Skip to content

Commit ca7f69e

Browse files
vercel-ai-sdk[bot]vercel-ai-sdk[bot]
authored
Version Packages (#12513)
This PR was opened by the [Changesets release](https://github.com/changesets/action) GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to release-v5.0, this PR will be updated. # Releases ## ai@5.0.130 ### Patch Changes - 20565b8: security: prevent unbounded memory growth in download functions The `download()` and `downloadBlob()` functions now enforce a default 2 GiB size limit when downloading from user-provided URLs. Downloads that exceed this limit are aborted with a `DownloadError` instead of consuming unbounded memory and crashing the process. The `abortSignal` parameter is now passed through to `fetch()` in all download call sites. Added `download` option to `transcribe()` and `experimental_generateVideo()` for providing a custom download function. Use the new `createDownload({ maxBytes })` factory to configure download size limits. - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 - @ai-sdk/gateway@2.0.36 ## @ai-sdk/amazon-bedrock@3.0.79 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 - @ai-sdk/anthropic@2.0.62 ## @ai-sdk/angular@1.0.130 ### Patch Changes - Updated dependencies [20565b8] - ai@5.0.130 - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/anthropic@2.0.62 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/assemblyai@1.0.24 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/azure@2.0.92 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 - @ai-sdk/openai@2.0.90 ## @ai-sdk/baseten@0.0.16 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 - @ai-sdk/openai-compatible@1.0.33 ## @ai-sdk/black-forest-labs@0.0.9 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/cerebras@1.0.37 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 - @ai-sdk/openai-compatible@1.0.33 ## @ai-sdk/cohere@2.0.23 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/deepgram@1.0.23 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/deepinfra@1.0.36 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 - @ai-sdk/openai-compatible@1.0.33 ## @ai-sdk/deepseek@1.0.34 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/elevenlabs@1.0.23 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/fal@1.0.27 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/fireworks@1.0.34 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 - @ai-sdk/openai-compatible@1.0.33 ## @ai-sdk/gateway@2.0.36 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/gladia@1.0.22 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/google@2.0.53 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/google-vertex@3.0.102 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 - @ai-sdk/anthropic@2.0.62 - @ai-sdk/google@2.0.53 ## @ai-sdk/groq@2.0.35 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/huggingface@0.0.16 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 - @ai-sdk/openai-compatible@1.0.33 ## @ai-sdk/hume@1.0.22 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/langchain@1.0.130 ### Patch Changes - Updated dependencies [20565b8] - ai@5.0.130 ## @ai-sdk/llamaindex@1.0.130 ### Patch Changes - Updated dependencies [20565b8] - ai@5.0.130 ## @ai-sdk/lmnt@1.0.22 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/luma@1.0.22 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/mcp@0.0.14 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/mistral@2.0.28 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/moonshotai@0.0.4 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 - @ai-sdk/openai-compatible@1.0.33 ## @ai-sdk/openai@2.0.90 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/openai-compatible@1.0.33 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/perplexity@2.0.24 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/prodia@0.0.2 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/provider-utils@3.0.21 ### Patch Changes - 20565b8: security: prevent unbounded memory growth in download functions The `download()` and `downloadBlob()` functions now enforce a default 2 GiB size limit when downloading from user-provided URLs. Downloads that exceed this limit are aborted with a `DownloadError` instead of consuming unbounded memory and crashing the process. The `abortSignal` parameter is now passed through to `fetch()` in all download call sites. Added `download` option to `transcribe()` and `experimental_generateVideo()` for providing a custom download function. Use the new `createDownload({ maxBytes })` factory to configure download size limits. ## @ai-sdk/react@2.0.132 ### Patch Changes - Updated dependencies [20565b8] - ai@5.0.130 - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/replicate@1.0.22 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/revai@1.0.22 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/rsc@1.0.132 ### Patch Changes - Updated dependencies [20565b8] - ai@5.0.130 - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/svelte@3.0.130 ### Patch Changes - Updated dependencies [20565b8] - ai@5.0.130 - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/togetherai@1.0.35 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 - @ai-sdk/openai-compatible@1.0.33 ## @ai-sdk/valibot@1.0.21 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/vercel@1.0.34 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 - @ai-sdk/openai-compatible@1.0.33 ## @ai-sdk/vue@2.0.130 ### Patch Changes - Updated dependencies [20565b8] - ai@5.0.130 - @ai-sdk/provider-utils@3.0.21 ## @ai-sdk/xai@2.0.60 ### Patch Changes - Updated dependencies [20565b8] - @ai-sdk/provider-utils@3.0.21 - @ai-sdk/openai-compatible@1.0.33 Co-authored-by: vercel-ai-sdk[bot] <225926702+vercel-ai-sdk[bot]@users.noreply.github.com>
1 parent 20565b8 commit ca7f69e

File tree

92 files changed

+395
-55
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

92 files changed

+395
-55
lines changed

‎.changeset/fix-unbounded-download-dos.md‎

Lines changed: 0 additions & 10 deletions
This file was deleted.

‎packages/ai/CHANGELOG.md‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,19 @@
11
# ai
22

3+
## 5.0.130
4+
5+
### Patch Changes
6+
7+
- 20565b8: security: prevent unbounded memory growth in download functions
8+
9+
The `download()` and `downloadBlob()` functions now enforce a default 2 GiB size limit when downloading from user-provided URLs. Downloads that exceed this limit are aborted with a `DownloadError` instead of consuming unbounded memory and crashing the process. The `abortSignal` parameter is now passed through to `fetch()` in all download call sites.
10+
11+
Added `download` option to `transcribe()` and `experimental_generateVideo()` for providing a custom download function. Use the new `createDownload({ maxBytes })` factory to configure download size limits.
12+
13+
- Updated dependencies [20565b8]
14+
- @ai-sdk/provider-utils@3.0.21
15+
- @ai-sdk/gateway@2.0.36
16+
317
## 5.0.129
418

519
### Patch Changes

‎packages/ai/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "ai",
3-
"version": "5.0.129",
3+
"version": "5.0.130",
44
"description": "AI SDK by Vercel - The AI Toolkit for TypeScript and JavaScript",
55
"license": "Apache-2.0",
66
"sideEffects": false,

‎packages/amazon-bedrock/CHANGELOG.md‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,13 @@
11
# @ai-sdk/amazon-bedrock
22

3+
## 3.0.79
4+
5+
### Patch Changes
6+
7+
- Updated dependencies [20565b8]
8+
- @ai-sdk/provider-utils@3.0.21
9+
- @ai-sdk/anthropic@2.0.62
10+
311
## 3.0.78
412

513
### Patch Changes

‎packages/amazon-bedrock/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@ai-sdk/amazon-bedrock",
3-
"version": "3.0.78",
3+
"version": "3.0.79",
44
"license": "Apache-2.0",
55
"sideEffects": false,
66
"main": "./dist/index.js",

‎packages/angular/CHANGELOG.md‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,13 @@
11
# @ai-sdk/angular
22

3+
## 1.0.130
4+
5+
### Patch Changes
6+
7+
- Updated dependencies [20565b8]
8+
- ai@5.0.130
9+
- @ai-sdk/provider-utils@3.0.21
10+
311
## 1.0.129
412

513
### Patch Changes

‎packages/angular/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@ai-sdk/angular",
3-
"version": "1.0.129",
3+
"version": "1.0.130",
44
"description": "Angular implementation of ai-sdk.",
55
"license": "Apache-2.0",
66
"main": "dist/index.cjs",

‎packages/anthropic/CHANGELOG.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,12 @@
11
# @ai-sdk/anthropic
22

3+
## 2.0.62
4+
5+
### Patch Changes
6+
7+
- Updated dependencies [20565b8]
8+
- @ai-sdk/provider-utils@3.0.21
9+
310
## 2.0.61
411

512
### Patch Changes

‎packages/anthropic/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@ai-sdk/anthropic",
3-
"version": "2.0.61",
3+
"version": "2.0.62",
44
"license": "Apache-2.0",
55
"sideEffects": false,
66
"main": "./dist/index.js",

‎packages/assemblyai/CHANGELOG.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,12 @@
11
# @ai-sdk/assemblyai
22

3+
## 1.0.24
4+
5+
### Patch Changes
6+
7+
- Updated dependencies [20565b8]
8+
- @ai-sdk/provider-utils@3.0.21
9+
310
## 1.0.23
411

512
### Patch Changes

0 commit comments

Comments
 (0)