fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@ai-sdk/mcp (source)	2.0.54 → 2.0.55
@ai-sdk/vue (source)	4.0.107 → 4.0.109
@iconify-json/lucide	1.2.134 → 1.2.135
@nuxt/content (source)	3.16.0 → 3.16.1
ai (source)	7.0.107 → 7.0.109
style-dictionary (source)	5.5.4 → 5.5.5
tsx (source)	4.23.13 → 4.23.15

---

Release Notes

vercel/ai (@​ai-sdk/mcp)

v2.0.55

Compare Source

Patch Changes

• 7fc2bc1: fix(mcp): preserve pre-registered OAuth clients after client authentication errors and require explicit provider provenance before replacing dynamically registered credentials

vercel/ai (@​ai-sdk/vue)

v4.0.109

Compare Source

Patch Changes

• 0343bb1: fix(ai): keep replacement completion requests loading and cancellable when an earlier request settles
• Updated dependencies [0343bb1]
• Updated dependencies [2b105fa]
• Updated dependencies [125f493]
  • ai@​7.0.109

v4.0.108

Compare Source

Patch Changes

• 73ec701: feat(vue): add configurable useChat message update throttling
• Updated dependencies [3f6852a]
• Updated dependencies [6317504]
• Updated dependencies [3cb2dcd]
• Updated dependencies [ccf98e7]
  • ai@​7.0.108

nuxt/content (@​nuxt/content)

v3.16.1

Compare Source

Features

• add content.llms option to disable the nuxt-llms integration (#​3843) (656a5ce)

Bug Fixes

• security: avoid ReDoS in assertSafeQuery (#​3851) (f8be485)

vercel/ai (ai)

v7.0.109

Compare Source

Patch Changes

• 0343bb1: fix(ai): keep replacement completion requests loading and cancellable when an earlier request settles
• 2b105fa: fix(ai): preserve overlapping text blocks in reasoning extraction streams
• 125f493: fix(harness): forward validated toolsContext to host-executed tools in alignment with ToolLoopAgent

v7.0.108

Compare Source

Patch Changes

• 3f6852a: fix(ai): prevent direct execution of tools governed by tool callers
• 6317504: fix(ai): stop pending tool-call repairs when generation is cancelled
• 3cb2dcd: fix(ai): preserve file data when adapting v3 language models
• ccf98e7: fix(ai): prevent streamText from executing tool calls that violate tool choice
• Updated dependencies [20dd00a]
• Updated dependencies [7cf7cee]
• Updated dependencies [c42576a]
• Updated dependencies [d85dcf5]
• Updated dependencies [fd9b3f3]
  • @​ai-sdk/gateway@4.0.88

style-dictionary/style-dictionary (style-dictionary)

v5.5.5

Compare Source

Patch Changes

• bc51123: Fix prototype pollution GHSA-cr3w-v879-f973 and GHSA-5pgh-4v89-hfqj for nested objects created by the convertTokenData utility in "object" output mode.

privatenumber/tsx (tsx)

v4.23.15

Compare Source

Bug Fixes

• exclude bare builtins from namespace inheritance (38e1588)
• expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)
• make namespaced register() overloads portable for declaration emit (562c434)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.14

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.