Repository: dimas-fahmi/tusktask
Pull request #31: chore(deps): bump zod from 4.1.13 to 4.2.0
Author: login: dependabot[bot]
Labels: name: dependencies
description: Pull requests that update a dependency file
name: javascript
description: Pull requests that update javascript code
Created: 2025-12-15T07:32:54Z | Merged: 2025-12-15T08:54:54Z

Bumps [zod](https://github.com/colinhacks/zod) from 4.1.13 to 4.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/colinhacks/zod/releases">zod's releases</a>.</em></p>
<blockquote>
<h2>v4.2.0</h2>
<h2>Features</h2>
<h3>Implement Standard JSON Schema</h3>
<p><a href="https://redirect.github.com/standard-schema/standard-schema/pull/134">standard-schema/standard-schema#134</a></p>
<h3>Implement <code>z.fromJSONSchema()</code></h3>
<pre lang="typescript"><code>const jsonSchema = {
  type: &quot;object&quot;,
  properties: {
    name: { type: &quot;string&quot; },
    age: { type: &quot;number&quot; }
  },
  required: [&quot;name&quot;]
};
<p>const schema = z.fromJSONSchema(jsonSchema);
</code></pre></p>
<h3>Implement <code>z.xor()</code></h3>
<pre lang="typescript"><code>const schema = z.xor(
  z.object({ type: &quot;user&quot;, name: z.string() }),
  z.object({ type: &quot;admin&quot;, role: z.string() })
);
// Exactly one of the schemas must match
</code></pre>
<h3>Implement <code>z.looseRecord()</code></h3>
<pre lang="typescript"><code>const schema = z.looseRecord(z.string(), z.number());
// Allows additional properties beyond those defined
</code></pre>
<h2>Commits:</h2>
<ul>
<li>af49c084f66339110d00e37ff71dc7b3b9f2b7ef Update docs for JSON Schema conversion of <code>z.undefined()</code> (<a href="https://redirect.github.com/colinhacks/zod/issues/5504">#5504</a>)</li>
<li>767f320318986e422f524b939f1a7174544fda2e Add <code>.toJSONSchema()</code> method (<a href="https://redirect.github.com/colinhacks/zod/issues/5477">#5477</a>)</li>
<li>e17dcb63573397063e87d7c7fe10a5a78968181a Add <code>z.fromJSONSchema()</code>, <code>z.looseRecord()</code>, <code>z.xor()</code> (<a href="https://redirect.github.com/colinhacks/zod/issues/5534">#5534</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/colinhacks/zod/commit/dcef9734f55fc1c8e73795a2be80c60fa7a4a568"><code>dcef973</code></a> v4.2.0</li>
<li><a href="https://github.com/colinhacks/zod/commit/e17dcb63573397063e87d7c7fe10a5a78968181a"><code>e17dcb6</code></a> Add <code>z.fromJSONSchema()</code>, <code>z.looseRecord()</code>, <code>z.xor()</code> (<a href="https://redirect.github.com/colinhacks/zod/issues/5534">#5534</a>)</li>
<li><a href="https://github.com/colinhacks/zod/commit/d632df3c135151639e8d013b383d365573eca64a"><code>d632df3</code></a> Update next</li>
<li><a href="https://github.com/colinhacks/zod/commit/767f320318986e422f524b939f1a7174544fda2e"><code>767f320</code></a> Add <code>.toJSONSchema()</code> method (<a href="https://redirect.github.com/colinhacks/zod/issues/5477">#5477</a>)</li>
<li><a href="https://github.com/colinhacks/zod/commit/325a70194b924e079c350565b442b6011618377f"><code>325a701</code></a> Add <code>pullfrog.yml</code> workflow</li>
<li><a href="https://github.com/colinhacks/zod/commit/497272785a2b34fe32ca6211278970225ad87be2"><code>4972727</code></a> Update Next.js and React Flight RCE advisory (<a href="https://redirect.github.com/colinhacks/zod/issues/5515">#5515</a>)</li>
<li><a href="https://github.com/colinhacks/zod/commit/af49c084f66339110d00e37ff71dc7b3b9f2b7ef"><code>af49c08</code></a> Update docs for JSON Schema conversion of <code>z.undefined()</code> (<a href="https://redirect.github.com/colinhacks/zod/issues/5504">#5504</a>)</li>
<li><a href="https://github.com/colinhacks/zod/commit/fb66ee123fb370a2f6fd45c622cdb00fdfacb2fd"><code>fb66ee1</code></a> fix(mini): export ZodMiniJSONSchema types to prevent TS4023 (<a href="https://redirect.github.com/colinhacks/zod/issues/5511">#5511</a>)</li>
<li><a href="https://github.com/colinhacks/zod/commit/6e968a3b49cbcb3bffc30c68634e80168e8f2a2e"><code>6e968a3</code></a> Add convex-helpers to the ecosystem docs (<a href="https://redirect.github.com/colinhacks/zod/issues/5470">#5470</a>)</li>
<li><a href="https://github.com/colinhacks/zod/commit/d224363839bf487da46e342f8636e650946334c4"><code>d224363</code></a> test: add result verification to test cases (<a href="https://redirect.github.com/colinhacks/zod/issues/5473">#5473</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/colinhacks/zod/compare/v4.1.13...v4.2.0">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zod&package-manager=npm_and_yarn&previous-version=4.1.13&new-version=4.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>


Diff:
diff --git a/package-lock.json b/package-lock.json
index cccfc6c..99aef6e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -62,7 +62,7 @@
         "tailwind-merge": "^3.4.0",
         "ua-parser-js": "^2.0.7",
         "vaul": "^1.1.2",
-        "zod": "^4.1.13",
+        "zod": "^4.2.0",
         "zustand": "^5.0.9"
       },
       "devDependencies": {
@@ -5673,9 +5673,9 @@
       }
     },
     "node_modules/zod": {
-      "version": "4.1.13",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-4.1.13.tgz",
-      "integrity": "sha512-AvvthqfqrAhNH9dnfmrfKzX5upOdjUVJYFqNSlkmGf64gRaTzlPwz99IHYnVs28qYAybvAlBV+H7pn0saFY4Ig==",
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.2.0.tgz",
+      "integrity": "sha512-Bd5fw9wlIhtqCCxotZgdTOMwGm1a0u75wARVEY9HMs1X17trvA/lMi4+MGK5EUfYkXVTbX8UDiDKW4OgzHVUZw==",
       "license": "MIT",
       "peer": true,
       "funding": {
diff --git a/package.json b/package.json
index b44969a..298148b 100644
--- a/package.json
+++ b/package.json
@@ -64,7 +64,7 @@
     "tailwind-merge": "^3.4.0",
     "ua-parser-js": "^2.0.7",
     "vaul": "^1.1.2",
-    "zod": "^4.1.13",
+    "zod": "^4.2.0",
     "zustand": "^5.0.9"
   },
   "devDependencies": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 746db67..e52dbe9 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -106,7 +106,7 @@ importers:
         version: 0.45.1(@upstash/redis@1.35.7)(kysely@0.28.8)(postgres@3.4.7)
       drizzle-zod:
         specifier: ^0.8.3
-        version: 0.8.3(drizzle-orm@0.45.1(@upstash/redis@1.35.7)(kysely@0.28.8)(postgres@3.4.7))(zod@4.1.13)
+        version: 0.8.3(drizzle-orm@0.45.1(@upstash/redis@1.35.7)(kysely@0.28.8)(postgres@3.4.7))(zod@4.2.0)
       embla-carousel-react:
         specifier: ^8.6.0
         version: 8.6.0(react@19.2.0)
@@ -171,8 +171,8 @@ importers:
         specifier: ^1.1.2
         version: 1.1.2(@types/react-dom@19.2.3(@types/react@19.2.7))(@types/react@19.2.7)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
       zod:
-        specifier: ^4.1.13
-        version: 4.1.13
+        specifier: ^4.2.0
+        version: 4.2.0
       zustand:
         specifier: ^5.0.9
         version: 5.0.9(@types/react@19.2.7)(react@19.2.0)(use-sync-external-store@1.6.0(react@19.2.0))
@@ -2215,8 +2215,8 @@ packages:
       react: ^16.8 || ^17.0 || ^18.0 || ^19.0.0 || ^19.0.0-rc
       react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0.0 || ^19.0.0-rc
 
