chore(deps): update Zod to 4.5.4 and recut PDPP artifacts - #87
Merged
Conversation
Assisted-by: AI Signed-off-by: Tim Nunamaker <tnunamak@gmail.com>
Schema Health Check — All ClearAll 73 scopes have consistent local schema files. |
Assisted-by: AI Signed-off-by: Tim Nunamaker <tnunamak@gmail.com>
Assisted-by: AI Signed-off-by: Tim Nunamaker <tnunamak@gmail.com>
This was referenced Sep 9, 2026
Assisted-by: AI Signed-off-by: Tim Nunamaker <tnunamak@gmail.com>
Assisted-by: AI Signed-off-by: Tim Nunamaker <tnunamak@gmail.com>
tnunamak
marked this pull request as ready for review
September 9, 2026 13:16
Assisted-by: AI Signed-off-by: Tim Nunamaker <tnunamak@gmail.com>
Assisted-by: AI Signed-off-by: Tim Nunamaker <tnunamak@gmail.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The downloadable GitHub, ChatGPT, and WHOOP data collectors still bundle Zod 4.5.2, their schema-validation library, after the build dependency moves to 4.5.4. The check that compares bundled files with installed build dependencies rejects this mismatch.
Rebuild all three with Zod 4.5.4 as GitHub 0.5.1, ChatGPT 0.1.1, and WHOOP 0.1.1. Each build selects an exact source commit containing the updated manifest, the file that describes the collector’s version and capabilities. Version-only source commits preserve the collector and runtime implementations used by the preceding packages. The generated package listing and the registry that selects packages to publish now use the new versions and URLs.
Tests prove that packaged manifests match their selected source commits byte for byte, rebuilding ignores dirty source files, dependency file hashes match Zod 4.5.4, and installation detects modified provenance, the record of package inputs and outputs. A mocked GitHub collection completes and emits records without exposing its credential. Live account collection has not been rerun.
Merge the source changes in PDP-Connect/pdpp#351, #349, and #350 into their respective maintenance branches first using merge commits, preserving the selected source revisions after automatic deletion of the PR branches; the maintenance branches retain the published source snapshots. Then merge this PR. The release workflow signs and publishes the new packages automatically after this PR reaches main.
Assisted-by: AI