valibot
1.5.0 · 9 Sep 2026MIT32M / weekRepositoryHomepagenpmAtom feed
Upgrading valibot from 0.25.0 to 0.26.0
1 release in betweenevery note read
- 1
- change to make
- 0
- advisories fixed
- 0
- new
- 3
- fixes
Before you upgrade
Tick each one off as you go- breaking0.26.0
Security
1 advisory still affects 0.26.0
- Valibot: record() issue paths can make flatten() throw for inherited Object property namesmoderate · GHSA-5qjj-4xww-7phc
Upgrading to 1.4.2 clears it.
Release by release
- fixed
Fix bug in
getDefaults,getDefaultsAsync,getFallbacksandgetFallbacksAsyncschema for falsy but notundefinedvalues (issue #356) - fixed
Fix type of
pipeargument atunion,unionAsync,variantandvariantAsyncschema - fixed
Fix bug that broke pipeline execution in
union,unionAsync,variantandvariantAsyncschema (issue #364)
- fixed
3 other lines we could not sort, mostly version bumps
- 0.26.0
Improve performance of
enum_andenumAsyncschema by caching values - 0.26.0
Change ISO timestamp regex to support timestamps with lower and higher millisecond accuracy (pull request #353)
- 0.26.0
Change issue handling of
union,unionAsync,variantandvariantAsyncschema to improve developer experience
1 internal line (docs, tests, tooling) left out.