chore(deps): update dependency zod to ^3.22.0 || ^4.4.3

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
zod (source)	^3.22.0 → ^3.22.0 || ^4.4.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Note

Widen zod dependency range to accept v3.22.x or v4.4.3+

Updates package.json to accept zod ^3.22.0 || ^4.4.3, allowing either the v3 or v4 major to be resolved during installation.

^{Macroscope summarized 2738bb7.}

[greptile-apps]

PR author is in the excluded authors list.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 25f6b82

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[cursor]

Risk: low. Cursor Bugbot was not present on this PR; evaluated using the diff and completed gate checks. Approved: peer dependency range update only (zod ^3.22.0 || ^4.4.3) with no source changes. No reviewers assigned.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}

[devin-ai-integration]

Devin Review found 2 potential issues.

[devin-ai-integration]

🟡 Changelog not updated for a user-facing dependency change

The supported version range for a required companion library is widened ("zod": "^3.22.0 || ^4.4.3" at package.json:286) without adding a matching entry under the Unreleased section of CHANGELOG.md, so consumers get no record of the change.
Impact: Users reading the changelog won't learn that a newer major version of the required companion library is now supported.

Repository rule: changelog must be updated for user-facing changes

AGENTS.md states: "Conventional Commit titles; update CHANGELOG.md (Unreleased) for user-facing changes." A peer dependency range widening is user-facing (it changes install-time compatibility), but CHANGELOG.md still has an empty ## [Unreleased] section (CHANGELOG.md:7).

Prompt for agents

AGENTS.md requires updating CHANGELOG.md under the Unreleased heading for user-facing changes. This PR widens the zod peer dependency range in package.json but CHANGELOG.md's Unreleased section is empty. Add a Changed entry noting that zod 4.x (>=4.4.3) is now an accepted peer dependency alongside zod 3.x.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[devin-ai-integration]

🔍 zod peer dependency is declared but never imported in src

Grepping the repo shows no zod import anywhere in src/ — it only appears in package.json, the lockfile, README, and .wave/repo.json. Widening the range is therefore risk-free at runtime, but it also raises the question of whether zod should be a (non-optional) peer dependency at all, since consumers are forced to install it even though the SDK never uses it.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[macroscopeapp]

Approvability

Verdict: Needs human review

Unable to check for correctness in 335d04c. This peer dependency version widening is low-risk, but the changed files are owned by wave-av/core-team and should be reviewed by a designated owner. An unresolved comment also notes a missing CHANGELOG entry per repo conventions.

No code changes detected at 2738bb7. Prior analysis still applies.

^{You can customize Macroscope's approvability policy. Learn more.}