From daae5006afe10e9a1b01a15cfa4910d5f4891c10 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 4 Jun 2026 01:16:03 +0000
Subject: [PATCH] chore(deps): bump zod from 3.25.76 to 4.4.3

Bumps [zod](https://github.com/colinhacks/zod) from 3.25.76 to 4.4.3.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](https://github.com/colinhacks/zod/compare/v3.25.76...v4.4.3)

---
updated-dependencies:
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json         | 8 ++++----
 packages/mcp/package.json | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 2078705..b77130c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -5356,9 +5356,9 @@
       }
     },
     "node_modules/zod": {
-      "version": "3.25.76",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
-      "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz",
+      "integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"
@@ -5422,7 +5422,7 @@
       "dependencies": {
         "@covenant-md/core": "^1.0.0",
         "@modelcontextprotocol/sdk": "^1.29.0",
-        "zod": "^3.23.0"
+        "zod": "^4.4.3"
       },
       "bin": {
         "covenant-mcp": "src/index.js"
diff --git a/packages/mcp/package.json b/packages/mcp/package.json
index 03aca17..daaf7a3 100644
--- a/packages/mcp/package.json
+++ b/packages/mcp/package.json
@@ -37,7 +37,7 @@
   "dependencies": {
     "@covenant-md/core": "^1.0.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "zod": "^3.23.0"
+    "zod": "^4.4.3"
   },
   "publishConfig": {
     "access": "public"