chore(deps)(deps): Bump ai from 7.0.22 to 7.0.38

[dependabot]

Bumps ai from 7.0.22 to 7.0.38.

Changelog

Sourced from ai's changelog.

7.0.38

Patch Changes

• 7bd6bdd: Avoid synthesizing client tool errors for invalid provider-executed tool calls.
• 1e2f324: feat: add experimental speech translation model specification (Experimental_SpeechTranslationModelV4) and experimental_streamTranslate for streaming speech-to-speech translation
• Updated dependencies [d9d2a11]
• Updated dependencies [1e2f324]
  • @​ai-sdk/gateway@​4.0.29
  • @​ai-sdk/provider@​4.0.4
  • @​ai-sdk/provider-utils@​5.0.13

7.0.37

Patch Changes

• Updated dependencies [0a7c7f4]
  • @​ai-sdk/gateway@​4.0.28

7.0.36

Patch Changes

• 7fa85b2: fix(ai): use injective serialization for tool approval HMAC payload

  The tool approval signature (experimental_toolApprovalSecret) built its HMAC payload by joining fields with \n. Because fields such as toolName and toolCallId can themselves contain a newline, distinct field tuples could serialize to identical bytes, allowing a signed approval to verify against a different tuple. The payload is now serialized with JSON.stringify (with a versioned domain-separation prefix), which escapes delimiter/control characters and makes the encoding injective.

  Verification remains backwards compatible: a signature in the old format still verifies, but only when no field contains the \n delimiter (the condition that made the old format ambiguous), so a pending approval that straddles an upgrade is not rejected while the collision stays closed.

7.0.35

Patch Changes

• 7f6650b: Return response piping promises so callers can catch stream read and write errors.
• 106ea59: feat(ai): add per-step first content timeout for streaming generations
• Updated dependencies [2112ff1]
  • @​ai-sdk/gateway@​4.0.27

7.0.34

Patch Changes

... (truncated)

Commits

• 8fd84f0 Version Packages (#17983)
• 7bd6bdd fix: prevent orphaned Anthropic tool results after invalid provider-executed ...
• 1e2f324 feat(provider,ai): translation model spec + experimental_streamTranslate (#17...
• c391be3 docs: clarify that textStream does not surface error parts (#17994)
• 3c98985 Version Packages (#17868)
• 54d4d7a Version Packages (#17796)
• 7fa85b2 fix(ai): use injective serialization for tool approval HMAC payload (#17493)
• 799faf7 Version Packages (#17653)
• 106ea59 feat: add a per-step first-content timeout for streaming generations (#17561)
• 7f6650b fix: server-response piping errors bypass caller catches (#17648)
• Additional commits viewable in compare view

[rodrigobnogueira]

@dependabot rebase

[rodrigobnogueira]

@dependabot rebase