Zod version 3.7.3 is a minor release following 3.7.2 in this TypeScript-first schema declaration and validation library. Both versions maintain the same core functionality, providing developers with a powerful tool for defining data schemas and validating JavaScript data with static type inference. The primary function of Zod remains consistent: ensuring data integrity within TypeScript applications. Examining the package metadata reveals that the dependencies field is empty in both versions, meaning there are no runtime dependencies introduced. The devDependencies, crucial for development workflows, are also identical, indicating that the tooling setup (Jest, ESLint, Rollup, TypeScript, etc.) used for building and testing the library hasn't changed between these versions.
The key changes between 3.7.2 and 3.7.3 are subtle, potentially involving bug fixes, performance improvements, or minor internal adjustments. The unpackedSize in the dist object offers a clue; version 3.7.3 shows a slightly larger unpacked size (470058 bytes) compared to 3.7.2 (469187 bytes). This suggests potential code additions or modifications. The releaseDate also confirms version 3.7.3 was released approximately six days after 3.7.2. For developers, this incremental update likely addresses specific edge cases or refines existing functionalities without introducing breaking changes. Consequently, upgrading from 3.7.2 to 3.7.3 should generally be straightforward, offering enhanced stability and reliability in data validation processes within TypeScript projects, although consulting the changelog or release notes is always recommended for complete transparency. Ultimately, both versions empower developers to build robust and type-safe applications.
All the vulnerabilities related to the version 3.7.3 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.