Zod version 1.0.7 introduces subtle refinements over its predecessor, 1.0.6, for this TypeScript-first schema declaration and validation library. While the core functionality remains consistent, developers upgrading should take note. Both versions share identical configurations for development dependencies including testing frameworks like Jest and Ts-Jest, code linting with TSLint, formatting using Prettier, and TypeScript compilation with version 3.8.3. This indicates a stable and consistent development environment across these closely released versions. No changes in the core dependencies suggest that the fundamental API and validation capabilities remain largely unchanged.
The key difference lies in the dist section. Though both releases maintain an identical file count of 57, version 1.0.7 reflects a slight increase (2 bytes) in unpackedSize, growing to 79247 from 79245. This implies minor adjustments within the distribution files, potentially bug fixes, micro-optimizations or very minor changes to the library's internal code without affecting the API. The release dates also show a very tight window, indicating that version 1.0.7 is likely a patch release rapidly succeeding 1.0.6, addressing immediate concerns or small improvements.
For developers already using Zod, upgrading from 1.0.6 to 1.0.7 should represent a seamless transition since the dependencies and development configurations remain the same. The update promises potential refinements impacting performance or bug resolutions due to the small differences in unpacked size, making it a recommended upgrade for a slightly more robust and polished developer experience.
All the vulnerabilities related to the version 1.0.7 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.