Skip to content

Bump arktype from 2.1.26 to 2.2.8 - #157

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/arktype-2.2.8
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/arktype-2.2.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 18, 2026

Copy link
Copy Markdown

Bumps arktype from 2.1.26 to 2.2.8.

Changelog

Sourced from arktype's changelog.

2.2.8

Add string.base58

Validates base58-encoded strings, which use the Bitcoin alphabet (no 0, O, I or l):

const Base58 = type("string.base58")
// valid
Base58("3mJr7AoUXx2Wqd")
// ArkErrors: must be base58-encoded (was "0OIl")
Base58("0OIl")

Thanks to @​WolfieLeader.

Return empty props for object

type("object").props threw instead of returning the empty list of properties, like type({}).props does (#1682, fixes #1177).

Thanks to @​SunilRathod27.

Keep object values from meta in JSON Schema

Meta values that aren't primitives, like an object or array default or a custom key like x-unit, were emitted as internal $ark references instead of their JSON values (#1677). Defaults that aren't valid JSON, including functions, now go through the defaultValue fallback.

Thanks to @​lprnmns.

Report invalid generic definitions on TypeScript 7

TypeScript 7 only reports the error of the last overload that fails, which for an invalid generic definition was the tuple expression signature rather than ArkType's own message (#1681):

// TypeScript 7 previously: Argument of type '"<n extends nummer>"' is not assignable to parameter of type '"Array" | ...
// now: 'nummer' is unresolvable
type("<n extends nummer>", "n > 0")

The generic and tuple expression signatures of type are now a single signature, so TypeScript 6 and 7 report the same errors directly, and errors in a generic's body point at the invalid property.

2.2.7

Fix this[] in self-referential object types

Referencing an array of the enclosing type threw a spurious shallow resolution cycle error:

// previously threw, now parses
const Node = type({
</tr></table> 

... (truncated)

Commits
  • fe481db attest ts7 support, arktype fixes (#1680)
  • 9303229 feat(type): add string.base58 built-in validator (#1604)
  • 97ed4f9 Return empty props for base object instead of throwing (#1682)
  • 1ee4923 release: arktype 2.2.7 + dependents (#1675)
  • 0f88b51 fix(type): keep uppercase UUIDs valid in string.uuid JSON Schema (#1670)
  • 066f4f2 fix: Hermes withPrefixKey crash and Turbopack static this in scope.module (...
  • 14ef64c fix(type): parse string.date.epoch.parse input as milliseconds (#1669)
  • 254328c fix(schema): release unused parse context ids from the global registry (#1673)
  • ca8ec6c test: partial/required on tuple sequences (#1480) (#1590)
  • e83417a fix this[] shallow resolution cycle in self-referential types (#1618)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for arktype since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [arktype](https://github.com/arktypeio/arktype/tree/HEAD/ark/type) from 2.1.26 to 2.2.8.
- [Release notes](https://github.com/arktypeio/arktype/releases)
- [Changelog](https://github.com/arktypeio/arktype/blob/main/ark/type/CHANGELOG.md)
- [Commits](https://github.com/arktypeio/arktype/commits/arktype@2.2.8/ark/type)

---
updated-dependencies:
- dependency-name: arktype
  dependency-version: 2.2.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 18, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedarktype@​2.1.26 ⏵ 2.2.8100100100 +193 +5100

View full report

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants