build: update all non-major dependencies

[angular-robot]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@ai-sdk/anthropic (source)	3.0.47 → 3.0.64
@ai-sdk/google (source)	3.0.31 → 3.0.55
@ai-sdk/mcp (source)	1.0.21 → 1.0.30
@ai-sdk/openai (source)	3.0.33 → 3.0.49
@anthropic-ai/sdk	^0.78.0 → ^0.82.0
@google/gemini-cli	^0.30.0 → ^0.36.0
@google/genai	1.42.0 → 1.48.0
@openai/codex (source)	^0.104.0 → ^0.118.0
ai (source)	6.0.99 → 6.0.142

---

• If you want to rebase/retry this PR, check this box

---

Release Notes

vercel/ai (@​ai-sdk/anthropic)

v3.0.64

Compare Source

Patch Changes

• 05b8ca2: feat (provider/anthropic): support passing metadata.user_id

v3.0.63

Compare Source

Patch Changes

• 055cd68: fix: publish v6 to latest npm dist tag
• Updated dependencies [055cd68]
  • @​ai-sdk/provider-utils@​4.0.21

v3.0.62

Compare Source

Patch Changes

• 41c6a56: fix(anthropic): skip passing beta header for tool search tools

v3.0.61

Patch Changes

• 2381567: fix(vertex): throw warning when strict: true for vertexAnthropic

v3.0.59

Compare Source

Patch Changes

• Updated dependencies [64ac0fd]
  • @​ai-sdk/provider-utils@​4.0.20

v3.0.58

Compare Source

Patch Changes

• 3fb4e70: feat(anthropic): support eagerInputStreaming option for fine-grained tool streaming
• Updated dependencies [ad4cfc2]
  • @​ai-sdk/provider-utils@​4.0.19

v3.0.57

Compare Source

Patch Changes

• Updated dependencies [824b295]
  • @​ai-sdk/provider-utils@​4.0.18

v3.0.56

Compare Source

Patch Changes

• e49c34d: feat(anthropic): expose anthropic.anthropicBeta to downstream providers
• e49c34d: feat(anthropic): expose anthropic.anthropicBeta to downstream provider

v3.0.55

Compare Source

Patch Changes

• bdde9d4: feat(provider/google): support combining built-in tools with function calling on Gemini 3

v3.0.54

Compare Source

Patch Changes

• 4e22c2c: feat(provider/google): add support for service tier parameter

v3.0.53

Compare Source

Patch Changes

• 2e5adff: chore(provider/google): remove obsolete Google image model

v3.0.52

Compare Source

Patch Changes

• 055cd68: fix: publish v6 to latest npm dist tag

• 47114a3: feat(provider/google): Add multimodal tool-result support for Google function responses.

  Tool results with output.type = 'content' now map media parts into
  functionResponse.parts for Google models, including image-data,
  file-data, and base64 data: URLs in URL-style content parts.
  Remote HTTP(S) URLs in URL-style tool-result parts are not supported.

• Updated dependencies [055cd68]

  • @​ai-sdk/provider-utils@​4.0.21

v3.0.51

Compare Source

Patch Changes

• 8901054: feat(google): add new finishMessage field in providerMetadata

v3.0.50

Compare Source

Patch Changes

• 5ffb1ad: feat(provider/google): add gemini-embedding-2-preview and fix multimodal embedding support with embedMany

v3.0.49

Compare Source

Patch Changes

• bc01093: fix(openai): support file-url parts in tool output content

v3.0.48

Compare Source

Patch Changes

• 9c548de: Add gpt-5.4-mini, gpt-5.4-mini-2026-03-17, gpt-5.4-nano, and gpt-5.4-nano-2026-03-17 models.

• bcb04df: fix(openai): preserve raw finish reason for failed responses stream events

  Handle response.failed chunks in Responses API streaming so finishReason.raw is preserved from incomplete_details.reason (e.g. max_output_tokens), and map failed-without-reason cases to unified error instead of other.

anthropics/anthropic-sdk-typescript (@​anthropic-ai/sdk)

v0.82.0

Full Changelog: sdk-v0.81.0...sdk-v0.82.0

Features

• api: add structured stop_details to message responses (031328a)
• prepare aws package (#​782) (f351d4d)
• support API keys in Bedrock SDK (#​824) (be6c608)

Chores

• tests: bump steady to v0.20.2 (6cf12cc)

v0.81.0

Full Changelog: sdk-v0.80.0...sdk-v0.81.0

Features

• add .type field to APIError for error kind identification (#​790) (4bf637d)

