fix(deps): update Vercel AI SDK and all dependencies#1963
Conversation
Updates 47 packages including all AI-related dependencies: - ai (Vercel AI SDK): 6.0.91 → 6.0.116 - @ai-sdk/anthropic: 3.0.45 → 3.0.58 - @ai-sdk/mistral: 2.0.28 → 3.0.24 (major) - @ai-sdk/google: 3.0.29 → 3.0.43 - @anthropic-ai/sdk: 0.71.2 → 0.78.0 - @modelcontextprotocol/sdk: 1.26.0 → 1.27.1 - zod: 4.2.1 → 4.3.6 - Plus all other @ai-sdk/* providers, UI, tooling deps Skipped major bumps: electron 40→41, vite 7→8, jsdom 27→29 All 4487 tests pass, typecheck clean. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
github-actions
bot
added
area/frontend
|
Caution Review failedThe pull request is closed. ℹ️ Recent review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: ASSERTIVE Plan: Pro Run ID: 📒 Files selected for processing (3)
📝 WalkthroughWalkthroughUpgrades and version bumps across dependencies primarily in Changes
Estimated code review effort🎯 2 (Simple) | ⏱️ ~12 minutes Suggested labels
Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
📝 Coding Plan
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment Tip CodeRabbit can generate a title for your PR based on the changes with custom instructions.Set the |
Summary of ChangesHello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request performs a significant dependency upgrade across the project. The primary goal is to bring various packages up to their latest stable versions, enhancing security, performance, and access to new features. This update specifically targets AI-related SDKs and general development dependencies, while carefully managing potentially breaking changes by deferring certain major version bumps. Highlights
Changelog
Activity
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
Coverage Report for apps/desktop
File CoverageNo changed files found. |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates a large number of dependencies in the desktop application. The changes are mostly minor and patch updates, with a noted major version bump for @ai-sdk/mistral. The author has also been careful to skip some risky major version bumps, which is a good practice.
I've found one inconsistency regarding the @electron/rebuild package, where the version in devDependencies conflicts with the version specified in overrides. Please see my comment for details.
| "@playwright/test": "^1.52.0", | ||
| "@tailwindcss/postcss": "^4.1.17", | ||
| "@testing-library/dom": "^10.0.0", | ||
| "@electron/rebuild": "^4.0.3", |
There was a problem hiding this comment.
There's an inconsistency with the version of @electron/rebuild. You've updated it to ^4.0.3 here in devDependencies, but the overrides section on line 158 still pins it to 4.0.2.
This can lead to confusion and unpredictable behavior. To ensure consistency, please either update the override to 4.0.3 or revert this change to keep devDependencies aligned with the override. If the override is no longer needed with the updated electron-builder, it could be removed entirely.
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In `@apps/desktop/package.json`:
- Line 127: The package.json has a version mismatch for `@electron/rebuild`:
devDependencies lists "@electron/rebuild": "^4.0.3" while overrides pins it to
"4.0.2"; update one to match the other so installs are deterministic — either
change the devDependency entry for "@electron/rebuild" to "4.0.2" to honor the
override or update the overrides entry to "4.0.3" if you want the newer caret
range, and ensure both the devDependencies and overrides sections reference the
identical version string.
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: ASSERTIVE
Plan: Pro
Run ID: bd34bee1-199a-45b6-abd8-2f2239e61a72
⛔ Files ignored due to path filters (1)
package-lock.jsonis excluded by!**/package-lock.json,!**/package-lock.json
📒 Files selected for processing (1)
apps/desktop/package.json
… → 4.0.3) Addresses PR review feedback from CodeRabbit, Gemini, and Cursor bots. The override was still pinned to 4.0.2 while devDependency was bumped to ^4.0.3, creating a version conflict. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
| | **macOS (Intel)** | [Auto-Claude-2.8.0-beta.1-darwin-x64.dmg](https://github.com/AndyMik90/Auto-Claude/releases/download/v2.8.0-beta.1/Auto-Claude-2.8.0-beta.1-darwin-x64.dmg) | | ||
| | **Linux** | [Auto-Claude-2.8.0-beta.1-linux-x86_64.AppImage](https://github.com/AndyMik90/Auto-Claude/releases/download/v2.8.0-beta.1/Auto-Claude-2.8.0-beta.1-linux-x86_64.AppImage) | | ||
| | **Linux (Debian)** | [Auto-Claude-2.8.0-beta.1-linux-amd64.deb](https://github.com/AndyMik90/Auto-Claude/releases/download/v2.8.0-beta.1/Auto-Claude-2.8.0-beta.1-linux-amd64.deb) | | ||
| | **Linux (Flatpak)** | [Auto-Claude-2.8.0-beta.1-linux-x86_64.flatpak](https://github.com/AndyMik90/Auto-Claude/releases/download/v2.8.0-beta.1/Auto-Claude-2.8.0-beta.1-linux-x86_64.flatpak) | |
There was a problem hiding this comment.
Beta version downgraded from beta.5 to beta.1
High Severity
The README beta download links and badge were downgraded from 2.8.0-beta.5 to 2.8.0-beta.1. This is a regression — the dependency update PR appears to have regenerated the README based on the package.json version field (which is 2.8.0-beta.1), overwriting the newer beta.5 links. Users clicking these download links will be directed to an older beta release (or broken links if beta.1 artifacts no longer exist on the releases page).
1 participant
Summary
Test plan
🤖 Generated with Claude Code
Summary by CodeRabbit
Chores
Documentation