Update zod to v4

[Lightning00Blade]

Zod 4 had a major release that enabled better tree shaking. better performance etc.

We should update the CDDL conv (https://github.com/google/cddlconv) to support the new major version, that way we benefit from all the new fixes and features.

We should also consider using zod mini

Currently Dependabot is set to ignore v4.

[shubhamavhad96]

Hey! I’m happy to pick this up.

Plan:

First, update google/cddlconv so it generates Zod v4-compatible code (I’ll add/update a couple of tests to prove it).

Then bump zod to v4 here, remove the Dependabot ignore, regenerate the types, and fix any small breakages. I’ll keep the PR split into small, focused commits.

Question: do you want @zod/mini in this pass, or should I do that as a follow-up once v4 is in?

If this sounds good, I’ll start with the cddlconv PR.

[Lightning00Blade]

Hello, thanks for the interest. Ideally we would want to use zod/mini so we can reduce the size of the bundled version as much as possible.
If the changes to v4 are relatively small I would suggest fixing those up before changing to zod/mini, that way the it would be easier to review, but if both require a big rewrite I would just go for 1 big change rather then 2 big changes.

[shubhamavhad96]

Hello, thanks for the interest. Ideally we would want to use zod/mini so we can reduce the size of the bundled version as much as possible. If the changes to v4 are relatively small I would suggest fixing those up before changing to zod/mini, that way the it would be easier to review, but if both require a big rewrite I would just go for 1 big change rather then 2 big changes.

Sounds good thanks for the guidance.

I’ll do a quick spike in google/cddlconv to gauge the effort for:

Zod v4 (classic) output, and

@zod/mini.

If the v4-only change is small, I’ll split it into two PRs:

update cddlconv to emit v4-compatible code (with tests),

bump this repo to v4, remove the ignore, regenerate, and fix any small deltas.

If both changes are sizable, I’ll do one pass that upgrades to v4 and switches to @zod/mini, with commits split (generator -> regenerated files -> small fixes) to keep the review manageable.

Unless you prefer a different approach, I’ll proceed with that plan and report back once I’ve done the spike.