f21`](https://redirect.github.com/vercel/ai/commit/7c16f21)] - [@​ai-sdk/gateway](https://redirect.github.com/ai-sdk/gateway)@​4.0.26 </details> <details> <summary>privatenumber/tsx (tsx)</summary> ### [`v4.23.5`](https://redirect.github.com/privatenumber/tsx/compare/v4.23.4...c55004d44127a966304c3dd87cc564c16db2b981) [Compare Source](https://redirect.github.com/privatenumber/tsx/compare/v4.23.4...c55004d44127a966304c3dd87cc564c16db2b981) ### [`v4.23.4`](https://redirect.github.com/privatenumber/tsx/releases/tag/v4.23.4) [Compare Source](https://redirect.github.com/privatenumber/tsx/compare/v4.23.3...v4.23.4) ##### Bug Fixes - **cli:** allow async process.once() signal handlers to finish ([#​827](https://redirect.github.com/privatenumber/tsx/issues/827)) ([2afc7bb](https://redirect.github.com/privatenumber/tsx/commit/2afc7bbcbd0bb77623737550aefdf816e4bf0a66)) *** This release is also available on: - [npm package (@​latest dist-tag)](https://www.npmjs.com/package/tsx/v/4.23.4) ### [`v4.23.3`](https://redirect.github.com/privatenumber/tsx/releases/tag/v4.23.3) [Compare Source](https://redirect.github.com/privatenumber/tsx/compare/v4.23.2...v4.23.3) ##### Bug Fixes - preserve listenerCount overload semantics ([#​823](https://redirect.github.com/privatenumber/tsx/issues/823)) ([b6574d4](https://redirect.github.com/privatenumber/tsx/commit/b6574d4307ee3a9c4297ccbd314b6fdaf614d4e7)) *** This release is also available on: - [npm package (@​latest dist-tag)](https://www.npmjs.com/package/tsx/v/4.23.3) ### [`v4.23.2`](https://redirect.github.com/privatenumber/tsx/compare/v4.23.1...0b00bc84d188c1d8ba56b33b5737b6df3b820911) [Compare Source](https://redirect.github.com/privatenumber/tsx/compare/v4.23.1...v4.23.2) </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "before 8am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/apache/texera). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==--> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
