chore: upgrade to latest zod v3 (#12938)

* chore: upgrade to latest zod v3

* chore: set explicit versions

* chore: remove v3 scope

---------

Co-authored-by: Oli Juhl <59018053+olivermrbl@users.noreply.github.com>

packages/admin/admin-sdk/package.json

@@ -25,7 +25,7 @@
   },
   "dependencies": {
     "@medusajs/admin-shared": "2.8.7",
-    "zod": "3.22.4"
+    "zod": "3.25.76"
   },
   "packageManager": "yarn@3.2.1"
 }

packages/admin/dashboard/package.json

@@ -73,7 +73,7 @@
     "react-i18next": "13.5.0",
     "react-jwt": "^1.2.0",
     "react-router-dom": "6.20.1",
-    "zod": "3.22.4"
+    "zod": "3.25.76"
   },
   "devDependencies": {
     "@medusajs/admin-shared": "2.8.7",

packages/core/framework/package.json

@@ -97,8 +97,8 @@
     "morgan": "^1.9.1",
     "path-to-regexp": "^0.1.10",
     "tsconfig-paths": "^4.2.0",
-    "zod": "3.22.4",
-    "zod-validation-error": "^3.4.1"
+    "zod": "3.25.76",
+    "zod-validation-error": "3.5.1"
   },
   "peerDependencies": {
     "@aws-sdk/client-dynamodb": "^3.218.0",

packages/core/framework/src/http/__fixtures__/routers-middleware/middlewares.ts

@@ -1,13 +1,13 @@
 import { raw } from "express"
-import { MedusaRequest, MedusaResponse, MedusaNextFunction } from "../../types"
+import { z } from "zod"
+import { MedusaNextFunction, MedusaRequest, MedusaResponse } from "../../types"
+import { defineMiddlewares } from "../../utils/define-middlewares"
 import {
   customersCreateMiddlewareMock,
-  customersGlobalMiddlewareMock,
   customersCreateMiddlewareValidatorMock,
+  customersGlobalMiddlewareMock,
   storeGlobalMiddlewareMock,
 } from "../mocks"
-import z from "zod"
-import { defineMiddlewares } from "../../utils/define-middlewares"
 
 const customersGlobalMiddleware = (
   req: MedusaRequest,

packages/core/framework/src/http/__tests__/validate-body.spec.ts

@@ -1,7 +1,7 @@
-import zod from "zod"
 import { MedusaError } from "@medusajs/utils"
-import { validateAndTransformBody } from "../utils/validate-body"
+import zod, { ZodNullable, ZodObject, ZodOptional } from "zod"
 import { MedusaRequest, MedusaResponse } from "../types"
+import { validateAndTransformBody } from "../utils/validate-body"
 
 const createLinkBody = () => {
   return zod.object({
@@ -33,7 +33,7 @@ describe("validateAndTransformBody", () => {
       .nullish()
 
     const validatorFactory = (
-      schema?: Zod.ZodOptional<Zod.ZodNullable<Zod.ZodObject<any, any>>>
+      schema?: ZodOptional<ZodNullable<ZodObject<any, any>>>
     ) => {
       return schema
         ? createLinkBody().extend({
@@ -69,7 +69,7 @@ describe("validateAndTransformBody", () => {
       .nullish()
 
     const validatorFactory = (
-      schema?: Zod.ZodOptional<Zod.ZodNullable<Zod.ZodObject<any, any>>>
+      schema?: ZodOptional<ZodNullable<ZodObject<any, any>>>
     ) => {
       return schema
         ? createLinkBody().extend({
@@ -102,7 +102,7 @@ describe("validateAndTransformBody", () => {
       .nullish()
 
     const validatorFactory = (
-      schema?: Zod.ZodOptional<Zod.ZodNullable<Zod.ZodObject<any, any>>>
+      schema?: ZodOptional<ZodNullable<ZodObject<any, any>>>
     ) => {
       return schema
         ? createLinkBody().extend({

packages/core/utils/package.json

@@ -57,7 +57,7 @@
     "pg-connection-string": "^2.7.0",
     "pluralize": "^8.0.0",
     "ulid": "^2.3.0",
-    "zod": "3.22.4"
+    "zod": "3.25.76"
   },
   "peerDependencies": {
     "@mikro-orm/core": "6.4.3",

packages/core/workflows-sdk/package.json

@@ -39,7 +39,7 @@
     "pg": "^8.13.0",
     "rimraf": "^5.0.1",
     "typescript": "^5.6.2",
-    "zod": "3.22.4"
+    "zod": "3.25.76"
   },
   "dependencies": {
     "@medusajs/modules-sdk": "2.8.7",
@@ -56,7 +56,7 @@
     "awilix": "^8.0.1",
     "express": "^4.21.0",
     "pg": "^8.13.0",
-    "zod": "3.22.4"
+    "zod": "3.25.76"
   },
   "scripts": {
     "build": "rimraf dist && tsc --build",

packages/medusa/package.json

@@ -126,7 +126,7 @@
     "request-ip": "^3.3.0",
     "slugify": "^1.6.6",
     "uuid": "^9.0.0",
-    "zod": "3.22.4"
+    "zod": "3.25.76"
   },
   "peerDependencies": {
     "@medusajs/framework": "2.8.7",

packages/medusa/src/api/admin/products/validators.ts

@@ -68,7 +68,7 @@ export const AdminGetProductsParams = createFindParams({
       .merge(applyAndAndOrOperators(AdminGetProductsParamsDirectFields))
       .merge(GetProductsParams)
   )
-  .transform(transformProductParams)
+  .transform(transformProductParams as any)
 
 export const AdminGetProductOptionsParamsFields = z.object({
   q: z.string().optional(),

packages/medusa/src/api/store/products/validators.ts

@@ -81,4 +81,4 @@ export const StoreGetProductsParams = createFindParams({
       .merge(applyAndAndOrOperators(StoreGetProductParamsDirectFields))
       .strict()
   )
-  .transform(recursivelyNormalizeSchema(transformProductParams))
+  .transform(recursivelyNormalizeSchema(transformProductParams) as any)

packages/medusa/src/api/utils/common-validators/common.ts

@@ -31,7 +31,9 @@ export const BigNumberInput = z.union([
  * @param {ZodObject<any>} schema
  * @return {ZodObject<any>}
  */
-export const applyAndAndOrOperators = (schema: z.ZodObject<any>) => {
+export const applyAndAndOrOperators = <T extends z.ZodObject<any>>(
+  schema: T
+) => {
   return schema.merge(
     z.object({
       $and: z.lazy(() => schema.array()).optional(),