Skip to content

[Snyk] Upgrade zod from 3.24.4 to 3.25.76 - #15144

Closed
posit-snyk-bot wants to merge 1 commit into
mainfrom
snyk-upgrade-534b43c6fd9d11c1be45e1d989548688
Closed

posit-snyk-bot wants to merge 1 commit into
mainfrom
snyk-upgrade-534b43c6fd9d11c1be45e1d989548688

Conversation

@posit-snyk-bot

Copy link
Copy Markdown
Collaborator

snyk-top-banner

Snyk has created this PR to upgrade zod from 3.24.4 to 3.25.76.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 184 versions ahead of your current version.

  • The recommended version was released a year ago.

Breaking Change Risk

Merge Risk: Medium

Notice: This assessment is enhanced by AI.

Release notes
Package name: zod
  • 3.25.76 - 2025-07-08
  • 3.25.75 - 2025-07-07
  • 3.25.74 - 2025-07-04
  • 3.25.73 - 2025-07-04
  • 3.25.72 - 2025-07-04
  • 3.25.71 - 2025-07-03
  • 3.25.70 - 2025-07-03
  • 3.25.69 - 2025-07-02
  • 3.25.68 - 2025-07-02
  • 3.25.68-beta.2 - 2025-07-02
  • 3.25.68-beta.1 - 2025-07-01
  • 3.25.68-beta.0 - 2025-06-26
  • 3.25.68-alpha.11 - 2025-06-24
  • 3.25.68-alpha.10 - 2025-06-24
  • 3.25.68-alpha.9 - 2025-06-24
  • 3.25.68-alpha.8 - 2025-06-24
  • 3.25.68-alpha.6 - 2025-06-24
  • 3.25.68-alpha.5 - 2025-06-21
  • 3.25.68-alpha.4 - 2025-06-21
  • 3.25.68-alpha.3 - 2025-06-21
  • 3.25.68-alpha.2 - 2025-06-21
  • 3.25.68-alpha.1 - 2025-06-19
  • 3.25.68-alpha.0 - 2025-06-19
  • 3.25.67 - 2025-06-16
  • 3.25.66 - 2025-06-16
  • 3.25.65 - 2025-06-16
  • 3.25.64 - 2025-06-13
  • 3.25.63 - 2025-06-12
  • 3.25.62 - 2025-06-11
  • 3.25.61 - 2025-06-11
  • 3.25.60 - 2025-06-11
  • 3.25.59 - 2025-06-11
  • 3.25.58 - 2025-06-10
  • 3.25.57 - 2025-06-10
  • 3.25.56 - 2025-06-06
  • 3.25.55 - 2025-06-06
  • 3.25.54 - 2025-06-06
  • 3.25.53 - 2025-06-06
  • 3.25.52 - 2025-06-06
  • 3.25.51 - 2025-06-04
  • 3.25.50 - 2025-06-03
  • 3.25.50-beta.0 - 2025-06-03
  • 3.25.49 - 2025-06-02
  • 3.25.48 - 2025-06-02
  • 3.25.47 - 2025-06-02
  • 3.25.46 - 2025-06-01
  • 3.25.45 - 2025-06-01
  • 3.25.44 - 2025-06-01
  • 3.25.43 - 2025-05-31
  • 3.25.43-beta.0 - 2025-05-31
  • 3.25.42 - 2025-05-30
  • 3.25.42-beta.3 - 2025-05-30
  • 3.25.42-beta.2 - 2025-05-30
  • 3.25.42-beta.1 - 2025-05-30
  • 3.25.42-beta.0 - 2025-05-30
  • 3.25.41 - 2025-05-30
  • 3.25.40 - 2025-05-30
  • 3.25.39 - 2025-05-29
  • 3.25.38 - 2025-05-29
  • 3.25.37 - 2025-05-29
  • 3.25.36 - 2025-05-29
  • 3.25.35 - 2025-05-29
  • 3.25.34 - 2025-05-28
  • 3.25.33 - 2025-05-28
  • 3.25.32 - 2025-05-28
  • 3.25.31 - 2025-05-27
  • 3.25.30 - 2025-05-27
  • 3.25.29 - 2025-05-26
  • 3.25.29-canary.0 - 2025-05-24
  • 3.25.28 - 2025-05-23
  • 3.25.27 - 2025-05-23
  • 3.25.26 - 2025-05-23
  • 3.25.25 - 2025-05-23
  • 3.25.24 - 2025-05-23
  • 3.25.24-canary.0 - 2025-05-22
  • 3.25.24-beta.1 - 2025-05-23
  • 3.25.24-beta.0 - 2025-05-23
  • 3.25.23 - 2025-05-22
  • 3.25.22 - 2025-05-22
  • 3.25.22-canary.1 - 2025-05-22
  • 3.25.21 - 2025-05-22
  • 3.25.21-canary.0 - 2025-05-22
  • 3.25.20 - 2025-05-21
  • 3.25.18 - 2025-05-21
  • 3.25.18-canary.0 - 2025-05-21
  • 3.25.17 - 2025-05-21
  • 3.25.16 - 2025-05-21
  • 3.25.15 - 2025-05-21
  • 3.25.14 - 2025-05-21
  • 3.25.13 - 2025-05-21
  • 3.25.12 - 2025-05-21
  • 3.25.12-alpha.0 - 2025-05-21
  • 3.25.11 - 2025-05-21
  • 3.25.10 - 2025-05-21
  • 3.25.9 - 2025-05-21
  • 3.25.8 - 2025-05-20
  • 3.25.7 - 2025-05-19
  • 3.25.7-alpha.1 - 2025-05-19
  • 3.25.7-alpha.0 - 2025-05-19
  • 3.25.6 - 2025-05-19
  • 3.25.5 - 2025-05-19
  • 3.25.4 - 2025-05-19
  • 3.25.3 - 2025-05-19
  • 3.25.1 - 2025-05-19
  • 3.25.0 - 2025-05-19
  • 3.25.0-canary.20250504T221648 - 2025-05-04
  • 3.25.0-canary.20250416T221658 - 2025-04-16
  • 3.25.0-canary.20250211T214501 - 2025-02-11
  • 3.25.0-canary.20241210T225910 - 2024-12-10
  • 3.25.0-canary.20241210T065940 - 2024-12-10
  • 3.25.0-beta.20250519T094321 - 2025-05-19
  • 3.25.0-beta.20250519T093021 - 2025-05-19
  • 3.25.0-beta.20250519T084128 - 2025-05-19
  • 3.25.0-beta.20250519T051133 - 2025-05-19
  • 3.25.0-beta.20250519T033844 - 2025-05-19
  • 3.25.0-beta.20250519T033530 - 2025-05-19
  • 3.25.0-beta.20250519T033114 - 2025-05-19
  • 3.25.0-beta.20250519T024714 - 2025-05-19
  • 3.25.0-beta.20250519T022333 - 2025-05-19
  • 3.25.0-beta.20250518T233617 - 2025-05-18
  • 3.25.0-beta.20250518T221516 - 2025-05-18
  • 3.25.0-beta.20250518T220514 - 2025-05-18
  • 3.25.0-beta.20250518T220440 - 2025-05-18
  • 3.25.0-beta.20250518T213948 - 2025-05-18
  • 3.25.0-beta.20250518T211826 - 2025-05-18
  • 3.25.0-beta.20250518T204520 - 2025-05-18
  • 3.25.0-beta.20250518T194057 - 2025-05-18
  • 3.25.0-beta.20250518T002810 - 2025-05-18
  • 3.25.0-beta.20250518T002441 - 2025-05-18
  • 3.25.0-beta.20250518T002252 - 2025-05-18
  • 3.25.0-beta.20250518T000225 - 2025-05-18
  • 3.25.0-beta.20250517T235743 - 2025-05-17
  • 3.25.0-beta.20250517T231827 - 2025-05-17
  • 3.25.0-beta.20250517T081109 - 2025-05-17
  • 3.25.0-beta.20250517T073527 - 2025-05-17
  • 3.25.0-beta.20250517T071713 - 2025-05-17
  • 3.25.0-beta.20250517T071353 - 2025-05-17
  • 3.25.0-beta.20250517T070118 - 2025-05-17
  • 3.25.0-beta.20250517T052756 - 2025-05-17
  • 3.25.0-beta.20250517T041047 - 2025-05-17
  • 3.25.0-beta.20250517T040752 - 2025-05-17
  • 3.25.0-beta.20250517T040548 - 2025-05-17
  • 3.25.0-beta.20250517T031111 - 2025-05-17
  • 3.25.0-beta.20250517T023207 - 2025-05-17
  • 3.25.0-beta.20250517T012914 - 2025-05-17
  • 3.25.0-beta.20250517T011338 - 2025-05-17
  • 3.25.0-beta.20250516T215113 - 2025-05-16
  • 3.25.0-beta.20250516T205236 - 2025-05-16
  • 3.25.0-beta.20250516T195522 - 2025-05-16
  • 3.25.0-beta.20250516T044623 - 2025-05-16
  • 3.25.0-beta.20250516T041347 - 2025-05-16
  • 3.25.0-beta.20250516T035518 - 2025-05-16
  • 3.25.0-beta.20250516T005923 - 2025-05-16
  • 3.25.0-beta.20250516T004452 - 2025-05-16
  • 3.25.0-beta.20250516T001806 - 2025-05-16
  • 3.25.0-beta.20250515T234756 - 2025-05-15
  • 3.25.0-beta.20250515T233209 - 2025-05-15
  • 3.25.0-beta.20250515T215617 - 2025-05-15
  • 3.25.0-beta.20250515T212210 - 2025-05-15
  • 3.25.0-beta.20250515T211027 - 2025-05-15
  • 3.25.0-beta.20250515T205656 - 2025-05-15
  • 3.25.0-beta.20250515T205219 - 2025-05-15
  • 3.25.0-beta.20250515T204147 - 2025-05-15
  • 3.25.0-beta.20250515T192318 - 2025-05-15
  • 3.25.0-beta.20250515T191813 - 2025-05-15
  • 3.25.0-beta.20250515T183313 - 2025-05-15
  • 3.25.0-beta.20250515T085033 - 2025-05-15
  • 3.25.0-beta.20250515T080739 - 2025-05-15
  • 3.25.0-beta.20250515T072653 - 2025-05-15
  • 3.25.0-beta.20250515T071802 - 2025-05-15
  • 3.25.0-beta.20250515T061408 - 2025-05-15
  • 3.25.0-beta.20250515T054544 - 2025-05-15
  • 3.25.0-beta.20250515T053838 - 2025-05-15
  • 3.25.0-beta.20250515T020858 - 2025-05-15
  • 3.25.0-beta.20250515T005116 - 2025-05-15
  • 3.25.0-beta.20250514T231321 - 2025-05-14
  • 3.25.0-beta.20250514T231243 - 2025-05-14
  • 3.25.0-beta.20250514T225351 - 2025-05-14
  • 3.25.0-beta.20250514T223855 - 2025-05-14
  • 3.25.0-beta.20250514T222050 - 2025-05-14
  • 3.25.0-beta.20250514T221102 - 2025-05-14
  • 3.25.0-beta.20250514T200757 - 2025-05-14
  • 3.25.0-beta.20250514T195529 - 2025-05-14
  • 3.25.0-beta.20250514T194348 - 2025-05-14
  • 3.24.4 - 2025-05-04
from zod GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade zod from 3.24.4 to 3.25.76.

