chore(deps): bump jsondiffpatch and ai in /examples/node/observability-vercel-ai#3877
Conversation
Removes [jsondiffpatch](https://github.com/benjamine/jsondiffpatch). It's no longer used after updating ancestor dependency [ai](https://github.com/vercel/ai). These dependencies need to be updated together. Removes `jsondiffpatch` Updates `ai` from 4.3.19 to 6.0.105 - [Release notes](https://github.com/vercel/ai/releases) - [Changelog](https://github.com/vercel/ai/blob/main/CHANGELOG.md) - [Commits](https://github.com/vercel/ai/compare/ai@4.3.19...ai@6.0.105) --- updated-dependencies: - dependency-name: jsondiffpatch dependency-version: dependency-type: indirect - dependency-name: ai dependency-version: 6.0.105 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
dosubot
bot
added
the
size:XS
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
| "@opentelemetry/sdk-trace-base": "^1.28.0", | ||
| "@opentelemetry/sdk-trace-node": "^1.28.0", | ||
| "@opentelemetry/semantic-conventions": "^1.28.0", | ||
| "ai": "^4.3.16", | ||
| "ai": "^6.0.105", |
There was a problem hiding this comment.
🔴 Incompatible @ai-sdk/openai v1.x with ai v6 due to mismatched @ai-sdk/provider major versions
ai was bumped from v4 to v6 but @ai-sdk/openai was left at ^1.3.22. These packages share a core interface contract via @ai-sdk/provider.
Root Cause and Impact
The lockfile shows ai v6.0.105 depends on @ai-sdk/provider v3.0.8, while @ai-sdk/openai v1.3.24 depends on @ai-sdk/provider v1.1.3. These are two incompatible major versions of the provider interface.
In examples/node/observability-vercel-ai/app.js:4-5:
import { openai } from "@ai-sdk/openai";
import { generateText } from "ai";The call openai("gpt-4o-mini") creates a model object implementing the LanguageModel interface from @ai-sdk/provider v1.x. However, generateText from ai v6 expects a model implementing the LanguageModel interface from @ai-sdk/provider v3.x. Since these are two different major versions with breaking interface changes, this will fail at runtime.
@ai-sdk/openai needs to be bumped to a v2.x+ release that uses @ai-sdk/provider v3.x to be compatible with ai v6.
Impact: The example is completely broken — running npm start will fail at runtime when generateText attempts to use the incompatible model object.
(Refers to lines 10-16)
Prompt for agents
In examples/node/observability-vercel-ai/package.json, the @ai-sdk/openai dependency on line 10 needs to be updated from ^1.3.22 to a version compatible with ai v6 (which uses @ai-sdk/provider v3.x). This likely means updating to @ai-sdk/openai v2.x or higher. After updating the version in package.json, regenerate the package-lock.json by running npm install. Check the Vercel AI SDK v5/v6 migration guide for the exact compatible version of @ai-sdk/openai.
Was this helpful? React with 👍 or 👎 to provide feedback.
Removes jsondiffpatch. It's no longer used after updating ancestor dependency ai. These dependencies need to be updated together.
Removes
jsondiffpatchUpdates
aifrom 4.3.19 to 6.0.105Release notes
Sourced from ai's releases.
Commits
ed17fe8Version Packages (#12953)58bc42dfeat (provider/openai): support custom tools (#12948)946ca0edocs: fix stale content links and docs typos (#12921)5ae109cVersion Packages (#12919)1330f2fchore(provider/gateway): update gateway model settings files (#12918)acfa8b9Version Packages (#12917)d98d9bafix(anthropic, amazon-bedrock): migrate output_format to output_config.format...97c7b9fVersion Packages (#12910)2164cdffeat(anthropic): add the new code_execution tool (#12900)8acb431Version Packages (#12906)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.