chore(deps): bump zod from 3.25.76 to 4.4.3 in /javascript - #820
chore(deps): bump zod from 3.25.76 to 4.4.3 in /javascript#820dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
langwatch-agent
left a comment
langwatch-agent
left a comment
There was a problem hiding this comment.
Request changes — 1 P1 required-CI blocker; see inline.
| "ws": "^8.20.1", | ||
| "xksuid": "^0.0.4", | ||
| "zod": "^3.25.76" | ||
| "zod": "^4.4.3" |
There was a problem hiding this comment.
P1 — Required CI is currently red for this dependency update.
The javascript-complete required gate fails at this PR head. Do not merge a dependency or CI change with required validation failing; identify and fix the incompatibility, or rebase and demonstrate that the failure is from the base before rerunning the required workflow.
a110ef5 to
66476cc
Compare
langwatch-agent
left a comment
langwatch-agent
left a comment
There was a problem hiding this comment.
External-contributor scan: the Zod 3-to-4 upgrade breaks the required declaration build; details are inline.
| "ws": "^8.20.1", | ||
| "xksuid": "^0.0.4", | ||
| "zod": "^3.25.76" | ||
| "zod": "^4.4.3" |
There was a problem hiding this comment.
P1 — The major Zod upgrade is not mergeable without a compatibility migration. Required JavaScript CI fails while emitting declarations (scenarioMessageSnapshotSchema cannot be named without a reference to the Zod 3 package path), proving the new direct dependency and the remaining Zod 3 graph/source types are inconsistent. This PR only updates manifests/lockfile, so it leaves the library unable to build. Reconcile all Zod versions and exported schema annotations for v4, then get the declaration build and tests green.
langwatch-agent
left a comment
langwatch-agent
left a comment
There was a problem hiding this comment.
[P1] Merge is blocked by failing required CI
Required JavaScript CI is failing on this head. Do not merge this dependency upgrade until the failing jobs are understood and pass.
Static external-contribution review only: I did not check out or execute the PR branch.
66476cc to
007c930
Compare
langwatch-agent
left a comment
langwatch-agent
left a comment
There was a problem hiding this comment.
Requesting changes: the current external head is failing required CI gate(s): javascript-complete. Static review did not identify a separate source-level issue, but this update is not ready to merge until those required checks pass. The contributor branch was not checked out or executed.
|
@dependabot rebase |
007c930 to
1bd4a95
Compare
|
@dependabot recreate |
1bd4a95 to
9b29ce2
Compare
Dismissing stale bot review: predates the current rebased diff for this dependency-only bump; required CI checks are green.
0xdeafcafe
left a comment
0xdeafcafe
left a comment
There was a problem hiding this comment.
Auto-approved: dependency-only bump (dependabot), all required checks green.
|
@dependabot recreate |
9b29ce2 to
1a2ce33
Compare
0xdeafcafe
left a comment
0xdeafcafe
left a comment
There was a problem hiding this comment.
Auto-approved: dependency-only bump (dependabot), all required checks green.
|
Automated low-risk assessment This PR was evaluated against the repository's Low-Risk Pull Requests procedure and does not qualify as low risk.
This PR requires a manual review before merging. |
|
@dependabot rebase |
Bumps [zod](https://github.com/colinhacks/zod) from 3.25.76 to 4.4.3. - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v3.25.76...v4.4.3) --- updated-dependencies: - dependency-name: zod dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
1a2ce33 to
01e2a51
Compare
langwatch-agent
left a comment
langwatch-agent
left a comment
There was a problem hiding this comment.
External static review: no blocking concern found in the current diff. I did not execute branch code, install dependencies, or run contributor-provided scripts. Residual risk: runtime behavior remains covered by the repository CI.
LangWatch-Review: verdict=clean sha=01e2a5190d18b363cbc2b34fd800efe5803dcce6 p0=0 p1=0 p2=0 p3=0
langwatch-agent
left a comment
langwatch-agent
left a comment
There was a problem hiding this comment.
External static review: no blocking concern found in the current diff. I did not execute branch code, install dependencies, or run contributor-provided scripts. Residual risk: runtime behavior remains covered by the repository CI.
LangWatch-Review: verdict=clean sha=01e2a5190d18b363cbc2b34fd800efe5803dcce6 p0=0 p1=0 p2=0 p3=0
2 participants
Bumps zod from 3.25.76 to 4.4.3.
Release notes
Sourced from zod's releases.
... (truncated)
Commits
1fb56a5docs: document release procedure in AGENTS.mdf3c9ec04.4.3c2be4f8fix(v4): generalize optin/fallback to transform; restore preprocess on absent...1cab693fix(v4): restore catch handling for absent object keys (#5937) (#5939)b8dffe9docs: remove Numeric and Speakeasy (2+ missed monthly cycles)9195250docs: remove Mintlify from bronze sponsors (churned)2c70332docs: normalize bronze sponsor logos to github avatar pattern7391be8docs: prune lapsed silver/bronze sponsors and add active ones2aeec83docs: prune lapsed gold sponsors and rebalance logo sizing4c2fa95docs: use Zernio primary wordmark for gold sponsor logoMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for zod since your current version.