chore: bump @ai-sdk/provider-utils from 4.0.2 to 4.0.57

[dependabot]

Bumps @ai-sdk/provider-utils from 4.0.2 to 4.0.57.

Changelog

Sourced from @​ai-sdk/provider-utils's changelog.

4.0.57

Patch Changes

• a9cea74: Keep default Node.js downloads protected by DNS validation and connection pinning when frameworks or instrumentation wrap global fetch before or after the SDK loads.
• a9cea74: fix(mcp): prevent SSRF in OAuth metadata discovery
• a9cea74: fix(provider-utils): make lazy Undici import visible to deployment tracers

4.0.56

Patch Changes

• 29dc427: fix(provider-utils): preserve streamed tool calls with unreliable IDs and indices

4.0.55

Patch Changes

• 3983fea: fix(provider): preserve media types on tool result file URLs and match full MIME types exactly when checking native URL support.
• Updated dependencies [3983fea]
  • @​ai-sdk/provider@​3.0.18

4.0.54

Patch Changes

• 069a945: Fix Google embedMany calls with more than 100 values by keeping per-value multimodal content aligned across automatic batches, including text-only entries. Validate content length before sending requests and validate each batch's provider options after middleware transforms them.

• d1a36d2: fix(ai): execute manually approved tool inputs produced by schema transforms

  Preserve approved inputs during revalidation and reject histories whose reconstructed schema output differs, including signed approvals with missing original input. Validate transformed UI tool inputs against the reconstructed output before returning them as static tool parts.

• f7f36d2: chore: enable dead code lint rules

4.0.53

Patch Changes

• Updated dependencies [da2e17b]
  • @​ai-sdk/provider@​3.0.17

4.0.52

Patch Changes

• 82e18b0: fix(provider-utils): avoid excessive memory usage when base64 encoding byte arrays

4.0.51

Patch Changes

... (truncated)

Commits

• 8dde272 Version Packages (#21848)
• a9cea74 Backport: fix(mcp, provider-utils): DNS-pinned MCP OAuth fetches under wrappe...
• fc81a9e Version Packages (#21573)
• 29dc427 [v6.0] fix: preserve streamed tool calls when gateway IDs or indices are unre...
• 5da12f6 Version Packages (#21513)
• 3983fea [v6.0] fix: forward Google Vertex GCS tool-result files as function response ...
• ba213ad Version Packages (#21368)
• d1a36d2 [v6.0] fix: manual tool approvals reject or mutate transformed inputs across ...
• 069a945 [v6.0] fix: preserve Google embedMany content alignment across automatic batc...
• f7f36d2 [v6] chore: enable dead code lint rules (#21395)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ai-sdk/provider-utils since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
blocknote	Error		Oct 2, 2026 10:31am UTC
blocknote-website	Error		Oct 2, 2026 10:31am UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 1dcde850-71bf-4382-8e36-cae5c3cbf546

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}