Zod, a TypeScript-first schema declaration and validation library, saw a minor update from version 1.11.4 to 1.11.5. While seemingly small, this update offers refinements relevant to developers leveraging Zod for data validation and type safety. The core functionality remains consistent, focusing on static type inference derived directly from your schema definitions. This allows for seamless integration with TypeScript projects, minimizing runtime errors and enhancing code maintainability.
Comparing the two versions, the package metadata reveals subtle differences primarily in the dist object. Version 1.11.5 exhibits a slightly smaller unpacked size (276776 bytes) compared to 1.11.4 (278376 bytes), suggesting potential optimizations in the package's internal structure or dependency handling. Both versions share the same number of files (122). This suggests the change in unpacked size is likely due to refactoring of existing code rather than the addition or removal of whole files in the library. The release dates also highlight a quick turnaround, with version 1.11.5 released just a couple of days after 1.11.4, indicating a bug fix or minor enhancement was deemed necessary. This emphasizes the project's responsiveness to improvements, while the minor version bump underscores the stability of the API between releases. The developer dependencies remain identical, which means build and testing processes remain unaffected. This update refines an already powerful tool, ensuring developers have a streamlined path to creating robust and type-safe applications with Zod which is useful for form validation, API data transformation and ensuring config file safety.
All the vulnerabilities related to the version 1.11.5 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.