Skip to content

deps(deps): bump zod from 3.25.76 to 4.0.5#8

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/zod-4.0.5
Closed

deps(deps): bump zod from 3.25.76 to 4.0.5#8
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/zod-4.0.5

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Jul 14, 2025

Bumps zod from 3.25.76 to 4.0.5.

Release notes

Sourced from zod's releases.

v4.0.5

Commits:

  • f91a73ec23f9ec28d908af2caa643a54088516c5 Support pipes in discriminated unions. Closes #4856 (#4861)
  • 45afab0f846dffd591362b6f770017507eb185b5 4.0.5

v4.0.4

Commits:

  • 9335f0543d6359f9236e3e33b78cc5b2788dbe0f Adds ZodFirstPartyTypeKind stub to fix module resolution failure inside zod-to-json-schema

v4.0.3

Commits:

  • 5905a8d810eff6f4677e6aa9e557f92a676805cf Improve check-versions script
  • f3e749b1b057a2cf0a0bce7e07abec4e0520e0f8 Remove global File interface
  • 44a936cb77961e57a0988d8a3c63d9c71fce69ac 4.0.2
  • 74006edd49e3fe8d74010090462859593c2bd1e2 Fix JSR provenance
  • ff4af5e889d4ad7136a9cde7202b16261db5c83c 4.0.3
  • ce573e8799f86e2f68307eba95c2d40fc92617b7 Update test badge
  • 9a7161a976d6349f738c00cb6d6528c0407a65e8 Fix versions

v4.0.0

With this release, zod@4.0.0 has been published to npm. There were no code changes between 3.25.76 and 4.0.0!

Zod 4 has been stable for the past 6 weeks, but it was published inside zod@3.25.x on npm. this transitionary window gave the ecosystem time to incrementally support for Zod 4 (without dropping support for Zod 3). As there is now near-universal support for Zod 4 in the ecosystem, ths time feels right to finally put a bow on things 🎀

To upgrade to Zod 4:

npm upgrade zod@^4.0.0

If you’ve already migrated to Zod 4 using the subpaths, there are no changes required. however you can optionally simplify your imports (recommended)

// after upgrading to zod@4.0.0:
import * as z from "zod"; // Zod 4 (regular)
import * as z from "zod/mini" // Zod 4 Mini
// these still work, but are no longer needed
import * as z from "zod/v4";
import * as z from "zod/v4-mini":
// if you still need Zod 3
import * as z from "zod/v3"; // Zod 3

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [zod](https://github.com/colinhacks/zod) from 3.25.76 to 4.0.5.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.76...v4.0.5)

---
updated-dependencies:
- dependency-name: zod
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Jul 14, 2025

Reviewers

The following teams could not be added as reviewers: typescript. Either the team does not exist or it does not have the correct permissions to be added as a reviewer.

Assignees

The following users could not be added as assignees: @workos/typescript. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Jul 14, 2025

The reviewers field in the dependabot.yml file will be removed soon. Please use the code owners file to specify reviewers for Dependabot PRs. For more information, see this blog post.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 14, 2025
@dependabot dependabot Bot requested a review from a team as a code owner July 14, 2025 05:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 14, 2025
@vercel
Copy link
Copy Markdown

vercel Bot commented Jul 14, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
vercel-mcp-example ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jul 14, 2025 5:35am

@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Jul 28, 2025

Superseded by #25.

@dependabot dependabot Bot closed this Jul 28, 2025
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/zod-4.0.5 branch July 28, 2025 06:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Development

Successfully merging this pull request may close these issues.

0 participants