chore(deps): consolidate dependabot updates

Bumps all pending dependency updates into one commit:

Root package:
- zod 3.25.76 → 4.3.6 (major)
- @types/node 22 → 25 (major)
- @modelcontextprotocol/sdk 1.26.0 → 1.27.1
- tsdown 0.15.12 → 0.21.4
- prettier 3.6.2 → 3.8.1
- typescript-eslint 8.48.0 → 8.57.1
- lefthook 2.0.2 → 2.1.4
- eslint/@eslint/js → 9.39.4 (kept at v9, typescript-eslint lacks v10 support)
- Regenerated lockfile to pick up transitive security fixes
  (hono, @hono/node-server, express-rate-limit, flatted, rollup,
  minimatch, ajv, qs, undici)

examples/servers/typescript:
- @modelcontextprotocol/sdk → 1.27.1
- Removed zod-to-json-schema (broken with zod v4)
- Added zod ^4 as direct dep
- Regenerated lockfile

GitHub Actions:
- actions/setup-node v4 → v6 in action.yml

Code changes for zod v4:
- ZodError.errors → ZodError.issues (src/index.ts)
- .refine() callback signature updated (src/schemas.ts)
- everything-server: replaced zodToJsonSchema with SDK's
  toJsonSchemaCompat helper (handles zod v3/v4/v4-mini)

Build fix for tsdown 0.21:
- Added --no-fixed-extension to preserve dist/index.js output
  (tsdown 0.21 defaults to .mjs for type:module packages)

Author: pcarleton

action.yml

@@ -35,7 +35,7 @@ runs:
   using: 'composite'
   steps:
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ inputs.node-version }}
 

examples/servers/typescript/everything-server.ts

@@ -25,8 +25,8 @@ import {
   type ListToolsResult,
   type Tool
 } from '@modelcontextprotocol/sdk/types.js';
-import { zodToJsonSchema } from 'zod-to-json-schema';
 import { z } from 'zod';
+import { toJsonSchemaCompat } from '@modelcontextprotocol/sdk/server/zod-json-schema-compat.js';
 import cors from 'cors';
 import { randomUUID } from 'crypto';
 
@@ -1006,31 +1006,14 @@ function createMcpServer() {
               };
             }
 
-            // For other tools, convert Zod to JSON Schema
-            // Handle different inputSchema formats:
-            // - undefined/null: use empty object schema
-            // - Zod schema (has _def): convert directly
-            // - Raw shape (object with Zod values): wrap in z.object first
-            let inputSchema: Tool['inputSchema'];
-            if (!tool.inputSchema) {
-              inputSchema = { type: 'object' as const, properties: {} };
-            } else if ('_def' in tool.inputSchema) {
-              // Already a Zod schema
-              inputSchema = zodToJsonSchema(tool.inputSchema, {
-                strictUnions: true
-              }) as Tool['inputSchema'];
-            } else if (
-              typeof tool.inputSchema === 'object' &&
-              Object.keys(tool.inputSchema).length > 0
-            ) {
-              // Raw shape with Zod values
-              inputSchema = zodToJsonSchema(z.object(tool.inputSchema), {
-                strictUnions: true
-              }) as Tool['inputSchema'];
-            } else {
-              // Empty object or unknown format
-              inputSchema = { type: 'object' as const, properties: {} };
-            }
+            // For other tools, use the SDK's own JSON Schema conversion
+            // which handles zod v3/v4/v4-mini compatibility
+            const inputSchema: Tool['inputSchema'] = tool.inputSchema
+              ? (toJsonSchemaCompat(tool.inputSchema, {
+                  strictUnions: true,
+                  pipeStrategy: 'input'
+                }) as Tool['inputSchema'])
+              : { type: 'object' as const, properties: {} };
 
             return {
               name,