Skip to content

chore(deps): bump zod from 3.22.3 to 4.3.6 - #4

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/zod-4.3.6
Open

chore(deps): bump zod from 3.22.3 to 4.3.6#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/zod-4.3.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 31, 2026

Copy link
Copy Markdown

Bumps zod from 3.22.3 to 4.3.6.

Release notes

Sourced from zod's releases.

v4.3.6

Commits:

  • 9977fb0868432461de265a773319e80a90ba3e37 Add brand.dev to sponsors
  • f4b7bae3468f6188b8f004e007d722148fc91d77 Update pullfrog.yml (#5634)
  • 251d7163a0ac7740fee741428d913e3c55702ace Clean up workflow_call
  • edd4132466da0f5065a8e051b599d01fdd1081d8 fix: add missing User-agent to robots.txt and allow all (#5646)
  • 85db85e9091d0706910d60c7eb2e9c181edd87bd fix: typo in codec.test.ts file (#5628)
  • cbf77bb12bdfda2e054818e79001f5cb3798ce76 Avoid non null assertion (#5638)
  • dfbbf1c1ae0c224b8131d80ddf0a264262144086 Avoid re-exported star modules (#5656)
  • 762e911e5773f949452fd6dd4e360f2362110e8e Generalize numeric key handling
  • ca3c8629c0c2715571f70b44c2433cad3db7fe4e v4.3.6

v4.3.5

Commits:

  • 21afffdb42ccab554036312e33fed0ea3cb8f982 [Docs] Update migration guide docs for deprecation of message (#5595)
  • e36743e513aadb307b29949a80d6eb0dcc8fc278 Improve mini treeshaking
  • 0cdc0b8597999fd9ca99767b912c1e82c1ff2d6c 4.3.5

v4.3.4

Commits:

  • 1a8bea3b474eada6f219c163d0d3ad09fadabe72 Add integration tests
  • e01cd02b2f23d7e9078d3813830b146f8a2258b4 Support patternProperties for looserecord (#5592)
  • 089e5fbb0f58ce96d2c4fb34cd91724c78df4af5 Improve looseRecord docs
  • decef9c418d9a598c3f1bada06891ba5d922c5cd Fix lint
  • 9443aab00d44d5d5f4a7eada65fc0fc851781042 Drop iso time in fromJSONSchema
  • 66bda7491a1b9eab83bdeec0c12f4efc7290bd48 Remove .refine() from ZodMiniType
  • b4ab94ca608cd5b581bfc12b20dd8d95b35b3009 4.3.4

v4.3.3

Commits:

  • f3b2151959d215d405f54dff3c7ab3bf1fd887ca v4.3.3

v4.3.2

Commits:

  • bf96635d243118de6e4f260077aa137453790bf6 Loosen strictObjectinside intersection (#5587)
  • f71dc0182ab0f0f9a6be6295b07faca269e10179 Remove Juno (#5590)
  • 0f41e5a12a43e6913c9dcb501b2b5136ea86500d 4.3.2

v4.3.1

Commits:

  • 0fe88407a4149c907929b757dc6618d8afe998fc allow non-overwriting extends with refinements. 4.3.1

v4.3.0

This is Zod's biggest release since 4.0. It addresses several of Zod's longest-standing feature requests.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by colinhacks, a new releaser for zod since your current version.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 31, 2026
@dependabot
dependabot Bot requested a review from itsPremkumar as a code owner March 31, 2026 10:08
Bumps [zod](https://github.com/colinhacks/zod) from 3.22.3 to 4.3.6.
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.22.3...v4.3.6)

---
updated-dependencies:
- dependency-name: zod
  dependency-version: 4.3.6
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/zod-4.3.6 branch from dcdcb85 to 1b0c952 Compare March 31, 2026 11:31
@github-actions

github-actions Bot commented Jul 6, 2026

Copy link
Copy Markdown

This pull request has been inactive for 30 days. If you are still working on it, please leave a comment. Otherwise, it will be closed in 14 days.

