chore(deps): bump the production-minor-patch group across 1 directory with 7 updates by dependabot[bot] · Pull Request #102 · corespeed-io/lore

dependabot · 2026-09-09T21:13:22Z

Bumps the production-minor-patch group with 7 updates in the / directory:

Package	From	To
@ast-grep/napi	`0.45.1`	`0.45.3`
@opentelemetry/api-logs	`0.221.0`	`0.222.0`
@opentelemetry/instrumentation	`0.221.0`	`0.222.0`
@opentelemetry/sdk-logs	`0.221.0`	`0.222.0`
@opentelemetry/sdk-trace-base	`2.10.0`	`2.11.0`
jose	`6.2.9`	`6.2.12`
zod	`4.4.3`	`4.5.4`

Updates @ast-grep/napi from 0.45.1 to 0.45.3

Release notes

Sourced from @ast-grep/napi's releases.

0.45.3

chore(deps): update dependency dprint to v0.57.0 [#2916](https://github.com/ast-grep/ast-grep/issues/2916)

feat: add min-severity cli [#2917](https://github.com/ast-grep/ast-grep/issues/2917)

fix(outline): anchor fallback signatures to names [#2913](https://github.com/ast-grep/ast-grep/issues/2913)

feat(outline): add Markdown heading support [#2912](https://github.com/ast-grep/ast-grep/issues/2912)

chore(deps): update dependency oxlint to v1.80.0 [#2908](https://github.com/ast-grep/ast-grep/issues/2908)

chore(deps): update dependency @ast-grep/napi to v0.45.2 [#2906](https://github.com/ast-grep/ast-grep/issues/2906)

feat: add min-severity cli (#2917) [#2720](https://github.com/ast-grep/ast-grep/issues/2720)

fix: ast-grep-ignore must be at first be the frist alphabet to take effect [#2909](https://github.com/ast-grep/ast-grep/issues/2909)

chore: update tree-sitter 0.27 bb74529

fix: fix clippy c6b32d7

0.45.2

chore(deps): update astral-sh/setup-uv action to v10 [#2892](https://github.com/ast-grep/ast-grep/issues/2892)

chore(deps): update rust crate terminal-light to v1.9.1 [#2905](https://github.com/ast-grep/ast-grep/issues/2905)

chore(deps): update dependency web-tree-sitter to v0.26.13 [#2903](https://github.com/ast-grep/ast-grep/issues/2903)

chore(deps): update rust crate tree-sitter to v0.26.13 [#2904](https://github.com/ast-grep/ast-grep/issues/2904)

chore(deps): update dependency dprint to v0.56.1 [#2901](https://github.com/ast-grep/ast-grep/issues/2901)

chore(deps): update dependency @napi-rs/cli to v3.8.6 [#2882](https://github.com/ast-grep/ast-grep/issues/2882)

fix(deps): update rust-wasm-bindgen monorepo [#2878](https://github.com/ast-grep/ast-grep/issues/2878)

chore(deps): update dependency dprint to v0.56.0 [#2896](https://github.com/ast-grep/ast-grep/issues/2896)

chore(deps): update dependency oxlint to v1.79.0 [#2897](https://github.com/ast-grep/ast-grep/issues/2897)

chore(deps): update dependency @ast-grep/napi to v0.45.1 [#2876](https://github.com/ast-grep/ast-grep/issues/2876)

chore(deps): update dependency web-tree-sitter to v0.26.12 [#2880](https://github.com/ast-grep/ast-grep/issues/2880)

fix: exit quietly on broken pipe instead of erroring [#2887](https://github.com/ast-grep/ast-grep/issues/2887)

feat(outline): extract embedded language symbols [#2883](https://github.com/ast-grep/ast-grep/issues/2883)

chore(deps): update dependency oxlint to v1.78.0 [#2888](https://github.com/ast-grep/ast-grep/issues/2888)

feat: add namedChildren support to wasm [#2893](https://github.com/ast-grep/ast-grep/issues/2893)

feat: add namedChildren to napi [#2893](https://github.com/ast-grep/ast-grep/issues/2893)

feat: add named_children to pyo3 4dc0d36

fix: bump down napi 61f1b98

chore: bump deps 912da32

Changelog

Sourced from @ast-grep/napi's changelog.

0.45.3

chore(deps): update dependency dprint to v0.57.0 [#2916](https://github.com/ast-grep/ast-grep/issues/2916)

feat: add min-severity cli [#2917](https://github.com/ast-grep/ast-grep/issues/2917)

fix(outline): anchor fallback signatures to names [#2913](https://github.com/ast-grep/ast-grep/issues/2913)

feat(outline): add Markdown heading support [#2912](https://github.com/ast-grep/ast-grep/issues/2912)

chore(deps): update dependency oxlint to v1.80.0 [#2908](https://github.com/ast-grep/ast-grep/issues/2908)

chore(deps): update dependency @ast-grep/napi to v0.45.2 [#2906](https://github.com/ast-grep/ast-grep/issues/2906)

feat: add min-severity cli (#2917) [#2720](https://github.com/ast-grep/ast-grep/issues/2720)

fix: ast-grep-ignore must be at first be the frist alphabet to take effect [#2909](https://github.com/ast-grep/ast-grep/issues/2909)

chore: update tree-sitter 0.27 bb74529

fix: fix clippy c6b32d7

0.45.2

23 August 2026

chore(deps): update astral-sh/setup-uv action to v10 [#2892](https://github.com/ast-grep/ast-grep/issues/2892)

chore(deps): update rust crate terminal-light to v1.9.1 [#2905](https://github.com/ast-grep/ast-grep/issues/2905)

chore(deps): update dependency web-tree-sitter to v0.26.13 [#2903](https://github.com/ast-grep/ast-grep/issues/2903)

chore(deps): update rust crate tree-sitter to v0.26.13 [#2904](https://github.com/ast-grep/ast-grep/issues/2904)

chore(deps): update dependency dprint to v0.56.1 [#2901](https://github.com/ast-grep/ast-grep/issues/2901)

chore(deps): update dependency @napi-rs/cli to v3.8.6 [#2882](https://github.com/ast-grep/ast-grep/issues/2882)

fix(deps): update rust-wasm-bindgen monorepo [#2878](https://github.com/ast-grep/ast-grep/issues/2878)

chore(deps): update dependency dprint to v0.56.0 [#2896](https://github.com/ast-grep/ast-grep/issues/2896)

chore(deps): update dependency oxlint to v1.79.0 [#2897](https://github.com/ast-grep/ast-grep/issues/2897)

chore(deps): update dependency @ast-grep/napi to v0.45.1 [#2876](https://github.com/ast-grep/ast-grep/issues/2876)

chore(deps): update dependency web-tree-sitter to v0.26.12 [#2880](https://github.com/ast-grep/ast-grep/issues/2880)

fix: exit quietly on broken pipe instead of erroring [#2887](https://github.com/ast-grep/ast-grep/issues/2887)

feat(outline): extract embedded language symbols [#2883](https://github.com/ast-grep/ast-grep/issues/2883)

chore(deps): update dependency oxlint to v1.78.0 [#2888](https://github.com/ast-grep/ast-grep/issues/2888)

feat: add namedChildren support to wasm [#2893](https://github.com/ast-grep/ast-grep/issues/2893)

feat: add namedChildren to napi [#2893](https://github.com/ast-grep/ast-grep/issues/2893)

feat: add named_children to pyo3 4dc0d36

fix: bump down napi 61f1b98

chore: bump deps 912da32

Commits

979c143 0.45.3
d76ca48 chore(deps): update dependency dprint to v0.57.0 (#2916)
8f94fd1 feat: add min-severity cli (#2917)
bb74529 chore: update tree-sitter 0.27
a95d846 fix: ast-grep-ignore must be at first be the frist alphabet to take effect
c6b32d7 fix: fix clippy
9b4fa64 fix(outline): anchor fallback signatures to names (#2913)
6cf4957 feat(outline): add Markdown heading support (#2912)
d045852 chore(deps): update dependency oxlint to v1.80.0 (#2908)
40dab3c chore(deps): update dependency @ast-grep/napi to v0.45.2 (#2906)
Additional commits viewable in compare view

Updates @opentelemetry/api-logs from 0.221.0 to 0.222.0

Release notes

Sourced from @opentelemetry/api-logs's releases.

