Skip to content

Conversation

@eriklopess
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade zod from 3.19.1 to 3.24.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 127 versions ahead of your current version.

  • The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ZOD-5925617
696 Proof of Concept
Release notes
Package name: zod
  • 3.24.3 - 2025-04-16

    Main feature: massive tsc performance improvement in .extend() courtesy of @ Andarist: #4150

    Commits:

  • 3.24.2 - 2025-02-11

    Notes

    Support asynchronous checks in z.custom() .

    const customSchema = z.custom<number>(async (x) => {
      return typeof x === "number";
    });

    Commits:

  • 3.24.1 - 2024-12-11

    Commits:

  • 3.24.0 - 2024-12-10

    Implement @ standard-schema/spec

    This is the first version of Zod to implement the Standard Schema spec. This is a new community effort among several validation library authors to implement a common interface, with the goal of simplifying the process of integrating schema validators with the rest of the ecosystem. Read more about the project and goals here.

    z.string().jwt()

    Thanks to @ Mokshit06 and @ Cognition-Labs for this contribution!

    To verify that a string is a valid 3-part JWT.

    z.string().jwt();
    

    ⚠️ This does not verify your JWT cryptographically! It merely ensures its in the proper format. Use a library like jsonwebtoken to verify the JWT signature, parse the token, and read the claims.

    To constrain the JWT to a specific algorithm:

    z.string().jwt({ alg: "RS256" });

    z.string().base64url()

    Thank you to @ marvinruder!

    To complement the JWT validation, Zod 3.24 implements a standalone .base64url() string validation API. (The three elements of JWTs are base64url-encoded JSON strings.)

    z.string().base64url()

    This functionality is available along the standard z.string().base64() validator added in Zod 3.23.

    z.string().cidr()

    Thanks to @ wataryooou for their work on this!

    A validator for CIDR notation for specifying IP address ranges, e.g. 192.24.12.0/22.

    z.string().cidr()

    To specify an IP version:

    z.string().cidr({ version: "v4" })
    z.string().cidr({ version: "v6" })

    View the full diff from 3.23.8: v3.23.8...v3.24.0

  • 3.24.0-canary.20241210T065401 - 2024-12-10
  • 3.24.0-canary.20241210T060351 - 2024-12-10
  • 3.24.0-canary.20241210T025401 - 2024-12-10
  • 3.24.0-canary.20241210T025031 - 2024-12-10
  • 3.24.0-canary.20241107T043915 - 2024-11-07
  • 3.24.0-canary.20241016T212913 - 2024-10-16
  • 3.24.0-canary.20241016T212839 - 2024-10-16
  • 3.24.0-canary.20240701T200529 - 2024-07-01
  • 3.24.0-canary.20240629T005127 - 2024-06-29
  • 3.24.0-canary.20240523T174819 - 2024-05-23
  • 3.24.0-canary.20240508T190620 - 2024-05-08
  • 3.24.0-canary.20240507T181513 - 2024-05-07
  • 3.24.0-canary.20240502T210128 - 2024-05-02
  • 3.24.0-canary.20240429T193647 - 2024-04-29
  • 3.24.0-canary.20240429T193306 - 2024-04-29
  • 3.24.0-canary.20240423T173108 - 2024-04-23
  • 3.23.8 - 2024-05-08

    Commits:

  • 3.23.7 - 2024-05-07

    Commits:

  • 3.23.6 - 2024-05-03

    Commits:

Snyk has created this PR to upgrade zod from 3.19.1 to 3.24.3.

See this package in npm:
zod

See this project in Snyk:
https://app.snyk.io/org/eriklopess/project/4fd01b36-5ca9-4e17-b5cf-4585a1219056?utm_source=github&utm_medium=referral&page=upgrade-pr
@netlify
Copy link

netlify bot commented May 13, 2025

Deploy Preview for poetic-kelpie-5e4f8b ready!

Name Link
🔨 Latest commit e3141c4
🔍 Latest deploy log https://app.netlify.com/sites/poetic-kelpie-5e4f8b/deploys/6822f74002936f00080f8547
😎 Deploy Preview https://deploy-preview-138--poetic-kelpie-5e4f8b.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants