Vercel AI Updates: May 14, 2026

1. Vercel Trusted Sources lets protected deployments accept OIDC tokens instead of shared secrets

Vercel. Trusted Sources is a new deployment-protection feature that lets a protected Vercel deployment accept short-lived OIDC identity tokens from other Vercel projects, GitHub Actions, or any custom OIDC provider — eliminating the practice of stashing long-lived bypass secrets in CI configs. Vercel verifies the token signature and claims against project rules, then authorizes the request. Teams running staged or per-PR deployments behind auth get a cleaner integration path with their existing OIDC providers. Source

2. AI SDK 4.x canaries refresh provider-utils and openai-compatible packages

Vercel. The Vercel AI SDK shipped a wave of canary releases on May 13, including @ai-sdk/xai@4.0.0-canary.60, @ai-sdk/workflow@1.0.0-canary.53, and @ai-sdk/vue@4.0.0-canary.136, all tracking new builds of @ai-sdk/provider-utils (5.0.0-canary.40) and @ai-sdk/openai-compatible (3.0.0-canary.47). These are dependency-bump releases preparing the next major; the surface area changes flowing through are visible in the linked notes. Teams pinning canaries can update with confidence that the deltas are limited to the shared provider layer. Source