valibot
1.5.0 · 9 Sep 2026MIT32M / weekRepositoryHomepagenpmAtom feed
Upgrading valibot from 0.42.1 to 1.0.0
1 release in betweenevery note read
Security
2 advisories still affect 1.0.0
- Valibot: record() issue paths can make flatten() throw for inherited Object property namesmoderate · GHSA-5qjj-4xww-7phc
- Valibot has a ReDoS vulnerability in `EMOJI_REGEX`high · GHSA-vqpr-j7v3-hqw9
Upgrading to 1.4.2 clears them.
Release by release
- new
Add
assertmethod to assert values (issue #862) - new
Add
checkItemsAsyncaction (pull request #856) - new
Add
graphemes,maxGraphemes,minGraphemesandnotGraphemesaction (pull request #853) - new
Add
words,maxWords,minWordsandnotWordsaction
- new
15 other lines we could not sort, mostly version bumps
- 1.0.0
Change types and implementation to support Standard Schema
- 1.0.0
Change behaviour of
minValueandmaxValueforNaN(pull request #843) - 1.0.0
Change type and behaviour of
nullable,nullableAsync,nullish,nullishAsync,optional,optionalAsync,undefinedableandundefinedableAsyncfor undefined default value (issue #878) - 1.0.0
Change type signature of
partialCheckandpartialCheckAsyncaction to add.pathListproperty in a type-safe way - 1.0.0
Change type signature of
findItemaction to support type predicates (issue #867) - 1.0.0
Change
MarkOptionaltype to fix order of entries and TS error when using generic schemas (issue #1021) - 1.0.0
Change
VariantOptionandVariantOptionAsynctype to fix TS error when using generic schemas (issue #842) - 1.0.0
Change implementation of
variantandvariantAsyncto support optional discriminators usingexactOptional,exactOptionalAsync,optional,optionalAsync,nullishornullishAsync - 1.0.0
Change
_addIssueto not ignore empty strings as error message (pull request #1065) - 1.0.0
Change
ISO_DATE_TIME_REGEXandISO_TIMESTAMP_REGEXto support space as separator (pull request #1064)