This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
Affected surfaces
Summary
AI summaryFixed silent empty JSON schemas when using Zod 4 with @vurb/core.
Full changelog
Fixed
@vurb/core — Zod 4 JSON Schema Compatibility
-
zodToJsonSchemasilently returns empty schemas on Zod 4 — Thezod-to-json-schemalibrary (v3.x) is incompatible with Zod 4: it returns{ \"\": \"...\" }with nopropertiesorrequiredfields, causing all MCP tool parameters to disappear from theinputSchemaexposed to clients. This affected any MCP server installed with Zod 4, making tools appear to accept no arguments even when parameters were correctly declared via.withString(). -
New
ZodCompat.tscompatibility layer — IntroducedzodToJson()andzodToJsonWithOptions()wrapper functions that detect the Zod version at runtime:- Zod 4: Uses the native
z.toJSONSchema()built-in conversion method - Zod 3: Delegates to
zod-to-json-schema(backward compatible)
- Zod 4: Uses the native
-
Three call-sites migrated:
SchemaGenerator.ts,ExpositionCompiler.ts,JsonSerializer.ts
Test Suite
ZodCompat.test.ts— 13 regression tests covering all schema conversion scenarios
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About vinkius-labs/mcp-fusion
A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.
Related context
Related tools
Beta — feedback welcome: [email protected]