[hidingmyname]

Summary

Changes

Please provide a summary of what's being changed

Two fixes to TransferFamilySchema:

• password is now optional. For SSH public key authentication, Transfer Family invokes the custom identity provider without a password, and the AWS example functions check !event.password for that case. Parsing such an event previously failed with a ZodError. This matches Powertools for AWS Lambda (Python), which has modeled the field as optional since feat(parser): add AWS Transfer Family model powertools-lambda-python#5906.
• sourceIp accepts IPv6. Transfer Family has supported IPv6 endpoints since June 2025, but the field was z.ipv4(), so logins from IPv6 clients failed to parse, password logins included. It now uses z.union([z.ipv4(), z.ipv6()]), as sourceIp already does in packages/parser/src/schemas/api-gatewayv2.ts. Python uses IPvAnyAddress for this field.

TransferFamilyEvent stays inferred from the schema, so there is no separate type change. Added the two tests requested in the issue to the existing describe block in packages/parser/tests/unit/schema/transfer-family.test.ts. Both fail on main and pass with this change. npm run test:unit:coverage and npm run test:unit:types in packages/parser pass, with 100% coverage kept.

Issue number: closes #5869

---

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

Disclaimer: We value your time and bandwidth. As such, any pull requests created on non-triaged issues might not be successful.

[dreamorosi]

Thank you for this PR as well!