[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@ai-sdk/openai-compatible (source)	3.0.62 → 3.0.75

---

Release Notes

vercel/ai (@​ai-sdk/openai-compatible)

v3.0.75

Compare Source

Patch Changes

• e619655: Defer construction of provider validation schemas until first use to reduce package import time.
• Updated dependencies [b089ce8]
• Updated dependencies [39a776b]
  • @​ai-sdk/provider-utils@5.0.65

v3.0.74

Compare Source

Patch Changes

• Updated dependencies [0c2a9de]
• Updated dependencies [200c47f]
  • @​ai-sdk/provider@4.0.31
  • @​ai-sdk/provider-utils@5.0.64

v3.0.73

Compare Source

Patch Changes

• 869601f: fix(openai-compatible, groq, alibaba): put reasoning before text in doGenerate

v3.0.72

Compare Source

Patch Changes

• Updated dependencies [60cc252]
  • @​ai-sdk/provider@4.0.30
  • @​ai-sdk/provider-utils@5.0.63

v3.0.71

Compare Source

Patch Changes

• Updated dependencies [0957554]
  • @​ai-sdk/provider@4.0.29
  • @​ai-sdk/provider-utils@5.0.62

v3.0.70

Compare Source

Patch Changes

• d6ed4b9: feat(openai-compatible): support URL-based image responses
• Updated dependencies [130e871]
  • @​ai-sdk/provider@4.0.28
  • @​ai-sdk/provider-utils@5.0.61

v3.0.69

Compare Source

Patch Changes

• Updated dependencies [2e89fa4]
  • @​ai-sdk/provider-utils@5.0.60

v3.0.68

Compare Source

Patch Changes

• 2c6996e: feat(openai-compatible): support uploaded file references via file_id
• Updated dependencies [9667bf2]
• Updated dependencies [e57803c]
• Updated dependencies [81663cc]
  • @​ai-sdk/provider-utils@5.0.59
  • @​ai-sdk/provider@4.0.27

v3.0.67

Compare Source

Patch Changes

• 5cf13d2: feat: map the top level embedding dimensions to provider settings
• Updated dependencies [4dbc902]
  • @​ai-sdk/provider@4.0.26
  • @​ai-sdk/provider-utils@5.0.58

v3.0.66

Compare Source

Patch Changes

• Updated dependencies [9184a35]
  • @​ai-sdk/provider@4.0.25
  • @​ai-sdk/provider-utils@5.0.57

v3.0.65

Compare Source

Patch Changes

• Updated dependencies [d3bcad9]
  • @​ai-sdk/provider@4.0.24
  • @​ai-sdk/provider-utils@5.0.56

v3.0.64

Compare Source

Patch Changes

• 268225c: feat(provider): add a portable max reasoning level with native provider mappings, compatibility coercions, and budget-based fallback support.

  Compatibility notes:

  • TypeScript source compatibility: Adding max widens LanguageModelV4CallOptions['reasoning'] and the derived ReasoningLevel type. Third-party providers and consumers with exhaustive switches or Record<ReasoningLevel, ...> mappings must handle max before upgrading. Ordinary calls using existing reasoning levels remain accepted.
  • Amazon Bedrock: Existing Nova 2 calls using portable reasoning: 'xhigh' now send maxReasoningEffort: 'high' instead of the unsupported 'max', and return a compatibility warning. Anthropic and OpenAI Bedrock effort mappings retain their existing xhigh behavior. Partial Bedrock reasoning configurations continue to preserve explicit values and derive missing fields; explicit effort/budget overrides and disabled thinking no longer emit warnings for portable mappings that are not sent.
  • Fireworks: Existing portable minimal and xhigh calls keep their request mappings to low and high, respectively, and now return compatibility warnings in generation and streaming results. Portable max maps to high with the same warning behavior.

  Release classification: This remains a patch changeset under the repository's explicit release policy, which uses patch releases for both fixes and features. The TypeScript source-compatibility caveat for exhaustive consumers is disclosed above. Maintainers can override this classification with a major label if they decide to align the provider-spec addition with a future AI SDK major release.

• Updated dependencies [fc1e19e]

• Updated dependencies [5094ebd]

• Updated dependencies [268225c]

• Updated dependencies [0af2f7c]

  • @​ai-sdk/provider-utils@5.0.55
  • @​ai-sdk/provider@4.0.23

v3.0.63

Compare Source

Patch Changes

• Updated dependencies [2959d35]
• Updated dependencies [59116e6]
  • @​ai-sdk/provider@4.0.22
  • @​ai-sdk/provider-utils@5.0.54

---

Configuration

📅 Schedule: (in timezone Asia/Singapore)

• Branch creation
  • "before 12pm on friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 3dd3a9c1-4a41-4f3a-8bda-2dde1295247d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/@ai-sdk/openai-compatible	3.0.75	Unknown	Unknown
npm/@ai-sdk/provider	4.0.31	Unknown	Unknown
npm/@ai-sdk/provider-utils	5.0.65	Unknown	Unknown
npm/undici	7.30.1	🟢 7.8	Details Check Score Reason Dependency-Update-Tool 🟢 10 update tool detected Security-Policy 🟢 10 security policy file detected Code-Review 🟢 5 Found 12/21 approved changesets -- score normalized to 5 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 10 30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 8 binaries present in source code CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Pinned-Dependencies 🟢 6 dependency not pinned by hash detected -- score normalized to 6 Signed-Releases ⚠️ -1 no releases found Vulnerabilities 🟢 7 3 existing vulnerabilities detected Packaging 🟢 10 packaging workflow detected License 🟢 10 license file detected Fuzzing 🟢 10 project is fuzzed Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST 🟢 10 SAST tool is run on all commits CI-Tests 🟢 10 22 out of 22 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 58 contributing companies or organizations

Scanned Files

• pnpm-lock.yaml