@ai-sdk/groq - npm Package Compare versions

Comparing version 4.0.0-beta.1 to 4.0.0-beta.2

CHANGELOG.md

 # @ai-sdk/groq
 
+## 4.0.0-beta.2
+
+### Patch Changes
+
+- 45b3d76: fix(security): prevent streaming tool calls from finalizing on parsable partial JSON
+
+  Streaming tool call arguments were finalized using `isParsableJson()` as a heuristic for completion. If partial accumulated JSON happened to be valid JSON before all chunks arrived, the tool call would be executed with incomplete arguments. Tool call finalization now only occurs in `flush()` after the stream is fully consumed.
+
+- f7295cb: revert incorrect fix https://github.com/vercel/ai/pull/13172
+
 ## 4.0.0-beta.1
@@ -4,0 +14,0 @@

dist/index.js

@@ -987,3 +987,3 @@ "use strict";
 // src/version.ts
-var VERSION = true ? "4.0.0-beta.1" : "0.0.0-test";
+var VERSION = true ? "4.0.0-beta.2" : "0.0.0-test";
 
@@ -990,0 +990,0 @@ // src/groq-provider.ts

dist/index.mjs

@@ -985,3 +985,3 @@ // src/groq-provider.ts
 // src/version.ts
-var VERSION = true ? "4.0.0-beta.1" : "0.0.0-test";
+var VERSION = true ? "4.0.0-beta.2" : "0.0.0-test";
 
@@ -988,0 +988,0 @@ // src/groq-provider.ts

package.json

 {
   "name": "@ai-sdk/groq",
-  "version": "4.0.0-beta.1",
+  "version": "4.0.0-beta.2",
   "license": "Apache-2.0",
@@ -40,4 +40,4 @@ "sideEffects": false,
     "zod": "3.25.76",
-    "@vercel/ai-tsconfig": "0.0.0",
-    "@ai-sdk/test-server": "2.0.0-beta.0"
+    "@ai-sdk/test-server": "2.0.0-beta.0",
+    "@vercel/ai-tsconfig": "0.0.0"
   },
@@ -44,0 +44,0 @@ "peerDependencies": {

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

348559

0.15%

No dependency changes