chore(): upgrade zod to latest

.changeset/fifty-boats-battle.md

@@ -0,0 +1,11 @@
+---
+"@medusajs/medusa": patch
+"@medusajs/core-flows": patch
+"@medusajs/framework": patch
+"@medusajs/utils": patch
+"@medusajs/workflows-sdk": patch
+"@medusajs/admin-sdk": patch
+"@medusajs/dashboard": patch
+---
+
+chore(): upgrade zod to latest

integration-tests/modules/__tests__/cart/store/cart.workflows.spec.ts

@@ -1146,10 +1146,9 @@ medusaIntegrationTestRunner({
                   issues: [
                     {
                       code: "invalid_type",
-                      expected: "object",
-                      message: "Expected object, received array",
+                      expected: "record",
+                      message: "Invalid input: expected record, received array",
                       path: [],
-                      received: "array",
                     },
                   ],
                 }),

package.json

@@ -132,7 +132,8 @@
     "vite-plugin-turbosnap": "^1.0.2",
     "vitest": "^3.0.5",
     "yalc": "^1.0.0-pre.53",
-    "zod": "3.25.76"
+    "zod": "4.2.0",
+    "zod-validation-error": "5.0.0"
   },
   "lint-staged": {
     "*.{js,jsx,ts,tsx}": "yarn run lint",

packages/admin/admin-sdk/package.json

@@ -20,7 +20,7 @@
   },
   "dependencies": {
     "@medusajs/admin-shared": "2.13.6",
-    "zod": "3.25.76"
+    "zod": "4.2.0"
   },
   "packageManager": "yarn@3.2.1"
 }

packages/admin/dashboard/package.json

@@ -77,7 +77,7 @@
     "react-i18next": "13.5.0",
     "react-jwt": "^1.2.0",
     "react-router-dom": "6.30.3",
-    "zod": "3.25.76"
+    "zod": "4.2.0"
   },
   "devDependencies": {
     "@medusajs/admin-shared": "2.13.6",

packages/admin/dashboard/src/dashboard-app/forms/form-extension-zone/utils.ts

@@ -1,14 +1,4 @@
-import {
-  ZodBoolean,
-  ZodEffects,
-  ZodNull,
-  ZodNullable,
-  ZodNumber,
-  ZodOptional,
-  ZodString,
-  ZodType,
-  ZodUndefined,
-} from "zod"
+import { z } from "zod"
 import { FormFieldType } from "./types"
 
 export function getFieldLabel(name: string, label?: string) {
@@ -22,45 +12,42 @@ export function getFieldLabel(name: string, label?: string) {
     .join(" ")
 }
 
-export function getFieldType(type: ZodType): FormFieldType {
-  if (type instanceof ZodString) {
+export function getFieldType(type: z.ZodType): FormFieldType {
+  if (type instanceof z.ZodString) {
     return "text"
   }
 
-  if (type instanceof ZodNumber) {
+  if (type instanceof z.ZodNumber) {
     return "number"
   }
 
-  if (type instanceof ZodBoolean) {
+  if (type instanceof z.ZodBoolean) {
     return "boolean"
   }
 
-  if (type instanceof ZodNullable) {
-    const innerType = type.unwrap()
-
+  if (type instanceof z.ZodNullable) {
+    const innerType = type.unwrap() as z.ZodType
     return getFieldType(innerType)
   }
 
-  if (type instanceof ZodOptional) {
-    const innerType = type.unwrap()
-
+  if (type instanceof z.ZodOptional) {
+    const innerType = type.unwrap() as z.ZodType
     return getFieldType(innerType)
   }
 
