build(deps): bump @ai-sdk/anthropic from 3.0.104 to 4.0.18

[dependabot]

Bumps @ai-sdk/anthropic from 3.0.104 to 4.0.18.

Release notes

Sourced from @​ai-sdk/anthropic's releases.

@​ai-sdk/klingai@​4.0.17

Patch Changes

• Updated dependencies [1659cd5]
• Updated dependencies [6a5bdff]
  • @​ai-sdk/provider-utils@​5.0.15

@​ai-sdk/mistral@​4.0.17

Patch Changes

• 4e116c9: Add Voxtral batch transcription support through mistral.transcription() and mistral.transcriptionModel().
• Updated dependencies [1659cd5]
• Updated dependencies [6a5bdff]
  • @​ai-sdk/provider-utils@​5.0.15

@​ai-sdk/perplexity@​4.0.17

Patch Changes

• Updated dependencies [1659cd5]
• Updated dependencies [6a5bdff]
  • @​ai-sdk/provider-utils@​5.0.15

@​ai-sdk/groq@​4.0.16

Patch Changes

• Updated dependencies [1659cd5]
• Updated dependencies [6a5bdff]
  • @​ai-sdk/provider-utils@​5.0.15

@​ai-sdk/react@​3.0.240

Patch Changes

• Updated dependencies [9ecdefe]
• Updated dependencies [26d10c0]
• Updated dependencies [7767170]
  • @​ai-sdk/provider-utils@​4.0.41
  • ai@6.0.238

@​ai-sdk/vue@​3.0.238

Patch Changes

• Updated dependencies [9ecdefe]
• Updated dependencies [26d10c0]
• Updated dependencies [7767170]
  • @​ai-sdk/provider-utils@​4.0.41
  • ai@6.0.238

@​ai-sdk/svelte@​3.0.223

Patch Changes

... (truncated)

Changelog

Sourced from @​ai-sdk/anthropic's changelog.

4.0.18

Patch Changes

• 97de198: Warn when an unknown model uses the default 4096 max output token limit.

4.0.17

Patch Changes

• b72fc7c: fix(amazon-bedrock): sanitize unsupported JSON Schema constraints in native Anthropic structured output
• 9218ebe: fix(provider/anthropic): warn when parallel tool use is requested with JSON tool structured output
• Updated dependencies [02ffdcb]
• Updated dependencies [76cb673]
  • @​ai-sdk/provider-utils@​5.0.12

4.0.16

Patch Changes

• afcf19c: fix(provider/anthropic): preserve web search citations when replaying assistant messages
• Updated dependencies [cd06458]
  • @​ai-sdk/provider-utils@​5.0.11

4.0.15

Patch Changes

• Updated dependencies [31c7be8]
  • @​ai-sdk/provider-utils@​5.0.10

4.0.14

Patch Changes

• 4be62c1: fix(provider-utils): validate provider-response URLs in getFromApi

  getFromApi now has a validateUrl flag. It is optional so existing callers keep compiling (omitting it behaves like false, i.e. no validation), but all AI SDK provider packages set it explicitly at every call site so each one makes a visible trust decision. When true, the URL is routed through fetchWithValidatedRedirects — the same guard used by downloadBlob — which rejects private/loopback/link-local targets, re-validates every redirect hop, strips proxy/metadata/cookie request headers, and drops all caller headers except the user-agent on cross-origin redirects (custom API-key headers must not follow a redirect off-origin any more than Authorization may); blocked URLs throw DownloadError. It is enabled at the image/video/audio download and polling call sites where the URL comes from a provider response body; URLs built from developer-configured endpoints pass validateUrl: false and are unaffected.

  A new optional credentialedOrigin withholds caller headers unless the URL is same-origin with it, so the API key is not sent to a response-supplied host on a different origin.

  A new optional trustedOrigin exempts URLs (and redirect hops) that are same-origin with the developer-configured provider endpoint from target validation, so self-hosted and localhost deployments whose response URLs point back at the configured host keep working; all other hops are still validated.

  Also closes range gaps in validateDownloadUrl (IPv4 224.0.0.0/4 multicast and the TEST-NET documentation ranges 192.0.2.0/24, 198.51.100.0/24, 203.0.113.0/24; IPv6 documentation ranges 2001:db8::/32 and 3fff::/20), and follows only the fetch-spec redirect status codes (301/302/303/307/308) — a Location header on any other status is not followed. This guard performs string/literal checks only and does not resolve DNS; hostnames that resolve to private addresses and DNS rebinding remain out of scope and must be constrained at the network layer (or by injecting a Node fetch that pins the resolved IP at connect time) for server deployments handling untrusted URLs. See contributing/secure-url-handling.md.

• cd12954: Reject empty OpenAI, Anthropic, and Replicate base URLs with a helpful AI SDK invalid argument error.

• Updated dependencies [4be62c1]

• Updated dependencies [7805e4a]

• Updated dependencies [cd12954]

... (truncated)

Commits

• 4742a2b Version Packages (#17615)
• 97de198 fix: surface the implicit output token limit for unknown Anthropic models (#1...
• 0319ff3 Version Packages (#17553)
• b72fc7c fix: prevent Bedrock native structured output from forwarding unsupported JSO...
• 9218ebe fix(anthropic): warn when jsonTool disables parallel tool use (#17560)
• 9352ac1 Version Packages (#17417)
• afcf19c fix: preserve Anthropic web search citations across multi-turn assistant mess...
• 6976682 Version Packages (#17196)
• cb68fa6 Version Packages (#17175)
• cd12954 fix: reject empty OpenAI, Anthropic, and Replicate base URLs with a helpful e...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)