valibot
1.5.0 · 9 Sep 2026MIT32M / weekRepositoryHomepagenpmAtom feed
Upgrading valibot from 0.19.0 to 0.20.0
1 release in betweenevery note read
- 1
- change to make
- 0
- advisories fixed
- 8
- new
- 1
- fix
Before you upgrade
Tick each one off as you go- deprecated0.20.0
Security
1 advisory still affects 0.20.0
- Valibot: record() issue paths can make flatten() throw for inherited Object property namesmoderate · GHSA-5qjj-4xww-7phc
Upgrading to 1.4.2 clears it.
Release by release
- new
Add
getRestAndDefaultArgsutility function - new
Add
restargument toobjectandobjectAsyncschema - new
Add
variantandvariantAsyncschema (issue #90, #216) - new
Add
getFallbackproperty to schema infallbackmethod (pull request #177)
- new
17 other lines we could not sort, mostly version bumps
- 0.20.0
Improve security of regular expressions (pull request #202)
- 0.20.0
Improve
optional,optionalAsync,nullable,nullableAsync,nullishandnullishAsyncschema - 0.20.0
Change
ObjectSchemaandObjectSchemaAsynctype - 0.20.0
Change type check in
tupleandtupleAsyncto be less strict - 0.20.0
Change return type of
actionargument incoerceandcoerceAsynctounknown - 0.20.0
Change type of
brand,getDefault,transformandtransformAsyncmethod - 0.20.0
Change type of
array,arrayAsync,intersection,intersectionAsync,map,mapAsync,object,objectAsync,union,unionAsync,record,recordAsync,set,setAsync,tupleandtupleAsyncschema - 0.20.0
Rename
schemaproperty of every schema type totype - 0.20.0
Rename
intersectionandintersectionAsyncschema tointersectandintersectAsync - 0.20.0
Rename
enumTypeandenumTypeAsyncschema topicklistandpicklistAsync