[mannycarrera4]

Snyk has created this PR to fix 1 vulnerabilities in the yarn dependencies of this project.

Snyk changed the following file(s):

• modules/mcp/package.json

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

⚠️ Warning

Failed to update the yarn.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-JS-ZOD-20510278	506

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[mannycarrera4]

This is a minor version upgrade for Zod that introduces new features and bug fixes without any documented breaking changes.

Key Changes:

• New Features: The releases between 4.3.6 and 4.6.6 added several new features, including:
  • A .validate() method for fast boolean checks without the overhead of error creation.
  • A new z.iban() validator for international bank account numbers.
  • z.instanceof().properties() to validate properties on a class instance.
• Bug Fixes: This upgrade includes a fix for a memory leak related to recursive schemas that was introduced in version 4.5.
• Performance: The new versions include performance enhancements, particularly for URL validation and CommonJS imports.

No breaking API changes or mandatory migration steps are cited in the official release notes for this version range.

Source: Zod 4.6 Release Notes

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Workday/canvas-kit
• Branch: master
• File: .coderabbit.yaml
• Commit: e5b96bc
• Layers: Repository YAML
• Review profile: CHILL
• Plan: Advanced
• Run ID: 135c29a2-64a2-4b8a-8e95-2d53c69b2d3f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cypress]

Workday/canvas-kit    Run #11775

Run Properties:   Passed #11775  •  bbf2e42685 ℹ️: Merge 9faa04f880f6700c7da69ade2072215f276a9ee4 into e5b96bcbbd1f827623f9e75b1369...

Project	Workday/canvas-kit
Branch Review	snyk-fix-770771a343b8b7a0ad5b62b3f16020d3
Run status	Passed #11775
Run duration	03m 27s
Commit	bbf2e42685 ℹ️: Merge 9faa04f880f6700c7da69ade2072215f276a9ee4 into e5b96bcbbd1f827623f9e75b1369...
Committer	Manuel Carrera
View all properties for this run ↗︎

---

Test results
Failures	0
Flaky	0
Pending	17
Skipped	0
Passing	910
View all changes introduced in this branch ↗︎

UI Coverage  14.4%
Untested elements	2566
Tested elements	429

Accessibility  99.2%
Failed rules	4 critical   5 serious   3 moderate   2 minor
Failed elements	75

[mannycarrera4]

✅ This PR has been automatically closed

The security issues addressed by this pull request are no longer present in the latest project scan. All vulnerabilities this PR was created to fix have been resolved through other means (e.g., dependency updates, direct fixes, or changes in vulnerability data).

Resolved Issues

• SNYK-JS-ZOD-20510278

What should I do?

No action is required. If you believe this PR was closed in error, you can reopen it and contact Snyk support.

---

This action was performed automatically by Snyk.