valibot
1.5.0 · 9 Sep 2026MIT32M / weekRepositoryHomepagenpmAtom feed
Upgrading valibot from 0.40.0 to 0.42.1
3 releases in betweenevery note read
Security
2 advisories still affect 0.42.1
- Valibot: record() issue paths can make flatten() throw for inherited Object property namesmoderate · GHSA-5qjj-4xww-7phc
- Valibot has a ReDoS vulnerability in `EMOJI_REGEX`high · GHSA-vqpr-j7v3-hqw9
Upgrading to 1.4.2 clears them.
Release by release
- fixed
Fix function type declaration of
_runproperty
- fixed
- new
Add
metadataaction to add custom metadata to a schema - new
Add
titlemetadata action to add a title to a schema (discussion #826) - new
Add
decimalaction to validate integer and float strings (pull request #823) - fixed
Fix inference of generics in
IssueDotPathtype (issue #814)
- new
0.41.0nothing new or fixed in the note
3 other lines we could not sort, mostly version bumps
- 0.42.0
Rename
NoPipetype toSchemaWithoutPipe - 0.41.0
Change
referenceproperty of all action base types to be less strict (issue #799) - 0.41.0
Change implementation of
variantandvariantAsyncto improve performance and issues generation for nested variants with different discriminators (pull request #809)