@github-actions github-actions Bot added the stale label Jul 6, 2026
itsPremkumar added a commit that referenced this pull request Jul 17, 2026
…n, AI music-mood, per-aspect X16, warns

1) ASYNC FFMPEG (hardening): add runFfmpeg() async runner with hard SIGKILL
   timeout; convert render-hot-path sync execFileSync sites (thumbnail,
   contact-sheet frame/grid, Remotion video downscale) to async. makeContactSheet
   now async (caller + test updated). Removes the event-loop-block hang risk on
   RAM-starved hosts. Unused ffmpeg/execFileSync decls removed.

2) B-LIST AGENTBRAIN (quality): add hookScene(B3), paceScenes(B6),
   titleVariants(B11), tailorForPlatform(B12) — all null->heuristic fallback,
   zero extra cost. Wired for real (not dead code):
   - B3/B6 into applyProEdits (now async, takes optional brain)
   - B11 into writeOutputArtifacts (A/B title variants in _metadata.txt)
   - B12 via cfg.platform -> autopilot aspect + caption overrides

3) AI MUSIC-MOOD (audio #5): aiVerifyAsset audio path + acquire.ts now scores
   music mood-fit at acquire time (proxy transcript = plan mood + track source),
   dropping mismatched tracks. Previously dead (required speech transcript music
   lacks).

4) PER-ASPECT X16 (#6): writeOutputArtifacts scores each multi-aspect export
   when verifyOnRender on, catching subject-loss in crops.

5) OBSERVABILITY (#4): placeholder-copy fallbacks now console.warn instead of
   silent swallow (the genuinely dangerous silent path). 46 other optional
   best-effort catches left silent to avoid log spam.

Env-var RUN_REAL/RUN_RENDER_E2E was already unified (verified) — no change.

Verified: tsc 0, eslint 0 err, 235/0/1; offline E2E GATE PASS X7-X15.
itsPremkumar added a commit that referenced this pull request Jul 18, 2026
…s, localization, publish, offline word-timing, brain budget

- #6 Global disk-backed asset cache (hash->path, TTL) wired into visual-fetcher + free-music
- #1 Template engine: VIDEO_TYPE_PROFILES extended with pro-edit fields + listTemplates()
- #2 Caption/subtitle localization: localize.ts multi-language SRT sidecars (brain translate, offline fallback)
- #8 Publish adapter: publish.ts manifest for 5 platforms + optional YouTube upload helper
- #3 Offline word-timing: syllableWordTimings heuristic (word-by-word captions, no native binary)
- #4 Brain budget/circuit-breaker: maxCalls/maxFails guards in AgentBrain
- docs/VOICE_CLONING_GUIDE.md: license-verified open-source TTS/voice-clone audit
- New tests: asset-cache, brain, config, localize, publish, captions, plugins, acquire.fallback, visual-fetcher.free-image

Verified: tsc=0, full suite 260 pass / 0 fail / 1 skip (flaky-net stable x3).
itsPremkumar added a commit that referenced this pull request Jul 20, 2026
- #4 Render robustness (A10): orchestrate.ts now substitutes a branded
  placeholder PNG for any missing/broken image|video scene asset instead of
  letting the Remotion <Img> 404 crash the ENTIRE render. Music assets stay
  silent (acceptable). Uses the async ffmpeg runner (never execFileSync,
  which blocks the event loop on a RAM-starved box). Root cause of the crash
  was staticFile resolving to a URL that 404s -> 'source cannot be decoded'.

- CI: add a Coverage step (npm run test:coverage) so line/branch/func
  numbers are surfaced on every run. Lint step already fails on errors.

- Fix broken test:coverage script: it was missing --import tsx, the remotion
  test glob, and --experimental-test-module-mocks, so it failed with
  ERR_MODULE_NOT_FOUND. Now mirrors test:unit with coverage enabled.
  Coverage baseline: 81.67% lines / 75.87% branches / 80.72% funcs.

