chore(deps): bump @google/genai from 1.48.0 to 2.4.0

[dependabot]

Bumps @google/genai from 1.48.0 to 2.4.0.

Release notes

Sourced from @​google/genai's releases.

v2.4.0

2.4.0 (2026-05-17)

Features

• support Agent and Environment APIs. (b0d9d2b)

Bug Fixes

• output_text for turns that don't end with text. (1a3d94f)

v2.3.0

2.3.0 (2026-05-15)

Features

• interaction.{output_text,output_image,output_audio,output_video} (0188233)

v2.2.0

2.2.0 (2026-05-12)

Features

• Added missing FunctionCallResultDelta type and arguments field to the ArgumentDelta type (f76138b)

v2.1.0

2.1.0 (2026-05-12)

Features

• Add gemini-3.1-flash-lite to model options (b0664e1)
• Add parameters to video response_format. (207c8f8)
• Introduce Server Side tools deltas (2e56d41)
• support Blocking FunctionCall in Live API in AgentPlatform (Vertex) (6bd8e7d)
• Add support for Vertex-lyria models lyria-3-pro-preview & lyria-3-clip-preview (f9af7410)

Bug Fixes

• Steps is not optional (6fb5386)

v2.0.1

2.0.1 (2026-05-09)

... (truncated)

Changelog

Sourced from @​google/genai's changelog.

2.4.0 (2026-05-17)

Features

• support Agent and Environment APIs. (b0d9d2b)

Bug Fixes

• output_text for turns that don't end with text. (1a3d94f)

2.3.0 (2026-05-15)

Features

• interaction.{output_text,output_image,output_audio,output_video} (0188233)

2.2.0 (2026-05-12)

Features

• Added missing FunctionCallResultDelta type and arguments field to the ArgumentDelta type (f76138b)

2.1.0 (2026-05-12)

Features

• Add gemini-3.1-flash-lite to model options (b0664e1)
• Add parameters to video response_format. (207c8f8)
• Introduce Server Side tools deltas (2e56d41)
• support Blocking FunctionCall in Live API in AgentPlatform (Vertex) (6bd8e7d)
• Add support for Vertex-lyria models lyria-3-pro-preview & lyria-3-clip-preview (f9af7410)

Bug Fixes

• Steps is not optional (6fb5386)

2.0.1 (2026-05-09)

Bug Fixes

• Update response_format field names to snake_case. (26af549)

2.0.0 (2026-05-07)

... (truncated)

Commits

• dbe4484 chore(main): release 2.4.0 (#1604)
• b0d9d2b feat: support Agent and Environment APIs.
• 3845122 chore: Improve APIConnectionTimeoutError message.
• 6bb8572 chore: Deprecate image_config and response_mime_type
• 1a3d94f fix: output_text for turns that don't end with text.
• 2f3bfef chore(main): release 2.3.0 (#1594)
• 0188233 feat: interaction.{output_text,output_image,output_audio,output_video}
• 2a51b78 chore: Remove experimental warnings for interactions
• cd4d52c chore: Fix nondeterministic baseUrl errors
• 1cc001c chore: Cleanup
• Additional commits viewable in compare view

Install script changes

This version adds preinstall script that runs during installation. Review the package contents before updating.

Summary by CodeRabbit

• Chores
  • Updated Google Generative AI library dependency to version 2.4.0.

**Disclaimer This is AxiomID Review Agent.

Greptile Summary

This PR bumps @google/genai from 1.48.0 to 2.4.0 (a major version jump), while the v2.0.0 breaking changes are scoped exclusively to the "interactions" API — generateContent usage in this codebase is unaffected. The lock file regeneration also drops orphaned @hookform/resolvers, react-hook-form, and @standard-schema/utils entries that were already absent from package.json.

• @google/genai 2.4.0 introduces a preinstall install script (flagged by hasInstallScript: true in the lock file); the script contents should be verified before merging.
• imageConfig used in scripts/gen-bg.mjs is deprecated in this release; it still works but should be migrated to the new response_format field.
• Orphaned lock-file entries (react-hook-form, @hookform/resolvers, minimatch moved to dev) are cleaned up incidentally by the lock file regeneration.

Confidence Score: 4/5

Safe to merge after manually verifying the new preinstall script contents in the published @google/genai 2.4.0 package.

The v2 breaking changes don't touch the generateContent paths used by this codebase. The main items to confirm before merging are the new preinstall script that now runs on every npm install, and the deprecated imageConfig field in gen-bg.mjs that will need migration before it is removed upstream.

scripts/gen-bg.mjs uses the deprecated imageConfig field; package-lock.json carries the new hasInstallScript flag for @google/genai.

Security Review

• @google/genai 2.4.0 adds a preinstall npm script (hasInstallScript: true in lock file). This script executes automatically on npm install in all environments including CI. The PR description explicitly flags this for review. Verify the published package's install script contents before merging.

Important Files Changed

Filename	Overview
package.json	Bumps @google/genai from ^1.46.0 to ^2.4.0; all other listed dependencies are unchanged.
package-lock.json	Updates @google/genai to 2.4.0 (now hasInstallScript: true), removes orphaned @hookform/resolvers / react-hook-form entries, and moves minimatch + transitive deps to devDependencies.

Sequence Diagram

sequenceDiagram
    participant App as Application Code
    participant GenAI as @google/genai v2.4.0
    participant API as Gemini API

    App->>GenAI: "new GoogleGenAI({ apiKey })"
    App->>GenAI: "ai.models.generateContent({ model, contents, config })"
    Note over GenAI: imageConfig is deprecated in v2.4.0<br/>use response_format instead
    GenAI->>API: HTTP POST /generateContent
    API-->>GenAI: Response (candidates, parts)
    GenAI-->>App: GenerateContentResponse

Loading

Comments Outside Diff (1)

1. package-lock.json, line 1882-1895 (link)

   New preinstall script runs on install

   @google/genai 2.4.0 sets hasInstallScript: true in the lock file, meaning a preinstall script will execute automatically during npm install. The PR description itself flags this for review before updating. Confirm the script's contents in the published package are acceptable for your CI/CD and developer environments before merging.

   

_{Reviews (1): Last reviewed commit: "chore(deps): bump @google/genai from 1.4..." | Re-trigger Greptile}

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[coderabbitai]

📝 Walkthrough

Walkthrough

This PR updates the @google/genai package dependency from ^1.46.0 to ^2.4.0 in package.json. The change allows the project to use features and fixes available in the newer version of the Google GenAI library.

Changes

Google GenAI Dependency Update

Layer / File(s)	Summary
Google GenAI version update package.json	The @google/genai dependency is updated from ^1.46.0 to ^2.4.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 A version bump hops by,
GenAI grows up high,
Dependencies updated with care,
Newer features now share,
Progress made with each reply!

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: a dependency version bump for @google/genai from 1.48.0 to 2.4.0, which is the primary modification in the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/npm_and_yarn/google/genai-2.2.0

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Moeabdelaziz007]

إغلاق: هذا الـ PR قديم وسيتم فتحه من جديد مع rebase لاحقاً

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.