diff --git a/.changeset/v1-retained-zod.md b/.changeset/v1-retained-zod.md
new file mode 100644
index 0000000000..4067524361
--- /dev/null
+++ b/.changeset/v1-retained-zod.md
@@ -0,0 +1,7 @@
+---
+"@cloudflare/vite-plugin": patch
+---
+
+Update the retained asset configuration validator to Zod 4.6.6
+
+The Vite plugin validates `_headers` and `_redirects` through its private workers-shared package. Update that bundled copy to address excessive memory consumption when validating oversized collections.
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d9ca92af67..d3ce62b348 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -52,8 +52,8 @@ catalogs:
       specifier: 8.21.0
       version: 8.21.0
     zod:
-      specifier: 4.6.5
-      version: 4.6.5
+      specifier: 4.6.6
+      version: 4.6.6
 
 overrides:
   '@types/node': 22.15.17
@@ -1573,7 +1573,7 @@ importers:
         version: 5.0.4(@opentelemetry/api@1.9.1)(@types/node@22.15.17)(msw@2.14.6(@types/node@22.15.17)(typescript@5.8.3))(vite@8.3.4(@types/node@22.15.17)(esbuild@0.28.2)(jiti@2.6.1)(tsx@4.21.0)(yaml@2.9.0))
       zod:
         specifier: catalog:default
-        version: 4.6.5
+        version: 4.6.6
 
   packages/workers-tsconfig: {}
 
@@ -7360,6 +7360,9 @@ packages:
   zod@4.6.5:
     resolution: {integrity: sha512-v5l/aFXZQeai4awLbOpSoHecE9UiMrnfx75tEXLjNonXVARxQ5mOeipTjROUchszUNCqnE+hqAMujRsRHsut2Q==}
 
+  zod@4.6.6:
+    resolution: {integrity: sha512-4UmzQUF5fxvfcYHlbjBmejU+w+hbDnWFx4aS8kBx7nPBHcO2SqPbpAG8snbdg+Xse4pRefR98hgjFgIMCI/UhA==}
+
 snapshots:
 
   '@aws-crypto/crc32@5.2.0':
@@ -13312,3 +13315,5 @@ snapshots:
       grammex: 3.1.11
 
   zod@4.6.5: {}
+
+  zod@4.6.6: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 65c49c2fc4..1366a05ee6 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -46,4 +46,4 @@ catalog:
   ws: 8.21.0
   capnweb: 0.12.0
   "@cloudflare/vitest-plugin": 1.4.3
-  zod: 4.6.5
+  zod: 4.6.6