Require a compatible Zod version in drupal-canvas npm package
>>> [!note] Migrated issue
<!-- Drupal.org comment -->
<!-- Migrated from issue #3580571. -->
Reported by: [balintbrews](https://www.drupal.org/user/613760)
Related to !773
>>>
<h3>Overview</h3>
<p>After installing the recently published <code>@drupal-canvas/workbench</code> package (<span class="drupalorg-gitlab-issue-link drupalorg-gitlab-link-wrapper"><a href="https://git.drupalcode.org/project/canvas/-/work_items/3580544" class="drupalorg-gitlab-link">https://git.drupalcode.org/project/canvas/-/work_items/3580544</a></span>) and starting it in a project, Workbench fails during Vite config loading.</p>
<p>Error:</p>
<pre><pre>failed to load config from /.../node_modules/@drupal-canvas/workbench/dist/server/vite.published.config.mjs<br>error when starting dev server:<br>file:///.../node_modules/@drupal-canvas/workbench/node_modules/drupal-canvas/dist/json-render-utils.js:3<br>import { fromJSONSchema } from "zod";<br> ^^^^^^^^^^^^^^<br>SyntaxError: The requested module 'zod' does not provide an export named 'fromJSONSchema'</pre></pre><h3>Proposed resolution</h3>
<p><code>drupal-canvas@0.3.0</code> imports <code>fromJSONSchema</code> from <code>zod</code> in <code>json-render-utils</code>, but its <code>package.json</code> declares:</p>
<pre><pre>"zod": "^4.0.0"</pre></pre><p>That range is too broad.</p>
<p><code>fromJSONSchema</code> is is available starting with 4.2.0.</p>
<p>So the published package can resolve a zod version that satisfies the declared range, but does not actually satisfy the runtime API requirements.</p>
<p>Update <code>drupal-canvas</code> to require the compatible Zod minimum:</p>
<pre><pre>"zod": "^4.2.0"</pre></pre><p>Then publish a patch release of <code>drupal-canvas</code>, and update <code>@drupal-canvas/workbench</code> to depend on that patch release.</p>
<h3>User interface changes</h3>
<p>n/a</p>
issue