fix(deps): update dependency zod (4.6.4 → 4.6.5)

[its-miso]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
zod (source)	4.6.4 → 4.6.5

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

colinhacks/zod (zod)

v4.6.5

Compare Source

Commits:

• d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
• f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
• de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#​6598)
• 56222cd feat(instanceof): key the .properties() shape off the instance type (#​6600)
• ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#​6595)"
• cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#​6595)""
• 0f3f5ee 4.6.5
• 59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

---

Configuration

📅 Schedule: (in timezone America/Edmonton)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[its-saffron]

AI Automated Review

Full PR review.

Analysis engine: MiniMax-M2.7@https://litellm.jory.dev/v1 (anthropic) — primary route

Review: fix(deps): update dependency zod (4.6.4 → 4.6.5)

Change Overview

This PR bumps the zod dependency from 4.6.4 to 4.6.5 in package-lock.json. The diff touches only the lockfile (3 additions, 3 deletions).

Required Checks

check for breaking API changes in updated dependencies ✓ Verified

The zod 4.6.5 release notes confirm this is a patch release with no breaking changes:

• The primary functional commit (56222cd) is a type-only change to z.instanceof().properties() that narrows the inferred type and adds autocomplete for shape keys. The release notes explicitly state: "Type-only: the emitted JS is byte-identical, so runtime, memory and bundle are all unchanged."
• Remaining commits are documentation updates (docs: fold the 4.6.x patch highlights) and a revert/re-revert cycle for z.currencyCode() that was already shipped in 4.6.4.

No runtime API changes; no breaking changes to the public surface.

run full test suite after upgrade ✓ Verified

All 12 CI checks passed for this commit (Build, Typecheck, Tests, Lint, Database integration, Database migrations, Coverage, Docker Build, Docker Build (MCP), smoke, npm audit, review). The test suite executed and passed with the updated dependency.

Standards Compliance

No repository standards are relevant to this lockfile-only patch upgrade. The change follows standard dependency maintenance workflow.

Recommendation

Approve. This is a low-risk patch bump with no breaking API changes and all CI checks green. The 4.6.5 release contains only type-level refinements and documentation updates; the emitted JavaScript is unchanged from 4.6.4. No action required.