Bug Fixes

• memory: append path separator in validatePath prefix check (0ac69b3)

Chores

• ci: run builds on CI even if only spec metadata changed (70b657a)
• ci: skip lint on metadata-only changes (69bdc94)
• internal: codegen related update (7ff7390)
• internal: update gitignore (46d6667)
• internal: update multipart form array serialization (d55b07d)
• tests: bump steady to v0.19.4 (4957a5e)
• tests: bump steady to v0.19.5 (c511ae0)
• tests: bump steady to v0.19.6 (6d2b4b9)
• tests: bump steady to v0.19.7 (d6cff9d)
• tests: bump steady to v0.20.1 (284561f)

v0.80.0

Full Changelog: sdk-v0.79.0...sdk-v0.80.0

Features

• api: manual updates (dd12f1a)
• api: manual updates (9c0a077)

Chores

• internal: tweak CI branches (4a5819e)

v0.79.0

Full Changelog: sdk-v0.78.0...sdk-v0.79.0

Features

• add support for filesystem memory tools (#​599) (1064199)
• api: chore(config): clean up model enum list (#​31) (07727a6)
• api: GA thinking-display-setting (4dc8df4)
• tests: update mock server (e5c3be9)

Bug Fixes

• docs/contributing: correct pnpm link command (16bf66c)
• internal: skip tests that depend on mock server (07417e5)
• zod: use v4 import path for Zod ^3.25 compatibility (#​925) (c6c0ac8)

Chores

• client: remove unused import (3827ab5)
• internal: codegen related update (2c1fc10)
• internal: improve import alias names (5b9615b)
• internal: move stringifyQuery implementation to internal function (16239f3)
• internal: update dependencies to address dependabot vulnerabilities (6fdea5e)
• mcp-server: improve instructions (66e5363)
• remove accidentally committed file (#​929) (0989113)
• tests: unskip tests that are now supported in steady (616a98a)

Documentation

• streamline and standardize docs (#​687) (dbdc5d3)

google-gemini/gemini-cli (@​google/gemini-cli)

v0.36.0

Compare Source

What's Changed

• Changelog for v0.33.2 by @​gemini-cli-robot in #​22730
• feat(core): multi-registry architecture and tool filtering for subagents by @​akh64bit in #​22712
• Changelog for v0.34.0-preview.4 by @​gemini-cli-robot in #​22752
• fix(devtools): use theme-aware text colors for console warnings and errors by @​SandyTao520 in #​22181
• Add support for dynamic model Resolution to ModelConfigService by @​kevinjwang1 in #​22578
• chore(release): bump version to 0.36.0-nightly.20260317.2f90b4653 by @​gemini-cli-robot in #​22858
• fix(cli): use active sessionId in useLogger and improve resume robustness by @​mattKorwel in #​22606
• fix(cli): expand tilde in policy paths from settings.json by @​abhipatel12 in #​22772
• fix(core): add actionable warnings for terminal fallbacks (#​14426) by @​spencer426 in #​22211
• feat(tracker): integrate task tracker protocol into core system prompt by @​anj-s in #​22442
• chore: add posttest build hooks and fix missing dependencies by @​NTaylorMullen in #​22865
• feat(a2a): add agent acknowledgment command and enhance registry discovery by @​alisa-alisa in #​22389
• fix(cli): automatically add all VSCode workspace folders to Gemini context by @​sakshisemalti in #​21380
• feat: add 'blocked' status to tasks and todos by @​anj-s in #​22735
• refactor(cli): remove extra newlines in ShellToolMessage.tsx by @​NTaylorMullen in #​22868
• fix(cli): lazily load settings in onModelChange to prevent stale closure data loss by @​KumarADITHYA123 in #​20403
• feat(core): subagent local execution and tool isolation by @​akh64bit in #​22718
• fix(cli): resolve subagent grouping and UI state persistence by @​abhipatel12 in #​22252
• refactor(ui): extract SessionBrowser search and navigation components by @​abhipatel12 in #​22377
• fix: updates Docker image reference for GitHub MCP server by @​jhhornn in #​22938
• refactor(cli): group subagent trajectory deletion and use native filesystem testing by @​abhipatel12 in #​22890
• refactor(cli): simplify keypress and mouse providers and update tests by @​scidomino in #​22853
• Changelog for v0.34.0 by @​gemini-cli-robot in #​22860
• test(cli): simplify createMockSettings calls by @​scidomino in #​22952
• feat(ui): format multi-line banner warnings with a bold title by @​keithguerin in #​22955
• Docs: Remove references to stale Gemini CLI file structure info by @​g-samroberts in #​22976
• feat(ui): remove write todo list tool from UI tips by @​aniruddhaadak80 in #​22281
• Fix issue where subagent thoughts are appended. by @​gundermanc in #​22975
• Feat/browser privacy consent by @​kunal-10-cloud in #​21119
• fix(core): explicitly map execution context in LocalAgentExecutor by @​akh64bit in #​22949
• feat(plan): support plan mode in non-interactive mode by @​ruomengz in #​22670
• feat(core): implement strict macOS sandboxing using Seatbelt allowlist by @​ehedlund in #​22832
• docs: add additional notes by @​abhipatel12 in #​23008
• fix(cli): resolve duplicate footer on tool cancel via ESC (#​21743) by @​ruomengz in #​21781
• Changelog for v0.35.0-preview.1 by @​gemini-cli-robot in #​23012
• fix(ui): fix flickering on small terminal heights by @​devr0306 in #​21416
• fix(acp): provide more meta in tool_call_update by @​Mervap in #​22663
• docs: add FAQ entry for checking Gemini CLI version by @​surajsahani in #​21271
• feat(core): resilient subagent tool rejection with contextual feedback by @​abhipatel12 in #​22951
• fix(cli): correctly handle auto-update for standalone binaries by @​bdmorgan in #​23038
• feat(core): add content-utils by @​adamfweidman in #​22984
• fix: circumvent genai sdk requirement for api key when using gateway auth via ACP by @​sripasg in #​23042
• fix(core): don't persist browser consent sentinel in non-interactive mode by @​jasonmatthewsuhari in #​23073
• fix(core): narrow browser agent description to prevent stealing URL tasks from web_fetch by @​gsquared94 in #​23086
• feat(cli): Partial threading of AgentLoopContext. by @​joshualitt in #​22978
• fix(browser-agent): enable "Allow all server tools" session policy by @​cynthialong0-0 in #​22343
• refactor(cli): integrate real config loading into async test utils by @​scidomino in #​23040
• feat(core): inject memory and JIT context into subagents by @​abhipatel12 in #​23032
• Fix logging and virtual list. by @​jacob314 in #​23080
• feat(core): cap JIT context upward traversal at git root by @​SandyTao520 in #​23074
• Docs: Minor style updates from initial docs audit. by @​g-samroberts in #​22872
• feat(core): add experimental memory manager agent to replace save_memory tool by @​SandyTao520 in #​22726
• Changelog for v0.35.0-preview.2 by @​gemini-cli-robot in #​23142
• Update website issue template for label and title by @​g-samroberts in #​23036
• fix: upgrade ACP SDK from 0.12 to 0.16.1 by @​sripasg in #​23132
• Update callouts to work on github. by @​g-samroberts in #​22245
• feat: ACP: Add token usage metadata to the send method's return value by @​sripasg in #​23148
• fix(plan): clarify that plan mode policies are combined with normal mode by @​ruomengz in #​23158
• Add ModelChain support to ModelConfigService and make ModelDialog dynamic by @​kevinjwang1 in #​22914
• Ensure that copied extensions are writable in the user's local directory by @​kevinjwang1 in #​23016
• feat(core): implement native Windows sandboxing by @​mattKorwel in #​21807
• feat(core): add support for admin-forced MCP server installations by @​gsquared94 in #​23163
• chore(lint): ignore .gemini directory and recursive node_modules by @​mattKorwel in #​23211
• feat(cli): conditionally exclude ask_user tool in ACP mode by @​nmcnamara-eng in #​23045
• feat(core): introduce AgentSession and rename stream events to agent events by @​mbleigh in #​23159
• feat(worktree): add Git worktree support for isolated parallel sessions by @​jerop in #​22973
• Add support for linking in the extension registry by @​kevinjwang1 in #​23153
• feat(extensions): add --skip-settings flag to install command by @​Ratish1 in #​17212
• feat(telemetry): track if session is running in a Git worktree by @​jerop in #​23265
• refactor(core): use absolute paths in GEMINI.md context markers by @​SandyTao520 in #​23135
• fix(core): add sanitization to sub agent thoughts and centralize utilities by @​devr0306 in #​22828
• feat(core): refine User-Agent for VS Code traffic (unified format) by @​sehoon38 in #​23256
• Fix schema for ModelChains by @​kevinjwang1 in #​23284
• test(cli): refactor tests for async render utilities by @​scidomino in #​23252
• feat(core): add security prompt for browser agent by @​cynthialong0-0 in #​23241
• refactor(ide): replace dynamic undici import with static fetch import by @​cocosheng-g in #​23268
• test(cli): address unresolved feedback from PR #​23252 by @​scidomino in #​23303
• feat(browser): add sensitive action controls and read-only noise reduction by @​cynthialong0-0 in #​22867
• Disabling failing test while investigating by @​alisa-alisa in #​23311
• fix broken extension link in hooks guide by @​Indrapal-70 in #​21728
• fix(core): fix agent description indentation by @​abhipatel12 in #​23315
• Wrap the text under TOML rule for easier readability in policy-engine.md… by @​CogitationOps in #​23076
• fix(extensions): revert broken extension removal behavior by @​ehedlund in #​23317
• feat(core): set up onboarding telemetry by @​yunaseoul in #​23118
• Retry evals on API error. by @​gundermanc in #​23322
• fix(evals): remove tool restrictions and add compile-time guards by @​SandyTao520 in #​23312
• fix(hooks): support 'ask' decision for BeforeTool hooks by @​gundermanc in #​21146
• feat(browser): add warning message for session mode 'existing' by @​cynthialong0-0 in #​23288
• chore(lint): enforce zero warnings and cleanup syntax restrictions by @​alisa-alisa in #​22902
• fix(cli): add Esc instruction to HooksDialog footer by @​abhipatel12 in #​23258
• Disallow and suppress misused spread operator. by @​gundermanc in #​23294
• fix(core): refine CliHelpAgent description for better delegation by @​abhipatel12 in #​23310
• fix(core): enable global session and persistent approval for web_fetch by @​NTaylorMullen in #​23295
• fix(plan): add state transition override to prevent plan mode freeze by @​Adib234 in #​23020
• fix(cli): record skill activation tool calls in chat history by @​NTaylorMullen in #​23203
• fix(core): ensure subagent tool updates apply configuration overrides immediately by @​abhipatel12 in #​23161
• fix(cli): resolve flicker at boundaries of list in BaseSelectionList by @​jackwotherspoon in #​23298
• test(cli): force generic terminal in tests to fix snapshot failures by @​abhipatel12 in #​23499
• Evals: PR Guidance adding workflow by @​alisa-alisa in #​23164
• feat(core): refactor SandboxManager to a stateless architecture and introduce explicit Deny interface by @​ehedlund in #​23141
• feat(core): add event-translator and update agent types by @​adamfweidman in #​22985
• perf(cli): parallelize and background startup cleanup tasks by @​sehoon38 in #​23545
• fix: "allow always" for commands with paths by @​scidomino in #​23558
• fix(cli): prevent terminal escape sequences from leaking on exit by @​mattKorwel in #​22682
• feat(cli): implement full "GEMINI CLI" logo for logged-out state by @​keithguerin in #​22412
• fix(plan): reserve minimum height for selection list in AskUserDialog by @​ruomengz in #​23280
• fix(core): harden AgentSession replay semantics by @​adamfweidman in #​23548
• test(core): migrate hook tests to scheduler by @​abhipatel12 in #​23496
• chore(config): disable agents by default by @​abhipatel12 in #​23546
• fix(ui): make tool confirmations take up entire terminal height by @​devr0306 in #​22366
• fix(core): prevent redundant remote agent loading on model switch by @​adamfweidman in #​23576
• refactor(core): update production type imports from coreToolScheduler by @​abhipatel12 in #​23498
• feat(cli): always prefix extension skills with colon separator by @​NTaylorMullen in #​23566
• fix(core): properly support allowRedirect in policy engine by @​scidomino in #​23579
• fix(cli): prevent subcommand shadowing and skip auth for commands by @​mattKorwel in #​23177
• fix(test): move flaky tests to non-blocking suite by @​mattKorwel in #​23259
• Changelog for v0.35.0-preview.3 by @​gemini-cli-robot in #​23574
• feat(skills): add behavioral-evals skill with fixing and promoting guides by @​abhipatel12 in #​23349
• refactor(core): delete obsolete coreToolScheduler by @​abhipatel12 in #​23502
• Changelog for v0.35.0-preview.4 by @​gemini-cli-robot in #​23581
• feat(core): add LegacyAgentSession by @​adamfweidman in #​22986
• feat(test-utils): add TestMcpServerBuilder and support in TestRig by @​abhipatel12 in #​23491
• fix(core)!: Force policy config to specify toolName by @​kschaab in #​23330
• eval(save_memory): add multi-turn interactive evals for memoryManager by @​SandyTao520 in #​23572
• fix(telemetry): patch memory leak and enforce logPrompts privacy by @​spencer426 in #​23281
• perf(cli): background IDE client to speed up initialization by @​sehoon38 in #​23603
• fix(cli): prevent Ctrl+D exit when input buffer is not empty by @​wtanaka in #​23306
• fix: ACP: separate conversational text from execute tool command title by @​sripasg in #​23179
• feat(evals): add behavioral evaluations for subagent routing by @​Samee24 in #​23272
• refactor(cli,core): foundational layout, identity management, and type safety by @​jwhelangoog in #​23286
• fix(core): accurately reflect subagent tool failure in UI by @​abhipatel12 in #​23187
• Changelog for v0.35.0-preview.5 by @​gemini-cli-robot in #​23606
• feat(ui): implement refreshed UX for Composer layout by @​jwhelangoog in #​21212
• fix: API key input dialog user interaction when selected Gemini API Key by @​kartikangiras in #​21057
• docs: update /mcp refresh to /mcp reload by @​adamfweidman in #​23631
• Implementation of sandbox "Write-Protected" Governance Files by @​DavidAPierce in #​23139
• feat(sandbox): dynamic macOS sandbox expansion and worktree support by @​galz10 in #​23301
• fix(acp): Pass the cwd to AcpFileSystemService to avoid looping failures in asking for perms to write plan md file by @​sripasg in #​23612
• fix(plan): sandbox path resolution in Plan Mode to prevent hallucinations by @​Adib234 in #​22737
• feat(ui): allow immediate user input during startup by @​sehoon38 in #​23661
• refactor(sandbox): reorganize Windows sandbox files by @​galz10 in #​23645
• fix(core): improve remote agent streaming UI and UX by @​adamfweidman in #​23633
• perf(cli): optimize --version startup time by @​sehoon38 in #​23671
• refactor(core): stop gemini CLI from producing unsafe casts by @​gundermanc in #​23611
• use enableAutoUpdate in test rig by @​scidomino in #​23681
• feat(core): change user-facing auth type from oauth2 to oauth by @​adamfweidman in #​23639
• chore(deps): fix npm audit vulnerabilities by @​scidomino in #​23679
• test(evals): fix overlapping act() deadlock in app-test-helper by @​Adib234 in #​23666
• fix(patch): cherry-pick 055ff92 to release/v0.36.0-preview.0-pr-23672 to patch version v0.36.0-preview.0 and create version 0.36.0-preview.1 by @​gemini-cli-robot in #​23723
• fix(patch): cherry-pick 765fb67 to release/v0.36.0-preview.5-pr-24055 to patch version v0.36.0-preview.5 and create version 0.36.0-preview.6 by @​gemini-cli-robot in #​24061

New Contributors

• @​sakshisemalti made their first contribution in #​21380
• @​KumarADITHYA123 made their first contribution in #​20403
• @​jhhornn made their first contribution in #​22938
• @​aniruddhaadak80 made their first contribution in #​22281
• @​surajsahani made their first contribution in #​21271
• @​jasonmatthewsuhari made their first contribution in #​23073
• @​nmcnamara-eng made their first contribution in #​23045
• @​Indrapal-70 made their first contribution in #​21728
• @​CogitationOps made their first contribution in #​23076

Full Changelog: google-gemini/gemini-cli@v0.35.3...v0.36.0

v0.35.3

Compare Source

What's Changed

• fix(patch): cherry-pick 765fb67 to release/v0.35.2-pr-24055 [CONFLICTS] by @​gemini-cli-robot in #​24063

Full Changelog: google-gemini/gemini-cli@v0.35.2...v0.35.3

v0.35.2

Compare Source

Full Changelog: google-gemini/gemini-cli@v0.35.1...v0.35.2

v0.35.1

Compare Source

Full Changelog: google-gemini/gemini-cli@v0.35.0...v0.35.1

v0.35.0

Compare Source

What's Changed

• feat(cli): customizable keyboard shortcuts by @​scidomino in #​21945
• feat(core): Thread AgentLoopContext through core. by @​joshualitt in #​21944
• chore(release): bump version to 0.35.0-nightly.20260311.657f19c1f by @​gemini-cli-robot in #​21966
• refactor(a2a): remove legacy CoreToolScheduler by @​adamfweidman in #​21955
• feat(ui): add missing vim mode motions (X, ~, r, f/F/t/T, df/dt and friends) by @​aanari in [#​21932](https://redirect.github.com/google-gemini/gemini-cli/pull/21