diff --git a/package-lock.json b/package-lock.json
index 3fc385e..2ef02a2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,7 +16,7 @@
         "express-rate-limit": "^8.5.2",
         "helmet": "^8.2.0",
         "jose": "^6.2.3",
-        "zod": "^3.25.0"
+        "zod": "^4.4.3"
       },
       "bin": {
         "rosa": "dist/index.js"
@@ -5147,9 +5147,10 @@
       }
     },
     "node_modules/zod": {
-      "version": "3.25.76",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
-      "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz",
+      "integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==",
+      "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"
       }
diff --git a/package.json b/package.json
index 5536ca3..4b68d99 100644
--- a/package.json
+++ b/package.json
@@ -71,7 +71,7 @@
     "express-rate-limit": "^8.5.2",
     "helmet": "^8.2.0",
     "jose": "^6.2.3",
-    "zod": "^3.25.0"
+    "zod": "^4.4.3"
   },
   "devDependencies": {
     "@types/cors": "^2.8.19",