DNS rebinding protection for Node.js downloads
ai@7.0.42
1 feature1 enhancement2 fixesThis release1 featureNew capabilities1 enhancementImprovements to existing features2 fixesBug fixesAI-tallied from the release notes
From the original release noteView original ↗
Patch Changes
- 1659cd5: Prevent validated downloads on Node.js from reaching private or internal services through DNS aliases or DNS rebinding by validating and pinning every resolved address at connection time.
- 60f97f6: support overriding model call settings for individual
prepareStepinvocations - 6a5bdff: Fix validated Node.js downloads when the HTTP connector requests a single DNS address.
- 6de2ec1: Preserve provider metadata from empty text deltas in
streamText. - Updated dependencies [1659cd5]
- Updated dependencies [6a5bdff]
- Updated dependencies [0012529]
Fetched July 29, 2026
