diff --git a/packages/container/package.json b/packages/container/package.json
index 898f8bbc..44ee6ea2 100644
--- a/packages/container/package.json
+++ b/packages/container/package.json
@@ -28,7 +28,7 @@
     "pangram": "workspace:*",
     "safe-stable-stringify": "^2.5.0",
     "url-join": "^5.0.0",
-    "zod": "^3.25.20"
+    "zod": "^4.3.6"
   },
   "devDependencies": {
     "@ls-lint/ls-lint": "2.3.0",
diff --git a/packages/pangram/package.json b/packages/pangram/package.json
index 69d535ad..c95b6f9a 100644
--- a/packages/pangram/package.json
+++ b/packages/pangram/package.json
@@ -9,7 +9,7 @@
   "bugs": "https://github.com/escapace/pangram/issues",
   "dependencies": {
     "@pangram/font-loader": "workspace:*",
-    "zod": "^3.25.20"
+    "zod": "^4.3.6"
   },
   "devDependencies": {
     "@ls-lint/ls-lint": "2.3.0",
diff --git a/packages/unicode-tools/package.json b/packages/unicode-tools/package.json
index 9e0e40a2..6028efbf 100644
--- a/packages/unicode-tools/package.json
+++ b/packages/unicode-tools/package.json
@@ -34,7 +34,7 @@
     "typescript": "5.8.3",
     "udhr": "6.0.0",
     "vitest": "3.1.4",
-    "zod": "3.25.20"
+    "zod": "4.3.6"
   },
   "engines": {
     "node": ">=22.15.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 723c664e..e87f1e69 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -105,8 +105,8 @@ importers:
         specifier: ^5.0.0
         version: 5.0.0
       zod:
-        specifier: ^3.25.20
-        version: 3.25.20
+        specifier: ^4.3.6
+        version: 4.3.6
     devDependencies:
       '@ls-lint/ls-lint':
         specifier: 2.3.0
@@ -209,8 +209,8 @@ importers:
         specifier: workspace:*
         version: link:../font-loader
       zod:
-        specifier: ^3.25.20
-        version: 3.25.20
+        specifier: ^4.3.6
+        version: 4.3.6
     devDependencies:
       '@ls-lint/ls-lint':
         specifier: 2.3.0
@@ -328,8 +328,8 @@ importers:
         specifier: 3.1.4
         version: 3.1.4(@types/node@22.15.21)(jiti@2.6.1)(jsdom@26.1.0)(lightningcss@1.30.2)(tsx@4.19.4)(yaml@2.8.1)
       zod:
-        specifier: 3.25.20
-        version: 3.25.20
+        specifier: 4.3.6
+        version: 4.3.6
 
 packages:
 
@@ -2217,6 +2217,7 @@ packages:
   git-raw-commits@4.0.0:
     resolution: {integrity: sha512-ICsMM1Wk8xSGMowkOmPrzo2Fgmfo4bMHLNX6ytHjajRJUqvHOw/TFapQ+QG75c3X/tTDDhOSRPGC52dDbNM8FQ==}
     engines: {node: '>=16'}
+    deprecated: This package is no longer maintained. For the JavaScript API, please use @conventional-changelog/git-client instead.
     hasBin: true
 
   glob-parent@5.1.2:
@@ -2229,6 +2230,7 @@ packages:
 
   glob@10.4.5:
     resolution: {integrity: sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg==}
+    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
     hasBin: true
 
   global-directory@4.0.1:
@@ -3665,6 +3667,9 @@ packages:
   zod@3.25.20:
     resolution: {integrity: sha512-z03fqpTMDF1G02VLKUMt6vyACE7rNWkh3gpXVHgPTw28NPtDFRGvcpTtPwn2kMKtQ0idtYJUTxchytmnqYswcw==}
 
+  zod@4.3.6:
+    resolution: {integrity: sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==}
+
   zwitch@2.0.4:
     resolution: {integrity: sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A==}
 
@@ -7317,6 +7322,8 @@ snapshots:
 
   zod@3.25.20: {}
 
+  zod@4.3.6: {}
+
   zwitch@2.0.4: {}
 
   zx@8.8.5: {}