-  if (type instanceof ZodEffects) {
-    const innerType = type.innerType()
-
+  if (type instanceof z.ZodPipe) {
+    const innerType = type.def.in as z.ZodType
     return getFieldType(innerType)
   }
 
   return "unsupported"
 }
 
-export function getIsFieldOptional(type: ZodType) {
+export function getIsFieldOptional(type: z.ZodType) {
   return (
-    type instanceof ZodOptional ||
-    type instanceof ZodNull ||
-    type instanceof ZodUndefined ||
-    type instanceof ZodNullable
+    type instanceof z.ZodOptional ||
+    type instanceof z.ZodNull ||
+    type instanceof z.ZodUndefined ||
+    type instanceof z.ZodNullable
   )
 }

packages/admin/dashboard/src/dashboard-app/forms/hooks.tsx

@@ -1,15 +1,15 @@
 import { zodResolver } from "@hookform/resolvers/zod"
 import { FieldValues, useForm, UseFormProps } from "react-hook-form"
-import { z, ZodEffects, ZodObject } from "zod"
+import { z, ZodObject } from "zod"
 
 import { ConfigField } from "../types"
 
 interface UseExtendableFormProps<
-  TSchema extends ZodObject<any> | ZodEffects<ZodObject<any>>,
+  TSchema extends ZodObject<any>,
   TContext = any,
   TData = any
 > extends Omit<UseFormProps<z.infer<TSchema>, TContext>, "resolver"> {
-  schema: TSchema
+  schema: TSchema | z.ZodPipe<TSchema, z.ZodType>
   configs: ConfigField[]
   data?: TData
 }
@@ -21,26 +21,45 @@ function createAdditionalDataSchema(configs: ConfigField[]) {
   }, {} as Record<string, z.ZodTypeAny>)
 }
 
-function createExtendedSchema<
-  TSchema extends ZodObject<any> | ZodEffects<ZodObject<any>>
->(baseSchema: TSchema, additionalDataSchema: Record<string, z.ZodTypeAny>) {
+/**
+ * Extracts the shape from a schema, handling both ZodObject and ZodPipe.
+ * ZodPipe is created by .transform() and wraps the original schema.
+ */
+function getSchemaShape(
+  schema: ZodObject<any> | z.ZodPipe<ZodObject<any>, z.ZodType>
+): z.ZodRawShape {
+  if (schema instanceof z.ZodPipe) {
+    const innerSchema = schema.def.in
+    // Guard: ensure inner schema is a ZodObject before accessing shape
+    if (innerSchema instanceof ZodObject) {
+      return innerSchema.shape
+    }
+    throw new Error(
+      "Expected ZodPipe to contain a ZodObject. Schema extensions require the base schema to be a ZodObject."
+    )
+  }
+  return schema.shape
+}
+
+function createExtendedSchema(
+  baseSchema: ZodObject<any> | z.ZodPipe<ZodObject<any>, z.ZodType>,
+  additionalDataSchema: Record<string, z.ZodTypeAny>
+) {
+  const baseShape = getSchemaShape(baseSchema)
+
   const extendedObjectSchema = z.object({
-    ...(baseSchema instanceof ZodEffects
-      ? baseSchema.innerType().shape
-      : baseSchema.shape),
+    ...baseShape,
     additional_data: z.object(additionalDataSchema).optional(),
   })
 
-  return baseSchema instanceof ZodEffects
-    ? baseSchema
-        .superRefine((data, ctx) => {
-          const result = extendedObjectSchema.safeParse(data)
-          if (!result.success) {
-            result.error.issues.forEach((issue) => ctx.addIssue(issue))
-          }
-        })
-        .and(extendedObjectSchema)
-    : extendedObjectSchema
+  return baseSchema
+    .superRefine((data, ctx) => {
+      const result = extendedObjectSchema.safeParse(data)
+      if (!result.success) {
+        result.error.issues.forEach((issue) => ctx.addIssue({ ...issue }))
+      }
+    })
+    .and(extendedObjectSchema)
 }
 
 function createExtendedDefaultValues<TData>(
@@ -60,7 +79,7 @@ function createExtendedDefaultValues<TData>(
 }
 
 export const useExtendableForm = <
-  TSchema extends ZodObject<any> | ZodEffects<ZodObject<any>>,
+  TSchema extends ZodObject<any>,
   TContext = any,
   TTransformedValues extends FieldValues | undefined = undefined
 >({

packages/admin/dashboard/src/dashboard-app/types.ts

@@ -8,7 +8,7 @@ import {
 } from "@medusajs/admin-shared"
 import { ComponentType } from "react"
 import { LoaderFunction } from "react-router-dom"
-import { ZodFirstPartySchemaTypes } from "zod"
+import { z } from "zod"
 import { INavItem } from "../components/layout/nav-item"
 
 export type RouteExtension = {
@@ -39,7 +39,7 @@ export type DisplayExtension = {
 }
 
 export type FormFieldExtension = {
-  validation: ZodFirstPartySchemaTypes
+  validation: z.ZodTypeAny
   Component?: ComponentType<any>
   label?: string
   description?: string
@@ -54,7 +54,7 @@ export type FormExtension = {
 
 export type ConfigFieldExtension = {
   defaultValue: ((data: any) => any) | any
-  validation: ZodFirstPartySchemaTypes
+  validation: z.ZodTypeAny
 }
 
 export type ConfigExtension = {

packages/admin/dashboard/src/routes/inventory/inventory-stock/schema.ts

@@ -7,14 +7,14 @@ const LocationQuantitySchema = z.object({
   disabledToggle: z.boolean(),
 })
 
-const InventoryLocationsSchema = z.record(LocationQuantitySchema)
+const InventoryLocationsSchema = z.record(z.string(), LocationQuantitySchema)
 
 const InventoryItemSchema = z.object({
   locations: InventoryLocationsSchema,
 })
 
 export const InventoryStockSchema = z.object({
-  inventory_items: z.record(InventoryItemSchema),
+  inventory_items: z.record(z.string(), InventoryItemSchema),
 })
 
 export type InventoryLocationsSchema = z.infer<typeof InventoryLocationsSchema>

packages/admin/dashboard/src/routes/price-lists/common/schemas.ts

@@ -30,15 +30,16 @@ export type PriceListCreateRegionPriceSchema = z.infer<
 >
 
 const PriceListCreateProductVariantSchema = z.object({
-  currency_prices: z.record(PriceListCreateCurrencyPriceSchema.optional()),
-  region_prices: z.record(PriceListCreateRegionPriceSchema.optional()),
+  currency_prices: z.record(z.string(), PriceListCreateCurrencyPriceSchema.optional()),
+  region_prices: z.record(z.string(), PriceListCreateRegionPriceSchema.optional()),
 })
 
 export type PriceListCreateProductVariantSchema = z.infer<
   typeof PriceListCreateProductVariantSchema
 >
 
 const PriceListCreateProductVariantsSchema = z.record(
+  z.string(),
   PriceListCreateProductVariantSchema
 )
 
@@ -47,6 +48,7 @@ export type PriceListCreateProductVariantsSchema = z.infer<
 >
 
 export const PriceListCreateProductsSchema = z.record(
+  z.string(),
   z.object({
     variants: PriceListCreateProductVariantsSchema,
   })
@@ -75,9 +77,10 @@ export type PriceListUpdateRegionPrice = z.infer<
 >
 
 export const PriceListUpdateProductVariantsSchema = z.record(
+  z.string(),
   z.object({
-    currency_prices: z.record(PriceListUpdateCurrencyPriceSchema.optional()),
-    region_prices: z.record(PriceListUpdateRegionPriceSchema.optional()),
+    currency_prices: z.record(z.string(), PriceListUpdateCurrencyPriceSchema.optional()),
+    region_prices: z.record(z.string(), PriceListUpdateRegionPriceSchema.optional()),
   })
 )
 
@@ -86,6 +89,7 @@ export type PriceListUpdateProductVariantsSchema = z.infer<
 >
 
 export const PriceListUpdateProductsSchema = z.record(
+  z.string(),
   z.object({
     variants: PriceListUpdateProductVariantsSchema,
   })

packages/admin/dashboard/src/routes/product-variants/product-variant-edit/components/product-edit-variant-form/product-edit-variant-form.tsx

@@ -38,7 +38,7 @@ const ProductEditVariantSchema = z.object({
   mid_code: z.string().optional(),
   hs_code: z.string().optional(),
   origin_country: z.string().optional(),
-  options: z.record(z.string()),
+  options: z.record(z.string(), z.string()),
 })
 
 // TODO: Either pass option ID or make the backend handle options constraints differently to handle the lack of IDs

packages/admin/dashboard/src/routes/products/product-create-variant/components/create-product-variant-form/constants.ts

@@ -8,7 +8,7 @@ export const CreateProductVariantSchema = z.object({
   manage_inventory: z.boolean().optional(),
   allow_backorder: z.boolean().optional(),
   inventory_kit: z.boolean().optional(),
-  options: z.record(z.string()),
+  options: z.record(z.string(), z.string()),
   prices: zod
     .record(zod.string(), zod.string().or(zod.number()).optional())
     .optional(),

packages/admin/dashboard/src/routes/products/product-stock/schema.ts

@@ -7,18 +7,18 @@ const LocationQuantitySchema = z.object({
   disabledToggle: z.boolean(),
 })
 
-const ProductStockLocationsSchema = z.record(LocationQuantitySchema)
+const ProductStockLocationsSchema = z.record(z.string(), LocationQuantitySchema)
 
 const ProductStockInventoryItemSchema = z.object({
   locations: ProductStockLocationsSchema,
 })
 
 const ProductStockVariantSchema = z.object({
-  inventory_items: z.record(ProductStockInventoryItemSchema),
+  inventory_items: z.record(z.string(), ProductStockInventoryItemSchema),
 })
 
 export const ProductStockSchema = z.object({
-  variants: z.record(ProductStockVariantSchema),
+  variants: z.record(z.string(), ProductStockVariantSchema),
 })
 
 export type ProductStockLocationSchema = z.infer<

packages/core/framework/package.json

@@ -101,7 +101,7 @@
     "morgan": "^1.9.1",
     "path-to-regexp": "^8.2.0",
     "tsconfig-paths": "^4.2.0",
-    "zod-validation-error": "3.5.1"
+    "zod-validation-error": "5.0.0"
   },
   "peerDependencies": {
     "@medusajs/cli": "2.13.6",

packages/core/framework/src/http/utils/validate-body.ts

@@ -6,10 +6,10 @@ import { zodValidator } from "../../zod"
 export function validateAndTransformBody(
   zodSchema:
     | z.ZodObject<any, any>
-    | z.ZodEffects<any, any>
+    | z.ZodType<any, any, any>
     | ((
         customSchema?: z.ZodOptional<z.ZodNullable<z.ZodObject<any, any>>>
-      ) => z.ZodObject<any, any> | z.ZodEffects<any, any>)
+      ) => z.ZodObject<any, any> | z.ZodType<any, any, any>)
 ): (
   req: MedusaRequest,
   res: MedusaResponse,
@@ -21,7 +21,7 @@ export function validateAndTransformBody(
     next: NextFunction
   ) {
     try {
-      let schema: z.ZodObject<any, any> | z.ZodEffects<any, any>
+      let schema: z.ZodObject<any, any> | z.ZodType<any, any, any>
       if (typeof zodSchema === "function") {
         schema = zodSchema(req.additionalDataValidator)
       } else {

packages/core/framework/src/http/utils/validate-query.ts

@@ -54,7 +54,7 @@ const getFilterableFields = <T extends RequestQueryFields>(obj: T): T => {
 }
 
 export function validateAndTransformQuery<TEntity extends BaseEntity>(
-  zodSchema: z.ZodObject<any, any> | z.ZodEffects<any, any>,
+  zodSchema: z.ZodObject<any, any> | z.ZodType<any, any, any>,
   queryConfig: QueryConfig<TEntity>
 ): (
   req: MedusaRequest,