valibot
1.5.0 · 9 Sep 2026MIT32M / weekRepositoryHomepagenpmAtom feed
1.5.0 is the newest release of 1.x.
In short
8 new1 fixed2 changed
Security
2 advisories affect 1.1.0; 1.4.2 fixes them
- HighValibot has a ReDoS vulnerability in `EMOJI_REGEX`GHSA-vqpr-j7v3-hqw9 · 26 Nov 2025Fixed in 1.2.0
- ModerateValibot: record() issue paths can make flatten() throw for inherited Object property namesGHSA-5qjj-4xww-7phc · 24 Jul 2026Fixed in 1.4.2
Release note
Many thanks to @EltonLobo07, @sacrosanctic, @muningis, @EskiMojo14, @MOZGIII, @vktrl and @jasperteo for contributing to this release.
Read the release notes on our website for a quick overview of the most exciting new features in this release.
Add
messagemethod to overwrite local error message configuration of a schema (pull request #1103)Add
summarizemethod to summarize issues into a pretty-printable multi-line string (pull request #1158)Add
getTitle,getDescriptionandgetMetadatamethods to extract metadata of a schema (pull request #1154)Add
minEntriesandmaxEntriesvalidation action to validate number of object entries (pull request #1100)Add
entriesandnotEntriesvalidation action to validate number of object entries (pull request #1156)Add
parseJsonandstringifyJsontransformation action to parse and stringify JSON (pull request #1137)Add
flavortransformation action to flavor the output type of a schema (pull request #950)Add support for bigints to
multipleOfvalidation action (pull request #1164)Change implementation of
variantandvariantAsyncschema to improve performance by aborting validation of discriminators early (pull request #1110)Change name of
NanoIDActionandNanoIDIssueinterface toNanoIdActionandNanoIdIssue(pull request #1171)Fix internal
MarkOptionaltype to fix input and output type of objects in edge cases (issue #1176)