diff --git a/plugins/promptfoo/package-lock.json b/plugins/promptfoo/package-lock.json
index 0e2df81..8a8701a 100644
--- a/plugins/promptfoo/package-lock.json
+++ b/plugins/promptfoo/package-lock.json
@@ -10,7 +10,7 @@
       "dependencies": {
         "ws": "^8.18.0",
         "yaml": "^2.7.0",
-        "zod": "^3.24.0"
+        "zod": "^4.0.0"
       },
       "bin": {
         "crab-pf": "bin/crab-pf.js"
@@ -1553,9 +1553,9 @@
       }
     },
     "node_modules/zod": {
-      "version": "3.25.76",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
-      "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
+      "version": "4.3.6",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.3.6.tgz",
+      "integrity": "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"
diff --git a/plugins/promptfoo/package.json b/plugins/promptfoo/package.json
index dc713c9..2b0832b 100644
--- a/plugins/promptfoo/package.json
+++ b/plugins/promptfoo/package.json
@@ -15,7 +15,7 @@
     "discover": "node --env-file=.env dist/cli.js"
   },
   "dependencies": {
-    "zod": "^3.24.0",
+    "zod": "^4.0.0",
     "yaml": "^2.7.0",
     "ws": "^8.18.0"
   },