releases.shpreview
VercelVercel/AI SDK

DNS rebinding attacks blocked; per-step model settings supported

ai@6.0.238

July 29, 2026AI SDKView original ↗
2 features1 fixThis release2 featuresNew capabilities1 fixBug fixesAI-tallied from the release notes
From the original release noteView original ↗

Patch Changes

  • 9ecdefe: Prevent validated downloads on Node.js from reaching private or internal services through DNS aliases or DNS rebinding by validating and pinning every resolved address at connection time.
  • 26d10c0: support overriding model call settings for individual prepareStep invocations
  • 7767170: Preserve provider metadata from empty text deltas in streamText.
  • Updated dependencies [9ecdefe]
  • Updated dependencies [87fb433]
    • @ai-sdk/provider-utils@4.0.41
    • @ai-sdk/gateway@3.0.160

Fetched July 29, 2026

DNS rebinding attacks blocked; per-step model settings… — releases.sh