build(deps): bump zod from 3.23.8 to 4.1.2

[dependabot]

Bumps zod from 3.23.8 to 4.1.2.

Release notes

Sourced from zod's releases.

v4.1.2

Commits:

• e45e61b675baf055f4a3ef2ddead21715a1e4fe3 Improve codec docs
• 25a4c376834db90d3bb3e70d4154e3eb6d4feb7a fix(v4): toJSONSchema - wrong record tuple output when targeting openapi-3.0 (#5145)
• 0fa4f464e0e679d71b183e8811ef1e4f30aaa06a Use method form in codecs.mdx
• 940383d0523da41c4e2422b76455da39dddd6c4f Update JSON codec and docs
• 3009fa8aeb90e00bfc35c7124f3e6f8cad11d290 4.1.2

v4.1.1

Commits:

• 648eb43c23e31f7d69ef09baba46aef4e9493b13 Remove codecs from sidebare
• 7e39a99a88a9b7f0c9c3d5fd40fbbab494365c9a Improve codec docs
• e5085beb2653f1d05a14c07c79b6f3707daf09f6 Add images
• 028b289a48f5589dca58b0b813a5a9f9e363a40b Add methods
• 10cc9941daeb28b6be5be7327e034c3388d8e60b 4.1.1

v4.1.0

The first minor version since the introduction of Zod 4 back in May. This version contains a number of features that barely missed the cut for the 4.0 release. With Zod 4 stable and widely adopted, there's more time to resume feature development.

Codecs

This is the flagship feature of this release. Codecs are a new API & schema type that encapsulates a bi-directional transformation. It's a huge missing piece in Zod that's finally filled, and it unlocks some totally new ways to use Zod.

const stringToDate = z.codec(
  z.iso.datetime(),  // input schema: ISO date string
  z.date(),          // output schema: Date object
  {
    decode: (isoString) => new Date(isoString), 
    encode: (date) => date.toISOString(),
  }
);

New top-level functions are added for processing inputs in the forward direction ("decoding") and backward direction ("encoding").

stringToDate.decode("2025-08-21T20:59:45.500Z")
// => Date
stringToDate.encode(new Date())
// => "2025-08-21T20:59:45.500Z"

Note — For bundle size reasons, these new methods have not added to Zod Mini schemas. Instead, this functionality is available via equivalent top-level functions.

// equivalent at runtime

... (truncated)

Commits

• 3009fa8 4.1.2
• 940383d Update JSON codec and docs
• 0fa4f46 Use method form in codecs.mdx
• 25a4c37 fix(v4): toJSONSchema - wrong record tuple output when targeting `openapi-3.0...
• e45e61b Improve codec docs
• 10cc994 4.1.1
• 028b289 Add methods
• e5085be Add images
• 7e39a99 Improve codec docs
• 648eb43 Remove codecs from sidebare
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by colinhacks, a new releaser for zod since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[changeset-bot]

⚠️ No Changeset found

Latest commit: ad9f9f2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dependabot]

Superseded by #2111.