valibot
1.5.0 · 9 Sep 2026MIT32M / weekRepositoryHomepagenpmAtom feed
1.5.0 is the newest release of 1.x.
In short
1 security4 new1 changed
Security
Fixes 1 advisory that affected 1.1.0
- HighValibot has a ReDoS vulnerability in `EMOJI_REGEX`GHSA-vqpr-j7v3-hqw9 · 26 Nov 2025Fixed in 1.2.0
1 advisory affects 1.2.0; 1.4.2 fixes them
- ModerateValibot: record() issue paths can make flatten() throw for inherited Object property namesGHSA-5qjj-4xww-7phc · 24 Jul 2026Fixed in 1.4.2
Release note
Many thanks to @EskiMojo14, @makenowjust, @ysknsid25 and @jacekwilczynski for contributing to this release.
Read the release notes on our website for a quick overview of the most exciting new features in this release.
Add
toBigint,toBoolean,toDate,toNumberandtoStringtransformation actions (pull request #1212)Add
examplesaction to add example values to a schema (pull request #1199)Add
getExamplesmethod to extract example values from a schema (pull request #1199)Add
isbnvalidation action to validate ISBN-10 and ISBN-13 strings (pull request #1097)Add exports for
RawCheckAddIssue,RawCheckContext,RawCheckIssueInfo,RawTransformAddIssue,RawTransformContextandRawTransformIssueInfotypes for better developer experience withrawCheckandrawTransformactions (pull request #1359)Change build step to tsdown
- security
Fix ReDoS vulnerability in
EMOJI_REGEXused byemojiaction