Zod version 3.17.10 represents a minor update over its predecessor, 3.17.9, in this TypeScript-first schema declaration and validation library. Both versions maintain identical core functionalities, offering developers a robust solution for type-safe data validation with static type inference. The dependency structure remains unchanged, meaning developers won't encounter any breaking changes or need to update their build tools like Jest, Husky, Rollup, or ESLint when migrating.
The key difference lies in the dist object, where 3.17.10 has a slightly smaller unpacked size (474908 bytes) compared to 3.17.9 (474921 bytes). This suggests potential minor optimizations, which could translate the the slightly improved performance, but in general the performance should be the same between the 2 versions. Importantly, both versions share the same file count (40), hinting at internal adjustments rather than structural alterations of the source code between the versions.
For developers, the upgrade from to 3.17.10 is likely a seamless experience since the tool is very stable at this patch version. The library remains licensed under MIT, assuring open-source flexibility. Zod continues to be an excellent choice for projects requiring compile-time type safety and runtime validation, offering benefits like auto completion because it's based on Typescript and schema validation with code completion which increases productivity and reduces errors during development. Version 3.17.10 was released on and represents a stable and incrementally improved iteration, which makes is a good choice to use as a dependency for your projects.
All the vulnerabilities related to the version 3.17.10 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.