From 237ab4cafcc954f768951f32c0d2675568594ceb Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 16 Dec 2024 13:05:13 -0800
Subject: [PATCH] chore(deps): Bump zod from 3.23.0 to 3.24.1 in /experimenter
 (#11953)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [zod](https://github.com/colinhacks/zod) from 3.23.0 to 3.24.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/colinhacks/zod/releases">zod's
releases</a>.</em></p>
<blockquote>
<h2>v3.24.1</h2>
<h2>Commits:</h2>
<ul>
<li>0c6cbbdd1315683dd3d589fbdc5765c26431dcc9 Undeprecate
.nonempty()</li>
<li>4e219d6ad9d5e56e20afd7423092f506400a29e4 Bump min TS version to
5.0</li>
<li>65adeeacef0274abbda5438470a3d2bfd376256d v3.24.1</li>
</ul>
<h2>v3.24.0</h2>
<h2>Implement <code>@standard-schema/spec</code></h2>
<p>This is the first version of Zod to implement the <a
href="https://github.com/standard-schema/standard-schema">Standard
Schema</a> spec. This is a new community effort among several validation
library authors to implement a common interface, with the goal of
simplifying the process of integrating schema validators with the rest
of the ecosystem. Read more about the project and goals <a
href="https://github.com/standard-schema/standard-schema">here</a>.</p>
<h2><code>z.string().jwt()</code></h2>
<p>Thanks to <a
href="https://github.com/Mokshit06"><code>@​Mokshit06</code></a> and <a
href="https://github.com/Cognition-Labs"><code>@​Cognition-Labs</code></a>
for this contribution!</p>
<p>To verify that a string is a valid 3-part JWT.</p>
<pre><code>z.string().jwt();
</code></pre>
<blockquote>
<p>⚠️ This does not <em>verify</em> your JWT cryptographically! It
merely ensures its in the proper format. Use a library like <a
href="https://github.com/auth0/node-jsonwebtoken"><code>jsonwebtoken</code></a>
to verify the JWT signature, parse the token, and read the claims.</p>
</blockquote>
<p>To constrain the JWT to a specific algorithm:</p>
<pre lang="ts"><code>z.string().jwt({ alg: &quot;RS256&quot; });
</code></pre>
<h2><code>z.string().base64url()</code></h2>
<p>Thank you to <a
href="https://github.com/marvinruder"><code>@​marvinruder</code></a>!</p>
<p>To complement the JWT validation, Zod 3.24 implements a standalone
<code>.base64url()</code> string validation API. (The three elements of
JWTs are base64url-encoded JSON strings.)</p>
<pre lang="ts"><code>z.string().base64url()
</code></pre>
<p>This functionality is available along the standard
<code>z.string().base64()</code> validator added in Zod 3.23.</p>
<h2><code>z.string().cidr()</code></h2>
<p>Thanks to <a
href="https://github.com/wataryooou"><code>@​wataryooou</code></a> for
their work on this!</p>
<p>A validator for <a
href="https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing">CIDR
notation</a> for specifying IP address ranges, e.g.
<code>192.24.12.0/22</code>.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/colinhacks/zod/commit/65adeeacef0274abbda5438470a3d2bfd376256d"><code>65adeea</code></a>
v3.24.1</li>
<li><a
href="https://github.com/colinhacks/zod/commit/4e219d6ad9d5e56e20afd7423092f506400a29e4"><code>4e219d6</code></a>
Bump min TS version to 5.0</li>
<li><a
href="https://github.com/colinhacks/zod/commit/0c6cbbdd1315683dd3d589fbdc5765c26431dcc9"><code>0c6cbbd</code></a>
Undeprecate .nonempty()</li>
<li><a
href="https://github.com/colinhacks/zod/commit/b333f96886d01d1f7959aba8a7e4876508b79d79"><code>b333f96</code></a>
Fix deno tests</li>
<li><a
href="https://github.com/colinhacks/zod/commit/964d622f02408b5e2dc41048557faeb9c3370cee"><code>964d622</code></a>
Fix lint</li>
<li><a
href="https://github.com/colinhacks/zod/commit/b68c05fea12d8060000aa06abc1e95b08f061378"><code>b68c05f</code></a>
feat: Add JWT string validator (<a
href="https://redirect.github.com/colinhacks/zod/issues/3893">#3893</a>)</li>
<li><a
href="https://github.com/colinhacks/zod/commit/c1dd537baa9e4fad781ea365643399707fea91be"><code>c1dd537</code></a>
Adds <code>frrm</code> package to documentation (<a
href="https://redirect.github.com/colinhacks/zod/issues/3818">#3818</a>)</li>
<li><a
href="https://github.com/colinhacks/zod/commit/69a1798ce2df65555bda0a8978a6baadd7d5588e"><code>69a1798</code></a>
Implement Standard Schema spec (<a
href="https://redirect.github.com/colinhacks/zod/issues/3850">#3850</a>)</li>
<li><a
href="https://github.com/colinhacks/zod/commit/963386df253360fde67ca10c6bf47fec1fcc476a"><code>963386d</code></a>
Fix lint</li>
<li><a
href="https://github.com/colinhacks/zod/commit/37551462f4a534f86e6190aafea1747b010eca7a"><code>3755146</code></a>
Remove createParams cascade from .array() (<a
href="https://redirect.github.com/colinhacks/zod/issues/3530">#3530</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/colinhacks/zod/compare/v3.23.0...v3.24.1">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~colinhacks">colinhacks</a>, a new releaser
for zod since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zod&package-manager=npm_and_yarn&previous-version=3.23.0&new-version=3.24.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 experimenter/experimenter/nimbus-ui/package.json | 2 +-
 experimenter/yarn.lock                           | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/experimenter/experimenter/nimbus-ui/package.json b/experimenter/experimenter/nimbus-ui/package.json
index 7be24f205f..fd20782794 100644
--- a/experimenter/experimenter/nimbus-ui/package.json
+++ b/experimenter/experimenter/nimbus-ui/package.json
@@ -68,7 +68,7 @@
     "vega": "5.22.0",
     "vega-embed": "^6.21.0",
     "vega-lite": "^4.17.0",
-    "zod": "^3.23.0"
+    "zod": "^3.24.1"
   },
   "devDependencies": {
     "@mozilla/nimbus-schemas": "^2024.12.2",
diff --git a/experimenter/yarn.lock b/experimenter/yarn.lock
index 5804bf3b70..b4b5ce82c8 100644
--- a/experimenter/yarn.lock
+++ b/experimenter/yarn.lock
@@ -20548,10 +20548,10 @@ zen-observable@0.8.15, zen-observable@^0.8.0, zen-observable@^0.8.14:
   resolved "https://registry.yarnpkg.com/zen-observable/-/zen-observable-0.8.15.tgz#96415c512d8e3ffd920afd3889604e30b9eaac15"
   integrity sha512-PQ2PC7R9rslx84ndNBZB/Dkv8V8fZEpk83RLgXtYd0fwUgEjseMn1Dgajh2x6S8QbZAFa9p2qVCEuYZNgve0dQ==
 
-zod@^3.23.0:
-  version "3.23.0"
-  resolved "https://registry.yarnpkg.com/zod/-/zod-3.23.0.tgz#a25dab5052702834233e0041e9dd8b6a8480e744"
-  integrity sha512-OFLT+LTocvabn6q76BTwVB0hExEBS0IduTr3cqZyMqEDbOnYmcU+y0tUAYbND4uwclpBGi4I4UUBGzylWpjLGA==
+zod@^3.24.1:
+  version "3.24.1"
+  resolved "https://registry.yarnpkg.com/zod/-/zod-3.24.1.tgz#27445c912738c8ad1e9de1bea0359fa44d9d35ee"
+  integrity sha512-muH7gBL9sI1nciMZV67X5fTKKBLtwpZ5VBp1vsOQzj1MhrBZ4wlVCm3gedKZWLp0Oyel8sIGfeiz54Su+OVT+A==
 
 zwitch@^1.0.0:
   version "1.0.5"