valibot
1.5.0 · 9 Sep 2026MIT32M / weekRepositoryHomepagenpmAtom feed
Upgrading valibot from 1.4.0 to 1.5.0
3 releases in betweenevery note read
- 0
- changes to make
- 1
- advisory fixed
- 2
- new
- 10
- fixes
Security
Fixes 1 advisory affecting 1.4.0
- Valibot: record() issue paths can make flatten() throw for inherited Object property namesmoderate · GHSA-5qjj-4xww-7phc
Release by release
- new
Add
codePoints,maxCodePoints,minCodePointsandnotCodePointsvalidation actions to validate the number of Unicode code points (pull request #888) - new
Add
ksuidvalidation action to validate KSUIDs (pull request #1370) - fixed
Fix
stringifyJsonaction to preserve the dataset value whenJSON.stringifyreturnsundefined(pull request #1476) - fixed
Fix
literalschema andvalue,values,notValueandnotValuesactions to treatNaNas equal to itself (pull request #1573)
- new
- fixed
Fix word count actions to cache the
Intl.Segmenterfor non-primitive locales, preventing it from being recreated on everywords,minWords,maxWordsandnotWordsvalidation (pull request #1521) - fixed
Fix
flattenmethod to handle issue path keys that collide withObject.prototypemembers liketoStringinstead of throwing aTypeError(pull request #1522)
- fixed
- fixed
Fix
intersectschema to infer correct input and output types for non-tuple array options instead ofnever(pull request #1478)
- fixed
2 other lines we could not sort, mostly version bumps
- 1.5.0
Change Standard Schema properties to use eager initialization for faster schema construction and replace internal
_getStandardPropsutility with_standardSchema(pull request #1534) - 1.5.0
Change
urlaction to useURL.canParsewhen available to avoid constructing URL objects (pull request #1608)