ReDoS checker test fail on Node 22

[1knair]

Environment: Windows 11, Node 22.19.0, pnpm 10.12.1

How to reproduce:
(Clone repo and install deps with Node 22)

git clone https://github.com/colinhacks/zod.git
cd zod
pnpm install
pnpm -w vitest --run src/v4/classic/tests/datetime.test.ts -t "redos checker"

Result:
FAIL src/v4/classic/tests/datetime.test.ts > redos checker
Error: ReDoS issue
at Object. (src/v4/classic/tests/datetime.test.ts:300:41)

Result: test throws error "ReDoS issue"
Expected: all tests pass

Likely caused by Node 22 regex engine changes. All other 2996 tests pass.
Running the same test on Node 20 LTS passes successfully.
Failure originates from checkSync(schema._zod.pattern.source, "") that uses recheck library for ReDoS detection.
Could stem from updates to V8’s RegExp engine in Node 22 that tightens recheck’s detection .

[dosubot]

Hi @1knair! I'm Dosu and I’m helping the zod team.

I'm a bot trained on Zod's codebase and issues.

The redos checker test in src/v4/classic/tests/datetime.test.ts uses the recheck library to scan the regex patterns from Zod's datetime-related schemas for ReDoS vulnerabilities. On Node 22, this test fails because the regex engine changes in Node 22 cause recheck to flag one or more of these patterns as unsafe, even though they pass on earlier Node versions. All other tests passing suggests the issue is isolated to these datetime regexes and their interaction with the new engine. There are no existing tickets or discussions about Node 22-specific failures for this test, but previous ReDoS issues (mostly with email validation) were fixed in Zod v3.22.3 (example).

Possible next steps: you could try running the test on another OS to confirm if it's Windows-specific, or review the regex patterns in the affected schemas for inefficiencies that Node 22's engine might expose. If you can share the full error message or stack trace, it may help pinpoint which pattern is failing.

Tagging @colinhacks for visibility. If this answers your question, please close the issue.

To reply, just mention @dosu.

---

^{How did I do? Good | Irrelevant | Incorrect | Verbose | Hallucination | Report 🐛 | Other}    

[colinhacks]

Hm can't replicate on Mac using Node 22. I configured CI to run on windows as well and not seeing it there (Node 24). Perhaps you can investigate on your machine and try to put in a fix? Doing some investigation into the exact failing regex would help a lot.