valibot
1.5.0 · 9 Sep 2026MIT32M / weekRepositoryHomepagenpmAtom feed
Upgrading valibot from 0.40.0 to 0.41.0
1 release in betweenevery note read
- 0
- changes to make
- 0
- advisories fixed
- 0
- new
- 0
- fixes
Security
2 advisories still affect 0.41.0
- Valibot: record() issue paths can make flatten() throw for inherited Object property namesmoderate · GHSA-5qjj-4xww-7phc
- Valibot has a ReDoS vulnerability in `EMOJI_REGEX`high · GHSA-vqpr-j7v3-hqw9
Upgrading to 1.4.2 clears them.
2 other lines we could not sort, mostly version bumps
- 0.41.0
Change
referenceproperty of all action base types to be less strict (issue #799) - 0.41.0
Change implementation of
variantandvariantAsyncto improve performance and issues generation for nested variants with different discriminators (pull request #809)