Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 5, 2026

Bumps zod and @asteasolutions/zod-to-openapi. These dependencies needed to be updated together.
Updates zod from 3.25.76 to 4.2.1

Release notes

Sourced from zod's releases.

v4.2.1

Commits:

  • 5b5b129315fbc94a3b0d6244185eaeefcbe438d1 4.2.1

v4.2.0

Features

Implement Standard JSON Schema

standard-schema/standard-schema#134

Implement z.fromJSONSchema()

const jsonSchema = {
  type: "object",
  properties: {
    name: { type: "string" },
    age: { type: "number" }
  },
  required: ["name"]
};
const schema = z.fromJSONSchema(jsonSchema);

Implement z.xor()

const schema = z.xor(
  z.object({ type: "user", name: z.string() }),
  z.object({ type: "admin", role: z.string() })
);
// Exactly one of the schemas must match

Implement z.looseRecord()

const schema = z.looseRecord(z.string(), z.number());
// Allows additional properties beyond those defined

Commits:

  • af49c084f66339110d00e37ff71dc7b3b9f2b7ef Update docs for JSON Schema conversion of z.undefined() (#5504)
  • 767f320318986e422f524b939f1a7174544fda2e Add .toJSONSchema() method (#5477)
  • e17dcb63573397063e87d7c7fe10a5a78968181a Add z.fromJSONSchema(), z.looseRecord(), z.xor() (#5534)

... (truncated)

Commits

Updates @asteasolutions/zod-to-openapi from 7.3.4 to 8.4.0

Release notes

Sourced from @​asteasolutions/zod-to-openapi's releases.

v8.4.0

What's Changed

  • Added support for z.json (#353)
  • Added support for template literals (#352)
  • Fixed a bug in some nested structures when using isAnyZodType with null/undefined #343
  • Exported OpenApiOptions to resolve a problem when extending an object schema. For more information see: #341

Full Changelog: asteasolutions/zod-to-openapi@v8.3.3...v8.4.0

v8.3.3

What's Changed

  • use correct date-time instead of date when using z.date
  • fix: add null option for nullable enum

Full Changelog: asteasolutions/zod-to-openapi@v8.3.2...v8.3.3

v8.3.2

Testing Trusted Publishers setup again

Full Changelog: asteasolutions/zod-to-openapi@v8.3.1...v8.3.2

v8.3.1

Testing the Trusted Publihsers setup

Full Changelog: asteasolutions/zod-to-openapi@v8.3.0...v8.3.1

v8.3.0

What's Changed

  • 🎉 FINALLY added support for zod lazy (and recursive schemas with getters). Closes: #247, #300 and the discussion in #191
  • Bump js-yaml from 3.14.1 to 3.14.2
  • Setup Trusted Publishsers for NPM

Full Changelog: asteasolutions/zod-to-openapi@v8.2.0...v8.3.0

v8.2.0

What's Changed

  • (#327 ) feat: support zodv4 prefault new type

Full Changelog: asteasolutions/zod-to-openapi@v8.1.0...v8.2.0

v8.1.0

What's Changed

  • Improve Zod v4 type compatibility in module augmentation (fixes #321 ) thanks to @​YeeP79
  • Add option to sort schemas and parameters (fixes: #312) See more details on how to use it here

Full Changelog: asteasolutions/zod-to-openapi@v8.0.0...v8.1.0

v8.0.0

Added Zod v4 support 🚀

... (truncated)

Commits
  • 665cd71 Release 8.4.0
  • fb5d44a Merge pull request #356 from asteasolutions/feature/#352-add-support-for-temp...
  • 44bc69c Merge branch 'feature/#352-add-support-for-template-literals' of github.com:a...
  • db69850 Merge github.com:asteasolutions/zod-to-openapi into feature/#352-add-support-...
  • 901d0aa export OpenApiOptions
  • 0d81fc6 Merge branch 'master' into feature/#352-add-support-for-template-literals
  • 74688d6 Merge pull request #355 from asteasolutions/feature/#353-add-support-for-zod-...
  • b8c1c7d revert name change
  • 7c94d3e change CI steps names
  • 2c3bcc7 add safe-guard for missing schema in zod type check
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​asteasolutions/zod-to-openapi since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@vercel
Copy link

vercel bot commented Jan 5, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Review Updated (UTC)
archestra Ignored Ignored Jan 6, 2026 8:08pm

Bumps [zod](https://github.com/colinhacks/zod) and [@asteasolutions/zod-to-openapi](https://github.com/asteasolutions/zod-to-openapi). These dependencies needed to be updated together.

Updates `zod` from 3.25.76 to 4.2.1
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.76...v4.2.1)

Updates `@asteasolutions/zod-to-openapi` from 7.3.4 to 8.4.0
- [Release notes](https://github.com/asteasolutions/zod-to-openapi/releases)
- [Commits](asteasolutions/zod-to-openapi@v7.3.4...v8.4.0)

---
updated-dependencies:
- dependency-name: zod
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: "@asteasolutions/zod-to-openapi"
  dependency-version: 8.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/app/multi-9edf29cf4a branch from 940dca1 to 6875b53 Compare January 6, 2026 20:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants