Packages

valibot

1.5.0 · 9 Sep 2026MIT32M / weekRepositoryHomepagenpmAtom feed

Upgrading valibot from 1.3.1 to 1.4.0

1 release in betweenevery note read

Other targets from 1.3.1Newest 1.x, Latest1.5.0Clears its advisory1.4.2
0
changes to make
0
advisories fixed
2
new
3
fixes

Security

1 advisory still affects 1.4.0

Upgrading to 1.4.2 clears it.

Release by release

  1. 1.4.0

    5 May 20262 new · 3 fixes
    • new

      Add isoDateTimeSecond validation action to validate ISO date times with seconds (pull request #1418)

    • new

      Add toCamelCase, toKebabCase, toPascalCase and toSnakeCase transformation actions to convert strings between common naming conventions (pull request #1457)

    • fixed

      Change hot paths to reduce object allocations and improve runtime performance (pull request #1437)

    • fixed

      Fix creditCard validation action to reject Mastercard numbers with invalid lengths (pull request #1462)

    • fixed

      Fix intersect schema to no longer mutate input values, allowing frozen objects and arrays to be merged (pull request #1463)

4 other lines we could not sort, mostly version bumps

  • Change internal ReadonlyOutputKeys and OutputWithReadonly types of object schemas and WithReadonly type of record schemas to improve TypeScript type performance (pull request #1442)

    1.4.0

  • Change build target to ES2020 so distributed output stays compatible with environments that lack support for newer syntax (pull request #1455)

    1.4.0

  • Change internal _isValidObjectKey to use Object.prototype.hasOwnProperty.call instead of Object.hasOwn so the distributed output stays compatible with runtimes that lack the ES2022 Object.hasOwn builtin (pull request #1421)

    1.4.0

  • Change flatten method to accept readonly issue arrays (pull request #1269)

    1.4.0