Skip to content

[Snyk] Upgrade zod from 3.19.1 to 3.24.2#136

Open
eriklopess wants to merge 1 commit intomainfrom
snyk-upgrade-965199640cec9a38d25ac6ff495eef7a
Open

[Snyk] Upgrade zod from 3.19.1 to 3.24.2#136
eriklopess wants to merge 1 commit intomainfrom
snyk-upgrade-965199640cec9a38d25ac6ff495eef7a

Conversation

@eriklopess
Copy link
Owner

@eriklopess eriklopess commented Mar 11, 2025

snyk-top-banner

Snyk has created this PR to upgrade zod from 3.19.1 to 3.24.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 126 versions ahead of your current version.

  • The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ZOD-5925617		 696 Proof of Concept
Release notes
Package name: zod
  • 3.24.2 - 2025-02-11

    Notes

    Support asynchronous checks in z.custom() .

    const customSchema = z.custom<number>(async (x) => {
  return typeof x === "number";
});

    Commits:

  • 3.24.1 - 2024-12-11

    Commits:

  • 3.24.0 - 2024-12-10

    Implement @ standard-schema/spec

    This is the first version of Zod to implement the Standard Schema spec. This is a new community effort among several validation library authors to implement a common interface, with the goal of simplifying the process of integrating schema validators with the rest of the ecosystem. Read more about the project and goals here.

    z.string().jwt()

    Thanks to @ Mokshit06 and @ Cognition-Labs for this contribution!

    To verify that a string is a valid 3-part JWT.

    z.string().jwt();

    ⚠️ This does not verify your JWT cryptographically! It merely ensures its in the proper format. Use a library like jsonwebtoken to verify the JWT signature, parse the token, and read the claims.

    To constrain the JWT to a specific algorithm:

    z.string().jwt({ alg: "RS256" });

    z.string().base64url()

    Thank you to @ marvinruder!

    To complement the JWT validation, Zod 3.24 implements a standalone .base64url() string validation API. (The three elements of JWTs are base64url-encoded JSON strings.)

    z.string().base64url()

    This functionality is available along the standard z.string().base64() validator added in Zod 3.23.

    z.string().cidr()

    Thanks to @ wataryooou for their work on this!

    A validator for CIDR notation for specifying IP address ranges, e.g. 192.24.12.0/22.

    z.string().cidr()

    To specify an IP version:

    z.string().cidr({ version: "v4" })
z.string().cidr({ version: "v6" })

    View the full diff from 3.23.8: v3.23.8...v3.24.0

  • 3.24.0-canary.20241210T065401 - 2024-12-10
  • 3.24.0-canary.20241210T060351 - 2024-12-10
  • 3.24.0-canary.20241210T025401 - 2024-12-10
  • 3.24.0-canary.20241210T025031 - 2024-12-10
  • 3.24.0-canary.20241107T043915 - 2024-11-07
  • 3.24.0-canary.20241016T212913 - 2024-10-16
  • 3.24.0-canary.20241016T212839 - 2024-10-16
  • 3.24.0-canary.20240701T200529 - 2024-07-01
  • 3.24.0-canary.20240629T005127 - 2024-06-29
  • 3.24.0-canary.20240523T174819 - 2024-05-23
  • 3.24.0-canary.20240508T190620 - 2024-05-08
  • 3.24.0-canary.20240507T181513 - 2024-05-07
  • 3.24.0-canary.20240502T210128 - 2024-05-02
  • 3.24.0-canary.20240429T193647 - 2024-04-29
  • 3.24.0-canary.20240429T193306 - 2024-04-29
  • 3.24.0-canary.20240423T173108 - 2024-04-23
  • 3.23.8 - 2024-05-08

    Commits:

  • 3.23.7 - 2024-05-07

    Commits:

  • 3.23.6 - 2024-05-03

    Commits:

  • 3.23.5 - 2024-04-29

    Commits:

  • 3.23.4 - 2024-04-23

    Commits:

  • 3.23.3 - 2024-04-22

    Commits:

  • 3.23.2 - 2024-04-22

    Commits:

  • 3.23.1 - 2024-04-22
  • 3.23.0 - 2024-04-21
  • 3.23.0-canary.20240421T221346 - 2024-04-21
  • 3.23.0-canary.20240421T220206 - 2024-04-21
  • 3.23.0-canary.20240420T221414 - 2024-04-20
  • 3.23.0-canary.20240418T224529 - 2024-04-18
  • 3.23.0-canary.20240418T011308 - 2024-04-18
  • 3.23.0-canary.20240418T003146 - 2024-04-18
  • 3.23.0-canary.20240417T235146 - 2024-04-17
  • 3.23.0-canary.20240417T010051 - 2024-04-17
  • 3.23.0-canary.20240417T001802 - 2024-04-17
  • 3.23.0-canary.20240416T233020 - 2024-04-16
  • 3.23.0-canary.20240416T232324 - 2024-04-16
  • 3.23.0-canary.20240416T231453 - 2024-04-16
  • 3.23.0-canary.20240416T230918 - 2024-04-16
  • 3.23.0-canary.20240416T222410 - 2024-04-16
  • 3.23.0-canary.20240416T210423 - 2024-04-16
  • 3.23.0-canary.20240416T204849 - 2024-04-16
  • 3.23.0-canary.20240416T201354 - 2024-04-16
  • 3.23.0-canary.20240416T195939 - 2024-04-16
  • 3.23.0-canary.20240416T051357 - 2024-04-16
  • 3.23.0-canary.20240414T000556 - 2024-04-14
  • 3.23.0-canary.20240413T085656 - 2024-04-13
  • 3.23.0-canary.20240413T011400 - 2024-04-13
  • 3.23.0-canary.20240412T032517 - 2024-04-12
  • 3.23.0-canary.20240412T023718 - 2024-04-12
  • 3.23.0-canary.20240409T033359 - 2024-04-09
  • 3.23.0-canary.20240409T032832 - 2024-04-09
  • 3.23.0-canary.20240408T222819 - 2024-04-08
  • 3.23.0-canary.20240407T005829 - 2024-04-07
  • 3.23.0-canary.20240404T043228 - 2024-04-04
  • 3.23.0-canary.20240322T225818 - 2024-03-22
  • 3.23.0-canary.20240321T233535 - 2024-03-21
  • 3.23.0-canary.20240321T225632 - 2024-03-21
  • 3.23.0-canary.20240321T224206 - 2024-03-21
  • 3.23.0-canary.20240321T200145 - 2024-03-21
  • 3.23.0-canary.20240321T195738 - 2024-03-21
  • 3.23.0-canary.20240319T231349 - 2024-03-19
  • 3.23.0-canary.20240315T001949 - 2024-03-15
  • 3.23.0-canary.20240314T051637 - 2024-03-14
  • 3.23.0-canary.20240314T051126 - 2024-03-14
  • 3.23.0-canary.20240222T232722 - 2024-02-22
  • 3.23.0-canary.20240215T003902 - 2024-02-15
  • 3.23.0-canary.20240215T003817 - 2024-02-15
  • 3.23.0-canary.20240214T232812 - 2024-02-14
  • 3.23.0-canary.20231004T224911 - 2023-10-04
  • 3.23.0-canary.20231004T215233 - 2023-10-04
  • 3.23.0-canary.20231004T213259 - 2023-10-04
  • 3.23.0-canary.20231004T210301 - 2023-10-04
  • 3.23.0-canary.20231003T200509 - 2023-10-03
  • 3.23.0-canary.20231003T183640 - 2023-10-03
  • 3.23.0-canary.20231003T183317 - 2023-10-03
  • 3.23.0-canary.20230815T194608 - 2023-08-15
  • 3.23.0-canary.20230815T194013 - 2023-08-15
  • 3.23.0-beta.2 - 2024-04-18
  • 3.23.0-beta.1 - 2024-04-18
  • 3.23.0-beta.0 - 2024-04-18
  • 3.22.5 - 2024-04-18
  • 3.22.4 - 2023-10-04
  • 3.22.3 - 2023-10-03
  • 3.22.2 - 2023-08-19
  • 3.22.1 - 2023-08-15
  • 3.22.0 - 2023-08-14
  • 3.22.0-canary.20230814T192256 - 2023-08-14
  • 3.22.0-canary.20230731T015307 - 2023-07-31
  • 3.22.0-canary.20230623T202513 - 2023-06-23
  • 3.22.0-canary.20230623T192520 - 2023-06-23
  • 3.22.0-canary.20230623T190933 - 2023-06-23
  • 3.22.0-canary.20230522T011705 - 2023-05-22
  • 3.22.0-canary.20230522T010750 - 2023-05-22
  • 3.22.0-canary.20230521T235850 - 2023-05-21
  • 3.22.0-canary.20230521T234056 - 2023-05-21
  • 3.22.0-canary.20230521T230556 - 2023-05-21
  • 3.22.0-canary.20230521T230122 - 2023-05-21
  • 3.22.0-canary.20230521T223947 - 2023-05-21
  • 3.22.0-canary.20230517T164447 - 2023-05-17
  • 3.22.0-canary.20230307T060555 - 2023-03-07
  • 3.22.0-canary.20230307T044506 - 2023-03-07
  • 3.22.0-canary.20230306T212237 - 2023-03-06
  • 3.22.0-canary.20230306T210748 - 2023-03-06
  • 3.22.0-canary.20230305T095251 - 2023-03-05
  • 3.22.0-canary.20230305T095130 - 2023-03-05
  • 3.22.0-canary.20230305T093342 - 2023-03-05
  • 3.22.0-canary.20230305T093225 - 2023-03-05
  • 3.22.0-canary.20230305T082229 - 2023-03-05
  • 3.21.5-alpha.0 - 2023-06-04
  • 3.21.4 - 2023-03-07
  • 3.21.3 - 2023-03-06
  • 3.21.2 - 2023-03-06
  • 3.21.1 - 2023-03-06
  • 3.21.0 - 2023-03-04
  • 3.20.6 - 2023-02-09
  • 3.20.5 - 2023-02-08
  • 3.20.4 - 2023-02-08
  • 3.20.4-beta.0 - 2023-02-08
  • 3.20.3 - 2023-02-08
  • 3.20.2 - 2022-12-12
  • 3.20.1 - 2022-12-12
  • 3.20.0 - 2022-12-12
  • 3.20.0-beta.0 - 2022-12-04
  • 3.19.1 - 2022-09-11
from zod GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade zod from 3.19.1 to 3.24.2
5e83b3c 
Snyk has created this PR to upgrade zod from 3.19.1 to 3.24.2.

See this package in npm:
zod

See this project in Snyk:
https://app.snyk.io/org/eriklopess/project/4fd01b36-5ca9-4e17-b5cf-4585a1219056?utm_source=github&utm_medium=referral&page=upgrade-pr
@netlify
Copy link

netlify bot commented Mar 11, 2025 •
edited
Loading

✅ Deploy Preview for poetic-kelpie-5e4f8b ready!

Name Link
🔨 Latest commit 5e83b3c
🔍 Latest deploy log https://app.netlify.com/sites/poetic-kelpie-5e4f8b/deploys/67cfe7550ef046000888b273
😎 Deploy Preview https://deploy-preview-136--poetic-kelpie-5e4f8b.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@eriklopess @snyk-bot