chore(web): Bump AI sdk dependencies

[brendan-kellam]

Summary by CodeRabbit

• Chores
  • Updated AI SDK and all provider integration packages (including Anthropic, OpenAI, Google, Azure, DeepSeek, Mistral, Amazon Bedrock, XAI, and OpenAI-compatible) to the latest versions.
  • Updated the core AI package dependency to a newer version.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 5c09e6ee-8702-4a7f-91d5-761290b0b5ee

📥 Commits

Reviewing files that changed from the base of the PR and between ed05fc4 and 35f1aad.

⛔ Files ignored due to path filters (1)

• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (2)

• CHANGELOG.md
• packages/web/package.json

---

Walkthrough

This PR updates multiple AI SDK packages and the core ai package to newer versions in the web package dependencies, with a corresponding changelog entry documenting the version bump.

Changes

Cohort / File(s)	Summary
Dependency Version Updates CHANGELOG.md, packages/web/package.json	Bumped @ai-sdk/* packages (amazon-bedrock, anthropic, azure, deepseek, google, google-vertex, mistral, openai, openai-compatible, react, xai) and the ai package to newer versions, with changelog documentation of the changes.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• chore(ask_sb): Bump AI SDK libs #444: Performs identical dependency version bumping of @ai-sdk/* and ai packages in packages/web/package.json with corresponding changelog updates.
• chore(ask_sb): Bump AI SDK dependencies #404: Updates the same set of @ai-sdk dependency versions in packages/web/package.json.
• chore(web): upgrade Vercel AI SDK from v5 to v6 #969: Upgrades the same Vercel AI SDK and @ai-sdk/* package versions in packages/web with changelog documentation (includes additional v6 API code/type changes).

Suggested reviewers

• msukkari

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch bkellam/bump_ai_deps

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

License Audit

⚠️ Status: PASS

Metric	Count
Total packages	2057
Resolved (non-standard)	35
Unresolved	0
Strong copyleft	0
Weak copyleft	39

Weak Copyleft Packages (informational)

Package	Version	License
@img/sharp-libvips-darwin-arm64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-darwin-arm64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-darwin-x64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-darwin-x64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-arm	1.0.5	LGPL-3.0-or-later
@img/sharp-libvips-linux-arm	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-arm64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-arm64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-ppc64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-riscv64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-s390x	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-s390x	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-x64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linux-x64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-arm64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-arm64	1.2.4	LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-x64	1.0.4	LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-x64	1.2.4	LGPL-3.0-or-later
axe-core	4.10.3	MPL-2.0
lightningcss	1.32.0	MPL-2.0
lightningcss-android-arm64	1.32.0	MPL-2.0
lightningcss-darwin-arm64	1.32.0	MPL-2.0
lightningcss-darwin-x64	1.32.0	MPL-2.0
lightningcss-freebsd-x64	1.32.0	MPL-2.0
lightningcss-linux-arm-gnueabihf	1.32.0	MPL-2.0
lightningcss-linux-arm64-gnu	1.32.0	MPL-2.0
lightningcss-linux-arm64-musl	1.32.0	MPL-2.0
lightningcss-linux-x64-gnu	1.32.0	MPL-2.0
lightningcss-linux-x64-musl	1.32.0	MPL-2.0
lightningcss-win32-arm64-msvc	1.32.0	MPL-2.0
lightningcss-win32-x64-msvc	1.32.0	MPL-2.0
@img/sharp-wasm32	0.33.5	Apache-2.0 AND LGPL-3.0-or-later AND MIT
@img/sharp-wasm32	0.34.5	Apache-2.0 AND LGPL-3.0-or-later AND MIT
@img/sharp-win32-arm64	0.34.5	Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-ia32	0.33.5	Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-ia32	0.34.5	Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-x64	0.33.5	Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-x64	0.34.5	Apache-2.0 AND LGPL-3.0-or-later
dompurify	3.4.0	MPL-2.0 OR Apache-2.0

Resolved Packages (35)

