From 18fde38b433ad80dc89c6375c87cebe88c34e6b5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 14 Jun 2026 21:26:17 +0200
Subject: [PATCH] chore(deps): bump @ai-sdk/anthropic from 3.0.72 to 3.0.84
 (#21557)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[@ai-sdk/anthropic](https://github.com/vercel/ai/tree/HEAD/packages/anthropic)
from 3.0.72 to 3.0.84.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/ai/releases">@​ai-sdk/anthropic's
releases</a>.</em></p>
<blockquote>
<h2><code>@​ai-sdk/google</code><a
href="https://github.com/3"><code>@​3</code></a>.0.82</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>3258f22: fix(google): prevent prototype pollution when streaming tool
args</p>
</li>
<li>
<p>bfa5864: fix: only send provider credentials to same-origin
response-supplied URLs</p>
<p>Several provider clients followed a URL taken from the provider's API
response (a polling/status URL or a final media URL such as
<code>polling_url</code>, <code>urls.get</code>,
<code>result_url</code>, <code>result.sample</code>, or
<code>video.uri</code>) and reused the authenticated headers — or
appended <code>?key=&lt;API_KEY&gt;</code> — on that request. Because
the host of the response-supplied URL was never validated, the
long-lived API key was sent to whatever host the response named (a CDN
in the benign case, or an attacker-chosen host if the provider response
was tampered with), allowing credential exfiltration.</p>
<p>A new <code>isSameOrigin</code> helper is added to
<code>@ai-sdk/provider-utils</code>, and the affected fetches in
<code>@ai-sdk/black-forest-labs</code>, <code>@ai-sdk/fireworks</code>,
<code>@ai-sdk/replicate</code>, <code>@ai-sdk/gladia</code>,
<code>@ai-sdk/fal</code>, and <code>@ai-sdk/google</code> now attach
credentials only when the followed URL is same-origin with the
provider's configured API origin. Requests to a foreign origin are made
without the credential.</p>
</li>
<li>
<p>Updated dependencies [bfa5864]</p>
</li>
<li>
<p>Updated dependencies [f42aa79]</p>
<ul>
<li><code>@​ai-sdk/provider-utils</code><a
href="https://github.com/4"><code>@​4</code></a>.0.29</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/ai/blob/@ai-sdk/anthropic@3.0.84/packages/anthropic/CHANGELOG.md">@​ai-sdk/anthropic's
changelog</a>.</em></p>
<blockquote>
<h2>3.0.84</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [bfa5864]</li>
<li>Updated dependencies [f42aa79]
<ul>
<li><code>@​ai-sdk/provider-utils</code><a
href="https://github.com/4"><code>@​4</code></a>.0.29</li>
</ul>
</li>
</ul>
<h2>3.0.83</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [942f2f8]
<ul>
<li><code>@​ai-sdk/provider-utils</code><a
href="https://github.com/4"><code>@​4</code></a>.0.28</li>
</ul>
</li>
</ul>
<h2>3.0.82</h2>
<h3>Patch Changes</h3>
<ul>
<li>2a91a17: feat(provider/anthropic): add support for
<code>claude-fable-5</code> and the <code>fallbacks</code> API
parameter</li>
</ul>
<h2>3.0.81</h2>
<h3>Patch Changes</h3>
<ul>
<li>4084fcd: feat(provider/anthropic): add support for
<code>claude-opus-4-8</code></li>
</ul>
<h2>3.0.80</h2>
<h3>Patch Changes</h3>
<ul>
<li>263d3e6: fix(provider/anthropic): fix remaining errors with
Anthropic <code>code_execution</code> tool dynamic calls from latest
<code>web_fetch</code> or <code>web_search</code></li>
</ul>
<h2>3.0.79</h2>
<h3>Patch Changes</h3>
<ul>
<li>d61a788: Handle errors from anthropic websearch tool</li>
</ul>
<h2>3.0.78</h2>
<h3>Patch Changes</h3>
<ul>
<li>6e28d25: fix(anthropic): propagate toModelOutput providerOption to
anthropic tool results</li>
</ul>
<h2>3.0.77</h2>
<h3>Patch Changes</h3>
<ul>
<li>d53314d: feat(anthropic): add the new advisor tool</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vercel/ai/commit/bae9babb22e195e74a9a0c0e26a5e52c8ba8e7f2"><code>bae9bab</code></a>
Version Packages (<a
href="https://github.com/vercel/ai/tree/HEAD/packages/anthropic/issues/16026">#16026</a>)</li>
<li><a
href="https://github.com/vercel/ai/commit/9ef2c3cfadfc4a469e9eec6a6e8a0ac0fc80a1e5"><code>9ef2c3c</code></a>
Version Packages (<a
href="https://github.com/vercel/ai/tree/HEAD/packages/anthropic/issues/15998">#15998</a>)</li>
<li><a
href="https://github.com/vercel/ai/commit/f6e588173713842794c619f9554a4b341c6e97f5"><code>f6e5881</code></a>
Version Packages (<a
href="https://github.com/vercel/ai/tree/HEAD/packages/anthropic/issues/15902">#15902</a>)</li>
<li><a
href="https://github.com/vercel/ai/commit/2a91a17e0b885968814110fe3581d1ea0fd589ae"><code>2a91a17</code></a>
backport: feat(provider/anthropic): add support for
<code>claude-fable-5</code> and the ...</li>
<li><a
href="https://github.com/vercel/ai/commit/7aca1fc2004800171233ae16c2456ef297552441"><code>7aca1fc</code></a>
backport: chore: update TypeScript references and fix `pnpm
update-references...</li>
<li><a
href="https://github.com/vercel/ai/commit/974e161bed15b0f5bb9980a3f0845ad77ae66d3c"><code>974e161</code></a>
Version Packages (<a
href="https://github.com/vercel/ai/tree/HEAD/packages/anthropic/issues/15677">#15677</a>)</li>
<li><a
href="https://github.com/vercel/ai/commit/4084fcd041b47ad11f74d80a82d659748edf0a78"><code>4084fcd</code></a>
backport: feat(provider/anthropic): add support for
<code>claude-opus-4-8</code> (<a
href="https://github.com/vercel/ai/tree/HEAD/packages/anthropic/issues/15675">#15675</a>)</li>
<li><a
href="https://github.com/vercel/ai/commit/097c1cdb46226fbfe741764a009ea14baab7c3df"><code>097c1cd</code></a>
Version Packages (<a
href="https://github.com/vercel/ai/tree/HEAD/packages/anthropic/issues/15612">#15612</a>)</li>
<li><a
href="https://github.com/vercel/ai/commit/263d3e664503c955f492a33941e2060c4b51aa77"><code>263d3e6</code></a>
Backport: fix(provider/anthropic): fix remaining errors with Anthropic
`code_...</li>
<li><a
href="https://github.com/vercel/ai/commit/7ebba33ab965b5b26f93705719d76db45089bb3c"><code>7ebba33</code></a>
Version Packages (<a
href="https://github.com/vercel/ai/tree/HEAD/packages/anthropic/issues/15557">#15557</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/ai/commits/@ai-sdk/anthropic@3.0.84/packages/anthropic">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@ai-sdk/anthropic&package-manager=npm_and_yarn&previous-version=3.0.72&new-version=3.0.84)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

<!-- This is an auto-generated description by cubic. -->
<a
href="https://cubic.dev/pr/twentyhq/twenty/pull/21557?utm_source=github"
target="_blank" rel="noopener noreferrer"
data-no-image-dialog="true"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source
media="(prefers-color-scheme: light)"
srcset="https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img
alt="Review in cubic"
src="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"></picture></a>
<!-- End of auto-generated description by cubic. -->

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 yarn.lock | 36 +++++++++++++++++++++++++++++++++++-
 1 file changed, 35 insertions(+), 1 deletion(-)

diff --git a/yarn.lock b/yarn.lock
index cc09568f53..7df764135a 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -28,7 +28,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@ai-sdk/anthropic@npm:3.0.72, @ai-sdk/anthropic@npm:^3.0.72":
+"@ai-sdk/anthropic@npm:3.0.72":
   version: 3.0.72
   resolution: "@ai-sdk/anthropic@npm:3.0.72"
   dependencies:
@@ -40,6 +40,18 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@ai-sdk/anthropic@npm:^3.0.72":
+  version: 3.0.83
+  resolution: "@ai-sdk/anthropic@npm:3.0.83"
+  dependencies:
+    "@ai-sdk/provider": "npm:3.0.10"
+    "@ai-sdk/provider-utils": "npm:4.0.28"
+  peerDependencies:
+    zod: ^3.25.76 || ^4.1.8
+  checksum: 10c0/712ed862e77be1275eb20512032f6d08b727a3a6fe73981c01cd224cff06e77da52180cb53bdbb517d79e89995019fd20ff352b1ea4dcbf86992bdcbbcd14e71
+  languageName: node
+  linkType: hard
+
 "@ai-sdk/azure@npm:^3.0.55":
   version: 3.0.55
   resolution: "@ai-sdk/azure@npm:3.0.55"
@@ -153,6 +165,19 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@ai-sdk/provider-utils@npm:4.0.28":
+  version: 4.0.28
+  resolution: "@ai-sdk/provider-utils@npm:4.0.28"
+  dependencies:
+    "@ai-sdk/provider": "npm:3.0.10"
+    "@standard-schema/spec": "npm:^1.1.0"
+    eventsource-parser: "npm:^3.0.8"
+  peerDependencies:
+    zod: ^3.25.76 || ^4.1.8
+  checksum: 10c0/5166341ae375acc178b5d113f2165bfb3593a57ac482cbdc4fc066c0d733498e98296d647e4350d2c12f596fd4ff20427d3fed5a34378b5bdefb4373cc998426
+  languageName: node
+  linkType: hard
+
 "@ai-sdk/provider-utils@npm:4.0.5":
   version: 4.0.5
   resolution: "@ai-sdk/provider-utils@npm:4.0.5"
@@ -166,6 +191,15 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@ai-sdk/provider@npm:3.0.10":
+  version: 3.0.10
+  resolution: "@ai-sdk/provider@npm:3.0.10"
+  dependencies:
+    json-schema: "npm:^0.4.0"
+  checksum: 10c0/c9b162165c3fd4684e4f7a1c041db3ad75785c841d904bac577006b7b2299d1b465557b1d32e3f59b6d8536a0ef5741b195aad86fc3e0e1d2a39f077062a83c4
+  languageName: node
+  linkType: hard
+
 "@ai-sdk/provider@npm:3.0.2":
   version: 3.0.2
   resolution: "@ai-sdk/provider@npm:3.0.2"