Zod, a TypeScript-first schema declaration and validation library, saw a minor update from version 3.3.4 to 3.4.0. Both versions maintain the core functionality of providing static type inference, ensuring type safety throughout your projects. The primary difference lies in the releaseDate, with version 3.4.0 being released on July 6, 2021, while version 3.3.4 was released on July 4, 2021. While the dependencies field remains empty in both versions, indicating no runtime dependencies, the devDependencies are identical, suggesting that there were no changes to the tools used for development, testing, and building the library between these two versions. The unpackedSize is slightly different, with 3.3.4 showing 448924 bytes versus 3.4.0 showing 448911 bytes meaning that the new version is a little lighter version.
For developers, this update to version 3.4.0 likely represents minor bug fixes, performance improvements, or internal refactorings rather than significant new features. Since both versions share the same development dependencies, the developer experience in terms of tooling remains consistent. Users of Zod can expect the same intuitive schema declaration and validation process, enabling them to build robust and type-safe applications with ease. Updating from 3.3.4 to 3.4.0 should be straightforward and pose minimal risk of breaking changes, making it a worthwhile upgrade for those seeking the latest refinements to this popular validation library.
All the vulnerabilities related to the version 3.4.0 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.