Vercel AI Updates: May 17, 2026

1. Vercel CLI gains a native curl command that inherits Deployment Protection auth

Vercel. The new vercel curl command takes full URLs, bare hostnames, or just a path when a project is linked, then issues the request under the caller’s Vercel session so Deployment Protection no longer requires a bypass token in CI scripts. Standard curl flags pass through, so vercel curl example.vercel.app/api/users -X POST -H "Content-Type: application/json" -d '{"name":"Ada"}' works the same as plain curl, only authenticated. The practical upshot is that scripted smoke tests against protected preview deployments stop needing long-lived bypass secrets stashed in environment variables. Source

2. AI SDK xAI provider fixes a reasoning-start dedupe bug that produced 400s on continuation calls

Vercel. @ai-sdk/xai@4.0.0-canary.64 and the stable @ai-sdk/xai@3.0.91 ship a pair of patches: the first deduplicates reasoning-start markers when an xAI response returns multi-summary-part content, eliminating an HTTP 400 that fired when those responses were sent back as inputs on follow-up requests. The second surfaces the full xAI error detail in APICallError.message instead of collapsing to the generic HTTP status text, so a tool-call validation failure or a model-side rate-limit message is now legible at the SDK boundary. Both fixes landed simultaneously across the 2.x, 3.x, and 4.x canary lines. Source

3. AI SDK Google provider updates Interactions API ahead of May 26 breaking changes

Vercel. @ai-sdk/google@3.0.75 lands a single feature commit that reshapes the provider’s Interactions API implementation to absorb upstream breaking changes Google has scheduled for May 26. The release is dependency-only for downstream packages, but teams pinning the Google provider get a forward-compatible drop in before the upstream cutover, which avoids a scramble when Google flips the API surface. The change ships through stable 3.x rather than waiting for the 4.x canary track, so existing apps can pick it up without changing major version pins. Source

4. ai@6.0.184 fixes missing-embedding warnings defaulting to undefined

Vercel. The core ai@6.0.184 package patches an issue where the embedding-call result’s warnings field could be undefined when the provider returned no warnings, causing destructure and .length checks to throw in downstream code. The fix defaults the field to an empty array, matching the behavior of the chat and text generation surfaces. Companion releases of @ai-sdk/react@3.0.186, @ai-sdk/vue@3.0.184, @ai-sdk/svelte@4.0.184, and @ai-sdk/rsc@2.0.184 pull the fix transitively through dependency bumps. Source