-  zod@4.1.13:
-    resolution: {integrity: sha512-AvvthqfqrAhNH9dnfmrfKzX5upOdjUVJYFqNSlkmGf64gRaTzlPwz99IHYnVs28qYAybvAlBV+H7pn0saFY4Ig==}
+  zod@4.2.0:
+    resolution: {integrity: sha512-Bd5fw9wlIhtqCCxotZgdTOMwGm1a0u75wARVEY9HMs1X17trvA/lMi4+MGK5EUfYkXVTbX8UDiDKW4OgzHVUZw==}
 
   zustand@5.0.9:
     resolution: {integrity: sha512-ALBtUj0AfjJt3uNRQoL1tL2tMvj6Gp/6e39dnfT6uzpelGru8v1tPOGBzayOWbPJvujM8JojDk3E1LxeFisBNg==}
@@ -2249,20 +2249,20 @@ snapshots:
       '@babel/helper-string-parser': 7.27.1
       '@babel/helper-validator-identifier': 7.28.5
 
-  '@better-auth/core@1.4.5(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.18)(better-call@1.1.4(zod@4.1.13))(jose@6.1.3)(kysely@0.28.8)(nanostores@1.1.0)':
+  '@better-auth/core@1.4.5(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.18)(better-call@1.1.4(zod@4.2.0))(jose@6.1.3)(kysely@0.28.8)(nanostores@1.1.0)':
     dependencies:
       '@better-auth/utils': 0.3.0
       '@better-fetch/fetch': 1.1.18
       '@standard-schema/spec': 1.0.0
-      better-call: 1.1.4(zod@4.1.13)
+      better-call: 1.1.4(zod@4.2.0)
       jose: 6.1.3
       kysely: 0.28.8
       nanostores: 1.1.0
-      zod: 4.1.13
+      zod: 4.2.0
 
-  '@better-auth/telemetry@1.4.5(@better-auth/core@1.4.5(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.18)(better-call@1.1.4(zod@4.1.13))(jose@6.1.3)(kysely@0.28.8)(nanostores@1.1.0))':
+  '@better-auth/telemetry@1.4.5(@better-auth/core@1.4.5(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.18)(better-call@1.1.4(zod@4.2.0))(jose@6.1.3)(kysely@0.28.8)(nanostores@1.1.0))':
     dependencies:
-      '@better-auth/core': 1.4.5(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.18)(better-call@1.1.4(zod@4.1.13))(jose@6.1.3)(kysely@0.28.8)(nanostores@1.1.0)
+      '@better-auth/core': 1.4.5(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.18)(better-call@1.1.4(zod@4.2.0))(jose@6.1.3)(kysely@0.28.8)(nanostores@1.1.0)
       '@better-auth/utils': 0.3.0
       '@better-fetch/fetch': 1.1.18
 
@@ -3310,32 +3310,32 @@ snapshots:
 
   better-auth@1.4.5(next@16.0.10(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0))(react-dom@19.2.0(react@19.2.0))(react@19.2.0):
     dependencies:
-      '@better-auth/core': 1.4.5(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.18)(better-call@1.1.4(zod@4.1.13))(jose@6.1.3)(kysely@0.28.8)(nanostores@1.1.0)
-      '@better-auth/telemetry': 1.4.5(@better-auth/core@1.4.5(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.18)(better-call@1.1.4(zod@4.1.13))(jose@6.1.3)(kysely@0.28.8)(nanostores@1.1.0))
+      '@better-auth/core': 1.4.5(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.18)(better-call@1.1.4(zod@4.2.0))(jose@6.1.3)(kysely@0.28.8)(nanostores@1.1.0)
+      '@better-auth/telemetry': 1.4.5(@better-auth/core@1.4.5(@better-auth/utils@0.3.0)(@better-fetch/fetch@1.1.18)(better-call@1.1.4(zod@4.2.0))(jose@6.1.3)(kysely@0.28.8)(nanostores@1.1.0))
       '@better-auth/utils': 0.3.0
       '@better-fetch/fetch': 1.1.18
       '@noble/ciphers': 2.0.1
       '@noble/hashes': 2.0.1
-      better-call: 1.1.4(zod@4.1.13)
+      better-call: 1.1.4(zod@4.2.0)
       defu: 6.1.4
       jose: 6.1.3
       kysely: 0.28.8
       ms: 4.0.0-nightly.202508271359
       nanostores: 1.1.0
-      zod: 4.1.13
+      zod: 4.2.0
     optionalDependencies:
       next: 16.0.10(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.0(react@19.2.0))(react@19.2.0)
       react: 19.2.0
       react-dom: 19.2.0(react@19.2.0)
 
