Skip to content

chore: Bump valibot from 1.1.0 to 1.4.0#49

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/valibot-1.4.0
Closed

chore: Bump valibot from 1.1.0 to 1.4.0#49
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/valibot-1.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 16, 2026

Copy link
Copy Markdown

Bumps valibot from 1.1.0 to 1.4.0.

Release notes

Sourced from valibot's releases.

v1.4.0

Many thanks to @​ksaurav24, @​heiwen, @​compulim, @​ysknsid25, @​alaycock-stripe, @​IlyaSemenov, @​wszgrcy, @​LMGO, @​yslpn, @​EltonLobo07 and @​Eronmmer for contributing to this release.

Read the release notes on our website for a quick overview of the most exciting new features in this release.

  • Add isoDateTimeSecond validation action to validate ISO date times with seconds (pull request #1418)
  • Add toCamelCase, toKebabCase, toPascalCase and toSnakeCase transformation actions to convert strings between common naming conventions (pull request #1457)
  • Change internal ReadonlyOutputKeys and OutputWithReadonly types of object schemas and WithReadonly type of record schemas to improve TypeScript type performance (pull request #1442)
  • Change hot paths to reduce object allocations and improve runtime performance (pull request #1437)
  • Change build target to ES2020 so distributed output stays compatible with environments that lack support for newer syntax (pull request #1455)
  • Change internal _LruCache to use a TypeScript private method instead of a #private class field to avoid runtime helpers in the transpiled output (pull request #1455)
  • Change internal _isValidObjectKey to use Object.prototype.hasOwnProperty.call instead of Object.hasOwn so the distributed output stays compatible with runtimes that lack the ES2022 Object.hasOwn builtin (pull request #1421)
  • Change flatten method to accept readonly issue arrays (pull request #1269)
  • Fix potential RangeError caused by spreading large issue arrays (pull request #1437)
  • Fix creditCard validation action to reject Mastercard numbers with invalid lengths (pull request #1462)
  • Fix intersect schema to no longer mutate input values, allowing frozen objects and arrays to be merged (pull request #1463)

v1.4.0 (to-json-schema)

Many thanks to @​stefanprobst, @​sruenwg and @​cruzdanilo for contributing to this release.

  • Add support for examples action
  • Add support for integer when used with minValue and maxValue actions (pull request #1367)
  • Change Valibot peer dependency to v1.2.0
  • Fix conversion of exactOptional object properties (pull request #1220)
  • Fix conversion of variant to use oneOf instead of anyOf (pull request #1193)

v1.3.1

  • Change MAC48_REGEX, MAC64_REGEX and MAC_REGEX to drop the i flag for better JSON Schema compatibility (pull request #1430)
  • Change hash action to use case-expanded character classes instead of the i flag (pull request #1430)

v1.3.0

Many thanks to @​EskiMojo14, @​yslpn, @​alexilyaev, @​idleberg, @​BerkliumBirb and @​frenzzy for contributing to this release.

Read the release notes on our website for a quick overview of the most exciting new features in this release.

  • Add guard transformation action to narrow types using type predicates (pull request #1204)
  • Add parseBoolean transformation action to parse boolean values from strings and other types (pull request #1251)
  • Add isrc validation action to validate ISRC codes (pull request #1373)
  • Add cache method for caching schema output by input (pull request #1170)
  • Add domain validation action to validate domain names (pull request #1284)
  • Add jwsCompact validation action to validate JWS compact strings (pull request #1348)
  • Fix creditCard validation action to allow 13-digit Visa card numbers (pull request #1347)
  • Fix isoTimestamp validation action to allow optional space before UTC offset for PostgreSQL timestamptz compatibility (pull request #1195)
  • Fix types for deeply readonly default and fallback values

v1.3.0 (to-json-schema)

Many thanks to @​Xiot for contributing to this release.

  • Add ignoreActions configuration to be able to ignore specific actions during conversion
  • Add typeMode configuration to be able to control whether to convert input or output type of schema

... (truncated)

Commits
  • 52280c5 Bump version to 1.4.0 and update changelog for release
  • 482ad9e Update description on rfcEmail (#1073)
  • 7b5db7b Adds example for optional (#1321)
  • d66a0fe Rewrite introduction guide from first-person to third-person perspective (#1388)
  • 2f5213b Accept readonly issues in flatten (#1269)
  • 0bfe812 Add link to the config method for granular control over each pipeline in webs...
  • b16fdf9 Fix intersect with frozen objects (#1463)
  • 17cd7ed fix: prefer hasOwnProperty over hasOwn (#1421)
  • 7d0790c feat(i18n): add Uzbek (Latin) locale (#1452)
  • a41dabd feat: add built-in string case transformation actions (toCamelCase, `toSnak...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for valibot since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [valibot](https://github.com/open-circle/valibot) from 1.1.0 to 1.4.0.
- [Release notes](https://github.com/open-circle/valibot/releases)
- [Commits](open-circle/valibot@v1.1.0...v1.4.0)

---
updated-dependencies:
- dependency-name: valibot
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github May 30, 2026

Copy link
Copy Markdown
Author

Superseded by #50.

@dependabot dependabot Bot closed this May 30, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/valibot-1.4.0 branch May 30, 2026 17:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant