{
 "id": "zod",
 "name": "Zod",
 "url": "https://dev-news.anonyfox.com/zod/",
 "site": "https://zod.dev",
 "ecosystem": "js",
 "title": "Zod release history: a compromised credential and a staged release",
 "description": "Every Zod release since 2024 from npm by minor line, the six malicious commits pushed to main in September 2026, and the staged, approval-gated npm publishing Zod moved to afterwards.",
 "lede": {
  "date": "2026-10-24",
  "paragraphs": [
   "Zod 4.6.6 went out on 11 October 2026 with a note at the top of its release: six malicious commits were pushed to main on 21 September with a compromised git credential. They were reverted the same day and later removed from the history of main, and none of them reached npm. The note came out 20 days after the push.",
   "The same release changed how Zod gets to npm. The release workflow now stages new versions instead of publishing them, and the run waits on an approval environment until someone signs off on what was staged. Before that, a release was one npm publish from CI."
  ]
 },
 "latest": {
  "version": "4.6.7",
  "date": "2026-10-12",
  "url": "https://github.com/colinhacks/zod/releases/tag/v4.6.7",
  "summary": "b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7"
 },
 "stable_releases_since_2024": 148,
 "prereleases_since_2024": 32,
 "releases": [
  {
   "version": "4.6.7",
   "date": "2026-10-12",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.6.7",
   "summary": "b500a2ee95134f81d74da7911d7378dd2853d042 4.6.7"
  },
  {
   "version": "4.6.6",
   "date": "2026-10-11",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.6.6",
   "summary": "0cd3af5e9f50ad11bbcd4407a46a21b8848ba574 docs: load the en locale directly in Zod Mini"
  },
  {
   "version": "4.6.5",
   "date": "2026-09-13",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.6.5",
   "summary": "d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post"
  },
  {
   "version": "4.6.4",
   "date": "2026-09-13",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.6.4",
   "summary": "d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI"
  },
  {
   "version": "4.6.3",
   "date": "2026-09-12",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.6.3",
   "summary": "413cce9a fix(v4): make z.properties() a check again — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and…"
  },
  {
   "version": "4.6.2",
   "date": "2026-09-10",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.6.2",
   "summary": "9446b5cc fix: preserve undefined prefault outputs and object keys — closes #6585"
  },
  {
   "version": "4.6.1",
   "date": "2026-09-09",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.6.1",
   "summary": "b12aa523 fix: preserve unique tags with defaulted discriminators — closes #6577"
  },
  {
   "version": "4.6.0",
   "date": "2026-09-09",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.6.0",
   "summary": ".validate() — checks input validity without building a result (up to 35x faster than .safeParse().success on a compiled schema)"
  },
  {
   "version": "4.5.4",
   "date": "2026-08-29",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.5.4",
   "summary": "84e416fbf4740527bbc8f319634f4e1b065bb42c fix(v4): stop the cycle walk from firing a default factory"
  },
  {
   "version": "4.5.3",
   "date": "2026-08-29",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.5.3",
   "summary": "e6b6ab347675cd2bd54b1bdbed16f98c59be82a9 docs(blog): widen the z.compile example to a 20-property schema"
  },
  {
   "version": "4.5.2",
   "date": "2026-08-29",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.5.2",
   "summary": "a354314ac04fdd5484aa62dd5c3a4b553211a0e4 fix(docs): keep blog posts out of the docs collection"
  },
  {
   "version": "4.5.0",
   "date": "2026-08-28",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.5.0",
   "summary": "z.compile() — the flagship feature of Zod 4.5"
  },
  {
   "version": "4.5.1",
   "date": "2026-08-28",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.5.1",
   "summary": "2e862dbf89da2835e5206a8fd3d3be61afe3cf7f ci: gate the GitHub release and JSR publish on the version being live on npm"
  },
  {
   "version": "4.4.3",
   "date": "2026-05-04",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.4.3",
   "summary": "4c2fa95ce3f3390fbc522324e406b4e9e89b88f9 docs: use Zernio primary wordmark for gold sponsor logo"
  },
  {
   "version": "4.4.2",
   "date": "2026-05-01",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.4.2",
   "summary": "0c62df0ea19fd05abdf90473e9eef7eea530fab2 Clean up docs navigation and stale labels"
  },
  {
   "version": "4.4.1",
   "date": "2026-04-29",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.4.1",
   "summary": "481f7be4238c83ed58183f921b2646f340a91c6a ci: gate release publishing on full test workflow"
  },
  {
   "version": "4.4.0",
   "date": "2026-04-29",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.4.0",
   "summary": "Draft-04/OpenAPI 3.0 min/max intersections: #5700"
  },
  {
   "version": "4.3.6",
   "date": "2026-01-22",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.3.6",
   "summary": "9977fb0868432461de265a773319e80a90ba3e37 Add brand.dev to sponsors"
  },
  {
   "version": "4.3.5",
   "date": "2026-01-04",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.3.5",
   "summary": "21afffdb42ccab554036312e33fed0ea3cb8f982 [Docs] Update migration guide docs for deprecation of message"
  },
  {
   "version": "4.3.4",
   "date": "2025-12-31",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.3.4",
   "summary": "1a8bea3b474eada6f219c163d0d3ad09fadabe72 Add integration tests"
  },
  {
   "version": "4.3.3",
   "date": "2025-12-31",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.3.3",
   "summary": "f3b2151959d215d405f54dff3c7ab3bf1fd887ca v4.3.3"
  },
  {
   "version": "4.3.2",
   "date": "2025-12-31",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.3.2",
   "summary": "bf96635d243118de6e4f260077aa137453790bf6 Loosen strictObjectinside intersection"
  },
  {
   "version": "4.3.1",
   "date": "2025-12-31",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.3.1",
   "summary": "0fe88407a4149c907929b757dc6618d8afe998fc allow non-overwriting extends with refinements. 4.3.1"
  },
  {
   "version": "4.3.0",
   "date": "2025-12-31",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.3.0",
   "summary": "All primitive types (string, number, integer, boolean, null, object, array)"
  },
  {
   "version": "4.2.1",
   "date": "2025-12-16",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.2.1",
   "summary": "5b5b129315fbc94a3b0d6244185eaeefcbe438d1 4.2.1"
  },
  {
   "version": "4.2.0",
   "date": "2025-12-15",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.2.0",
   "summary": "af49c084f66339110d00e37ff71dc7b3b9f2b7ef Update docs for JSON Schema conversion of z.undefined()"
  },
  {
   "version": "4.1.13",
   "date": "2025-11-24",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.1.13",
   "summary": "5c2602ceb8be8941c64bbe5ac7d92cc174ae6f7e Update AI widget"
  },
  {
   "version": "4.1.12",
   "date": "2025-10-06",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.1.12",
   "summary": "0b109c37c6b0b10e3901b56bcccb72e29a0b846f docs(ecosystem): add bupkis to the ecosystem section"
  },
  {
   "version": "4.1.11",
   "date": "2025-09-20",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.1.11",
   "summary": "2bed4b39760d8e4d678203b5c8fcaf24c182fc9f 4.1.11"
  },
  {
   "version": "4.1.10",
   "date": "2025-09-20",
   "url": "https://github.com/colinhacks/zod/releases/tag/v4.1.10",
   "summary": "7ffedd00169d8dc2e7cb7c6d878f29b03e05b3a3 Fix shape caching"
  }
 ],
 "log": [],
 "then": [],
 "coverage": {
  "ok": true,
  "expected": 180,
  "present": 180,
  "checked_at": "2026-10-24T17:23:21.434Z",
  "since": "2024-01-01T00:00:00.000Z"
 },
 "sources": {
  "releases": {
   "type": "npm",
   "id": "zod",
   "exclude": "-(dev|insiders|nightly|canary|experimental|next)|-beta\\.\\d{8}T|-canary"
  },
  "github": {
   "repo": "colinhacks/zod",
   "tag_filter": "^v\\d"
  }
 },
 "feed": "https://dev-news.anonyfox.com/zod/feed.xml",
 "markdown": "https://dev-news.anonyfox.com/zod.md"
}