diff --git a/.changeset/dependabot-3616.md b/.changeset/dependabot-3616.md
new file mode 100644
index 0000000000..a51fd8b95e
--- /dev/null
+++ b/.changeset/dependabot-3616.md
@@ -0,0 +1,5 @@
+---
+"@prosopo/user-access-policy": patch
+---
+
+Bump zod from 3.25.76 to 4.6.6 in /packages/user-access-policy
diff --git a/packages/user-access-policy/package.json b/packages/user-access-policy/package.json
index c0e67b7006..a981b88ad2 100644
--- a/packages/user-access-policy/package.json
+++ b/packages/user-access-policy/package.json
@@ -56,7 +56,7 @@
 		"dotenv": "18.0.8",
 		"ip-address": "10.7.4",
 		"redis": "6.3.0",
-		"zod": "3.25.76"
+		"zod": "4.6.6"
 	},
 	"devDependencies": {
 		"@prosopo/config": "workspace:*",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 2b0f74ae01..53d7dc8e5e 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -3241,8 +3241,8 @@ importers:
         specifier: 6.3.0
         version: 6.3.0(@opentelemetry/api@1.9.1)
       zod:
-        specifier: 3.25.76
-        version: 3.25.76
+        specifier: 4.6.6
+        version: 4.6.6
     devDependencies:
       '@prosopo/config':
         specifier: workspace:*
@@ -11263,6 +11263,9 @@ packages:
   zod@3.25.76:
     resolution: {integrity: sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==}
 
+  zod@4.6.6:
+    resolution: {integrity: sha512-4UmzQUF5fxvfcYHlbjBmejU+w+hbDnWFx4aS8kBx7nPBHcO2SqPbpAG8snbdg+Xse4pRefR98hgjFgIMCI/UhA==}
+
 snapshots:
 
   '@actions/core@3.0.1':
@@ -19858,3 +19861,5 @@ snapshots:
       readable-stream: 4.7.0
 
   zod@3.25.76: {}
+
+  zod@4.6.6: {}