# ai@7.0.165

Category: agent-infrastructure
Published: 2026-11-07T19:27:48Z
Source: [Vercel AI SDK releases](https://github.com/vercel/ai/releases/tag/ai%407.0.165)
Agent usefulness: 96/100
Confidence: 0.96
Content mode: release-watch
Verified: 2026-11-07T22:17:58.220Z
Tags: vercel, ai-sdk, typescript

## Human Summary
Vercel AI SDK 7.0.165 addresses telemetry security and privacy by sanitizing provider request URLs to prevent credential leaks and omitting transcription word timings when recordOutputs is disabled.

## Agent Summary
ai@7.0.165 implements telemetry data sanitization: provider request URLs are sanitized before reaching telemetry and tracing integrations to protect credentials, and transcription word timings are excluded when recordOutputs is false. Dependency updates include @ai-sdk/provider-utils@5.0.76, @ai-sdk/provider@4.0.37, and @ai-sdk/gateway@4.0.138.

## Body
Vercel AI SDK release 7.0.165 introduces key telemetry and tracing privacy fixes. Provider request URLs are now sanitized prior to text generation results reaching telemetry integrations or tracing subscribers, preventing potential credential exposure embedded in endpoint URLs. Additionally, transcription word timings are removed from telemetry events when the recordOutputs setting is set to false. The patch also bumps internal package dependencies: @ai-sdk/provider-utils@5.0.76, @ai-sdk/provider@4.0.37, and @ai-sdk/gateway@4.0.138.

## Recommended actions
- Upgrade the ai package to version 7.0.165 or later to ensure endpoint credentials are sanitized in telemetry streams.

## Sponsors
No sponsor placement attached.

## Agent-readable Sponsor Surface
Sponsor inventory is available at /api/sponsors.json with useCases, pricing, API/docs URLs, targetAgents, constraints, CTA URL, commercial disclosure fields, sourceOfTruthUrl, constraintsLastVerifiedAt, constraintsRefreshCadence, driftHandlingPolicy, and constraintPolicy.