Zod version 1.11.0 introduces several notable changes compared to the preceding stable release, version 1.10.4. Both versions are TypeScript-first schema declaration and validation libraries aimed at providing static type inference, crucial for robust and type-safe JavaScript and TypeScript applications. The core functionalities remain consistent, as reflected in the shared dependencies and development dependencies like Jest for testing, TSLint for linting, and TypeScript itself for development.
The primary difference lies in the expanded distribution details of version 1.11.0. It features an increased fileCount of 122, compared to 113 in version 1.10.4, and a larger unpackedSize of 274237 bytes, up from 247413 bytes. This suggests that version 1.11.0 encompasses more files and a larger codebase, potentially indicating added features, enhanced documentation, or more comprehensive test suites. Consequently, developers adopting version 1.11.0 might benefit from improved functionality, extended coverage, or refined performance relative to version 1.10.4. The release dates also show that version 1.11.0 was released about two days after version 1.10.4. For developers, the larger size may also be something to consider if bundle size is important in their projects. Considering the minor version bump, the differences most likely include bug fixes and small features that improve overall developer experience.
All the vulnerabilities related to the version 1.11.0 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.