FIX(deps): Reducing compatibility with Zod

[RobinTail]

4.4 will be supported in #3208
due to Zod's breaking changes revaled in #3355
see #3355 (comment) for details

Summary by CodeRabbit

• Documentation

  • Clarified Zod compatibility: support limited to versions below 4.4.0 due to upstream behavior changes; note that broader Zod 4.4+ support will be delivered in a future major release.

• Chores

  • Tightened dependency version constraints across packages and updated release notes and README to enforce the stated Zod compatibility boundaries.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 1c9149fe-4f22-4189-8d4c-d30d7b3e31fd

📥 Commits

Reviewing files that changed from the base of the PR and between c8748ec and a903e2a.

📒 Files selected for processing (1)

• CHANGELOG.md

✅ Files skipped from review due to trivial changes (1)

• CHANGELOG.md

---

📝 Walkthrough

Walkthrough

Tightens Zod version compatibility across the project from ^4.3.4 to ~4.3.4, preventing use of Zod 4.4.0+ due to breaking changes in the brand method. Updates changelogs and README notes, and records a @express-zod-api/zod-plugin bump with the same constraint and a note that 4.4+ support will arrive in a future major release.

Changes

Cohort / File(s)	Summary
Root metadata & workspace CHANGELOG.md, pnpm-workspace.yaml	Added v27.2.6 changelog entry documenting Zod compatibility restriction; tightened workspace zod entries from ^4.3.4 to ~4.3.4.
Zod-plugin docs zod-plugin/CHANGELOG.md, zod-plugin/README.md	Added v4.1.1 changelog entry and updated README Requirements to require ~4.3.4 (<4.4.0) and note future v5 support for Zod 4.4+.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

Possibly related PRs

• fix(test): zod version in compatibility test #3356: Aligns compatibility/testing with Zod 4.3.4 ranges similar to this PR.
• Upgrading dependencies #3161: Adjusts workspace zod version specs and dependency metadata in the same area.
• Detaching Zod plugin #2869: Related work that moved/extracted zod-plugin internals and brand handling, providing context for the compatibility constraint.

Poem

🐰 A tilde snug and neat,
Keeps brands from skipping beat,
No 4.4 to hop the fence,
We wait for v5's defense,
Hopping forward — careful, sweet. 🥕

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately reflects the main change: restricting Zod compatibility from ^4.3.4 to ~4.3.4 due to Zod 4.4.0 breaking changes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch prohibit-zod44

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Review rate limit: 6/8 reviews remaining, refill in 12 minutes and 28 seconds.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coveralls-official]

coverage: 100.0%. remained the same — prohibit-zod44 into master

[pullfrog]

Clean, minimal change — the ~4.3.4 tilde range correctly gates Zod to <4.4.0. One minor punctuation nit below per the CHANGELOG convention.

  ^{｜ Fix all ➔ ｜ Fix 👍s ➔ ｜ View workflow run ｜ Using Claude Opus ｜ 𝕏}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@CHANGELOG.md`:
- Line 10: Update the final nested bullet text "Supporting Zod 4.4+ requires a
breaking change and will be addressed in v28 (next major version);" by replacing
the trailing semicolon with a period so the line ends with "." to match the
changelog punctuation rules for the last nested item.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 78711110-2f26-4055-ad3f-5c4eb5c26fcb

📥 Commits

Reviewing files that changed from the base of the PR and between 75dd6fd and c8748ec.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (4)

• CHANGELOG.md
• pnpm-workspace.yaml
• zod-plugin/CHANGELOG.md
• zod-plugin/README.md