feat: upgrade to Zod 4, Express 5, and add @zhttp/extract-oas CLI by evertdespiegeleer · Pull Request #69 · evertdespiegeleer/zhttp

evertdespiegeleer · 2026-04-15T19:28:08Z

Summary

New: `@zhttp/extract-oas` CLI package

New CLI tool to extract OpenAPI specs from zhttp Server instances
Usage: npx @zhttp/extract-oas --serverfile="./server.ts" --serverexport="httpserver" --output="./openapi-spec.json" --type="json"
Supports JSON and YAML output formats
Handles TypeScript input files transparently via tsx
Added to CI release and prerelease publish steps

Zod 4 migration

Upgrade zod from ^3.22.4 to ^4.0.0
Upgrade @asteasolutions/zod-to-openapi from ^6.3.1 to ^8.0.0
Upgrade typescript from ^4.4.4 to ^5.5.0 (required by Zod 4)
Upgrade @typescript-eslint/* from v6 to v7
Replace deprecated ZodSchema type alias with ZodType
Fix ExtractRouteParams optional modifier for Zod 4 shape type compatibility

Express 5 upgrade

Upgrade express from ^4.18.2 to ^5.2.1
Upgrade @types/express from ^4.17.21 to ^5.0.0
Move @types/express to dependencies so consumers get proper Request/Response types
Remove body-parser dependency (bundled in Express 5), use express.json() instead

CI

Consolidate npm publishing into release.yml for npm trusted publishers (OIDC)
Add tgz artifact uploads to release workflow
Add @zhttp/extract-oas to release and prerelease publish steps

Other

Add agent skill (SKILL.md) for zhttp library usage

Test plan

npx tsc --noEmit — no type errors
npm run build — ESM and CJS bundles build for all packages
npm test — all 11 tests pass
OpenAPI integration test still generates valid spec
extract-oas --help outputs correct CLI usage

- Upgrade zod ^3.22.4 -> ^4.0.0 - Upgrade @asteasolutions/zod-to-openapi ^6.3.1 -> ^8.0.0 - Upgrade typescript ^4.4.4 -> ^5.5.0 - Upgrade @typescript-eslint/* v6 -> v7, replace abandoned eslint-config-standard-with-typescript with direct config - Replace deprecated ZodSchema with ZodType - Fix ExtractRouteParams optional modifier for Zod 4 shape compat

…int error

github-actions · 2026-04-15T21:07:04Z

Test Results

1 files ±0 4 suites ±0 0s ⏱️ ±0s
10 tests ±0 10 ✅ ±0 0 💤 ±0 0 ❌ ±0
11 runs ±0 11 ✅ ±0 0 💤 ±0 0 ❌ ±0

Results for commit 78fb51b. ± Comparison against base commit 8f7ac93.

♻️ This comment has been updated with latest results.

Adds a SKILL.md at the repo root so agents can install zhttp knowledge via `npx skills add evertdespiegeleer/zhttp`. Covers endpoints, controllers, middleware, server setup, error handling, and OpenAPI.

…sted publishers Move prerelease publishing from push.yml to release.yml so all npm publishes go through a single workflow, as required by npm trusted publishers (OIDC). Remove NPM_PUBLISH_TOKEN in favor of --provenance.

npm trusted publishers require npm 10.9.1+ for automatic OIDC token exchange. Node 20.11 ships npm 10.2.4 which is too old.

CLI tool to extract OpenAPI specs from zhttp Server instances. Supports JSON and YAML output, handles TS input files via tsx.

Middleware handler params (req, res, next) were untyped due to the MiddlewareHandler union. Now MiddlewareProps discriminates on the type field so TypeScript infers the correct handler signature automatically.

… publisher

evertdespiegeleer temporarily deployed to internal April 15, 2026 19:28 — with GitHub Actions Inactive

evertdespiegeleer changed the title ~~refactor: ♻️ migrate from Zod 3 to Zod 4~~ refactor: migrate from Zod 3 to Zod 4 Apr 15, 2026

docs: 📚️ add Zod 4 migration guide to readme

dc2239c

evertdespiegeleer temporarily deployed to internal April 15, 2026 19:41 — with GitHub Actions Inactive

evertdespiegeleer added 2 commits April 15, 2026 21:43

docs: 📚️ trim migration section to zhttp-specific changes only

9431e50

docs: 📚️ move migration section below CommonJS section

ef1feb3

evertdespiegeleer temporarily deployed to internal April 15, 2026 19:44 — with GitHub Actions Inactive

fix(ci): 🐛 👷 scope build to library packages, pin nextra to v3, fix l…

87f9470

…int error

evertdespiegeleer temporarily deployed to internal April 15, 2026 19:50 — with GitHub Actions Inactive

fix(ci): 🐛 👷 scope root build script to library packages only

7cfb632

evertdespiegeleer temporarily deployed to internal April 15, 2026 21:05 — with GitHub Actions Inactive

fix(docs): 🐛 📚️ sync embedded code snippets with corrected imports

6373998

evertdespiegeleer temporarily deployed to internal April 15, 2026 21:07 — with GitHub Actions Inactive

fix(ci): 🐛 👷 use COPY instead of read-only bind mount in Dockerfile

1779d4e

evertdespiegeleer temporarily deployed to internal April 16, 2026 07:14 — with GitHub Actions Inactive

feat: ✨ add agent skill for zhttp library usage

e658faa

Adds a SKILL.md at the repo root so agents can install zhttp knowledge via `npx skills add evertdespiegeleer/zhttp`. Covers endpoints, controllers, middleware, server setup, error handling, and OpenAPI.

evertdespiegeleer temporarily deployed to internal April 17, 2026 12:33 — with GitHub Actions Inactive

evertdespiegeleer deployed to internal April 17, 2026 13:51 — with GitHub Actions Active

Merge branch 'main' into refactor/zod-4

5c8ee4b

evertdespiegeleer had a problem deploying to internal April 17, 2026 14:10 — with GitHub Actions Failure

evertdespiegeleer had a problem deploying to internal April 17, 2026 14:15 — with GitHub Actions Failure

fix(ci): 🐛 👷 use npm-publish environment for trusted publisher OIDC

c28905d

evertdespiegeleer had a problem deploying to internal April 17, 2026 14:50 — with GitHub Actions Failure

Merge branch 'main' into refactor/zod-4

f65f223

evertdespiegeleer had a problem deploying to npm-publish April 17, 2026 14:59 — with GitHub Actions Failure

fix(ci): 🐛 👷 use Node 22 in release workflow for npm OIDC support

a76120a

npm trusted publishers require npm 10.9.1+ for automatic OIDC token exchange. Node 20.11 ships npm 10.2.4 which is too old.

evertdespiegeleer requested a deployment to npm-publish April 17, 2026 15:02 — with GitHub Actions Waiting

evertdespiegeleer changed the title ~~refactor: migrate from Zod 3 to Zod 4~~ feat: upgrade to Zod 4 and Express 5 Apr 18, 2026

feat(extract-oas): ✨ add @zhttp/extract-oas CLI package

40d9fb2

CLI tool to extract OpenAPI specs from zhttp Server instances. Supports JSON and YAML output, handles TS input files via tsx.

evertdespiegeleer temporarily deployed to npm-publish April 18, 2026 12:43 — with GitHub Actions Inactive

chore(version): 🔧 📦️ prerelease version bump to 1.1.4-refactor-zod-4.2

a142232

evertdespiegeleer changed the title ~~feat: upgrade to Zod 4 and Express 5~~ feat: upgrade to Zod 4, Express 5, and add @zhttp/extract-oas CLI Apr 18, 2026

docs: 📚️ add @zhttp/extract-oas usage to skill

5bea391

evertdespiegeleer requested a deployment to npm-publish April 18, 2026 12:49 — with GitHub Actions Waiting

fix(extract-oas): 🐛 use tsx/esm/api register instead of node:module

136461a

evertdespiegeleer temporarily deployed to npm-publish April 18, 2026 12:58 — with GitHub Actions Inactive

github-actions Bot and others added 2 commits April 18, 2026 12:59

chore(version): 🔧 📦️ prerelease version bump to 1.1.4-refactor-zod-4.3

5b48d35

fix(extract-oas): 🐛 force exit after writing spec

3244ca5

evertdespiegeleer temporarily deployed to npm-publish April 18, 2026 14:58 — with GitHub Actions Inactive

github-actions Bot and others added 2 commits April 18, 2026 15:05

chore(version): 🔧 📦️ prerelease version bump to 1.1.4-refactor-zod-4.4

1eed5b5

fix(core): 🐛 type middleware handlers with discriminated union on type

5ad33ec

Middleware handler params (req, res, next) were untyped due to the MiddlewareHandler union. Now MiddlewareProps discriminates on the type field so TypeScript infers the correct handler signature automatically.

evertdespiegeleer temporarily deployed to npm-publish April 18, 2026 16:46 — with GitHub Actions Inactive

github-actions Bot and others added 2 commits April 22, 2026 11:10

chore(version): 🔧 📦️ prerelease version bump to 1.1.4-refactor-zod-4.5

3fe6904

ci(release): 👷 🚀 use NPM_PUBLISH_TOKEN secret instead of OIDC trusted…

6583d62

… publisher

evertdespiegeleer requested a deployment to npm-publish April 23, 2026 13:19 — with GitHub Actions Waiting

Merge branch 'main' into refactor/zod-4

159e7a0

evertdespiegeleer temporarily deployed to npm-publish April 23, 2026 13:21 — with GitHub Actions Inactive

github-actions Bot and others added 3 commits April 23, 2026 13:35

chore(version): 🔧 📦️ prerelease version bump to 1.1.4-refactor-zod-4.6

8129fa6

chore(version): 🔧 📦️ prerelease version bump to 1.1.4-refactor-zod-4.7

136cf71

fix: 🐛 cleanup

0eda080

evertdespiegeleer requested a deployment to npm-publish April 24, 2026 13:34 — with GitHub Actions Waiting

fix: 🐛 cleanup

78fb51b

evertdespiegeleer requested a deployment to npm-publish April 24, 2026 13:35 — with GitHub Actions Waiting

evertdespiegeleer mentioned this pull request Apr 24, 2026

Support Zod 4 (now in beta) #68

Closed

evertdespiegeleer linked an issue Apr 24, 2026 that may be closed by this pull request

Support Zod 4 (now in beta) #68

Closed

evertdespiegeleer merged commit 4904fe8 into main Apr 24, 2026
6 of 7 checks passed

evertdespiegeleer deleted the refactor/zod-4 branch April 24, 2026 13:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: upgrade to Zod 4, Express 5, and add @zhttp/extract-oas CLI#69

feat: upgrade to Zod 4, Express 5, and add @zhttp/extract-oas CLI#69
evertdespiegeleer merged 57 commits intomainfrom
refactor/zod-4

evertdespiegeleer commented Apr 15, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Apr 15, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

evertdespiegeleer commented Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

New: @zhttp/extract-oas CLI package

Zod 4 migration

Express 5 upgrade

CI

Other

Test plan

Uh oh!

github-actions Bot commented Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test Results

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

evertdespiegeleer commented Apr 15, 2026 •

edited

Loading

New: `@zhttp/extract-oas` CLI package

github-actions Bot commented Apr 15, 2026 •

edited

Loading