Zod version 3.10.3 represents a subtle evolution from its predecessor, version 3.10.2, both maintaining the core purpose of providing TypeScript-first schema declaration and validation. Delving into the specifics, the primary distinction between these versions lies in the updated tslib dependency. Version 3.10.3 utilizes tslib version 2.3.1, whereas version 3.10.2 relies on an older version, 2.1.0. tslib is a runtime library that contains helper functions for TypeScript features. The update likely includes bug fixes and performance improvements, ensuring smooth execution of compiled TypeScript code within Zod. Importantly, the update from 3.10.2 to 3.10.3 also introduces an increase in the package's unpacked size, growing from 422598 bytes to 510108 bytes. This larger size may be attributed to the added functionality brought by the newer tslib version. The difference in realease date, just a matter of a few minutes, suggest a small bugfix on the previous version.
For developers, these versions offer robust schema validation, with static type inference that ensures type safety throughout your application. Dependency-wise, both versions share a similar landscape, emphasizing tools for testing (Jest, ts-jest), linting (ESLint), building (Rollup), and various utilities to maintin coding standards and code quality. Developers upgrading to version 3.10.3 can expect enhanced compatibility and potentially optimized performance thanks to the updated tslib library.
All the vulnerabilities related to the version 3.10.3 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.