Packages

valibot

1.5.0 · 9 Sep 2026MIT32M / weekRepositoryHomepagenpmAtom feed

Upgrading valibot from 0.8.0 to 1.5.0

55 releases in betweennotes for 50

Other targets from 0.8.0Newest 0.x0.42.1Clears its advisory1.4.2
7+
changes to make
1
advisory fixed
101+
new
61+
fixes

Counted from 50 of 55 release notes. Advisories are counted from the advisory database, in full.

Start here

Before you upgrade

Tick each one off as you go
  • breaking0.30.0
  • breaking0.30.0
  • breaking0.26.0
  • breaking0.13.0
  • deprecated0.20.0
  • deprecated0.19.0
  • deprecated0.15.0

Security

Fixes 1 advisory affecting 0.8.0

  • Fix ReDoS vulnerability in EMOJI_REGEX used by emoji action

    1.2.0

Release by release

  1. 1.5.0

    9 Sep 20262 new · 7 fixes
    • new

      Add codePoints, maxCodePoints, minCodePoints and notCodePoints validation actions to validate the number of Unicode code points (pull request #888)

    • new

      Add ksuid validation action to validate KSUIDs (pull request #1370)

    • fixed

      Fix stringifyJson action to preserve the dataset value when JSON.stringify returns undefined (pull request #1476)

    • fixed

      Fix literal schema and value, values, notValue and notValues actions to treat NaN as equal to itself (pull request #1573)

  2. 1.4.2

    28 Jun 20262 fixes
    • fixed

      Fix word count actions to cache the Intl.Segmenter for non-primitive locales, preventing it from being recreated on every words, minWords, maxWords and notWords validation (pull request #1521)

    • fixed

      Fix flatten method to handle issue path keys that collide with Object.prototype members like toString instead of throwing a TypeError (pull request #1522)

  3. 1.4.1

    24 May 20261 fix
    • fixed

      Fix intersect schema to infer correct input and output types for non-tuple array options instead of never (pull request #1478)

  4. 1.4.0

    5 May 20262 new · 3 fixes
    • new

      Add isoDateTimeSecond validation action to validate ISO date times with seconds (pull request #1418)

    • new

      Add toCamelCase, toKebabCase, toPascalCase and toSnakeCase transformation actions to convert strings between common naming conventions (pull request #1457)

    • fixed

      Change hot paths to reduce object allocations and improve runtime performance (pull request #1437)

    • fixed

      Fix creditCard validation action to reject Mastercard numbers with invalid lengths (pull request #1462)

    • fixed

      Fix intersect schema to no longer mutate input values, allowing frozen objects and arrays to be merged (pull request #1463)

  5. 1.3.1nothing new or fixed in the note

  6. 1.3.0

    17 Mar 20266 new · 3 fixes
    • new

      Add guard transformation action to narrow types using type predicates (pull request #1204)

    • new

      Add parseBoolean transformation action to parse boolean values from strings and other types (pull request #1251)

    • new

      Add isrc validation action to validate ISRC codes (pull request #1373)

    • new

      Add cache method for caching schema output by input (pull request #1170)

  7. 1.2.0

    24 Nov 20254 new
    • new

      Add toBigint, toBoolean, toDate, toNumber and toString transformation actions (pull request #1212)

    • new

      Add examples action to add example values to a schema (pull request #1199)

    • new

      Add isbn validation action to validate ISBN-10 and ISBN-13 strings (pull request #1097)

    • new

      Add exports for RawCheckAddIssue, RawCheckContext, RawCheckIssueInfo, RawTransformAddIssue, RawTransformContext and RawTransformIssueInfo types for better developer experience with rawCheck and rawTransform actions (pull request #1359)

  8. 1.1.0

    6 May 20258 new · 1 fix
    • new

      Add message method to overwrite local error message configuration of a schema (pull request #1103)

    • new

      Add summarize method to summarize issues into a pretty-printable multi-line string (pull request #1158)

    • new

      Add getTitle, getDescription and getMetadata methods to extract metadata of a schema (pull request #1154)

    • new

      Add minEntries and maxEntries validation action to validate number of object entries (pull request #1100)

85 other lines we could not sort, mostly version bumps

  • Change Standard Schema properties to use eager initialization for faster schema construction and replace internal _getStandardProps utility with _standardSchema (pull request #1534)

    1.5.0

  • Change url action to use URL.canParse when available to avoid constructing URL objects (pull request #1608)

    1.5.0

  • Change internal ReadonlyOutputKeys and OutputWithReadonly types of object schemas and WithReadonly type of record schemas to improve TypeScript type performance (pull request #1442)

    1.4.0

  • Change build target to ES2020 so distributed output stays compatible with environments that lack support for newer syntax (pull request #1455)

    1.4.0

  • Change internal _isValidObjectKey to use Object.prototype.hasOwnProperty.call instead of Object.hasOwn so the distributed output stays compatible with runtimes that lack the ES2022 Object.hasOwn builtin (pull request #1421)

    1.4.0

  • Change flatten method to accept readonly issue arrays (pull request #1269)

    1.4.0

  • Change MAC48_REGEX, MAC64_REGEX and MAC_REGEX to drop the i flag for better JSON Schema compatibility (pull request #1430)

    1.3.1

  • Change build step to tsdown

    1.2.0

  • Change implementation of variant and variantAsync schema to improve performance by aborting validation of discriminators early (pull request #1110)

    1.1.0

  • Change name of NanoIDAction and NanoIDIssue interface to NanoIdAction and NanoIdIssue (pull request #1171)

    1.1.0

1 internal line (docs, tests, tooling) left out.