Summary
Dependabot bumped zod from 3.25 to 4.4 in the oracle (PR #1035) with CI disabled, so no automated signal verified it. zod 4 has breaking changes (error API, .default behavior, stricter coercion) that can silently change config validation in oracle/src/config.
What to do
- Build and run the oracle test suite; fix any compile/runtime breaks from zod 4.
- Review every schema for v4 semantic changes (error.issues shape, z.record args, coercion) against the migration guide.
- Add a config-parsing test locking in current expected behavior.
Acceptance criteria
- Oracle builds and tests pass on zod 4; config validation behavior explicitly asserted.
Summary
Dependabot bumped zod from 3.25 to 4.4 in the oracle (PR #1035) with CI disabled, so no automated signal verified it. zod 4 has breaking changes (error API, .default behavior, stricter coercion) that can silently change config validation in oracle/src/config.
What to do
Acceptance criteria