@ai-sdk/provider-utils 4.0.20 → 4.0.22

package/dist/test/index.js

@@ -18,8 +18,8 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/test/index.ts
-var test_exports = {};
-__export(test_exports, {
+var index_exports = {};
+__export(index_exports, {
   convertArrayToAsyncIterable: () => convertArrayToAsyncIterable,
   convertArrayToReadableStream: () => convertArrayToReadableStream,
   convertAsyncIterableToArray: () => convertAsyncIterableToArray,
@@ -28,7 +28,7 @@ __export(test_exports, {
   isNodeVersion: () => isNodeVersion,
   mockId: () => mockId
 });
-module.exports = __toCommonJS(test_exports);
+module.exports = __toCommonJS(index_exports);
 
 // src/test/convert-array-to-async-iterable.ts
 function convertArrayToAsyncIterable(values) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-sdk/provider-utils",
-  "version": "4.0.20",
+  "version": "4.0.22",
   "license": "Apache-2.0",
   "sideEffects": false,
   "main": "./dist/index.js",
@@ -69,9 +69,7 @@
     "build": "pnpm clean && tsup --tsconfig tsconfig.build.json",
     "build:watch": "pnpm clean && tsup --watch",
     "clean": "del-cli dist *.tsbuildinfo",
-    "lint": "eslint \"./**/*.ts*\"",
     "type-check": "tsc --build",
-    "prettier-check": "prettier --check \"./**/*.ts*\"",
     "test": "pnpm test:node && pnpm test:edge",
     "test:update": "pnpm test:node -u",
     "test:watch": "vitest --config vitest.node.config.js",

package/src/validate-download-url.ts

@@ -18,11 +18,16 @@ export function validateDownloadUrl(url: string): void {
     });
   }
 
-  // Only allow http and https protocols
+  // data: URLs are inline content, so they do not trigger a network fetch or SSRF risk.
+  if (parsed.protocol === 'data:') {
+    return;
+  }
+
+  // Only allow http and https network protocols
   if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
     throw new DownloadError({
       url,
-      message: `URL scheme must be http or https, got ${parsed.protocol}`,
+      message: `URL scheme must be http, https, or data, got ${parsed.protocol}`,
     });
   }