experimental/v0.222.0

0.222.0

💥 Breaking Changes
fix(sdk-node)!: fail-fast on Propagator creation from config file #6930 @trentm

fix(sdk-node)!: fail-fast on MeterProvider creation from config file #6954 @trentm

fix(sdk-node)!: fail-fast on TracerProvider creation from config file #6962 @trentm
fix(sdk-node)!: fail-fast on Resource creation from config file #6989 @trentm
This also breaks some usage of startNodeSDK() for environment-based config, i.e. when not using a config file. For example with OTEL_NODE_RESOURCE_DETECTORS=all, it results in an error message and a no-op SDK. (This does not impact users of new NodeSDK() -- the currently recommended mechanism to start an SDK using this package.)
Could not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: "container"
🚀 Features

feat(sdk-logs): deprecate SdkLogRecord in favor of ReadWriteLogRecord #6939 @pichlermarc

🐛 Bug Fixes

fix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add redactedQueryParamsServer config option @dyladan

fix(sdk-node): support headers_list when creating OTLP exporters from declarative configuration #6953 @JacksonWeber

📚 Documentation

docs(sdk-logs): mark logger configuration as experimental #6996 @LarryHu0217

docs(configuration): document the ConfigModel suffix naming convention for exported types #6612 @vedantchalke36

🏠 Internal

refactor(sampler-jaeger-remote): remove axios dependency and use fetch to get the sampler configuration from Jaeger API #6963 @david-luna

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates @opentelemetry/instrumentation from 0.221.0 to 0.222.0

Release notes

Sourced from @opentelemetry/instrumentation's releases.

experimental/v0.222.0

0.222.0

💥 Breaking Changes
fix(sdk-node)!: fail-fast on Propagator creation from config file #6930 @trentm

fix(sdk-node)!: fail-fast on MeterProvider creation from config file #6954 @trentm

fix(sdk-node)!: fail-fast on TracerProvider creation from config file #6962 @trentm
fix(sdk-node)!: fail-fast on Resource creation from config file #6989 @trentm
This also breaks some usage of startNodeSDK() for environment-based config, i.e. when not using a config file. For example with OTEL_NODE_RESOURCE_DETECTORS=all, it results in an error message and a no-op SDK. (This does not impact users of new NodeSDK() -- the currently recommended mechanism to start an SDK using this package.)
Could not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: "container"
🚀 Features

feat(sdk-logs): deprecate SdkLogRecord in favor of ReadWriteLogRecord #6939 @pichlermarc

🐛 Bug Fixes

fix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add redactedQueryParamsServer config option @dyladan

fix(sdk-node): support headers_list when creating OTLP exporters from declarative configuration #6953 @JacksonWeber

📚 Documentation

docs(sdk-logs): mark logger configuration as experimental #6996 @LarryHu0217

docs(configuration): document the ConfigModel suffix naming convention for exported types #6612 @vedantchalke36

🏠 Internal

refactor(sampler-jaeger-remote): remove axios dependency and use fetch to get the sampler configuration from Jaeger API #6963 @david-luna

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-logs from 0.221.0 to 0.222.0

Release notes

Sourced from @opentelemetry/sdk-logs's releases.

experimental/v0.222.0

0.222.0

💥 Breaking Changes
fix(sdk-node)!: fail-fast on Propagator creation from config file #6930 @trentm

fix(sdk-node)!: fail-fast on MeterProvider creation from config file #6954 @trentm

fix(sdk-node)!: fail-fast on TracerProvider creation from config file #6962 @trentm
fix(sdk-node)!: fail-fast on Resource creation from config file #6989 @trentm
This also breaks some usage of startNodeSDK() for environment-based config, i.e. when not using a config file. For example with OTEL_NODE_RESOURCE_DETECTORS=all, it results in an error message and a no-op SDK. (This does not impact users of new NodeSDK() -- the currently recommended mechanism to start an SDK using this package.)
Could not create OpenTelemetry SDK from configuration, SDK will not be setup: unknown ExperimentalResourceDetector name in configuration: "container"
🚀 Features

feat(sdk-logs): deprecate SdkLogRecord in favor of ReadWriteLogRecord #6939 @pichlermarc

🐛 Bug Fixes

fix(instrumentation-http): redact sensitive query parameters on incoming (server) spans; add redactedQueryParamsServer config option @dyladan

fix(sdk-node): support headers_list when creating OTLP exporters from declarative configuration #6953 @JacksonWeber

📚 Documentation

docs(sdk-logs): mark logger configuration as experimental #6996 @LarryHu0217

docs(configuration): document the ConfigModel suffix naming convention for exported types #6612 @vedantchalke36

🏠 Internal

refactor(sampler-jaeger-remote): remove axios dependency and use fetch to get the sampler configuration from Jaeger API #6963 @david-luna

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-trace-base from 2.10.0 to 2.11.0

Release notes

Sourced from @opentelemetry/sdk-trace-base's releases.

v2.11.0

2.11.0

🚀 Features

feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @pichlermarc

On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.

feat(sdk-trace): allow configuring the force flush timeout per call #6929 @LarryHu0217

🐛 Bug Fixes

fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @mwear

🏠 Internal

perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @mwear

chore(ci): run documentation tests on a weekly schedule #6920 @LarryHu0217

feat(ci): support pre-releases and major version bumps in the release workflow #6768 @pichlermarc

chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Changelog

Sourced from @opentelemetry/sdk-trace-base's changelog.

2.11.0

🚀 Features

feat(context-async-hooks): implement attach() on AsyncLocalStorageContextManager #6845 @pichlermarc

On Node.js 25.9+, delegates to AsyncLocalStorage.withScope() returning a native RunScope. On older Node.js, falls back to enterWith() with a manual disposable wrapper.

feat(sdk-trace): allow configuring the force flush timeout per call #6929 @LarryHu0217

🐛 Bug Fixes

fix(sdk-trace-base): avoid a Webpack self-reference error in CommonJS output #6981 @sansynx

fix(sdk-metrics): ignore Infinity in exponential histograms #7015 @mwear

🏠 Internal

perf(sdk-metrics): reuse a single DataView for exponential histogram bit reads #6998 @mwear

chore(ci): run documentation tests on a weekly schedule #6920 @LarryHu0217

feat(ci): support pre-releases and major version bumps in the release workflow #6768 @pichlermarc

chore(resources): Ensure that multiple uses of serviceInstanceIdDetector.detect() return the same value for service.instance.id

Commits

0b72a81 chore: prepare next release (#7044)
a9c5338 ci: roll prerelease changelog into one final release changelog (#7045)
f41805e chore: prepare next release (#7042)
b85eb28 chore(instrumentation-http): fix lint errors (#7039)
3f92530 ci: support pre-releases and major version bumps in release workflow (#7035)
82a5831 docs(otlp-exporter-base): document HTTP exporter options (#6735)
e086dec Merge commit from fork
59dac70 chore(deps): update jamesives/github-pages-deploy-action action to v4.9.0 (#7...
d0ce753 chore: add @maryliag to maintainers (#7024)
03469a1 chore(deps): update open-telemetry/shared-workflows action to v0.10.0 (#7032)
Additional commits viewable in compare view

Updates jose from 6.2.9 to 6.2.12

Release notes

Sourced from jose's releases.

v6.2.12

Documentation

clarify and shorten public API guidance (be62530)

Refactor

simplify JWS and JWE operation cores (92e9640)

Performance

avoid copying AES-GCM output (6925d43)

deduplicate pending jwks key imports (bf5138b)

encode single-signature JWS input once (7bc9a33)

normalize General JWE shared headers once (78637bd)

normalize jwks selection metadata once (fd3ae3f)

use native encoding for larger ASCII strings (b23a6f3)

v6.2.11

Documentation

render subpath indexes as tables (94589ee)

shorten API index descriptions (681482f)

Refactor

model JWE key management modes (e01dda6)

types: reduce declaration repetition (55b970f)

v6.2.10

Fixes

jose: consume serialization members once (9bee285)

jose: reject empty protected and JWE AAD members (8da4145)

jose: validate serialized header values (b711d8f)

jwe: conceal invalid decrypted CEK lengths (41fafe0)

jwe: enforce AES-GCM tag boundaries (9a5b744)

jwe: validate explicit encryption parameters (7a02697)

jwk: accept empty octet-sequence keys (3f871e7)

jwk: normalize key resolution inputs (f54ee7b)

jwks: enforce verification key metadata (f9ba510)

jwks: order overlapping remote reloads (9a1a913)

jwks: reject invalid remote duration values (7bdb9e5)

jwk: validate ext and key_ops parameters (4d91c37)

jws: reject mixed payload encoding modes (dc69713)

jws: validate unencoded payload strings (541f282)

jwt: enforce explicit verification policies (b347182)

jwt: prevent replacing protected headers (ae07d09)

jwt: reject invalid duration inputs (282f9aa)

jwt: validate builder claim values (ea03f83)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.12 (2026-09-05)

Documentation

clarify and shorten public API guidance (be62530)

Refactor

simplify JWS and JWE operation cores (92e9640)

