seroval releases

From the release notesPatch Changes Harden value validation in the JSON reader and fromFormRequest .

From the release notesPatch Changes 0d5c590: fromJSON and fromCrossJSON now decode a well known symbol that appears more than once in a value. The second use used to become undefined , or failed as a malformed node when it was an object key.…

From the release notesPatch Changes b8937eb: The blob and form data plugins of toFormData and fromFormData now check their fields with plugin validators. A tampered field throws SerovalPluginValidationError , as the cause of the SerovalDeseri…

From the release notesMinor Changes b85f3b9: Add @seroval/transport , which sends many streamed values over one connection, such as a fetch body, a WebSocket or a MessagePort . createJSONWriter sends each value under a key as messages, and cr…

From the release notesPatch Changes 7ae5573: Fix several parser edge cases: The async parser no longer leaves a rejecting promise unhandled while an earlier sibling is still pending. The stream parser removes queued records in constant time,…

From the release notesPatch Changes bb4c3fc: Streamed Request payloads now deserialize where stream request bodies are supported. RequestPlugin adds duplex: 'half' to the request options when the body is a ReadableStream , which Chrome 105+ a…

From the release notesPatch Changes Read a RegExp's pattern and flags through the RegExp.prototype getters, so own source or flags properties on the value no longer change the output.

From the release notesPatch Changes eb60188: Check the File, ImageData, Event and CustomEvent fields during deserialization. The options of each are checked field by field and copied, and ImageData's data must be a Uint8ClampedArray .

From the release notesNo changes in this release.

From the release notesPatch Changes 2d03651: serialize , toJSON , crossSerialize and toCrossJSON now throw when the value contains an async iterable or a ReadableStream , as they do for a promise. Before, they sent a stream that never got its…

From the release notesMinor Changes 9a75aae: Add the assignSharedRefsOnly option to crossSerialize and crossSerializeAsync . It stores only the values the output reads more than once in $R , which makes shorter output when no later script ref…