Skip to content

fix(deps): update dependency zod to v4.6.6 - #206

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/zod-4.x
Oct 15, 2026
Merged

renovate[bot] merged 1 commit into
mainfrom
renovate/zod-4.x

Conversation

@renovate

@renovate renovate Bot commented Oct 15, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
zod (source) 4.6.5 → 4.6.6 age confidence

Release Notes

colinhacks/zod (zod)

v4.6.6

Compare Source

Six malicious commits pushed to main on September 21 with a compromised git credential were reverted the same day in #​6620 and have since been removed from the history of main. None were ever published to npm. The npm provenance for 4.6.6 names 284243f, the pre-rewrite copy of 9c21983 with identical contents.

Commits:
  • 0cd3af5 docs: load the en locale directly in Zod Mini
  • 9d5e60f docs: import locales from zod/locales, not z.locales
  • 34a626f docs: tighten the z.locales tree-shaking note
  • 74304ce release: stage npm versions instead of publishing them (#​6622)
  • b2ef983 docs: add Code for Japan to bronze sponsors
  • 8fb2faf docs: crop the Code for Japan logo and list it first in bronze
  • bacad51 docs: square the Code for Japan logo to match the other bronze tiles
  • c42596b release: hold the run on the release-approval environment until the staged versions are approved (#​6638)
  • a2ba4a6 fix(types): declare record output and input as members, not base type arguments (#​6645)
  • a0ebf97 fix(v4): check array, set and map size bounds before parsing elements (#​6652)
  • 529f78d 4.6.6
  • 9c21983 ci: stage at verbose so a failed OIDC token exchange says why

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on the 1st and 15th day of the month"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from fbuireu as a code owner October 15, 2026 19:32
@renovate renovate Bot added bot Automated tag added by a bot dependencies Pull requests that update a dependency file patch-update Patch version updates renovate Automated tag added by Renovate labels Oct 15, 2026
@renovate
renovate Bot enabled auto-merge (squash) October 15, 2026 19:32
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedzod@​4.6.5 ⏵ 4.6.610010010096100

View full report

@codecov

codecov Bot commented Oct 15, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@renovate
renovate Bot merged commit 30e7020 into main Oct 15, 2026
16 checks passed
@renovate
renovate Bot deleted the renovate/zod-4.x branch October 15, 2026 19:34
fbuireu pushed a commit that referenced this pull request Oct 15, 2026
## [1.28.6](v1.28.5...v1.28.6) (2026-10-15)

### Bug Fixes

* **deps:** update dependency zod to v4.6.6 ([#206](#206)) ([30e7020](30e7020))
@fbuireu

fbuireu commented Oct 15, 2026

Copy link
Copy Markdown
Owner

🎉 This PR is included in version 1.28.6 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bot Automated tag added by a bot dependencies Pull requests that update a dependency file patch-update Patch version updates released renovate Automated tag added by Renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant