Zod version 3.12.0 introduces several updates compared to the previous stable version, 3.11.6. While both versions maintain the core functionality as a TypeScript-first schema declaration and validation library, facilitating static type inference, some notable changes can impact developers.
One key difference lies in the development dependencies. Version 3.12.0 upgrades the core TypeScript compiler to version 4.5.2, which enables developers to leverage the latest TypeScript features and benefits, such as improved type checking and language enhancements, potentially streamlining the development process and improving code quality. In contrast, version 3.11.6 relies on TypeScript version 4.4.4.
The unpacked size of the package has slightly increased from 513139 to 545807, and the file count goes up from 53 to 61, potentially due to added features, improvements, or updated dependencies. Developers should consider this minor size increase when evaluating the impact on their project's bundle size or installation time.
Furthermore, the release date indicates a substantial time difference between the versions, with version 3.12.0 released on February 23, 2022, and version 3.11.6 released on October 26, 2021. This implies that version 3.12.0 incorporates several months of bug fixes, performance improvements, and potentially new features contributed by the Zod community. Developers seeking the most up-to-date and stable experience should strongly consider upgrading to version 3.12.0. Overall, the updates in version 3.12.0 enhance the developer experience through TypeScript upgrades and potential bug fixes.
All the vulnerabilities related to the version 3.12.0 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.