Upgrade @objectstack packages to v2.0.3 (requires zod v4 migration) #365

Copilot · 2026-02-10T04:03:33Z

Upgrades @objectstack dependencies from 2.0.1/2.0.2 to 2.0.3. This version requires zod ^4.3.6, necessitating migration from zod v3.

Changes

Dependency updates:

@objectstack/{cli,core,plugin-hono-server,studio,spec,objectql,runtime}: 2.0.1/2.0.2 → 2.0.3
zod: ^3.23.8/^3.24.1 → ^4.3.6 (across 19 packages)

Zod v4 API migrations:

z.record(valueType) → z.record(z.string(), valueType)
error.errors → error.issues with proper z.ZodIssue typing
Replaced z.function() schema validation with z.any() in plugin-multitenancy (TypeScript types still enforce function signature)

Files affected:

21 package.json files
Protocol validation files: graphql, json-rpc, odata-v4
plugin-multitenancy config schema

Example migration:

// Before (zod v3)
const schema = z.record(z.any());
error.errors.map(err => ({ path: err.path.join('.') }));

// After (zod v4)
const schema = z.record(z.string(), z.any());
error.issues.map((err: z.ZodIssue) => ({ path: err.path.join('.') }));

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

fastdl.mongodb.org
- Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node node /home/REDACTED/work/objectql/objectql/node_modules/.bin/../vitest/vitest.mjs run sh k/ob�� tsc cut k/objectql/objectql/node_modules/.bin/node om/objectstack-ash grep tnet/tools/sh sh -nod�� tsc /usr/bin/git /.bin/node --untracked-filegit --no-renames nfig/composer/ve--exclude-standard /home/REDACTED/wor--others (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

@objectstack 升级到最新版

The user has attached the following file paths as relevant context:

.github/copilot-instructions.md

Created from VS Code.

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

vercel · 2026-02-10T04:03:38Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
objectql	Ready	Preview, Comment	Feb 10, 2026 5:24am

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

github-actions · 2026-02-10T04:42:36Z

⚠️ No Changeset Found

This PR does not include a changeset file.
If this PR includes user-facing changes, please add a changeset by running:

pnpm changeset

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

…t-errors

github-actions · 2026-02-10T05:24:02Z

⚠️ No Changeset Found

This PR does not include a changeset file.
If this PR includes user-facing changes, please add a changeset by running:

pnpm changeset

Copilot

Pull request overview

This PR upgrades the monorepo’s @objectstack/* dependencies to v2.0.3 and migrates the codebase from Zod v3 to Zod v4, updating protocol validation schemas and error-shaping to match the new Zod APIs.

Changes:

Bumped @objectstack/{cli,core,plugin-hono-server,studio,spec,objectql,runtime} to 2.0.3 and updated zod to ^4.3.6 across packages (plus lockfile refresh).
Migrated Zod usage for v4: z.record() now uses explicit key/value schemas; ZodError.errors → ZodError.issues.
Updated hook registration fallback in plugin-security to include kernel.use().

Reviewed changes

Copilot reviewed 26 out of 27 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
pnpm-lock.yaml	Locks updated versions for `@objectstack/*`, `zod@4.3.6`, and related transitive deps.
package.json	Root dependency bumps to `@objectstack/*@2.0.3`.
packages/protocols/graphql/src/validation.ts	Zod v4 migration: `error.issues` and `z.record(z.string(), ...)`.
packages/protocols/json-rpc/src/validation.ts	Zod v4 migration: `error.issues` and `z.record(z.string(), z.any())` for object params.
packages/protocols/odata-v4/src/validation.ts	Zod v4 migration: header `record` signature + `error.issues`.
packages/foundation/plugin-security/src/plugin.ts	Adds `kernel.use()` as a hook registration fallback.
packages/foundation/plugin-multitenancy/src/config.schema.ts	Replaced `tenantResolver` function schema with `z.any()` (reduces runtime validation).
packages/**/package.json	Propagates `@objectstack/*@2.0.3` and `zod@^4.3.6` across packages (drivers/plugins/protocols/foundation).

Files not reviewed (1)

pnpm-lock.yaml: Language not supported

Copilot · 2026-02-10T05:43:37Z

packages/foundation/plugin-multitenancy/src/config.schema.ts

-    .args(z.any())
-    .returns(z.union([z.string(), z.promise(z.string())]))
-    .optional(),
+  tenantResolver: z.any().optional(),


tenantResolver is documented as a function but the schema now accepts any value (z.any()), so invalid configs (e.g., string/number) will pass validation and then crash at runtime when TenantResolver calls it. Please keep runtime validation by constraining this field to a function (and ideally validating the return type is a string or Promise).

Suggested change

tenantResolver: z.any().optional(),

tenantResolver: z

.function()

.args(z.any())

.returns(z.union([z.string(), z.promise(z.string())]))

.optional(),

Initial plan

f041d71

Copilot AI assigned Copilot and hotlong Feb 10, 2026

Copilot started work on behalf of hotlong February 10, 2026 04:03 View session

Upgrade @objectstack packages from v2.0.1/v2.0.2 to v2.0.3

ecf6a86

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

vercel bot deployed to Preview February 10, 2026 04:12 View deployment

Upgrade zod to v4.3.6 for compatibility with @objectstack/spec 2.0.3

5ba8437

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

vercel bot deployed to Preview February 10, 2026 04:14 View deployment

Improve type safety: use z.ZodIssue instead of any

ae10f38

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Update ObjectStack to the latest version~~ Upgrade @objectstack packages to v2.0.3 (requires zod v4 migration) Feb 10, 2026

Copilot AI requested a review from hotlong February 10, 2026 04:23

Copilot finished work on behalf of hotlong February 10, 2026 04:23

vercel bot deployed to Preview February 10, 2026 04:28 View deployment

github-actions bot added 🏗️ foundation 🔌 drivers 📦 dependencies size/M labels Feb 10, 2026

Copilot AI and others added 3 commits February 10, 2026 04:48

Initial plan

6188aae

Fix hook registration in plugin-security: add kernel.use fallback

9b5f589

Co-authored-by: hotlong <50353452+hotlong@users.noreply.github.com>

Merge pull request #366 from objectstack-ai/copilot/fix-build-and-tes…

ef4d639

…t-errors

vercel bot deployed to Preview February 10, 2026 05:24 View deployment

hotlong marked this pull request as ready for review February 10, 2026 05:40

Copilot AI review requested due to automatic review settings February 10, 2026 05:40

hotlong merged commit 1579889 into main Feb 10, 2026
14 checks passed

hotlong deleted the copilot/upgrade-to-latest-version branch February 10, 2026 05:40

Copilot started reviewing on behalf of hotlong February 10, 2026 05:40 View session

Copilot AI reviewed Feb 10, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Upgrade @objectstack packages to v2.0.3 (requires zod v4 migration) #365

Upgrade @objectstack packages to v2.0.3 (requires zod v4 migration) #365

Copilot AI commented Feb 10, 2026 •

edited

Loading

Uh oh!

vercel bot commented Feb 10, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Feb 10, 2026

Uh oh!

github-actions bot commented Feb 10, 2026

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Upgrade @objectstack packages to v2.0.3 (requires zod v4 migration) #365

Upgrade @objectstack packages to v2.0.3 (requires zod v4 migration) #365

Conversation

Copilot AI commented Feb 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

vercel bot commented Feb 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 10, 2026

⚠️ No Changeset Found

Uh oh!

github-actions bot commented Feb 10, 2026

⚠️ No Changeset Found

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Copilot AI commented Feb 10, 2026 •

edited

Loading

vercel bot commented Feb 10, 2026 •

edited

Loading