Patch Changes
- 425116f: Reject HTTP transport redirects by default to prevent MCP servers from redirecting requests to unintended hosts or private networks. GET, POST, and DELETE requests now use
redirect: 'error'; explicitly configured private endpoints remain supported. Redirect following remains available throughredirect: 'follow'for trusted destinations. - Updated dependencies [49c554d]
- Updated dependencies [b753c03]
- @ai-sdk/provider-utils@3.0.45