Package	Version	Original	Resolved	Source
@csstools/color-helpers	5.0.2	MIT-0	MIT-0	Valid SPDX identifier (MIT No Attribution) already present in package.json
@img/sharp-wasm32	0.33.5	Apache-2.0 AND LGPL-3.0-or-later AND MIT	Apache-2.0 AND LGPL-3.0-or-later AND MIT	Valid SPDX compound expression in package.json
@img/sharp-wasm32	0.34.5	Apache-2.0 AND LGPL-3.0-or-later AND MIT	Apache-2.0 AND LGPL-3.0-or-later AND MIT	Valid SPDX compound expression in package.json
@img/sharp-win32-arm64	0.34.5	Apache-2.0 AND LGPL-3.0-or-later	Apache-2.0 AND LGPL-3.0-or-later	Valid SPDX compound expression in package.json
@img/sharp-win32-ia32	0.33.5	Apache-2.0 AND LGPL-3.0-or-later	Apache-2.0 AND LGPL-3.0-or-later	Valid SPDX compound expression in package.json
@img/sharp-win32-ia32	0.34.5	Apache-2.0 AND LGPL-3.0-or-later	Apache-2.0 AND LGPL-3.0-or-later	Valid SPDX compound expression in package.json
@img/sharp-win32-x64	0.33.5	Apache-2.0 AND LGPL-3.0-or-later	Apache-2.0 AND LGPL-3.0-or-later	Valid SPDX compound expression in package.json
@img/sharp-win32-x64	0.34.5	Apache-2.0 AND LGPL-3.0-or-later	Apache-2.0 AND LGPL-3.0-or-later	Valid SPDX compound expression in package.json
@react-grab/cli	0.1.23	UNKNOWN	MIT	GitHub repo: https://github.com/aidenybai/react-grab (LICENSE file)
@react-grab/cli	0.1.29	UNKNOWN	MIT	GitHub repo: https://github.com/aidenybai/react-grab (LICENSE file)
@react-grab/mcp	0.1.29	UNKNOWN	MIT	GitHub repo: https://github.com/aidenybai/react-grab (LICENSE file)
@sentry/cli	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	GitHub repo: https://github.com/getsentry/sentry-cli (LICENSE file) — Functional Source License 1.1 with MIT Future License; non-competing use only, transitions to MIT after 2 years
@sentry/cli-darwin	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	GitHub repo: https://github.com/getsentry/sentry-cli (LICENSE file)
@sentry/cli-linux-arm	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	GitHub repo: https://github.com/getsentry/sentry-cli (LICENSE file)
@sentry/cli-linux-arm64	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	GitHub repo: https://github.com/getsentry/sentry-cli (LICENSE file)
@sentry/cli-linux-i686	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	GitHub repo: https://github.com/getsentry/sentry-cli (LICENSE file)
@sentry/cli-linux-x64	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	GitHub repo: https://github.com/getsentry/sentry-cli (LICENSE file)
@sentry/cli-win32-arm64	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	GitHub repo: https://github.com/getsentry/sentry-cli (LICENSE file)
@sentry/cli-win32-i686	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	GitHub repo: https://github.com/getsentry/sentry-cli (LICENSE file)
@sentry/cli-win32-x64	2.58.5	FSL-1.1-MIT	FSL-1.1-MIT	GitHub repo: https://github.com/getsentry/sentry-cli (LICENSE file)
codemirror-lang-elixir	4.0.0	UNKNOWN	Apache-2.0	npm registry (registry.npmjs.org) — latest version specifies Apache-2.0
dompurify	3.4.0	(MPL-2.0 OR Apache-2.0)	MPL-2.0 OR Apache-2.0	Valid SPDX compound expression in package.json (dual-licensed; user may choose either)
element-source	0.0.3	UNKNOWN	MIT	GitHub repo: https://github.com/aidenybai/element-source (LICENSE file)
json-schema	0.4.0	(AFL-2.1 OR BSD-3-Clause)	AFL-2.1 OR BSD-3-Clause	Valid SPDX compound expression in package.json (dual-licensed)
lezer-elixir	1.1.2	UNKNOWN	Apache-2.0	npm registry (registry.npmjs.org) — latest version specifies Apache-2.0
map-stream	0.1.0	UNKNOWN	MIT	npm registry (registry.npmjs.org) — latest version specifies MIT
memorystream	0.3.1	UNKNOWN	MIT	npm registry — license object [{"type":"MIT","url":"..."}]; type field extracted
nodemailer	8.0.5	MIT-0	MIT-0	Valid SPDX identifier (MIT No Attribution) already present in package.json
posthog-js	1.369.0	SEE LICENSE IN LICENSE	Apache-2.0	GitHub repo: https://github.com/PostHog/posthog-js (LICENSE file) — Apache-2.0 primary with MIT for some vendored files
type-fest	0.7.1	(MIT OR CC0-1.0)	MIT OR CC0-1.0	Valid SPDX compound expression in package.json (dual-licensed)
type-fest	0.20.2	(MIT OR CC0-1.0)	MIT OR CC0-1.0	Valid SPDX compound expression in package.json (dual-licensed)
type-fest	5.3.1	(MIT OR CC0-1.0)	MIT OR CC0-1.0	Valid SPDX compound expression in package.json (dual-licensed)
valid-url	1.0.9	UNKNOWN	MIT	GitHub repo: https://github.com/ogt/valid-url (LICENSE file)
victory-vendor	36.9.2	MIT AND ISC	MIT AND ISC	Valid SPDX compound expression in package.json
pause-stream	0.0.11	["MIT","Apache2"]	MIT AND Apache-2.0	Extracted from license array in package.json (dual-licensed under MIT and Apache-2.0)