See this package in npm:
zod

See this project in Snyk:
https://app.snyk.io/org/open-source-6kz/project/f666fa65-905e-4707-a30f-ba207f18c65d?utm_source=github&utm_medium=referral&page=upgrade-pr
@posit-snyk-bot

Copy link
Copy Markdown
Collaborator Author

Merge Risk: Medium

This minor version upgrade of zod introduces a significant build-time dependency change. While the Zod v3 API itself has no breaking changes, versions from 3.25.41 onwards bundle Zod v4 code, which uses syntax that requires TypeScript 5.x or newer.

Impact:

  • Projects using TypeScript 4.x will experience build failures upon upgrading to this version.
  • The Zod v3 API remains unchanged, so no direct code modifications related to Zod's functions are necessary if you are on a compatible TypeScript version.

Recommendation:
Before merging, verify that your project is using TypeScript 5.x or a later version. If you are on TypeScript 4.x, you must either upgrade your TypeScript version or pin your zod dependency to 3.25.40 or an earlier version to avoid build errors.

Source: GitHub Issue Discussion

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

@posit-snyk-bot

posit-snyk-bot commented Oct 22, 2026 •

Copy link
Copy Markdown
Collaborator Author

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@cderv

cderv commented Oct 22, 2026

Copy link
Copy Markdown
Member

Closing in favor of #15151. This package.json belongs to the Node-runtime spike in dev-docs/runtime-migration/ — frozen, throwaway evidence tooling whose pinned versions don't flow into shipped quarto code (the real sources get these deps via src/import_map.json / packages/ojs). Merging all 8 spike PRs individually would leave 7 of them conflicted; one representative merge records the "we don't take Snyk bumps here" signal. A request has been filed to disable upgrade PRs for this Project in the Snyk UI.

@cderv cderv closed this Oct 22, 2026
@cderv
cderv deleted the snyk-upgrade-534b43c6fd9d11c1be45e1d989548688 branch October 22, 2026 12:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants