valibot
1.5.0 · 9 Sep 2026MIT32M / weekRepositoryHomepagenpmAtom feed
Upgrading valibot from 0.21.0 to 0.42.1
29 releases in betweenevery note read
- 3
- changes to make
- 0
- advisories fixed
- 37
- new
- 31
- fixes
Start here
Before you upgrade
Tick each one off as you go- breaking0.30.0
- breaking0.30.0
- breaking0.26.0
Security
2 advisories still affect 0.42.1
- Valibot: record() issue paths can make flatten() throw for inherited Object property namesmoderate · GHSA-5qjj-4xww-7phc
- Valibot has a ReDoS vulnerability in `EMOJI_REGEX`high · GHSA-vqpr-j7v3-hqw9
Upgrading to 1.4.2 clears them.
Release by release
- fixed
Fix function type declaration of
_runproperty
- fixed
- new
Add
metadataaction to add custom metadata to a schema - new
Add
titlemetadata action to add a title to a schema (discussion #826) - new
Add
decimalaction to validate integer and float strings (pull request #823) - fixed
Fix inference of generics in
IssueDotPathtype (issue #814)
- new
0.41.0nothing new or fixed in the note
- new
Add
nanoidaction to validate Nano IDs (pull request #789) - new
Add
undefinedableandundefinedableAsyncschema (issue #385) - fixed
Fix invalid output type for transformed optional object entries (issue #806)
- new
- new
Add support for
exactOptionalPropertyTypesconfig (issue #385) - fixed
Fix
IssueDotPathtype forpipeandpipeAsyncmethod (issue #793) - fixed
Fix
IssueDotPathtype forvariantandvariantAsyncschema (issue #700)
- new
- fixed
Fix TypeScript errors in
TuplePathandQuestionMarkSchematype (issue #659, #776) - fixed
Fix missing TypeScript errors in
pipeandpipeAsyncmethod (pull request #785)
- fixed
- new
Add
base64action to validate Base64 strings (pull request #644) - new
Add
descriptionmetadata action (pull request #747) - fixed
Fix bug in
fallbackandfallbackAsyncmethod for specific schemas (pull request #752) - fixed
Fix bug in
fallbackAsyncmethod for async schemas (pull request #732)
- new
- new
Add
normalizeaction to normalize strings (issue #691) - new
Add support for async schemas to
entriesFromListutil - new
Add support for numbers and symbols to
entriesFromListutil (issue #492) - new
Add
keyproperty toSetPathItemtype to improve DX (issue #693, #694)
- new
31 other lines we could not sort, mostly version bumps
- 0.42.0
Rename
NoPipetype toSchemaWithoutPipe - 0.41.0
Change
referenceproperty of all action base types to be less strict (issue #799) - 0.41.0
Change implementation of
variantandvariantAsyncto improve performance and issues generation for nested variants with different discriminators (pull request #809) - 0.38.0
Change
expectsandexpectedproperty by enclosing combined values in parentheses - 0.38.0
Change question mark handling for
optional,optionalAsync,nullishandnullishAsyncschemas in objects - 0.37.0
Refactor
HEXADECIMAL_REGEX(pull request #666) - 0.37.0
Change
unknowninLengthInputtype toArrayLike<unknown> - 0.37.0
Change
ArrayInputandContentInputtype to useMaybeReadonly - 0.36.0
Remove
FunctionReferencetype and refactor code - 0.35.0
Increase argument limit of
pipeandpipeAsyncmethod to 19 (issue #643)
1 internal line (docs, tests, tooling) left out.