- Note: Remotion comp stays free of fs imports (webpack bundle can't resolve
  node 'fs'); missing-asset handling lives at the Node pipeline layer.

verified: typecheck 0, lint errors 0, test:unit 479/471/0/8, coverage runs.
itsPremkumar added a commit that referenced this pull request Jul 20, 2026
- Extract prepareRemotionAssets() from renderAgenticWithRemotion so the
  asset-prep (incl. the A10 placeholder fallback) is unit-testable.
- Add prepareRemotionAssets.test.ts: 3 cases using the REAL helper + real
  ffmpeg-static runner:
    * missing image asset -> branded placeholder PNG created + kept (no crash)
    * present image asset -> copied verbatim (no placeholder)
    * missing music asset -> dropped silently (no crash)
- This proves the earlier #4 fix actually works end-to-end, not just typechecked.

verified: typecheck 0, lint errors 0, test:unit 482/474/0/8 (3 new A10 tests).
@github-actions github-actions Bot removed the stale label Jul 20, 2026
itsPremkumar added a commit that referenced this pull request Jul 23, 2026
… surface FX errors

- kenBurnsFilter hardcoded s=1280x720, silently forcing landscape 720p and
  squashing portrait/vertical (reel) output when kenBurns was enabled. Now
  accepts width/height/fps params (default 1280x720 for backward compat).
- compose.ts hoists outW/outH above the FX map and passes kenBurnsWidth/Height
  so zoompan renders at the same dims as the slideshow; W/H reuse them.
- applySceneFx run() now captures + logs ffmpeg stderr instead of silent catch
  (project lesson #4: stdio:ignore hides root cause).
- add visual-fx.test.ts (3 tests): landscape default, portrait dims, fps-driven
  frame count.
itsPremkumar added a commit that referenced this pull request Jul 25, 2026
…ll stock jobs

The plan stage unconditionally scanned input/visuals/ and bound whatever
media it found round-robin to every scene, overriding stock acquisition.
A single brand_cover.jpg → every generated video became that one flat
amber swatch (vision-confirmed: identical MD5 across all 3 scene
candidates AND brand_cover.jpg).

Made auto-detect OPT-IN via autoLocalAssets (default false), threaded
through AgenticConfig, PipelineRequest, AgenticCliJob, buildPipelineRequest.
Explicit localAssets and per-scene [Visual:] tags are unaffected. Added
regression tests for the binding contract.

Confirmed fixed: re-run now selects real Pexels video candidates + real
ccmixter music instead of the local swatch + ambient fallback.
itsPremkumar added a commit that referenced this pull request Jul 28, 2026
…silence.ts)

BUG #4 class (same root cause as edit.ts changeSpeed, already fixed): these
sibling modules referenced [0:a] unconditionally, so an audio-less input
threw 'Stream specifier :a matches no streams' and the whole op failed.

- agentic-editor.ts speed: probe via getMediaInfo(); skip [0:a] branch + audio
  map/codec when the input has no audio track.
- silence.ts removeSilence: probe for audio; drop the [a] filter branch + map +
  codec when absent (video-only silence removal still works).
- probe.ts: add hasAudio to MediaInfo + populate it in parseProbe() (and both
  fallback objects) so callers can guard without a second ffprobe call.
- sibling-audio-guard.test.ts: 3 ffmpeg-driven tests; one empirically proves the
  OLD [0:a] graph crashes on audio-less input while the NEW guarded graph
  succeeds.

Verified: 3/3 new tests pass; touched files type-clean.
itsPremkumar added a commit that referenced this pull request Jul 28, 2026
…video

BUG #4 class (same root cause as A3/edit.ts sibling fixes): the non-
segmented render pass2 muxed music via `[0:a][a]amix...` (and the flat
fallback). When no scene had a voiceover, voScenes was empty so pass1
produced an AUDIO-LESS silent video, and pass2's unconditional [0:a] amix
threw 'Stream specifier :a matches no streams' — the render died even
though music was requested.

- Probe the silent video for an audio stream; when absent, mux music (± sfx)
  ALONE (no [0:a] reference). Applies to both the primary duck filter and the
  graceful flat-volume fallback.
- sibling-audio-guard.test.ts: added a 4th empirical test proving the old
  [0:a] amix graph crashes on audio-less silent while the new graph yields a
  valid video+music output.

Verified: 4/4 sibling tests pass; render.ts type-clean.
@github-actions

Copy link
Copy Markdown

This pull request has been inactive for 30 days. If you are still working on it, please leave a comment. Otherwise, it will be closed in 14 days.

@github-actions github-actions Bot added the stale label Aug 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code stale

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants