Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 26, 2025

Bumps zod from 3.25.76 to 4.1.3.

Release notes

Sourced from zod's releases.

v4.1.3

Commits:

  • 98ff675c313c15d3fa18b2bd01f844b1e817ee79 Drop stringToBoolean
  • a410616b39eedf3b4654c0c791b0ab1868996bfb Fix typo
  • 0cf45896edf8728b57c8e7f2b5a56536760afac1 fix(v4): toJSONSchema - add missing oneOf inside items in tuple conversion (#5146)
  • 8bf0c1639f0d3700f01fa8aaee2d8fa5d0abbe10 fix(v4): toJSONSchema tuple path handling for draft-7 with metadata IDs (#5152)
  • 5c5fa90e47df934acf6051a3ec30516baeef2eac fix(v4): toJSONSchema - wrong record output when targeting openapi-3.0 (#5141)
  • 87b97ccd556e6d8dc6b4f4455762cc7405b0abc9 docs(codecs): update example to use payloadSchema (#5150)
  • 309f3584fd9a3856c3e0c813196210ba4b11d2a9 fix(v4): toJSONSchema - output numbers with exclusive range correctly when targeting openapi-3.0 (#5139)
  • 1e71ca99b92b94aac8ca45694f28864ae1654135 docs: fix refine fn to encode works properly (#5148)
  • a85ec3c73c6a98a496f5dd3b6fb19ebe07e227f9 fix(docs): correct example to use LooseDog instead of Dog (#5136)
  • 3e982743f3abba6a421abb899670f70e49284af4 4.1.3

v4.1.2

Commits:

  • e45e61b675baf055f4a3ef2ddead21715a1e4fe3 Improve codec docs
  • 25a4c376834db90d3bb3e70d4154e3eb6d4feb7a fix(v4): toJSONSchema - wrong record tuple output when targeting openapi-3.0 (#5145)
  • 0fa4f464e0e679d71b183e8811ef1e4f30aaa06a Use method form in codecs.mdx
  • 940383d0523da41c4e2422b76455da39dddd6c4f Update JSON codec and docs
  • 3009fa8aeb90e00bfc35c7124f3e6f8cad11d290 4.1.2

v4.1.1

Commits:

  • 648eb43c23e31f7d69ef09baba46aef4e9493b13 Remove codecs from sidebare
  • 7e39a99a88a9b7f0c9c3d5fd40fbbab494365c9a Improve codec docs
  • e5085beb2653f1d05a14c07c79b6f3707daf09f6 Add images
  • 028b289a48f5589dca58b0b813a5a9f9e363a40b Add methods
  • 10cc9941daeb28b6be5be7327e034c3388d8e60b 4.1.1

v4.1.0

The first minor version since the introduction of Zod 4 back in May. This version contains a number of features that barely missed the cut for the 4.0 release. With Zod 4 stable and widely adopted, there's more time to resume feature development.

Codecs

This is the flagship feature of this release. Codecs are a new API & schema type that encapsulates a bi-directional transformation. It's a huge missing piece in Zod that's finally filled, and it unlocks some totally new ways to use Zod.

const stringToDate = z.codec(
  z.iso.datetime(),  // input schema: ISO date string
  z.date(),          // output schema: Date object
  {
    decode: (isoString) => new Date(isoString), 
    encode: (date) => date.toISOString(),
  }
);

... (truncated)

Commits
  • 3e98274 4.1.3
  • a85ec3c fix(docs): correct example to use LooseDog instead of Dog (#5136)
  • 1e71ca9 docs: fix refine fn to encode works properly (#5148)
  • 309f358 fix(v4): toJSONSchema - output numbers with exclusive range correctly when ta...
  • 87b97cc docs(codecs): update example to use payloadSchema (#5150)
  • 5c5fa90 fix(v4): toJSONSchema - wrong record output when targeting openapi-3.0 (#5141)
  • 8bf0c16 fix(v4): toJSONSchema tuple path handling for draft-7 with metadata IDs (#5152)
  • 0cf4589 fix(v4): toJSONSchema - add missing oneOf inside items in tuple conversion (#...
  • a410616 Fix typo
  • 98ff675 Drop stringToBoolean
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [zod](https://github.com/colinhacks/zod) from 3.25.76 to 4.1.3.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.76...v4.1.3)

---
updated-dependencies:
- dependency-name: zod
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants