Skip to content

build(deps): bump zod from 4.4.3 to 4.6.1 - #16

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/zod-4.5.4
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/zod-4.5.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 6, 2026 •

Copy link
Copy Markdown

Bumps zod from 4.4.3 to 4.6.1.

Release notes

Sourced from zod's releases.

v4.6.1

A patch on top of 4.6.0.

v4.6.0

Zod 4.6 is now available.

npm install zod@latest

At a glance:

  • .validate() — checks input validity without building a result (up to 35x faster than .safeParse().success on a compiled schema)
  • z.instanceof().properties() — validates properties of an instance
  • fromJSONSchema() — enforces six validation keywords it used to ignore
  • z.iban() — electronic-format IBAN plus mod-97 checksum
  • z.withParser() — installs a parser generated elsewhere, for environments without new Function
  • Faster CommonJS — drops the getter on every export (~3x faster z.validate() under require)
  • Memory retention in recursive schemas — releases the parsed input, fixing a 4.5 out-of-memory regression
  • @zod/mini — Zod Mini as a standalone package, versioned in lockstep with zod since 4.5

.validate()

Standalone boolean validation, in Zod, Zod Mini, and Zod Core. It answers "is this input valid?" without constructing a ZodError, which makes rejection cheap. The return type is a guard on the schema's input type.

z.validate(z.string(), "hi"); // true
z.validate(z.string(), 42);   // false

It is a method on Zod Classic schemas too. (#6547)

const Player = z.object({
  username: z.string(),
  xp: z.number(),
});
if (Player.validate(data)) {
data.username; // narrowed
}

In conjunction with z.compile(), this can be up to 35x faster than .safeParse().success on invalid input.

... (truncated)

Commits
  • 62311eb 4.6.1
  • 2efa8b8 ci: give the npm wait a real budget and drop the back-publish path (#6583)
  • b12aa52 fix: preserve unique tags with defaulted discriminators (#6582)
  • dd9c36f fix(v4): defer recursive object index inference (#6580)
  • 574d480 fix(locales): clarify Tajik discriminator value message
  • c532d76 test(locales): cover Tajik error branches
  • 3b15499 feat(lang): add Tajik (tg) locale
  • 1c51cbe 4.6.0
  • 661673a docs: make the 9thCO logo visible on the light theme
  • 6de10dc docs: reconcile the sponsor listings against every active sponsorship (#6579)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/zod-4.5.4 branch 3 times, most recently from ffa39a2 to b034d19 Compare September 9, 2026 14:49
@dependabot dependabot Bot changed the title chore(deps): bump zod from 4.4.3 to 4.5.4 build(deps): bump zod from 4.4.3 to 4.5.4 Sep 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/zod-4.5.4 branch from b034d19 to dbb465f Compare September 9, 2026 14:52
Bumps [zod](https://github.com/colinhacks/zod) from 4.4.3 to 4.6.1.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.4.3...v4.6.1)

---
updated-dependencies:
- dependency-name: zod
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump zod from 4.4.3 to 4.5.4 build(deps): bump zod from 4.4.3 to 4.6.1 Sep 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/zod-4.5.4 branch from dbb465f to 0c0be18 Compare September 13, 2026 10:49
@dependabot @github

dependabot Bot commented on behalf of github Sep 13, 2026

Copy link
Copy Markdown
Author

Superseded by #17.

@dependabot dependabot Bot closed this Sep 13, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/zod-4.5.4 branch September 13, 2026 18:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants