3.1.7

What's Changed

Dependencies

• Updated eslint to 10.9.0.
• Updated vitest and @vitest/coverage-v8 to 4.1.11.
• Updated highlight.js to 11.12.0 on the documentation page.
• Updated the distroless/nodejs24-debian13 base image digest.

Documentation

• Added the OpenSSF Best Practices badge to the README.

Compatibility

• No changes to the public API.
• CLI, Docker usage, and validateEnv continue to work as before.
• This release contains maintenance updates only.

3.1.6

What's Changed

Dependencies

• Updated esbuild to 0.28.2.
• Updated @types/node to 26.2.0.
• Updated typescript-eslint to 8.67.0.
• Updated tsx to 4.23.12.
• Updated eslint to 10.8.1.
• Updated prettier to 3.9.6.
• Updated fast-check to 4.9.0.
• Updated vitest to 4.1.10.
• Updated the distroless/nodejs24-debian13 base image digest.

Compatibility

• No changes to the public API.
• CLI, Docker usage, and validateEnv continue to work as before.
• This release contains maintenance updates only.

3.1.5

What's Changed

Dependencies

• Updated tsx to 4.23.0.
• Updated @types/node to 26.1.0.

Compatibility

• No changes to the public API.
• CLI, Docker usage, and validateEnvFromSchema continue to work as before.
• This release contains maintenance updates only.

3.1.4

Added

• Added property-based fuzz tests using fast-check to improve validation robustness against unexpected inputs.

• Added four fuzz/property-based test targets covering:

  • core environment validation
  • custom validators
  • arbitrary schema inputs
  • encoding and edge cases

• Added a dedicated fuzz CI workflow to run property-based fuzz tests on Node.js 22, 24, and 26.

3.1.3

What's Changed

API

• Added validateEnv(schema, env) as a pure validation function.
• Added loadSchemaFromPath(schemaPath, dynamicImport?).
• Exported new types: EnvSchema, EnvValues, EnvValidationIssue, and EnvValidationResult.
• validateEnvFromSchema remains compatible with previous usage.

Dependencies

• Updated valitype from 2.0.2 to 3.0.0.

Security and Supply Chain

• Added OpenSSF Scorecard workflow.
• Added Renovate Bot configuration.
• Added CODEOWNERS.
• Pinned Docker images by SHA digest.
• Added SRI hashes to documentation assets.
• Scoped GitHub Actions permissions at the job level.

Quality

• Added Jazzer.js fuzzing with 4 targets covering validation, custom validators, schemas, and encoding edge cases.

Compatibility

CLI, Docker usage, and validateEnvFromSchema continue to work as before.

3.1.2

This release was not published due to a Docker build error. Use 3.1.3 instead.

3.1.1

This release was not published due to a Docker build error. Use 3.1.3 instead.

3.1.0

This release was not published due to a Docker build error. Use 3.1.3 instead.

3.0.0

Breaking Changes

• envguardr v3.0.0 drops support for Node.js 20.
• The supported Node.js matrix is now 22, 24, and 26.
• If your CI, local environment, or deployment pipeline still runs on Node.js 20, upgrade Node.js before installing this release.

What's New

• Added Node.js 26 support.
• Added CHANGELOG.md to the repository.

Docs

• Launched a static documentation site built with plain HTML, no framework, and no vulnerable runtime dependencies.
• Rewrote the README with a clearer opening, comparison table, and reorganized badges.

2.2.1

What's Changed

• envguardr v2.2.1 fixes the Docker image deployment from the previous release.
• No changes were made to the CLI behavior, validation API, or schema format.
• No breaking changes.

Docker

• Docker images are available on Docker Hub and GitHub Container Registry.
• Published images continue to support linux/amd64 and linux/arm64.

docker pull docker.io/fontebasso/envguardr:2.2.1
docker pull ghcr.io/fontebasso/envguardr:2.2.1