@ai-sdk/google 4.0.5 → 4.0.7

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @ai-sdk/google
 
+## 4.0.7
+
+### Patch Changes
+
+- c6f5e62: Prevent prototype pollution when synchronously parsing provider JSON inputs and expose `secureJsonParse` from provider-utils.
+- bd8d172: Fix Google embedding batch size to respect the Gemini API limit of 100 requests per batch.
+- Updated dependencies [c6f5e62]
+  - @ai-sdk/provider-utils@5.0.4
+
+## 4.0.6
+
+### Patch Changes
+
+- d20f0dc: Add `vertex.interactions()` for the Gemini Interactions API on Vertex AI. Targets the location-scoped `.../locations/{region}/interactions` resource using the existing Vertex OAuth credentials, enabling multimodal-output models such as `gemini-omni-flash-preview` (video output) through Vertex. The `GoogleInteractionsLanguageModel` is now exported from `@ai-sdk/google/internal` for provider reuse.
+
 ## 4.0.5
 
 ### Patch Changes

package/dist/index.js

@@ -7,7 +7,7 @@ import {
 } from "@ai-sdk/provider-utils";
 
 // src/version.ts
-var VERSION = true ? "4.0.5" : "0.0.0-test";
+var VERSION = true ? "4.0.7" : "0.0.0-test";
 
 // src/google-embedding-model.ts
 import {
@@ -119,7 +119,7 @@ var googleEmbeddingModelOptions = lazySchema2(
 var GoogleEmbeddingModel = class _GoogleEmbeddingModel {
   constructor(modelId, config) {
     this.specificationVersion = "v4";
-    this.maxEmbeddingsPerCall = 2048;
+    this.maxEmbeddingsPerCall = 100;
     this.supportsParallelCalls = true;
     this.modelId = modelId;
     this.config = config;
@@ -434,7 +434,8 @@ import {
   getTopLevelMediaType,
   isFullMediaType,
   resolveFullMediaType,
-  resolveProviderReference
+  resolveProviderReference,
+  secureJsonParse
 } from "@ai-sdk/provider-utils";
 var SKIP_THOUGHT_SIGNATURE_VALIDATOR = "skip_thought_signature_validator";
 var dataUrlRegex = /^data:([^;,]+);base64,(.+)$/s;
@@ -752,7 +753,7 @@ function convertToGoogleMessages(prompt, options) {
                   return {
                     toolCall: {
                       toolType: serverToolType,
-                      args: typeof part.input === "string" ? JSON.parse(part.input) : part.input,
+                      args: typeof part.input === "string" ? secureJsonParse(part.input) : part.input,
                       id: serverToolCallId
                     },
                     thoughtSignature: effectiveThoughtSignature
@@ -4686,7 +4687,8 @@ import {
   getTopLevelMediaType as getTopLevelMediaType2,
   isFullMediaType as isFullMediaType2,
   resolveFullMediaType as resolveFullMediaType2,
-  resolveProviderReference as resolveProviderReference2
+  resolveProviderReference as resolveProviderReference2,
+  secureJsonParse as secureJsonParse2
 } from "@ai-sdk/provider-utils";
 function convertToGoogleInteractionsInput({
   prompt,
@@ -4931,7 +4933,7 @@ function compactPromptForPreviousInteraction({
 }
 function safeParseToolArgs(input) {
   try {
-    const parsed = JSON.parse(input);
+    const parsed = secureJsonParse2(input);
     if (parsed != null && typeof parsed === "object" && !Array.isArray(parsed)) {
       return parsed;
     }