valibot
1.5.0 · 9 Sep 2026MIT32M / weekRepositoryHomepagenpmAtom feed
1.5.0 is the newest release of 1.x.
In short
6 new3 fixed
Security
1 advisory affects 1.3.0; 1.4.2 fixes them
- ModerateValibot: record() issue paths can make flatten() throw for inherited Object property namesGHSA-5qjj-4xww-7phc · 24 Jul 2026Fixed in 1.4.2
Release note
Many thanks to @EskiMojo14, @yslpn, @alexilyaev, @idleberg, @BerkliumBirb and @frenzzy for contributing to this release.
Read the release notes on our website for a quick overview of the most exciting new features in this release.
Add
guardtransformation action to narrow types using type predicates (pull request #1204)Add
parseBooleantransformation action to parse boolean values from strings and other types (pull request #1251)Add
isrcvalidation action to validate ISRC codes (pull request #1373)Add
cachemethod for caching schema output by input (pull request #1170)Add
domainvalidation action to validate domain names (pull request #1284)Add
jwsCompactvalidation action to validate JWS compact strings (pull request #1348)Fix
creditCardvalidation action to allow 13-digit Visa card numbers (pull request #1347)Fix
isoTimestampvalidation action to allow optional space before UTC offset for PostgreSQLtimestamptzcompatibility (pull request #1195)Fix types for deeply readonly default and fallback values