Zod, a TypeScript-first schema declaration and validation library, released version 3.19.1 shortly after 3.19.0. Both versions share the same core functionality, aiming to simplify data validation and type inference in TypeScript projects. They also maintain an identical suite of development dependencies, suggesting a consistent approach to testing, linting, and building the library. Key tools include typescript for type checking, eslint for code style, jest for unit testing, and rollup for bundling.
The primary difference lies in the dist object, specifically the unpackedSize. Version 3.19.1 has a slightly larger unpacked size of 482766 compared to 3.19.0's 482582. This small increase, roughly 180 bytes, likely reflects minor code adjustments, bug fixes, or potentially updated documentation. Developers should consider this change minimal, and unlikely to introduce breaking changes.
For developers using Zod, this suggests both are stable releases suitable for production. The decision to upgrade from 3.19.0 to 3.19.1 hinges on the need for the nuanced improvements included in the newer version. Users who are content with their existing implementation may not need the update right away, whereas new adopters will likely benefit from selecting the newest patch. It's crucial to consult the official Zod changelog or release notes on the project's GitHub repository for comprehensive details regarding these minor changes to make an informed upgrade choice. Zod's MIT license and readily available funding link signals good community support for these features.
All the vulnerabilities related to the version 3.19.1 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.