Skip to content

feat(deps): Bump valibot from 1.4.2 to 1.5.0 - #25957

Merged
msonnb merged 1 commit into
developfrom
dependabot/npm_and_yarn/valibot-1.5.0
Oct 30, 2026
Merged

feat(deps): Bump valibot from 1.4.2 to 1.5.0#25957
msonnb merged 1 commit into
developfrom
dependabot/npm_and_yarn/valibot-1.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps valibot from 1.4.2 to 1.5.0.

Release notes

Sourced from valibot's releases.

v1.5.0

Many thanks to @​tats-u, @​idleberg, @​yslpn, @​francisjohnjohnston-web, @​MaxFreedomPollard, @​mahirhir, @​ItzXynx, @​LeSingh1, @​maxtaran2010, @​ysknsid25, @​cyyynthia, @​spokodev and @​sanjibani for contributing to this release.

  • Add codePoints, maxCodePoints, minCodePoints and notCodePoints validation actions to validate the number of Unicode code points (pull request #888)
  • Add ksuid validation action to validate KSUIDs (pull request #1370)
  • Change Standard Schema properties to use eager initialization for faster schema construction and replace internal _getStandardProps utility with _standardSchema (pull request #1534)
  • Change url action to use URL.canParse when available to avoid constructing URL objects (pull request #1608)
  • Fix stringifyJson action to preserve the dataset value when JSON.stringify returns undefined (pull request #1476)
  • Fix literal schema and value, values, notValue and notValues actions to treat NaN as equal to itself (pull request #1573)
  • Fix intersect schema to merge matching NaN values and invalid dates (pull request #1573)
  • Fix cache and cacheAsync methods to clone the issues of a cached dataset, preventing parent schemas from adding their path item to the same issue on every cache hit (pull request #1620)
  • Fix strictObject, looseObject, objectWithRest and their async variants to correctly handle unknown input keys that collide with Object.prototype members (pull request #1523)
  • Fix intersect and intersectAsync schemas to ignore inherited properties when merging objects and preserve own properties without invoking inherited setters or changing the output prototype (pull request #1621)
  • Fix ulid action to reject ULIDs that exceed the maximum 128-bit value (pull request #1498)
  • Fix email action to reject non-ASCII characters accepted by Unicode case folding (pull request #1075)

v1.5.0 (to-json-schema)

  • Add support for JSON Schema draft-2020-12 and OpenAPI 3.0 Schema Object format
  • Add propertyNames support to record schemas for key validation constraints
  • Add support for toBigint, toBoolean, toDate, toNumber and toString actions for typeMode: 'input'
  • Add new toStandardJsonSchema function to convert Valibot schemas to Standard JSON Schema format
  • Change return type from JSONSchema7 to a custom JsonSchema type
Commits
  • 5016198 chore: prepare Valibot v1.5.0 release (#1627)
  • 1ffb038 fix(intersect): skip inherited prototype props in _merge (#1621)
  • 1c4983f fix(ulid): restrict first character to 0-7 per ULID spec (#1498)
  • 5e449cd perf(url): use URL.canParse for validation (#1608)
  • 4acda1b Make sure that email validators don't match unintentional non-ASCII local par...
  • 95943ab fix: handle object keys that collide with Object.prototype in object schemas ...
  • d65438c fix(cache): clone cached issues to stop issue paths from accumulating (#1620)
  • 3ed804a dependabot: bump the github-actions group across 1 directory with 2 updates (...
  • 0681f43 fix: use SameValueZero equality for special numeric values (#1573)
  • 98ef8b4 Improve perf by changing ~standard implementation (#1534)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 30, 2026
@dependabot
dependabot Bot requested review from a team as code owners October 30, 2026 14:49
@dependabot
dependabot Bot requested review from isaacs, msonnb, mydea and nicohrubec and removed request for a team October 30, 2026 14:49
@msonnb

msonnb commented Oct 30, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/valibot-1.5.0 branch from b7856d9 to e65d07d Compare October 30, 2026 15:35
@dependabot
feat(deps): Bump valibot from 1.4.2 to 1.5.0
0e6ddae 
Bumps [valibot](https://github.com/open-circle/valibot) from 1.4.2 to 1.5.0.
- [Release notes](https://github.com/open-circle/valibot/releases)
- [Commits](open-circle/valibot@v1.4.2...v1.5.0)

---
updated-dependencies:
- dependency-name: valibot
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/valibot-1.5.0 branch from e65d07d to 0e6ddae Compare October 30, 2026 15:50
@sentry-junior sentry-junior Bot mentioned this pull request Oct 30, 2026
Merged
chargome added a commit that referenced this pull request Oct 30, 2026
@sentry-junior @chargome
Revert "ci(deps): Dedupe lockfile on Dependabot PRs (#25911)" (#25962)
b63640b 
**Why:** With `autoDedupe` enabled in #25961, Dependabot now writes an
already-deduped lockfile, so the dedupe workflow from #25911 has nothing
left to do. After #25961 merged, Dependabot rebased #25955, #25956 and
#25957. On all three, `pnpm dedupe` made no changes: the upload step was
skipped, no artifact was created and no dedupe commit was pushed. `Check
lockfile` passed on #25955 and #25957. #25956 fails `pnpm install` with
`ERR_PNPM_IGNORED_BUILDS`, which is a separate problem.

**How to review:** This is a clean `git revert` of bc8fdf1. It also
restores the optional E2E condition in `build.yml` to the `github.actor`
check, since the author-based check was only needed once the dedupe app
started pushing to Dependabot branches.

<!-- junior-request-attribution:start -->
via **Charly Gomez**.
<!-- junior-request-attribution:end -->

<!-- junior-session-footer:start -->
<!-- junior-conversation-id:slack%3AC02TB1YBNGJ%3A1793371893.509089 -->

--

[View
Session](https://junior-prod.sentry.dev/conversations/slack%3AC02TB1YBNGJ%3A1793371893.509089)
[[Sentry]](https://sentry.sentry.io/explore/conversations/slack%3AC02TB1YBNGJ%3A1793371893.509089/?project=4510944073809921)

<!-- junior-session-footer:end -->

Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Charly Gomez <charly.gomez@sentry.io>
@msonnb
msonnb merged commit e201b4f into develop Oct 30, 2026
343 checks passed
@msonnb
msonnb deleted the dependabot/npm_and_yarn/valibot-1.5.0 branch October 30, 2026 19:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@msonnb msonnb msonnb approved these changes
@isaacs isaacs Awaiting requested review from isaacs isaacs is a code owner automatically assigned from getsentry/team-javascript-sdks-server
@mydea mydea Awaiting requested review from mydea mydea is a code owner automatically assigned from getsentry/team-javascript-sdks-server
@nicohrubec nicohrubec Awaiting requested review from nicohrubec nicohrubec is a code owner automatically assigned from getsentry/team-javascript-sdks-framework

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@msonnb