From 45c83e64fff6825877091d1ff31769a473f37fbb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 22 Jul 2026 07:07:42 +0000
Subject: [PATCH 1/2] chore(deps): bump zod from 3.25.76 to 4.4.3

Bumps [zod](https://github.com/colinhacks/zod) from 3.25.76 to 4.4.3.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](https://github.com/colinhacks/zod/compare/v3.25.76...v4.4.3)

---
updated-dependencies:
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 packages/coordination/package.json |  2 +-
 packages/core/package.json         |  2 +-
 packages/taste/package.json        |  2 +-
 pnpm-lock.yaml                     | 18 +++++++++---------
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/packages/coordination/package.json b/packages/coordination/package.json
index ebe83ab..f88cda1 100644
--- a/packages/coordination/package.json
+++ b/packages/coordination/package.json
@@ -21,7 +21,7 @@
   },
   "dependencies": {
     "@cobusgreyling/outerloop-core": "workspace:*",
-    "zod": "^3.25.67"
+    "zod": "^4.4.3"
   },
   "devDependencies": {
     "@types/node": "^26.0.0",
diff --git a/packages/core/package.json b/packages/core/package.json
index b85a6cf..386bd3b 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -28,7 +28,7 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "zod": "^3.25.67"
+    "zod": "^4.4.3"
   },
   "devDependencies": {
     "@types/node": "^26.0.0",
diff --git a/packages/taste/package.json b/packages/taste/package.json
index 84cad62..8f951cf 100644
--- a/packages/taste/package.json
+++ b/packages/taste/package.json
@@ -21,7 +21,7 @@
   },
   "dependencies": {
     "@cobusgreyling/outerloop-core": "workspace:*",
-    "zod": "^3.25.67"
+    "zod": "^4.4.3"
   },
   "devDependencies": {
     "@types/node": "^26.0.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 58c1e08..317e37f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -179,8 +179,8 @@ importers:
         specifier: workspace:*
         version: link:../core
       zod:
-        specifier: ^3.25.67
-        version: 3.25.76
+        specifier: ^4.4.3
+        version: 4.4.3
     devDependencies:
       '@types/node':
         specifier: ^26.0.0
@@ -195,8 +195,8 @@ importers:
   packages/core:
     dependencies:
       zod:
-        specifier: ^3.25.67
-        version: 3.25.76
+        specifier: ^4.4.3
+        version: 4.4.3
     devDependencies:
       '@types/node':
         specifier: ^26.0.0
@@ -343,8 +343,8 @@ importers:
         specifier: workspace:*
         version: link:../core
       zod:
-        specifier: ^3.25.67
-        version: 3.25.76
+        specifier: ^4.4.3
+        version: 4.4.3
     devDependencies:
       '@types/node':
         specifier: ^26.0.0
@@ -1713,8 +1713,8 @@ packages:
   yoga-layout@3.2.1:
     resolution: {integrity: sha512-0LPOt3AxKqMdFBZA3HBAt/t/8vIKq7VaQYbuA8WxCgung+p9TVyKRYdpvCb80HcdTN2NkbIKbhNwKUfm3tQywQ==}
 
-  zod@3.25.76:
-    resolution: {integrity: sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==}
+  zod@4.4.3:
+    resolution: {integrity: sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==}
 
 snapshots:
 
@@ -2929,4 +2929,4 @@ snapshots:
 
   yoga-layout@3.2.1: {}
 
-  zod@3.25.76: {}
+  zod@4.4.3: {}

From 3de12ac3255722884b297502f287059bdc4f66c6 Mon Sep 17 00:00:00 2001
From: Cobus Greyling <cobusgreyling@Cobuss-MacBook-Pro-2.local>
Date: Wed, 22 Jul 2026 09:09:11 +0200
Subject: [PATCH 2/2] fix(core): use Zod 4 two-arg z.record for key/value
 schemas

Zod 4 requires z.record(key, value); single-arg form no longer typechecks.
---
 packages/core/src/schemas.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/core/src/schemas.ts b/packages/core/src/schemas.ts
index 985ab10..564358d 100644
--- a/packages/core/src/schemas.ts
+++ b/packages/core/src/schemas.ts
@@ -59,7 +59,7 @@ export const EvidencePackageSchema = z.object({
   }),
   verification: z.object({
     tests: z.array(TestResultSchema),
-    staticAnalysis: z.record(z.unknown()).optional(),
+    staticAnalysis: z.record(z.string(), z.unknown()).optional(),
     manualChecks: z.array(z.string()).optional(),
   }),
   observability: z.object({
@@ -77,7 +77,7 @@ export const EvidencePackageSchema = z.object({
     technical: z.string(),
     decisionRelevant: z.string(),
   }),
-  rawArtifacts: z.record(z.unknown()).default({}),
+  rawArtifacts: z.record(z.string(), z.unknown()).default({}),
   harnessBoundary: HarnessSpecRefSchema,
 });