chore(deps): bump ai from 7.0.118 to 7.0.127

[dependabot]

Bumps ai from 7.0.118 to 7.0.127.

Changelog

Sourced from ai's changelog.

7.0.127

Patch Changes

• 158a718: feat(ai): select and rank eligible deferred tools via 'search()' callback in tool search
• bb8d33e: fix(ai): cancel merged UI message streams when the consumer disconnects
• 284dc11: fix(ai): accept unchanged tool approval inputs created in another JavaScript realm
• ba8afe9: feat(ai): add a configurable maxResults for number of tools returned in tool search
• Updated dependencies [d1bb9e8]
  • @​ai-sdk/gateway@​4.0.103

7.0.126

Patch Changes

• 4f3d236: fix: clear tool approvals when addToolOutput runs

7.0.125

Patch Changes

• ff3dcef: feat(ai): add convertDataPart to agent UI stream helpers

7.0.124

Patch Changes

• 8c65988: feat(ai): add telemetry to speech generation and transcription, including provider usage propagation and experimental streaming lifecycle callbacks
• Updated dependencies [8c65988]
• Updated dependencies [e25994e]
• Updated dependencies [527a163]
• Updated dependencies [e74afc5]
  • @​ai-sdk/provider@​4.0.21
  • @​ai-sdk/provider-utils@​5.0.53
  • @​ai-sdk/gateway@​4.0.102

7.0.123

Patch Changes

• 05cdac6: fix(ai): keep idle UI message streams open with optional SSE heartbeats
• 4514fc1: fix(ai): prune all tool content when retaining zero trailing messages
• ede5b89: chore: migrate package builds from tsup to tsdown
• 2a625cf: fix(ai): preserve partial reasoning tags when streamed text parts end
• 50a26d5: fix(ai): ignore pending tool approvals superseded by user messages
• Updated dependencies [040033b]
• Updated dependencies [ede5b89]
  • @​ai-sdk/gateway@​4.0.101
  • @​ai-sdk/provider@​4.0.20

... (truncated)

Commits

• eb77f09 Version Packages (#21908)
• 284dc11 fix: accept structurally identical cross-realm tool approval inputs (#21810)
• bb8d33e fix: propagate createUIMessageStream consumer cancellation to merged streams ...
• 158a718 feat(ai): select and rank eligible deferred tools via 'search()' callback in ...
• ba8afe9 feat(ai): add a configurable maxResults for number of tools returned in tool ...
• 45e1fbc Version Packages (#21880)
• ce87e49 Version Packages (#21868)
• 4f3d236 fix: clear tool approvals when addToolOutput runs (#21879)
• ff3dcef feat(ai): add convertDataPart to agent UI stream helpers (#21816)
• eb93c81 Version Packages (#21822)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

No changeset found

This PR does not add a changeset, so it will not appear in the changelog or trigger a release.

If the change is user-facing, add one:

pnpm changeset

Pick a bump (patch / minor / major) and write the changelog entry in our usual voice ("Added X... Thanks to @you. Closes #123."), then commit the generated .changeset/*.md file.

If this PR is docs-only or a chore that needs no release note, you can ignore this — or run pnpm changeset --empty to record that intentionally.

[github-actions]

nc-review: nothing to raise

Dependabot bump of ai from 7.0.118 to 7.0.127, within the existing ^7.0.15 range in package.json. Only pnpm-lock.yaml changes; the diff updates transitive @ai-sdk/gateway, @ai-sdk/provider, and @ai-sdk/provider-utils to versions that the upstream changelog indicates are compatible. No source code, public contract, or security surface is touched, and the patch-level bump does not warrant a changeset.

---

_{🔴 blocking · 🟠 a reviewer would ask for a change · ⚪ optional}

_{Automated code review — correctness, security, design, tests, plus duplicates and scope. A human still decides; this is not a substitute for review and is not exhaustive. The required status checks separately cover lint, formatting, types, unused dependencies, the test suite and the build. This bot never merges. Maintainers can rerun with /re-review.}