Skip to content
verdict:

Zod 4.4.0

notable

Release notes

note: no summary for this older release

We summarize recent releases. The original release notes for this version are below.

release-notesgithub.com/colinhacks/zod · 401 lines
  1. ## 4.4.0
  3. This is a minor release with a wide set of correctness and soundness fixes. Some fixes intentionally make Zod stricter, so code that depended on previously accepted invalid or ambiguous inputs may need small updates.
  5. ## Potentially breaking bug fixes
  7. ### Tuple defaults now materialize output values correctly
  9. Fixed in [#5661](https://github.com/colinhacks/zod/pull/5661). Tuple parsing now more accurately reflects defaults, optional tails, explicit `undefined`, and under-filled inputs. The headline behavior is that defaults in tuple positions now properly appear in parsed output.
  11. ```ts
  12. const schema = z.tuple([
  13. z.string(),
  14. z.string().default("fallback"),
  15. ]);
  17. schema.parse(["a"]);
  18. // ["a", "fallback"]
  19. ```
  21. Trailing optional elements that are absent still stay absent; they are not filled with `undefined`.
  23. ```ts
  24. const schema = z.tuple([
  25. z.string(),
  26. z.string().optional(),
  27. ]);
  29. schema.parse(["a"]);
  30. // ["a"]
  31. ```
  33. But explicit `undefined` values supplied by the caller are preserved.
  35. ```ts
  36. schema.parse(["a", undefined]);
  37. // ["a", undefined]
  38. ```
  40. When optional elements appear before later defaults, the parsed tuple is now dense so array operations behave predictably.
  42. ```ts
  43. const schema = z.tuple([
  44. z.string(),
  45. z.string().optional(),
  46. z.string().default("fallback"),
  47. ]);
  49. schema.parse(["a"]);
  50. // ["a", undefined, "fallback"]
  51. ```
  53. Tuple length errors are also more consistent now. Since `z.function()` arguments are tuple-shaped, function input errors may look different.
  55. ### Required object properties with `z.undefined()`
  57. Fixed in [#5661](https://github.com/colinhacks/zod/pull/5661), with follow-up coverage in [`57d80a82`](https://github.com/colinhacks/zod/commit/57d80a82bde8877f3eb79e5dad9786096c37490f). A property whose schema is `z.undefined()` is now treated as required. The key must be present, but its value may be `undefined`.
  59. ```ts
  60. const schema = z.object({
  61. value: z.undefined(),
  62. });
  64. schema.safeParse({}).success;
  65. // false
  67. schema.safeParse({ value: undefined }).success;
  68. // true
  69. ```
  71. Use `.optional()` when the key itself may be absent.
  73. ```ts
  74. const schema = z.object({
  75. value: z.undefined().optional(),
  76. });
  78. schema.safeParse({}).success;
  79. // true
  80. ```
  82. This also affects related `.catch()`, `.partial()`, `.default()`, and `.prefault()` combinations that previously relied on missing `z.undefined()` keys being treated as optional.
  84. ### Safer `.merge()` behavior with refinements
  86. Fixed in [#5856](https://github.com/colinhacks/zod/pull/5856). The `.merge()` method now throws when the receiver has refinements, rather than silently producing ambiguous refinement behavior. Refinements from the second schema are preserved.
  88. ```ts
  89. const a = z.object({ a: z.string() }).refine((val) => val.a.length > 0);
  90. const b = z.object({ b: z.string() });
  92. a.merge(b);
  93. // throws
  94. ```
  96. > Prefer `.extend()` or `.safeExtend()` for object composition. The `.merge()` method is still supported for compatibility, but it is discouraged for new code because its semantics around overlapping keys and refinements are easier to misread.
  98. ### JSON Schema `$defs` entries no longer include redundant `id`
  100. Fixed in [#5759](https://github.com/colinhacks/zod/pull/5759). JSON Schema conversion through `z.toJSONSchema()` now strips redundant `id` fields from `$defs` entries. This is required for correctness in older JSON Schema dialects from before `$id` was introduced: in those dialects, `id` changes the resolution scope, so leaving it inside an extracted definition can make references resolve incorrectly. The removed value was redundant because the schema had already been extracted into `$defs`, so the definition key itself is the identifier. This may affect consumers that were reading those internal `id` fields directly.
  102. Other JSON Schema fixes in this release:
  104. - Draft-04/OpenAPI 3.0 min/max intersections: [#5700](https://github.com/colinhacks/zod/pull/5700)
  105. - Recursive lazy schemas with `.describe()`: [#5797](https://github.com/colinhacks/zod/pull/5797)
  106. - Falsy prefault values emitted as defaults: [#5893](https://github.com/colinhacks/zod/pull/5893)
  107. - CUID pattern output tightened: [#5880](https://github.com/colinhacks/zod/pull/5880)
  109. ### String validators are stricter
  111. Base64 validation now rejects whitespace instead of allowing `atob()`-style whitespace stripping. Fixed in [#5888](https://github.com/colinhacks/zod/pull/5888).
  113. ```ts
  114. z.base64().safeParse("Zm9v").success;
  115. // true
  117. z.base64().safeParse("Zm 9v").success;
  118. // false
  119. ```
  121. Other string validator changes:
  123. - CUID validation through `z.cuid()` has been tightened, and CUID v1 is now deprecated. Fixed in [#5880](https://github.com/colinhacks/zod/pull/5880).
  124. - HTTP URL validation through `z.httpUrl()` now rejects malformed HTTP(S) URLs with a missing slash after the protocol. The underlying `URL` constructor normalizes inputs like `https:/example.com`, but Zod now rejects them instead of accepting the repaired URL. Fixed in [#5672](https://github.com/colinhacks/zod/pull/5672), related to [#5284](https://github.com/colinhacks/zod/issues/5284).
  126. ```ts
  127. z.httpUrl().safeParse("https://example.com").success;
  128. // true
  130. z.httpUrl().safeParse("https:/example.com").success;
  131. // false
  133. z.httpUrl().safeParse("http:/www.apple.com").success;
  134. // false
  135. ```
  137. ### Union paths are fixed in formatted errors
  139. Two union-related error fixes landed:
  141. - Nested union paths are now preserved correctly in the output of `z.treeifyError()` and `z.formatError()`. Fixed in [#5708](https://github.com/colinhacks/zod/pull/5708) and [`60ff3987`](https://github.com/colinhacks/zod/commit/60ff398771bb4b6df04d96f00b9a10ee561ee7af).
  142. - Invalid discriminated union errors now include discriminator options and improved messages. Fixed in [#5723](https://github.com/colinhacks/zod/pull/5723). This may affect users snapshotting `ZodError` output.
  144. ## Other fixes
  146. ### Record key transforms now run
  148. Fixed in [#5891](https://github.com/colinhacks/zod/pull/5891). Record schemas now run transforms on record keys.
  150. ```ts
  151. const schema = z.record(
  152. z.string().transform((key) => key.toUpperCase()),
  153. z.number()
  154. );
  156. schema.parse({ foo: 1 });
  157. // { FOO: 1 }
  158. ```
  160. Related record fixes:
  162. - Key refinement failures now surface as structured `invalid_key` issues. Fixed in [#5719](https://github.com/colinhacks/zod/pull/5719).
  163. - Non-enumerable properties are skipped more consistently. Fixed in [#5719](https://github.com/colinhacks/zod/pull/5719).
  164. - The v3-style single-argument `z.record(valueType)` form works again. Fixed in [`0e960108`](https://github.com/colinhacks/zod/commit/0e960108f0d98dbea7844a8ff914f0980352f636).
  166. ### Metadata and input handling in `fromJSONSchema()`
  168. Schema generation from JSON Schema now applies metadata more consistently across `enum`, `const`, `not`, `anyOf`, and multi-type schemas. Fixed in [#5758](https://github.com/colinhacks/zod/pull/5758). It also rejects or normalizes more non-JSON-like inputs, including cyclic objects and `BigInt`. Fixed in [`87cf0f93`](https://github.com/colinhacks/zod/commit/87cf0f93cd0f34bdc69f11c9377568e6812841c4).
  170. ### Codecs
  172. Codec changes:
  174. - Encoding through `z.discriminatedUnion().encode()` now works when the discriminator uses a codec. Fixed in [#5769](https://github.com/colinhacks/zod/pull/5769).
  175. - Codec inversion was added in [#5770](https://github.com/colinhacks/zod/pull/5770).
  177. ```ts
  178. const stringToNumber = z.codec(
  179. z.string(),
  180. z.number(),
  181. {
  182. decode: Number,
  183. encode: String,
  184. }
  185. );
  187. const numberToString = z.invertCodec(stringToNumber);
  188. ```
  190. ### Transform context
  192. Transform callbacks now support `ctx.addIssue()`. Fixed in [#5699](https://github.com/colinhacks/zod/pull/5699).
  194. ### Conditional `.superRefine()` with `when`
  196. The `when` option was added for `.superRefine()`. Added in [#5741](https://github.com/colinhacks/zod/pull/5741), with related abort behavior fixed in [#5681](https://github.com/colinhacks/zod/pull/5681).
  198. ### Defaults for `Map` and `Set`
  200. Defaults for `Map` and `Set` are now cloned instead of shared across parses. Fixed in [#5855](https://github.com/colinhacks/zod/pull/5855).
  202. ```ts
  203. const schema = z.map(z.string(), z.number()).default(new Map());
  205. const a = schema.parse(undefined);
  206. const b = schema.parse(undefined);
  208. a === b;
  209. // false
  210. ```
  212. ### Empty unions
  214. Empty `z.union([])`, `z.xor([])`, and discriminated unions no longer crash at construction time. They construct and fail at parse time. Fixed in [#5869](https://github.com/colinhacks/zod/pull/5869).
  216. ### Floating-point multiples
  218. Number `multipleOf()` / `step()` validation is more accurate for decimal and exponent edge cases. Fixed in [#5687](https://github.com/colinhacks/zod/pull/5687) and [#5793](https://github.com/colinhacks/zod/pull/5793).
  220. ### Global config and `jitless`
  222. Configuration fixes:
  224. - Global configuration is now shared through `globalThis`, improving behavior across mixed CJS/ESM module instances. Fixed in [#5889](https://github.com/colinhacks/zod/pull/5889).
  225. - Jitless mode now avoids eval probing when set before first access. Fixed in [#5864](https://github.com/colinhacks/zod/pull/5864).
  227. ### Prototype pollution hardening
  229. Object catchall paths now skip `__proto__` keys. Fixed in [#5898](https://github.com/colinhacks/zod/pull/5898).
  231. ## Performance improvements
  233. ### Reduced memory usage from lazy-bound methods
  235. Fixed in [#5897](https://github.com/colinhacks/zod/pull/5897). Classic builder methods are now lazy-bound through a shared internal prototype instead of eagerly attached per schema instance. This significantly reduces per-schema method allocation overhead, especially in codebases that construct many schemas. Detached methods continue to work:
  237. ```ts
  238. const schema = z.string();
  239. const optional = schema.optional;
  241. optional.call(schema);
  242. // still works
  243. ```
  245. ### Improved tree-shaking
  247. Implemented in [`195e8696`](https://github.com/colinhacks/zod/commit/195e86962b5156012a4cdcfbff87dffddce87b78) and [#5689](https://github.com/colinhacks/zod/pull/5689). Top-level factory calls are annotated as pure, and generated stub package manifests now include `sideEffects: false`. This gives bundlers more room to remove unused Zod code.
  249. This is intended as the conclusive fix for a long-standing class of tree-shaking and bundle-size issues, especially in Next.js and Turbopack projects. The most visible symptom was that unused validators and locales could survive bundling even when importing from `zod/mini` or from a narrow subpath.
  251. Related reports include:
  253. - Next.js and Turbopack tree-shaking reports: [#4433](https://github.com/colinhacks/zod/issues/4433), [#5641](https://github.com/colinhacks/zod/issues/5641), [#5095](https://github.com/colinhacks/zod/issues/5095), [#4810](https://github.com/colinhacks/zod/issues/4810)
  254. - Locale and `zod/mini` bundle-size reports: [#5561](https://github.com/colinhacks/zod/issues/5561), [#5665](https://github.com/colinhacks/zod/issues/5665), [#4369](https://github.com/colinhacks/zod/issues/4369), [#4572](https://github.com/colinhacks/zod/issues/4572)
  255. - Broader v4 bundle-size reports: [#2596](https://github.com/colinhacks/zod/issues/2596), [#4637](https://github.com/colinhacks/zod/issues/4637), [#4798](https://github.com/colinhacks/zod/issues/4798), [#5206](https://github.com/colinhacks/zod/issues/5206)
  257. ```json
  258. {
  259. "sideEffects": false
  260. }
  261. ```
  263. ## Locales
  265. Added or updated locale support:
  267. - Croatian: [#5610](https://github.com/colinhacks/zod/pull/5610)
  268. - Greek: [#5840](https://github.com/colinhacks/zod/pull/5840)
  269. - Romanian: [#5657](https://github.com/colinhacks/zod/pull/5657)
  270. - Uzbek map support: [#5599](https://github.com/colinhacks/zod/pull/5599)
  271. - Georgian translation fix: [#5655](https://github.com/colinhacks/zod/pull/5655)
  272. - French issue origin translations: [#5845](https://github.com/colinhacks/zod/pull/5845)
  273. - Italian validation message updates: [#5852](https://github.com/colinhacks/zod/pull/5852)
  275. Locale message text changed in some cases, which may affect snapshots.
  277. ## Closed issues
  279. The following issues were closed by PRs included in this release:
  281. - Closed [#5466](https://github.com/colinhacks/zod/issues/5466) via [#5632](https://github.com/colinhacks/zod/pull/5632): preserve context immutability in parse functions.
  282. - Closed [#5617](https://github.com/colinhacks/zod/issues/5617) via [#5655](https://github.com/colinhacks/zod/pull/5655): correct Georgian translation for `string`.
  283. - Closed [#5619](https://github.com/colinhacks/zod/issues/5619) via [#5657](https://github.com/colinhacks/zod/pull/5657): add Romanian locale.
  284. - Closed [#5229](https://github.com/colinhacks/zod/issues/5229) via [#5661](https://github.com/colinhacks/zod/pull/5661): align object and tuple optionality handling.
  285. - Closed [#5680](https://github.com/colinhacks/zod/issues/5680) via [#5681](https://github.com/colinhacks/zod/pull/5681): respect `abort: true` in `.refine()` checks with `when`.
  286. - Closed [#5678](https://github.com/colinhacks/zod/issues/5678) via [#5699](https://github.com/colinhacks/zod/pull/5699): add missing `addIssue` to transform context.
  287. - Closed [#5717](https://github.com/colinhacks/zod/issues/5717) via [#5718](https://github.com/colinhacks/zod/pull/5718): avoid `delete` in `finalizeIssue`.
  288. - Closed [#5714](https://github.com/colinhacks/zod/issues/5714) via [#5719](https://github.com/colinhacks/zod/pull/5719): skip non-enumerable properties in record validation.
  289. - Closed [#5670](https://github.com/colinhacks/zod/issues/5670) via [#5723](https://github.com/colinhacks/zod/pull/5723): add discriminator `options` to invalid discriminator errors.
  290. - Closed [#5743](https://github.com/colinhacks/zod/issues/5743) via [#5744](https://github.com/colinhacks/zod/pull/5744): increase timeout for the datetime ReDoS checker test.
  291. - Closed [#5732](https://github.com/colinhacks/zod/issues/5732) via [#5758](https://github.com/colinhacks/zod/pull/5758): apply description and default metadata in `fromJSONSchema()`.
  292. - Closed [#5731](https://github.com/colinhacks/zod/issues/5731) via [#5759](https://github.com/colinhacks/zod/pull/5759): strip redundant `id` from `$defs` entries in JSON Schema output.
  293. - Closed [#5605](https://github.com/colinhacks/zod/issues/5605) via [#5763](https://github.com/colinhacks/zod/pull/5763): update `z.custom()` docs for v4 compatibility.
  294. - Closed [#5593](https://github.com/colinhacks/zod/issues/5593) via [#5769](https://github.com/colinhacks/zod/pull/5769): support `discriminatedUnion().encode()` with codec discriminators.
  295. - Closed [#5625](https://github.com/colinhacks/zod/issues/5625) via [#5770](https://github.com/colinhacks/zod/pull/5770): add codec inversion.
  296. - Closed [#5778](https://github.com/colinhacks/zod/issues/5778) via [#5779](https://github.com/colinhacks/zod/pull/5779): add custom docs 404 page.
  297. - Closed [#5792](https://github.com/colinhacks/zod/issues/5792) via [#5793](https://github.com/colinhacks/zod/pull/5793): correct floating-point `multipleOf()` validation.
  298. - Closed [#5777](https://github.com/colinhacks/zod/issues/5777) via [#5797](https://github.com/colinhacks/zod/pull/5797): resolve recursive lazy JSON Schema stack overflow.
  299. - Closed [#5805](https://github.com/colinhacks/zod/issues/5805) via [#5812](https://github.com/colinhacks/zod/pull/5812): fix self-referencing schema docs.
  300. - Closed [#5826](https://github.com/colinhacks/zod/issues/5826) via [#5855](https://github.com/colinhacks/zod/pull/5855): clone `Map` and `Set` defaults.
  301. - Closed [#5842](https://github.com/colinhacks/zod/issues/5842) via [#5856](https://github.com/colinhacks/zod/pull/5856): align `.merge()` refinement semantics with `.extend()`.
  302. - Closed [#4461](https://github.com/colinhacks/zod/issues/4461) and [#5414](https://github.com/colinhacks/zod/issues/5414) via [#5864](https://github.com/colinhacks/zod/pull/5864): honor `jitless` config in the eval probe.
  303. - Closed [#5868](https://github.com/colinhacks/zod/issues/5868) via [#5869](https://github.com/colinhacks/zod/pull/5869): handle empty `z.union([])` and `z.xor([])`.
  304. - Closed [#5296](https://github.com/colinhacks/zod/issues/5296) via [#5891](https://github.com/colinhacks/zod/pull/5891): apply key schema transforms in `z.record()`.
  305. - Closed [#5824](https://github.com/colinhacks/zod/issues/5824) via [#5893](https://github.com/colinhacks/zod/pull/5893): emit falsy prefault values in JSON Schema output.
  307. ## Commits
  309. - Commit [`44f6a03e`](https://github.com/colinhacks/zod/commit/44f6a03e1d7cd918bfb9d9962d967deb6718335b) fix(locales): correct Georgian translation for 'string' to 'ველი' ([#5655](https://github.com/colinhacks/zod/pull/5655)) by @tushargr0ver
  310. - Commit [`7b43bc64`](https://github.com/colinhacks/zod/commit/7b43bc64e7a2720fe66d6e99239c2a00c782e06b) docs(ecosystem): add Hono Takibi ([#5651](https://github.com/colinhacks/zod/pull/5651)) by @nakita628
  311. - Commit [`119376b9`](https://github.com/colinhacks/zod/commit/119376b9dc2e80f44bedd282702b46e18e2ee72c) feat: add map support to Uzbek locale ([#5599](https://github.com/colinhacks/zod/pull/5599)) by @uchkunr
  312. - Commit [`8fbf701e`](https://github.com/colinhacks/zod/commit/8fbf701e6c3770682803988bb20183f6628987da) test: add edge case tests for boundary values ([#5601](https://github.com/colinhacks/zod/pull/5601)) by @uchkunr
  313. - Commit [`f1f93c2b`](https://github.com/colinhacks/zod/commit/f1f93c2bca9984f844017c768183d2ea4b7c9cc4) Fix order of brand method examples in api.mdx ([#5604](https://github.com/colinhacks/zod/pull/5604)) by @onurtemiz
  314. - Commit [`10105ee4`](https://github.com/colinhacks/zod/commit/10105ee40f6aba0d89454c42a49554296cabf992) docs: Fix typos in json-schema documentation ([#5608](https://github.com/colinhacks/zod/pull/5608)) by @SaKaNa-Y
  315. - Commit [`2d367139`](https://github.com/colinhacks/zod/commit/2d3671390f6cae4254642cf9ac7f16783eb6ff20) feat: add hr translation ([#5610](https://github.com/colinhacks/zod/pull/5610)) by @vuki656
  316. - Commit [`54902cb7`](https://github.com/colinhacks/zod/commit/54902cb794f24f4ceb0cf8830e5a27b3490191f7) chore: update pullfrog.yml workflow
  317. - Commit [`89ba70f2`](https://github.com/colinhacks/zod/commit/89ba70f2d50d33a70549bedbd5c79785810ee21b) chore: add sideEffects false to stub package.json for tree-shaking ([#5689](https://github.com/colinhacks/zod/pull/5689)) by @jesse-holden
  318. - Commit [`eaa3c2c3`](https://github.com/colinhacks/zod/commit/eaa3c2c3633a5e6494d8ac03c14365d181794e71) Update positive checks to use alias `.gt(0)` in the docs ([#5671](https://github.com/colinhacks/zod/pull/5671)) by @Fredkiss3
  319. - Commit [`65f1f404`](https://github.com/colinhacks/zod/commit/65f1f404f644cfc9b7f790d310500a05b9d30ca4) fix typo ([#5676](https://github.com/colinhacks/zod/pull/5676)) by @Nikita0x
  320. - Commit [`5b574501`](https://github.com/colinhacks/zod/commit/5b5745014af2a3b0ea6339ccd7bbcbdf845f7181) fix: respect `abort: true` in `.refine()` for checks with `when` function ([#5681](https://github.com/colinhacks/zod/pull/5681))
  321. - Commit [`539de140`](https://github.com/colinhacks/zod/commit/539de140773587724723601720082a9231ba6d64) docs: fix README links for async refinements/transforms ([#5682](https://github.com/colinhacks/zod/pull/5682)) by @pavan-sh
  322. - Commit [`46cd10e7`](https://github.com/colinhacks/zod/commit/46cd10e76339c2f9cf8ad99df49b808e58e69879) docs: fix README anchor links for async APIs ([#5683](https://github.com/colinhacks/zod/pull/5683)) by @pavan-sh
  323. - Commit [`55747b3c`](https://github.com/colinhacks/zod/commit/55747b3cd05cd8b60b4f3d6a6348e2c508069c12) Remove deprecated downlevelIteration option ([#5684](https://github.com/colinhacks/zod/pull/5684)) by @RyanCavanaugh
  324. - Commit [`3a818de1`](https://github.com/colinhacks/zod/commit/3a818de145dc2fa9b5753bc8bf97b0b8484cfbaf) fix(v4): handle multi-digit exponents in floatSafeRemainder ([#5687](https://github.com/colinhacks/zod/pull/5687)) by @shakecodeslikecray
  325. - Commit [`3cd45ebc`](https://github.com/colinhacks/zod/commit/3cd45ebcbcf06a3f16e702a010074dfceca3ea50) fix(v4): add strict validation to `httpUrl()` ([#5672](https://github.com/colinhacks/zod/pull/5672)) by @LuckySilver0021
  326. - Commit [`7d98c909`](https://github.com/colinhacks/zod/commit/7d98c909329713cb2f478620f8a67aaf3ef40ce2) add Sanity as silver sponsor and Mintlify as bronze sponsor
  327. - Commit [`c7805073`](https://github.com/colinhacks/zod/commit/c7805073fef5b6b8857307c3d4b3597a70613bc2) move Sanity and Mintlify to top of sponsor lists
  328. - Commit [`bee2dc8d`](https://github.com/colinhacks/zod/commit/bee2dc8d4971a5142d6197a01426837e2a57f69d) docs: move `z.iso.time()` from format to pattern section ([#5696](https://github.com/colinhacks/zod/pull/5696))
  329. - Commit [`2f8414bc`](https://github.com/colinhacks/zod/commit/2f8414bc90cebc76be87c3640617e300a5d9b060) fix: add missing addIssue to transform context ([#5699](https://github.com/colinhacks/zod/pull/5699)) by @F-A-N-D-E
  330. - Commit [`d3c0ec87`](https://github.com/colinhacks/zod/commit/d3c0ec8764ede3aa7f7c7d47cb5fa985db15be20) docs: add note about removed `.errors` alias in v4 changelog ([#5705](https://github.com/colinhacks/zod/pull/5705)) by @togami2864
  331. - Commit [`fa338a3b`](https://github.com/colinhacks/zod/commit/fa338a3b885e6f8aeefc439b50982132ec0af1b5) fix(v4): JSON schema min/max intersection for draft-04 and openapi-3.0 ([#5700](https://github.com/colinhacks/zod/pull/5700)) by @ebroder
  332. - Commit [`3473b288`](https://github.com/colinhacks/zod/commit/3473b288e02d536252db517a4c51b5adc23603b4) chore: bump zshy to ^0.7.1
  333. - Commit [`cc8f9b7c`](https://github.com/colinhacks/zod/commit/cc8f9b7cb5674c0df03803d05b2a3a00569cdb07) docs: improve README wording and fix typos ([#5736](https://github.com/colinhacks/zod/pull/5736)) by @vedanshshetti
  334. - Commit [`f5336717`](https://github.com/colinhacks/zod/commit/f533671752ae7247bc25dca8f2dbfda80fa2fccc) feat: add json-up to ecosystem ([#5740](https://github.com/colinhacks/zod/pull/5740)) by @mrspence
  335. - Commit [`60ff3987`](https://github.com/colinhacks/zod/commit/60ff398771bb4b6df04d96f00b9a10ee561ee7af) fix(v4): preserve parent path when treeifying nested union/key/element issues
  336. - Commit [`08b14b51`](https://github.com/colinhacks/zod/commit/08b14b51501335a3e0de3cb92c3b2fdeae00a0d6) perf: avoid `delete` in `finalizeIssue` to keep V8 fast mode ([#5718](https://github.com/colinhacks/zod/pull/5718))
  337. - Commit [`9cf868d2`](https://github.com/colinhacks/zod/commit/9cf868d20cdaf4cf80f6d33a6eaf31582f1cdeba) fix(v4): treeify error nested union bug ([#5708](https://github.com/colinhacks/zod/pull/5708)) by @dstashevskyi
  338. - Commit [`28f39a6d`](https://github.com/colinhacks/zod/commit/28f39a6d97ce903ed0d2f6cd99a60d390faa7adf) Add JSONType export ([#5709](https://github.com/colinhacks/zod/pull/5709)) by @RobinVdBroeck
  339. - Commit [`65fab33e`](https://github.com/colinhacks/zod/commit/65fab33e287bba2db5942c7f9ad905ac98f62fce) feat: allow `when` parameter in `.superRefine()` ([#5741](https://github.com/colinhacks/zod/pull/5741)) by @vilvai
  340. - Commit [`7f87df1e`](https://github.com/colinhacks/zod/commit/7f87df1e8ae61679ed9dc3ba223572ce3d7bc716) refactor(v4): remove unnecessary type assertions ([#5720](https://github.com/colinhacks/zod/pull/5720)) by @chisaki66
  341. - Commit [`518f15dd`](https://github.com/colinhacks/zod/commit/518f15ddada3b5d959f4ff32b094789e2d85349a) Preprocess is not deprecated ([#5721](https://github.com/colinhacks/zod/pull/5721)) by @mxdvl
  342. - Commit [`2e5b23dc`](https://github.com/colinhacks/zod/commit/2e5b23dcd41eb257bda434b9997fd60a19cdf38f) fix: add options to invalid discriminator errors ([#5723](https://github.com/colinhacks/zod/pull/5723)) by @Danielchinasa
  343. - Commit [`7f789def`](https://github.com/colinhacks/zod/commit/7f789defd73ee35f3099ab5c2091cb19bd2b3578) fix: skip non-enumerable properties in record validation ([#5719](https://github.com/colinhacks/zod/pull/5719)) by @veeceey
  344. - Commit [`ee15fa19`](https://github.com/colinhacks/zod/commit/ee15fa1905f7c6626dea5f8dc880e66cdb4700ad) docs: add AGENTS notes for JSDoc, PR comments, and PR worktree workflow
  345. - Commit [`f52b4d28`](https://github.com/colinhacks/zod/commit/f52b4d288fabb03b98ff3f893c58e285eb310e96) Revert "docs: improve README wording and fix typos (#5736)"
  346. - Commit [`ddb41391`](https://github.com/colinhacks/zod/commit/ddb413916bc238e8d2d6ba67a2ce4b48ff2aa930) test: increase timeout for redos checker in datetime.test.ts ([#5744](https://github.com/colinhacks/zod/pull/5744)) by @rishadaufa
  347. - Commit [`bc07e459`](https://github.com/colinhacks/zod/commit/bc07e459bab4f895bf1c99f182c6841d577c16b3) docs: fix doc ([#5745](https://github.com/colinhacks/zod/pull/5745)) by @xgaia
  348. - Commit [`e06af5de`](https://github.com/colinhacks/zod/commit/e06af5de314f1cad8dfaa0a5f1909e21ffff9e49) Update Hey API description ([#5748](https://github.com/colinhacks/zod/pull/5748)) by @mrlubos
  349. - Commit [`28c156e2`](https://github.com/colinhacks/zod/commit/28c156e254ebdf65d9ed3de4caf1d4293f7e7a84) fix: apply description and default metadata to enum, const, and not schemas in fromJSONSchema ([#5758](https://github.com/colinhacks/zod/pull/5758)) by @mibragimov
  350. - Commit [`f457edf1`](https://github.com/colinhacks/zod/commit/f457edf1e504787eadfe2dffe51a77c64e3f0e17) Fix grammar in CONTRIBUTING.md ([#5765](https://github.com/colinhacks/zod/pull/5765)) by @siekmang
  351. - Commit [`411f6c64`](https://github.com/colinhacks/zod/commit/411f6c64e910c5e18799d0a7a09bcd7a4e40f23e) fix(v4): resolve stack overflow in toJSONSchema for recursive lazy with describe ([#5797](https://github.com/colinhacks/zod/pull/5797)) by @Hassad674
  352. - Commit [`45dd421e`](https://github.com/colinhacks/zod/commit/45dd421e72e989752fa5f85529dfbf50bdbd3f61) docs: add tone guidelines for issue and PR comments to AGENTS.md
  353. - Commit [`ddd20a30`](https://github.com/colinhacks/zod/commit/ddd20a300441d7cffd59821461ed0c2fe9c96bbc) test: align optional property assertions with actual inferred types
  354. - Commit [`a1cf8a93`](https://github.com/colinhacks/zod/commit/a1cf8a9312582591d9cdccdd677ba1d90e706cc0) docs: update z.custom example for v4 compatibility ([#5763](https://github.com/colinhacks/zod/pull/5763)) by @andrewdamelio
  355. - Commit [`b6a3b336`](https://github.com/colinhacks/zod/commit/b6a3b3369a5b9fdde9adde8203b96b71c0634ad5) fix: strip redundant id from `$defs` entries in toJSONSchema ([#5759](https://github.com/colinhacks/zod/pull/5759)) by @mibragimov
  356. - Commit [`c7a8ccc0`](https://github.com/colinhacks/zod/commit/c7a8ccc0d0fb4f2bd1c938b8d79873a8ebd6573e) fix: discriminatedUnion encode() with codec discriminator ([#5769](https://github.com/colinhacks/zod/pull/5769)) by @mahmoodhamdi
  357. - Commit [`87cf0f93`](https://github.com/colinhacks/zod/commit/87cf0f93cd0f34bdc69f11c9377568e6812841c4) fix(fromJSONSchema): normalize input via JSON round-trip
  358. - Commit [`7163e6f2`](https://github.com/colinhacks/zod/commit/7163e6f25ae8c90be79bd588417440c047ee30b0) feat: add `.invert()` method to ZodCodec ([#5770](https://github.com/colinhacks/zod/pull/5770)) by @mahmoodhamdi
  359. - Commit [`b59b9b13`](https://github.com/colinhacks/zod/commit/b59b9b13c20397389c5d4dc3a2ecbcd5e9349395) fix: replace `.default` with `.prefault` ([#5776](https://github.com/colinhacks/zod/pull/5776)) by @alanskovrlj
  360. - Commit [`93bba686`](https://github.com/colinhacks/zod/commit/93bba686325e09dced20da8d7bc18c7e61b71562) docs: add Zod AOT to ecosystem page ([#5806](https://github.com/colinhacks/zod/pull/5806)) by @wakita181009
  361. - Commit [`2564caa4`](https://github.com/colinhacks/zod/commit/2564caa440e690fd3ad58ce55fdff0fe073d6cc0) fix(docs): add custom 404 page with proper theme support ([#5779](https://github.com/colinhacks/zod/pull/5779)) by @WolfieLeader
  362. - Commit [`5b7ed214`](https://github.com/colinhacks/zod/commit/5b7ed214526cb5a7cc508aec236603ff79ae9579) fix: correct multipleOf float validation using tolerance-based comparison ([#5793](https://github.com/colinhacks/zod/pull/5793)) by @cyphercodes
  363. - Commit [`cc9139d2`](https://github.com/colinhacks/zod/commit/cc9139d209001bfdeb23dfe2d5b0262c02c950cf) docs: fix self-referencing schema in refine when() example ([#5812](https://github.com/colinhacks/zod/pull/5812)) by @claygeo
  364. - Commit [`0e960108`](https://github.com/colinhacks/zod/commit/0e960108f0d98dbea7844a8ff914f0980352f636) fix(v4): support v3-style single-arg z.record(valueType)
  365. - Commit [`41b25af9`](https://github.com/colinhacks/zod/commit/41b25af98f108d7b6f695576d4e0330b97252bfd) docs(agents): refine PR comment tone guidance
  366. - Commit [`4c03c20d`](https://github.com/colinhacks/zod/commit/4c03c20d2bc7e013e8b80ce55380cd4b82bfe352) Update Italian locale error messages for validation ([#5852](https://github.com/colinhacks/zod/pull/5852)) by @pastorello
  367. - Commit [`37ac1ba0`](https://github.com/colinhacks/zod/commit/37ac1ba0d694b3b80e22c006dc6e2b78b0c956dc) fix(fr): translate issue.origin in too_big/too_small errors ([#5845](https://github.com/colinhacks/zod/pull/5845)) by @Ouaziz-chedli
  368. - Commit [`345be203`](https://github.com/colinhacks/zod/commit/345be2039463516aaac90640c14de1b697e775b6) docs: add validex to ecosystem ([#5848](https://github.com/colinhacks/zod/pull/5848)) by @chiptoma
  369. - Commit [`3c1f32bd`](https://github.com/colinhacks/zod/commit/3c1f32bd280c01b836d4790981fd769cf9041d29) feat(locales/en): handle instanceof and add comprehensive locale tests
  370. - Commit [`888e52bb`](https://github.com/colinhacks/zod/commit/888e52bb1762f8a8b881af48d9f1bdc353372af8) feat(locales): add Greek (el) locale ([#5840](https://github.com/colinhacks/zod/pull/5840)) by @saileshbro
  371. - Commit [`bf6d99ed`](https://github.com/colinhacks/zod/commit/bf6d99ed76be86e4871d2381ecd9832293c13406) Revert "feat(locales/en): handle instanceof and add comprehensive locale tests"
  372. - Commit [`e8196a8d`](https://github.com/colinhacks/zod/commit/e8196a8d98e3bc3cc6714ef5ff34b5abf33eff4a) fix(resolution): align expected fr message with translated locale
  373. - Commit [`b6b12882`](https://github.com/colinhacks/zod/commit/b6b1288277e6ca87dab0ad1c7251b92612b7445c) correct logic for validating length ([#5843](https://github.com/colinhacks/zod/pull/5843)) by @nameearly
  374. - Commit [`34f60159`](https://github.com/colinhacks/zod/commit/34f601590351e5d3a57fe20c001155940ba65324) fix(v4): clone Map and Set in shallowClone to prevent shared state across `.default()` parses ([#5855](https://github.com/colinhacks/zod/pull/5855)) by @artur-seppa
  375. - Commit [`91a7d0d1`](https://github.com/colinhacks/zod/commit/91a7d0d1e0d3c8338e9fd92cf819cded87e8973f) fix(v4): reject whitespace in z.base64() to close atob bypass
  376. - Commit [`23edf484`](https://github.com/colinhacks/zod/commit/23edf4844bcd89fa37c549dab187ce7f86728540) Revert "fix(v4): reject whitespace in z.base64() to close atob bypass"
  377. - Commit [`15cafa13`](https://github.com/colinhacks/zod/commit/15cafa13940b7055cc21e4ef440a6a0c6b7af72b) fix(v4): throw on `.merge()` receiver with refinements; preserve refinements from second schema ([#5856](https://github.com/colinhacks/zod/pull/5856)) by @solssak
  378. - Commit [`584b1089`](https://github.com/colinhacks/zod/commit/584b1089e1fc7bfcc97797576eff8da85bcdf031) fix(v4): reject whitespace in z.base64() to close atob bypass ([#5888](https://github.com/colinhacks/zod/pull/5888)) by @colinhacks
  379. - Commit [`b9b62c65`](https://github.com/colinhacks/zod/commit/b9b62c65357c2b0fed4ae046a30c8e84e4094202) fix(core): honour `jitless` config in `allowsEval` probe ([#5864](https://github.com/colinhacks/zod/pull/5864)) by @dokson
  380. - Commit [`fffe99bd`](https://github.com/colinhacks/zod/commit/fffe99bdd7445cc072b5ed2d74b2a6204bdbc86c) fix(v4): construct empty unions instead of crashing ([#5869](https://github.com/colinhacks/zod/pull/5869)) by @tjenkinson
  381. - Commit [`285bde7f`](https://github.com/colinhacks/zod/commit/285bde7f43ca66938eeac38dea852256d4757336) feat(core): share `globalConfig` across module systems via `globalThis` ([#5889](https://github.com/colinhacks/zod/pull/5889)) by @colinhacks
  382. - Commit [`195e8696`](https://github.com/colinhacks/zod/commit/195e86962b5156012a4cdcfbff87dffddce87b78) perf(v4): mark top-level factory calls as `/*@__PURE__*/` for tree-shaking
  383. - Commit [`61d7bedb`](https://github.com/colinhacks/zod/commit/61d7bedb873bf8185162bb51d027fd8acf2710ee) fix(v4): apply key schema transforms in z.record() ([#5891](https://github.com/colinhacks/zod/pull/5891)) by @colinhacks
  384. - Commit [`45acd2ad`](https://github.com/colinhacks/zod/commit/45acd2ad78fb34ef61c5b72e9c03dfeaa432bef9) ci(release): switch to npm trusted publishing via OIDC ([#5890](https://github.com/colinhacks/zod/pull/5890)) by @colinhacks
  385. - Commit [`476ae243`](https://github.com/colinhacks/zod/commit/476ae243e86344af08d6c396deed082e83d7d7e1) Tighten cuid() regex and deprecate CUID v1 ([#5880](https://github.com/colinhacks/zod/pull/5880)) by @colinhacks
  386. - Commit [`6217527e`](https://github.com/colinhacks/zod/commit/6217527e4880054dda5e4d33aa12192a36a35062) docs(agents): document push-to-main footgun and version-bump rule ([#5883](https://github.com/colinhacks/zod/pull/5883)) by @colinhacks
  387. - Commit [`757f0b0f`](https://github.com/colinhacks/zod/commit/757f0b0f5217e0e7125478cd91af1e2c0cd21aa9) fix(v4): apply util.Writeable<T> in strictObject/looseObject for shape display parity ([#5882](https://github.com/colinhacks/zod/pull/5882)) by @colinhacks
  388. - Commit [`fa4a3740`](https://github.com/colinhacks/zod/commit/fa4a37404966d7ada0f5bb02ceeb592f1d4d9c52) fix(v4): apply util.Writeable in mini object constructors and extend/safeExtend/partial/required ([#5895](https://github.com/colinhacks/zod/pull/5895)) by @colinhacks
  389. - Commit [`ebc8287c`](https://github.com/colinhacks/zod/commit/ebc8287ca206402cf3a9aceb745b204493cbadfb) fix(v4): emit falsy prefault values in toJSONSchema ([#5893](https://github.com/colinhacks/zod/pull/5893)) by @mixelburg
  390. - Commit [`8fcb71a5`](https://github.com/colinhacks/zod/commit/8fcb71a5ffa5b32a508ac8bb38b7e1e13c387bf5) perf(v4): lazy-bind builder methods to shared internal prototype ([#5897](https://github.com/colinhacks/zod/pull/5897)) by @colinhacks
  391. - Commit [`76e8f706`](https://github.com/colinhacks/zod/commit/76e8f706bb554de82234106de8299d0139cb3b8e) fix(v4): skip `__proto__` key in object catchall ([#5898](https://github.com/colinhacks/zod/pull/5898)) by @colinhacks
  392. - Commit [`f0b0608e`](https://github.com/colinhacks/zod/commit/f0b0608ee300e609772405501ab4b219f0e19680) ecosystem: `eslint-plugin-zod-x` is `eslint-plugin-zod` now ([#5637](https://github.com/colinhacks/zod/pull/5637)) by @marcalexiei
  393. - Commit [`0b5c3bc2`](https://github.com/colinhacks/zod/commit/0b5c3bc2b9e095e06687d2381bdd741185fbfee9) docs: fix refinements examples in api.mdx ([#5649](https://github.com/colinhacks/zod/pull/5649)) by @playoffthecuff
  394. - Commit [`327e152e`](https://github.com/colinhacks/zod/commit/327e152e463c85e6404388738d397ed92e5f3999) docs(agents): refine PR comment tone guidance further
  395. - Commit [`57d80a82`](https://github.com/colinhacks/zod/commit/57d80a82bde8877f3eb79e5dad9786096c37490f) test(v4): pin object/tuple key optionality through optout propagation
  396. - Commit [`f19860f1`](https://github.com/colinhacks/zod/commit/f19860f1f17e3bdc3e696ee5290441bba093d7a4) fix: preserve context immutability in parse functions ([#5632](https://github.com/colinhacks/zod/pull/5632)) by @bgk614
  397. - Commit [`ec979ad7`](https://github.com/colinhacks/zod/commit/ec979ad783a9e9c992d3c9bd4e5f3b56110b1ef8) feat: add Romanian (ro) locale ([#5657](https://github.com/colinhacks/zod/pull/5657)) by @tushargr0ver
  398. - Commit [`b6066b3e`](https://github.com/colinhacks/zod/commit/b6066b3e4730fc8b966d13974b4abae8dce25df4) fix(v4): align object and tuple optionality handling ([#5661](https://github.com/colinhacks/zod/pull/5661)) by @Cyjin-jani
  399. - Commit [`ad0b8271`](https://github.com/colinhacks/zod/commit/ad0b82713e70e53707dd5e6497c9d922fcba3721) ci: update release workflow for trusted publishing
  400. - Commit [`6db607be`](https://github.com/colinhacks/zod/commit/6db607be3c218ad9f23fef8975de1f37469680e7) fix(release): keep JSR manifest publishable
  401. - Commit [`f778e02a`](https://github.com/colinhacks/zod/commit/f778e02a81842cbc40b1a448a85b29747227c49d) build: bump zshy for JSR wildcard exports

view on githubimported 2026-09-28 via npm