Zod versions 3.16.0 and 3.15.1 showcase incremental improvements to this TypeScript-first schema declaration and validation library, designed for static type inference. Both versions maintain a consistent set of core functionalities, validated by their shared development dependencies, including tools like Jest for testing, ESLint for code linting, and TypeScript for type checking. Developers familiar with Zod will find a seamless transition between these versions.
The major difference between these two releases is subtle changes in the package content. Zod 3.16.0 includes some internal update or optimization that resulted in a slightly larger unpacked size of 450923 bytes compared to 445958 bytes in version 3.15.1. Also, Zod 3.16.0 was released on May 12, 2022, while version 3.15.1 was released a few days before, on May 6, 2022.
For developers choosing between these versions, selecting the latest (3.16.0) is generally recommended, as it may include bug fixes, performance enhancements, or minor feature refinements not explicitly documented but contributing to a more robust experience. Given the identical development dependencies, the update should pose minimal disruption while potentially offering subtle improvements for Zod-powered type validation workflows. Users should run their common validation checks in their apps to be sure nothing is broken during the upgrade.
All the vulnerabilities related to the version 3.16.0 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.