From ec3f394af0a5b3b710846753811be02e41603a3d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 18 Jul 2026 15:44:15 +0000
Subject: [PATCH 1/2] chore(deps): bump zod from 3.25.76 to 4.4.3

Bumps [zod](https://github.com/colinhacks/zod) from 3.25.76 to 4.4.3.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](https://github.com/colinhacks/zod/compare/v3.25.76...v4.4.3)

---
updated-dependencies:
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 8 ++++----
 package.json      | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 8123290..c650dc4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,7 @@
       "license": "MIT",
       "dependencies": {
         "@types/express": "^5.0.6",
-        "zod": "^3.22.4"
+        "zod": "^4.4.3"
       },
       "devDependencies": {
         "@types/jest": "^30.0.0",
@@ -5875,9 +5875,9 @@
       }
     },
     "node_modules/zod": {
-      "version": "3.25.76",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
-      "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz",
+      "integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"
diff --git a/package.json b/package.json
index 7d0bc37..b3c469b 100644
--- a/package.json
+++ b/package.json
@@ -56,7 +56,7 @@
   ],
   "dependencies": {
     "@types/express": "^5.0.6",
-    "zod": "^3.22.4"
+    "zod": "^4.4.3"
   },
   "peerDependencies": {
     "express": ">=5.0.0 <6"

From 861db21858a3a57364fe46e4b208c75f831ead2e Mon Sep 17 00:00:00 2001
From: Nicholas Carter <nick@nicholacbookneo.mynetworksettings.com>
Date: Tue, 21 Jul 2026 21:44:23 +0000
Subject: [PATCH 2/2] fix(validation): support zod 4 issue errors

---
 src/middleware/validator.ts | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/middleware/validator.ts b/src/middleware/validator.ts
index 4324e43..3ab6e33 100644
--- a/src/middleware/validator.ts
+++ b/src/middleware/validator.ts
@@ -45,7 +45,7 @@ export function validate<T>(input: ValidatorOptions<T> | ValidationSchema<T>) {
         const result = options.schema.body.safeParse(req.body);
         if (!result.success) {
           errors.push(
-            ...result.error.errors.map((e: z.ZodIssue) => `body.${e.path.join('.')}: ${e.message}`)
+            ...result.error.issues.map((e: z.ZodIssue) => `body.${e.path.join('.')}: ${e.message}`)
           );
         } else if (options.sanitize) {
           req.body = result.data;
@@ -61,7 +61,7 @@ export function validate<T>(input: ValidatorOptions<T> | ValidationSchema<T>) {
         const result = options.schema.query.safeParse(req.query);
         if (!result.success) {
           errors.push(
-            ...result.error.errors.map((e: z.ZodIssue) => `query.${e.path.join('.')}: ${e.message}`)
+            ...result.error.issues.map((e: z.ZodIssue) => `query.${e.path.join('.')}: ${e.message}`)
           );
         } else if (options.sanitize) {
           req.query = result.data as any;
@@ -77,7 +77,7 @@ export function validate<T>(input: ValidatorOptions<T> | ValidationSchema<T>) {
         const result = options.schema.params.safeParse(req.params);
         if (!result.success) {
           errors.push(
-            ...result.error.errors.map(
+            ...result.error.issues.map(
               (e: z.ZodIssue) => `params.${e.path.join('.')}: ${e.message}`
             )
           );
@@ -95,7 +95,7 @@ export function validate<T>(input: ValidatorOptions<T> | ValidationSchema<T>) {
         const result = options.schema.headers.safeParse(req.headers);
         if (!result.success) {
           errors.push(
-            ...result.error.errors.map(
+            ...result.error.issues.map(
               (e: z.ZodIssue) => `headers.${e.path.join('.')}: ${e.message}`
             )
           );
@@ -153,7 +153,7 @@ export class DeepObjectValidator {
 
     return {
       success: false,
-      errors: result.error.errors.map((e: { message: string }) => e.message),
+      errors: result.error.issues.map((e: { message: string }) => e.message),
     };
   }