Skip to content

chore(deps): update dependency @vercel/blob to v2.4.1#164

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/vercel-blob-2.x-lockfile
Open

chore(deps): update dependency @vercel/blob to v2.4.1#164
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/vercel-blob-2.x-lockfile

Conversation

@renovate

@renovate renovate Bot commented Mar 30, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change Pending OpenSSF
@vercel/blob (source) dependencies minor 2.3.12.4.1 2.5.0 OpenSSF Scorecard

Release Notes

vercel/storage (@​vercel/blob)

v2.4.1

Compare Source

Patch Changes
  • b7027de: Read the Vercel OIDC token via the @vercel/oidc package (getVercelOidcTokenSync) instead of an inlined copy. This makes the dependency explicit and discoverable, and matches how other Vercel packages consume OIDC. Behavior is unchanged except for one edge case: a blank x-vercel-oidc-token request-context header now resolves to no token rather than falling back to VERCEL_OIDC_TOKEN.

v2.4.0

Compare Source

Minor Changes
  • 20eeaff: Add Vercel OIDC auth and presigned URLs

v2.3.3

Compare Source

Patch Changes
  • d2ea7cf: Enforce maximumSizeInBytes client-side for multipart uploads. Bodies with a known size (Blob, File, Buffer) are now checked before the upload starts, avoiding wasted API calls.
  • 949e994: Fix multipart upload hanging forever on empty streams, and fix createChunkTransformStream bypassing backpressure by removing incorrect queueMicrotask wrapping.

v2.3.2

Compare Source

Patch Changes
  • c9d9a1a: Apply ifMatch/allowOverwrite validation to handleUpload and generateClientTokenFromReadWriteToken. When ifMatch is set via onBeforeGenerateToken or direct token generation, allowOverwrite is now implicitly enabled. Explicitly passing allowOverwrite: false with ifMatch throws a clear error.
  • 6dcecb8: Make ifMatch imply allowOverwrite: true on put(). Previously, using ifMatch without explicitly setting allowOverwrite: true would cause the server to send conflicting conditional headers to S3, resulting in 500 errors. Now the SDK implicitly enables allowOverwrite when ifMatch is set, and throws a clear error if allowOverwrite: false is explicitly combined with ifMatch.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions github-actions Bot enabled auto-merge (squash) March 30, 2026 22:14
@vercel

vercel Bot commented Mar 30, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
wishbubble Error Error Jun 21, 2026 11:44pm

Request Review

@renovate renovate Bot force-pushed the renovate/vercel-blob-2.x-lockfile branch from c5a20ff to 3d03801 Compare April 5, 2026 17:05
@renovate renovate Bot changed the title chore(deps): update dependency @vercel/blob to v2.3.2 chore(deps): update dependency @vercel/blob to v2.3.3 Apr 5, 2026
@renovate renovate Bot force-pushed the renovate/vercel-blob-2.x-lockfile branch from 3d03801 to 30479a4 Compare April 8, 2026 21:42
@renovate renovate Bot force-pushed the renovate/vercel-blob-2.x-lockfile branch from 30479a4 to 4af3bf0 Compare April 29, 2026 19:40
@renovate renovate Bot force-pushed the renovate/vercel-blob-2.x-lockfile branch from 4af3bf0 to 30b18b2 Compare May 12, 2026 10:47
@renovate renovate Bot force-pushed the renovate/vercel-blob-2.x-lockfile branch from 30b18b2 to 805d61e Compare May 18, 2026 10:39
@renovate renovate Bot force-pushed the renovate/vercel-blob-2.x-lockfile branch from 805d61e to d64c9f6 Compare May 22, 2026 00:54
@renovate renovate Bot changed the title chore(deps): update dependency @vercel/blob to v2.3.3 chore(deps): update dependency @vercel/blob to v2.4.0 May 22, 2026
@renovate renovate Bot force-pushed the renovate/vercel-blob-2.x-lockfile branch from d64c9f6 to 74c7292 Compare June 21, 2026 23:43
@renovate renovate Bot changed the title chore(deps): update dependency @vercel/blob to v2.4.0 chore(deps): update dependency @vercel/blob to v2.4.1 Jun 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants