Bump AI SDK packages to v7#336
Merged
Merged
Conversation
This was referenced Jul 4, 2026
Deploying impeccable with
|
| Latest commit: |
daa8dc5
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://b87e0142.impeccable-2rv.pages.dev |
| Branch Preview URL: | https://codex-ai-sdk-v7-rollup.impeccable-2rv.pages.dev |
daa8dc5 to
f9fa464
Compare
mp3wizard
added a commit
to mp3wizard/impeccable
that referenced
this pull request
Jul 4, 2026
New upstream features: - Bump AI SDK packages to v7 (pbakaus#336) - Fix live toast stale callback race (pbakaus#271) - Replace Alumni Sans Pinstripe with Alumni Sans across the type system - Bump bun minor/patch deps + actions/cache from 5 to 6 Security findings: wildcard postMessage in browser extension (by-design), mutable GH Actions tags (upstream), dependabot missing cooldown (fixed) Security fixes: added cooldown: default-days: 7 to dependabot.yml (bun + github-actions ecosystems) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Rolls the remaining Dependabot AI SDK major updates into one tested PR instead of landing four separate major-version PRs:
ai:6.0.208in the current lockfile, requested range^6.0.168->^7.0.14(7.0.14resolved)@ai-sdk/anthropic:3.0.85in the current lockfile, requested range^3.0.71->^4.0.7(4.0.7resolved)@ai-sdk/google:3.0.83in the current lockfile, requested range^3.0.75->^4.0.8(4.0.8resolved)@ai-sdk/openai:3.0.74in the current lockfile, requested range^3.0.53->^4.0.7(4.0.7resolved)Also updates the LLM-backed skill-behavior harness to prefer
result.responseMessages, which is the AI SDK v7 continuation-message surface, with a fallback to the previousresult.response?.messagesshape.Supersedes Dependabot PRs #321, #322, #323, and #324.
Risk / migration notes
Validation
bun install --frozen-lockfilepassedbun run buildpassedbun run testpassedbun run test:skill-behaviorpassed: 27/27 scenarios acrossclaude-sonnet-4-6,gpt-5.5, andgemini-3.1-flash-liteI also ran the skill-behavior suite on current
mainwith the old AI SDK stack (ai@6.0.208, providers at v3) as a baseline; it passed 27/27 before this migration.Note
Medium Risk
Major AI SDK versions can change result/message shapes; risk is limited to dev-only LLM harness usage and was mitigated by full build and skill-behavior test runs.
Overview
Bundles a major upgrade of the Vercel AI SDK stack: core
aimoves to v7, and@ai-sdk/anthropic,@ai-sdk/google, and@ai-sdk/openaimove to v4, with matching lockfile updates (including new transitive deps such as@workflow/serdeand removal of the old OpenTelemetry coupling onai).The only application code change is in the skill-behavior test harness: multi-turn scenarios now chain conversation context from
result.responseMessages(AI SDK v7), with a fallback toresult.response?.messagesfor compatibility.Reviewed by Cursor Bugbot for commit f9fa464. Bugbot is set up for automated code reviews on this repo. Configure here.