Zod version 3.10.2 represents a minor update over its predecessor, version 3.10.1, in this TypeScript-first schema declaration and validation library. Both versions maintain identical development dependencies, encompassing tools for testing (Jest, ts-jest), linting (ESLint, various plugins), bundling (Rollup), and TypeScript support (ts-node, @rollup/plugin-typescript). The core functionality, described as providing static type inference, remains consistent.
The key distinction between the two lies in their release date and potentially minor internal adjustments. Version 3.10.2 was published on October 19, 2021, a day after 3.10.1's release. While the file count in the distributed package is the same (53), the unpacked size of 3.10.2 is slightly larger at 422598 bytes compared to 3.10.1's 422581 bytes.
For developers, this suggests that 3.10.2 likely incorporates bug fixes, performance enhancements, or subtle internal refactoring that don't introduce breaking changes or new features. Given the stability of the API reflected by the lack of dependency changes, upgrading from 3.10.1 to 3.10.2 should be a safe and potentially beneficial move. Since Zod focuses on type safety and validation, incorporating the latest version is recommended to ensure the most reliable and up-to-date checks in your TypeScript applications. These improvements contribute to a more robust developer experience as one can trust the library enhancements without being afraid of braking changes.
All the vulnerabilities related to the version 3.10.2 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.