-  better-call@1.1.4(zod@4.1.13):
+  better-call@1.1.4(zod@4.2.0):
     dependencies:
       '@better-auth/utils': 0.3.0
       '@better-fetch/fetch': 1.1.18
       rou3: 0.7.10
       set-cookie-parser: 2.7.2
     optionalDependencies:
-      zod: 4.1.13
+      zod: 4.2.0
 
   browser-image-compression@2.0.2:
     dependencies:
@@ -3402,10 +3402,10 @@ snapshots:
       kysely: 0.28.8
       postgres: 3.4.7
 
-  drizzle-zod@0.8.3(drizzle-orm@0.45.1(@upstash/redis@1.35.7)(kysely@0.28.8)(postgres@3.4.7))(zod@4.1.13):
+  drizzle-zod@0.8.3(drizzle-orm@0.45.1(@upstash/redis@1.35.7)(kysely@0.28.8)(postgres@3.4.7))(zod@4.2.0):
     dependencies:
       drizzle-orm: 0.45.1(@upstash/redis@1.35.7)(kysely@0.28.8)(postgres@3.4.7)
-      zod: 4.1.13
+      zod: 4.2.0
 
   embla-carousel-react@8.6.0(react@19.2.0):
     dependencies:
@@ -3862,7 +3862,7 @@ snapshots:
       - '@types/react'
       - '@types/react-dom'
 
-  zod@4.1.13: {}
+  zod@4.2.0: {}
 
   zustand@5.0.9(@types/react@19.2.7)(react@19.2.0)(use-sync-external-store@1.6.0(react@19.2.0)):
     optionalDependencies:


Reviews:

Review comments:

PR comments:
user: login: vercel[bot]
created_at: 2025-12-15T07:32:57Z
body: [vc]: #DbXH5DmNEE0AbOviS5ILCsd8/ZVXPiEZbzN6EDeEZQs=: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
The latest updates on your projects. Learn more about [Vercel for GitHub](https://vercel.link/github-learn-more).

| Project | Deployment | Review | Updated (UTC) |
| :--- | :----- | :------ | :------ |
| [tusktask](https://vercel.com/dimas-fahmis-projects/tusktask) | ![Ready](https://vercel.com/static/status/ready.svg) [Ready](https://vercel.com/dimas-fahmis-projects/tusktask/6xfgHjMUmYBLQzwAJXmSDT8iMhm8) | [Preview](https://tusktask-git-dependabot-npmandyarnzod-420-dimas-fahmis-projects.vercel.app), [Comment](https://vercel.live/open-feedback/tusktask-git-dependabot-npmandyarnzod-420-dimas-fahmis-projects.vercel.app?via=pr-comment-feedback-link) | Dec 15, 2025 7:36am |


author_association: NONE
user: login: coderabbitai[bot]
created_at: 2025-12-15T07:32:59Z
body: <!-- This is an auto-generated comment: summarize by coderabbit.ai -->
<!-- This is an auto-generated comment: skip review by coderabbit.ai -->

> [!IMPORTANT]
> ## Review skipped
> 
> Bot user detected.
> 
> To trigger a single review, invoke the `@coderabbitai review` command.
> 
> You can disable this status message by setting the `reviews.review_status` to `false` in the CodeRabbit configuration file.

<!-- end of auto-generated comment: skip review by coderabbit.ai -->


<!-- tips_start -->

---

> [!NOTE]
> ## Free review on us!
> 
> CodeRabbit is offering free reviews until Wed Dec 17 2025 to showcase some of the refinements we've made.

<sub>Comment `@coderabbitai help` to get the list of available commands and usage tips.</sub>

<!-- tips_end -->
author_association: NONE