Zod is a TypeScript-first schema declaration and validation library renowned for its static type inference capabilities. Comparing versions 3.9.3 and 3.9.4, both share identical development dependencies, including tools for testing (Jest, ts-jest), linting (ESLint, Prettier), bundling (Rollup), and TypeScript support (ts-node, @rollup/plugin-typescript). The core functionality and developer experience, therefore, remain largely consistent between these releases.
The key difference lies in the dist object, which describes the packaged distribution. Version 3.9.4 has an unpacked size of 496430 bytes, slightly larger than version 3.9.3's 496143 bytes. While the file count remains constant at 55, this minor size increase suggests potential bug fixes, performance improvements, or internal code adjustments within the library itself in version 3.9.4. The release date also differs, with version 3.9.4 being published later on September 28, 2021, indicating a newer build incorporating the mentioned changes. For developers, upgrading to version 3.9.4 is recommended to benefit from any improvements addressed within the package. It is worth updating to the latest version for a more stable experience
All the vulnerabilities related to the version 3.9.4 of the package
Zod denial of service vulnerability
Zod version 3.22.2 allows an attacker to perform a denial of service while validating emails.