Performance

avoid copying AES-GCM output (6925d43)

deduplicate pending jwks key imports (bf5138b)

encode single-signature JWS input once (7bc9a33)

normalize General JWE shared headers once (78637bd)

normalize jwks selection metadata once (fd3ae3f)

use native encoding for larger ASCII strings (b23a6f3)

6.2.11 (2026-09-04)

Documentation

render subpath indexes as tables (94589ee)

shorten API index descriptions (681482f)

Refactor

model JWE key management modes (e01dda6)

types: reduce declaration repetition (55b970f)

6.2.10 (2026-08-21)

Fixes

jose: consume serialization members once (9bee285)

jose: reject empty protected and JWE AAD members (8da4145)

jose: validate serialized header values (b711d8f)

jwe: conceal invalid decrypted CEK lengths (41fafe0)

jwe: enforce AES-GCM tag boundaries (9a5b744)

jwe: validate explicit encryption parameters (7a02697)

jwk: accept empty octet-sequence keys (3f871e7)

jwk: normalize key resolution inputs (f54ee7b)

jwks: enforce verification key metadata (f9ba510)

jwks: order overlapping remote reloads (9a1a913)

jwks: reject invalid remote duration values (7bdb9e5)

jwk: validate ext and key_ops parameters (4d91c37)

jws: reject mixed payload encoding modes (dc69713)

jws: validate unencoded payload strings (541f282)

jwt: enforce explicit verification policies (b347182)

... (truncated)

Commits

505a55b chore(release): 6.2.12
7bc9a33 perf: encode single-signature JWS input once
78637bd perf: normalize General JWE shared headers once
bf5138b perf: deduplicate pending jwks key imports
b23a6f3 perf: use native encoding for larger ASCII strings
fd3ae3f perf: normalize jwks selection metadata once
6925d43 perf: avoid copying AES-GCM output
be62530 docs: clarify and shorten public API guidance
1b41312 build: preserve README when generation fails
0b51829 build: check tree-shaking for every public binding
Additional commits viewable in compare view

Updates zod from 4.4.3 to 4.5.4

Release notes

Sourced from zod's releases.

v4.5.4

Commits:

84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory (#6500)

e8e206fa33ac5fe7ce20a2beb12d57b1cb3df653 4.5.4

v4.5.3

Commits:

e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema

87d6464418582bb96fc665a01f852ca6da324ad0 fix(docs): drop the OG description when the title wraps past two lines

99fce394a026823e602b9c30d8d5d9f5f1932ce7 bench(v4): z.compile() against zod-compiler (#6499)

e3a695b6bf3f0d591ea682816e3cdaea04b0f967 docs(v4): record the email regex and container output-shape findings under Open

7e24a24288183ce02554f1ded7775d0650a7b7e6 docs(blog): drop the reading time and put a GitHub link in the navbar

eab51ff3592b2d11d863f4ee4d5452f31a3de1b6 fix(v4): emit record numeric keys as strings in toJSONSchema (#6497)

v4.5.2

Commits:

a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection (#6484)

d378c42aff6869f0929058a7923cd775880f5c4c ci: drop canary publishing from the release workflow (#6487)

212b941791e7faae078e17645eb612824fd8f79a fix(v4): let a prototype method getter answer a bare call so vi.spyOn works (#6488)

e7576f542a7bc7ef3cc5eeec237714fd0e6b6e98 docs(blog): let the page show through the navbar in dark mode (#6489)

fedb06fafe33a66ce0b5c236ad2557e0a5a170fe fix(docs): match the blog TOC hover bar to the 2px active indicator

6c932fcb2eea6eb671710ea058ca9fdc382ada89 chore: bump devcontainer image to Node 24 (#6470)

6635d9dd367a664109de83c021995821f48efa29 docs(blog): soften the "method memoization" attribution

019ae299cc75daa132bf1acf59086a520abf6b85 fix(docs): drop ISR on the docs route so the home page hydrates

652bb438aa4c626c1cd7948c6849c4691239fca7 chore(docs): drop the scroll log from the route-change scroller

571c8e8a3d73b4305f4abfdd6977773cc12f2bf5 fix(docs): render blog tabs with the stock fumadocs tab card

9a193aa24b4efa3b315b91d4c56c8bc385b8513f 4.5.2

v4.5.1

Commits:

2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm

8e03380510db36fa6fda979fc78a375fdea8021c 4.5.1

v4.5.0

Zod 4.5 is now available.
npm install zod@latest
At a glance:

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADohttps://github.com/colinhacks/zod/blob/HEADmhttps://github.com/colinhacks/zod/blob/HEADphttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADlhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — the flagship feature of Zod 4.5

https://github.com/colinhacks/zod/blob/HEAD[https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEAD.https://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADChttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD`https://github.com/colinhacks/zod/blob/HEAD]https://github.com/colinhacks/zod/blob/HEAD(https://github.com/colinhacks/zod/blob/HEAD#https://github.com/colinhacks/zod/blob/HEADzhttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADehttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEADihttps://github.com/colinhacks/zod/blob/HEADthttps://github.com/colinhacks/zod/blob/HEADchttps://github.com/colinhacks/zod/blob/HEADahttps://github.com/colinhacks/zod/blob/HEADrhttps://github.com/colinhacks/zod/blob/HEADdhttps://github.com/colinhacks/zod/blob/HEAD)https://github.com/colinhacks/zod/blob/HEAD — 12–19 digits plus Luhn checksum

… with 7 updates Bumps the production-minor-patch group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@ast-grep/napi](https://github.com/ast-grep/ast-grep) | `0.45.1` | `0.45.3` | | [@opentelemetry/api-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` | | [@opentelemetry/instrumentation](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` | | [@opentelemetry/sdk-logs](https://github.com/open-telemetry/opentelemetry-js) | `0.221.0` | `0.222.0` | | [@opentelemetry/sdk-trace-base](https://github.com/open-telemetry/opentelemetry-js) | `2.10.0` | `2.11.0` | | [jose](https://github.com/panva/jose) | `6.2.9` | `6.2.12` | | [zod](https://github.com/colinhacks/zod) | `4.4.3` | `4.5.4` | Updates `@ast-grep/napi` from 0.45.1 to 0.45.3 - [Release notes](https://github.com/ast-grep/ast-grep/releases) - [Changelog](https://github.com/ast-grep/ast-grep/blob/main/CHANGELOG.md) - [Commits](ast-grep/ast-grep@0.45.1...0.45.3) Updates `@opentelemetry/api-logs` from 0.221.0 to 0.222.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.221.0...experimental/v0.222.0) Updates `@opentelemetry/instrumentation` from 0.221.0 to 0.222.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.221.0...experimental/v0.222.0) Updates `@opentelemetry/sdk-logs` from 0.221.0 to 0.222.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.221.0...experimental/v0.222.0) Updates `@opentelemetry/sdk-trace-base` from 2.10.0 to 2.11.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@v2.10.0...v2.11.0) Updates `jose` from 6.2.9 to 6.2.12 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.2.9...v6.2.12) Updates `zod` from 4.4.3 to 4.5.4 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.4.3...v4.5.4) --- updated-dependencies: - dependency-name: "@ast-grep/napi" dependency-version: 0.45.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: "@opentelemetry/api-logs" dependency-version: 0.222.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@opentelemetry/instrumentation" dependency-version: 0.222.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@opentelemetry/sdk-logs" dependency-version: 0.222.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: "@opentelemetry/sdk-trace-base" dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch - dependency-name: jose dependency-version: 6.2.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-minor-patch - dependency-name: zod dependency-version: 4.5.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 9, 2026

Navigation Menu

Uh oh!

chore(deps): bump the production-minor-patch group across 1 directory with 7 updates - #102

chore(deps): bump the production-minor-patch group across 1 directory with 7 updates#102
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/production-minor-patch-76517d4f67

dependabot Bot commented on behalf of github Sep 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 9, 2026

0.45.3

0.45.2

0.45.3

0.45.2

experimental/v0.222.0

0.222.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.222.0

0.222.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

experimental/v0.222.0

0.222.0

💥 Breaking Changes

🚀 Features

🐛 Bug Fixes

📚 Documentation

🏠 Internal

v2.11.0

2.11.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

2.11.0

🚀 Features

🐛 Bug Fixes

🏠 Internal

v6.2.12

Documentation

Refactor

Performance

v6.2.11

Documentation

Refactor

v6.2.10

Fixes

6.2.12 (2026-09-05)

Documentation

Refactor

Performance

6.2.11 (2026-09-04)

Documentation

Refactor

6.2.10 (2026-08-21)

Fixes

v4.5.4

Commits:

v4.5.3

Commits:

v4.5.2

Commits:

v4.5.1

Commits:

v4.5.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants