@oxog/vld 1.4.0 → 2.0.1

package/CHANGELOG.md

@@ -1,334 +1,450 @@
-# Changelog
-
-All notable changes to VLD will be documented in this file.
-
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
-## [1.4.0] - 2026-01-02
-
-### 🚀 **Zod 4 Full API Parity Achieved**
-- **Complete Feature Set**: 100% Zod 4 API compatibility
-- **1142 Tests Passing**: Comprehensive test coverage across all features
-- **Production Ready**: All validators, codecs, and utilities fully tested
-
-### ✨ New Features
-
-#### **v.cidrv6() - IPv6 CIDR Block Validator**
-New validator for IPv6 CIDR notation validation:
-- Supports full IPv6 addresses with prefix lengths (0-128)
-- Validates compressed IPv6 notation (`::`, `::1`, etc.)
-- Rejects IPv4 CIDR blocks
-
-#### **.apply() - External Function Chaining**
-Apply external functions to validators for advanced composition:
-- Enables functional composition patterns
-- Supports custom validation pipelines
-- Full TypeScript type inference
-
-#### **.safeExtend() - Type-Safe Object Extension**
-Safely extend object schemas without accidentally overriding existing fields:
-- Prevents accidental field overrides in object schemas
-- Clear error messages listing all conflicting keys
-- Supports chaining multiple safeExtend calls
-
-### 🌍 Internationalization Updates
-- Added i18n messages for all new features in **27+ languages**
-- New messages: `stringCidrv6`, `safeExtendOverlap`
-- Updated all locale files with translations
-
-### 🔧 Build System Improvements
-- **Fixed ESM module resolution**: Directory imports now correctly resolve to `/index.js`
-- **Updated fix-imports script**: Now handles directory-based imports properly
-- **Renamed to CommonJS**: `scripts/fix-imports.cjs` for ESM package compatibility
-
-### 📊 Performance
-VLD continues to outperform Zod across all benchmarks:
-- **2.52x faster** average performance
-- **9/10 benchmark wins** vs Zod
-- **2.41x less memory** usage overall
-- **83x faster** schema creation
-
-### 🧪 Testing
-- **49 test suites** - All passing
-- **1142 tests** - Comprehensive coverage
-- **TypeScript strict mode** - Full type safety verified
-
-## [1.3.1] - 2025-11-12
-
-### 🎯 **100% Test Success Rate Achieved**
-- **Perfect Test Coverage**: All 695 tests now passing (0 failures)
-- **IPv6 Validation Fix**: Resolved final failing test for IPv6-mapped addresses
-- **Security Validation**: All 4 critical security fixes thoroughly tested
-
-### 🔧 Bug Fixes
-- **IPv6 Validation**: Fixed validation for IPv4-mapped IPv6 addresses (`::ffff:192.0.2.1`)
-- **Test Coverage**: Updated documentation to reflect 695 passing tests (up from 694)
-
-### ✅ Quality Assurance
-- **100% Test Success**: Achieved perfect test success rate across all test suites
-- **Security Hardening**: All security vulnerabilities validated with comprehensive tests
-- **Performance Maintained**: No performance impact from security improvements
-
-## [1.3.0] - 2025-11-12
-
-### 🔒 **Critical Security Update**
-- **SECURITY**: Fixed 4 critical security vulnerabilities identified in comprehensive bug analysis
-- **Enhanced Security**: Comprehensive protection against prototype pollution, ReDoS attacks, and type safety issues
-- **Security-First**: All validators now include security controls while maintaining backwards compatibility
-
-### 🛡️ Security Fixes Implemented
-
-#### **BUG-001: Union Validator Type Safety** ✅ FIXED
-- **Issue**: Constructor name spoofing vulnerability in union validators
-- **Solution**: Replaced constructor name checking with secure feature detection
-- **Impact**: Prevents malicious validator objects from bypassing type checks
-- **Location**: `src/validators/union.ts`
-
-#### **BUG-002: Prototype Pollution Prevention** ✅ FIXED
-- **Issue**: Prototype pollution vulnerability in codec utilities
-- **Solution**: Added comprehensive input validation and suspicious content detection
-- **Impact**: Prevents `__proto__`, `constructor`, and `prototype` pollution attacks
-- **Location**: `src/utils/codec-utils.ts`
-
-#### **BUG-004: IPv6 ReDoS Prevention** ✅ FIXED
-- **Issue**: Regular Expression Denial of Service (ReDoS) vulnerability in IPv6 validation
-- **Solution**: Replaced complex regex with multi-step validation approach
-- **Impact**: Prevents catastrophic backtracking attacks while maintaining IPv6 support
-- **Location**: `src/validators/string.ts`, `src/coercion/string.ts`
-
-#### **BUG-005: Safe String Coercion** ✅ FIXED
-- **Issue**: Unsafe type coercion without length limits or sanitization
-- **Solution**: Added length limits (1M characters) and control character sanitization
-- **Impact**: Prevents DoS attacks and information disclosure through malicious strings
-- **Location**: `src/coercion/string.ts`
-
-### 📊 Quality Improvements
-- **Test Coverage**: Maintained excellent coverage at **96.55%** with **695 passing tests**
-- **Performance**: All security improvements maintain VLD's performance advantages
-- **Backwards Compatibility**: All changes are fully backwards compatible
-- **Security Testing**: Comprehensive security test suite added with 18 dedicated tests
-
-### 🧪 Testing & Validation
-- **Security Test Suite**: Added comprehensive security validation tests
-- **Performance Tests**: Verified security fixes don't impact performance
-- **Integration Tests**: Validated compatibility with existing codebases
-- **Memory Tests**: Confirmed no memory leaks with security enhancements
-
-### 📝 Documentation Updates
-- **Security Documentation**: Detailed security analysis reports created
-- **Bug Fix Reports**: Comprehensive documentation of all fixes implemented
-- **Test Coverage**: Updated coverage metrics to reflect new security tests
-- **README**: Updated to reflect latest test coverage and security improvements
-
-### 🔧 Technical Details
-- **Zero Breaking Changes**: All security improvements are backwards compatible
-- **Immutable Architecture**: Security hardening maintains VLD's immutable validator pattern
-- **Type Safety**: Enhanced type checking without compromising TypeScript inference
-- **Error Handling**: Improved error messages for security-related validation failures
-
-## [1.2.0] - 2025-08-24 
-
-### 🎯 **100% Test Success Rate Achieved** 
-- **569 tests passing** with 0 failures across all test suites
-- **97.3% statement coverage** (up from 97.18%)
-- **93.5% branch coverage** 
-- **96.78% function coverage**
-- **97.6% line coverage**
-- All Zod-compatible codec tests now fully passing
-
-### 🚀 Major Features Added
-
-#### **Codec System - Bidirectional Transformations**
-- **NEW**: Complete codec system for bidirectional data transformations
-  - `v.codec()` factory method for creating custom codecs
-  - Full encode/decode support with type safety
-  - Async codec support with `parseAsync()` and `encodeAsync()` methods
-  - Comprehensive error handling for both directions
-
-#### **19 Built-in Zod-Compatible Codecs**
-
-**String Conversion Codecs:**
-- `stringToNumber` - String ↔ Number with validation
-- `stringToInt` - String ↔ Integer with validation  
-- `stringToBigInt` - String ↔ BigInt conversion
-- `numberToBigInt` - Number ↔ BigInt conversion
-- `stringToBoolean` - Flexible string ↔ boolean (`'true'`, `'1'`, `'yes'`, `'on'` → `true`)
-
-**Date Conversion Codecs:**
-- `isoDatetimeToDate` - ISO 8601 string ↔ Date object
-- `epochSecondsToDate` - Unix seconds ↔ Date object  
-- `epochMillisToDate` - Unix milliseconds ↔ Date object
-
-**JSON and Complex Data:**
-- `jsonCodec()` - Generic JSON string ↔ any type
-- `base64Json()` - Base64-encoded JSON with schema validation
-- `jwtPayload()` - JWT payload decoder (read-only)
-
-**URL and Web:**
-- `stringToURL` - String ↔ URL object
-- `stringToHttpURL` - HTTP/HTTPS URL validation and conversion
-- `uriComponent` - URI component encode/decode
-
-**Binary Data:**
-- `base64ToBytes` - Base64 ↔ Uint8Array
-- `base64urlToBytes` - URL-safe Base64 ↔ Uint8Array  
-- `hexToBytes` - Hexadecimal ↔ Uint8Array
-- `utf8ToBytes` - UTF-8 string ↔ Uint8Array
-- `bytesToUtf8` - Uint8Array ↔ UTF-8 string
-
-#### **New Validator Types**
-- `v.base64()` - Base64 string validation with URL-safe mode
-- `v.hex()` - Hexadecimal string validation with lowercase mode
-- `v.uint8Array()` - Uint8Array validation with length constraints
-
-#### **Enhanced Utilities**
-- Comprehensive codec utility functions in `codec-utils.ts`
-- Cross-platform Base64 encoding/decoding (Node.js + Browser)
-- Secure error handling for all codec operations
-
-### 📚 Documentation Updates
-- **README.md**: Comprehensive codec documentation with examples
-- **API.md**: Complete codec API reference with TypeScript examples
-- **New Examples**: 
-  - `examples/codecs.js` - JavaScript codec examples
-  - `examples/codecs.ts` - TypeScript codec examples with full type safety
-- Updated CLAUDE.md with codec development guidance
-
-### 🔧 Technical Improvements  
-- **Zero Circular Dependencies**: Refactored codec architecture
-- **Full Type Safety**: Complete TypeScript support with inference
-- **97.3% Test Coverage**: Comprehensive test suite with 569 passing tests
-- **Error Message Localization**: All codec errors support 27+ languages
-
-### 🎯 Zod Compatibility
-- **100% Zod Codec Parity**: All Zod codecs implemented and compatible
-- **Beyond Zod**: Additional codecs not available in Zod
-- **Drop-in Replacement**: Seamless migration path from Zod codecs
-
-### Performance
-- **Optimized Transformations**: Efficient bidirectional conversions
-- **Memory Efficient**: Immutable codec architecture prevents leaks
-- **Async Support**: Non-blocking operations for I/O-bound transformations
-
-## [1.1.1] - 2025-08-18
-
-### Security
-- **CRITICAL**: Fixed prototype pollution vulnerability in VldObject passthrough mode
-  - Added protection against `__proto__`, `constructor`, and `prototype` key pollution
-  - Comprehensive security test suite added
-
-### Fixed
-- Removed unnecessary escape characters in regex patterns (URL validation)
-- Fixed escape characters in locale files (Afrikaans)
-- Added ESLint configuration for code quality
-
-### Added
-- Security test suite with prototype pollution prevention tests
-- Coverage improvement tests for better code quality
-- ESLint configuration with TypeScript support
-
-### Changed
-- Improved test coverage to 97.1% statements
-- All linting issues resolved
-
-## [1.1.0] - 2025-08-12
-
-### Added
-- Professional benchmark suite with real-world performance testing
-  - `benchmarks/quick-bench.cjs` - Fast performance comparison
-  - `benchmarks/memory.cjs` - Memory usage analysis
-  - `benchmarks/startup.cjs` - Startup time comparison
-  - `benchmarks/performance.cjs` - Comprehensive benchmark suite
-- Complete documentation overhaul in `/docs` folder:
-  - `API.md` - Full API reference with all methods and examples
-  - `GETTING_STARTED.md` - Beginner-friendly guide
-  - `MIGRATION.md` - Step-by-step Zod to VLD migration
-  - `PERFORMANCE.md` - Performance optimization guide
-  - `ADVANCED_FEATURES.md` - Deep dive into advanced features
-
-### Changed
-- Updated README with accurate benchmark results showing 2.07x average improvement
-- All documentation converted to English
-- Improved build process with automatic ES module import fixes
-- Test coverage increased to 99.5%
-- Cleaned up project structure for better maintainability
-
-### Removed
-- Deleted `coverage/` folder (unnecessary for npm package)
-- Removed 12 old benchmark files
-- Cleaned up `src/errors/` and `src/types/` folders
-- Removed redundant test files focused on coverage metrics
-- Deleted unnecessary example files
-
-### Fixed
-- Fixed ES module import issues with `.js` extension resolver
-- Resolved CommonJS compatibility for benchmark files
-- Fixed all TypeScript compilation errors
-- Corrected package.json export configurations
-
-### Performance
-- Memory usage: 86% less than Zod
-- Startup time: 1.94x faster
-- Schema creation: 8.22x faster
-- Overall performance: 2.07x faster average
-
-## [1.0.0] - 2025-08-11
-
-### Initial Release
-
-#### Core Features
-- **Blazing Fast Performance**: 2-4x faster than Zod in most operations
-- **Zero Dependencies**: Lightweight with no external packages
-- **Full TypeScript Support**: Excellent type inference and IntelliSense
-- **Zod API Compatibility**: Drop-in replacement with identical API
-- **Tree-Shakeable**: Only import what you need
-
-#### Validation Types
-- **Primitives**: string, number, boolean, bigint, symbol, date, undefined, null, void, any, unknown, never
-- **Collections**: array, tuple, object, record, map, set
-- **Compositions**: union, intersection, literal, enum
-- **Modifiers**: optional, nullable, nullish, default, catch
-
-#### Advanced Features
-- **Type Coercion**: Automatic type conversion for common cases
-- **Custom Validation**: `refine()` and `superRefine()` for custom logic
-- **Data Transformation**: `transform()` for post-validation processing
-- **Object Utilities**: `pick()`, `omit()`, `extend()`, `merge()`, `partial()`
-- **Error Formatting**: Tree, pretty, and flatten utilities
-
-#### Internationalization
-- Built-in support for 27+ languages
-- Easy locale switching with `setLocale()`
-- Comprehensive translation coverage
-
-#### String Validators
-- Email, URL, UUID validation
-- IP address (v4/v6) validation
-- Regex pattern matching
-- Length constraints (min, max, length)
-- Content checks (includes, startsWith, endsWith)
-- Transformations (trim, toLowerCase, toUpperCase)
-
-#### Number Validators
-- Range validation (min, max)
-- Type constraints (int, positive, negative, finite, safe)
-- Mathematical checks (multipleOf)
-
-#### Performance Optimizations
-- Optimized for V8 JavaScript engine
-- Minimal memory allocations
-- Fast-path optimizations for common cases
-- Immutable validators prevent memory leaks
-- Pre-computed validation strategies
-
-#### Developer Experience
-- Clear, actionable error messages
-- Comprehensive test suite (99.5% coverage)
-- Extensive documentation and examples
-- TypeScript-first design
-- Intuitive, chainable API
-
----
-
+# Changelog
+
+All notable changes to VLD will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [2.0.1] - 2026-01-25
+
+### 🧪 Test Coverage Improvements
+- **99.23% Statement Coverage**: Up from previous release
+- **1,858 Tests Passing**: Comprehensive test suite with 100% success rate
+- **Coverage Gap Tests**: Added dedicated test file for edge cases
+
+### 🔧 Bug Fixes
+- Fixed TypeScript errors in test files
+- Fixed lazy locale loader edge cases
+- Improved codec error handling tests
+
+### 📚 Documentation
+- Updated version references across documentation
+- Improved test coverage documentation
+
+---
+
+## [2.0.0] - 2026-01-20
+
+### 🚀 **Major Release - Modular Architecture**
+
+This release introduces a completely new modular architecture for better tree-shaking, lazy locale loading, and dual ESM/CJS support.
+
+### ✨ New Features
+
+#### **Tree-Shakable Mini API** (`@oxog/vld/mini`)
+New functional API that enables proper tree-shaking:
+```typescript
+import { string, number, object, optional } from '@oxog/vld/mini';
+
+const schema = object({
+  name: string().min(1),
+  age: optional(number().positive()),
+});
+```
+- **82% bundle size reduction** when using only needed validators
+- Individual factory functions instead of monolithic `v` object
+- Full TypeScript support with identical type inference
+
+#### **Lazy Locale Loading** (`@oxog/vld/locales`)
+Async locale loading to reduce initial bundle size:
+```typescript
+import { setLocaleAsync } from '@oxog/vld/locales';
+await setLocaleAsync('tr'); // Loads Turkish on demand
+```
+- **92% bundle reduction** - Only English bundled by default
+- `preloadLocales()` for SSR/batch loading
+- `registerLocale()` for static imports
+- Full backwards compatibility with existing `setLocale()`
+
+#### **Dual ESM/CJS Build System**
+- ESM builds for modern bundlers (Vite, esbuild, webpack 5+)
+- CJS builds for Node.js and legacy environments
+- Proper `exports` field in package.json with conditional exports
+
+#### **New Coercion Module** (`@oxog/vld/coercion`)
+Dedicated coercion validators export:
+```typescript
+import { VldCoerceString, VldCoerceNumber } from '@oxog/vld/coercion';
+```
+
+### 📦 Package Exports
+
+New conditional exports for optimal imports:
+```json
+{
+  "@oxog/vld": "Full API (backwards compatible)",
+  "@oxog/vld/mini": "Tree-shakable functional API",
+  "@oxog/vld/locales": "Lazy locale loader",
+  "@oxog/vld/locales/*": "Individual locale files",
+  "@oxog/vld/validators/*": "Individual validators",
+  "@oxog/vld/codecs": "Codec utilities",
+  "@oxog/vld/errors": "Error formatting utilities"
+}
+```
+
+### 🔧 Build System Changes
+- Migrated to Rollup with `@rollup/plugin-typescript`
+- Removed duplicate `rollup-plugin-typescript2`
+- Added `tsconfig.build.json` for type declarations
+- Inline dynamic imports for CJS lazy locale build
+
+### 📊 Bundle Size Comparison
+
+| Scenario | v1.x | v2.0 | Improvement |
+|----------|------|------|-------------|
+| Full API import | 45KB | 45KB | - |
+| Mini API (string + object) | 45KB | ~8KB | **82%** |
+| Single validator | 45KB | ~3KB | **93%** |
+| With 1 locale only | 108KB+ | ~8KB | **92%** |
+
+### 🧪 Testing
+- **1,858 tests** - All passing
+- **99.23% coverage** - Comprehensive test suite
+- Added tests for mini API, lazy locales, and coverage gaps
+
+### ⚠️ Migration Guide
+
+**No breaking changes** - v2.0 is fully backwards compatible:
+
+```typescript
+// Old way (still works)
+import { v, setLocale } from '@oxog/vld';
+setLocale('tr');
+const schema = v.string().min(1);
+
+// New way (tree-shakable)
+import { string } from '@oxog/vld/mini';
+import { setLocaleAsync } from '@oxog/vld/locales';
+await setLocaleAsync('tr');
+const schema = string().min(1);
+```
+
+---
+
+## [1.4.0] - 2026-01-02
+
+### 🚀 **Zod 4 Full API Parity Achieved**
+- **Complete Feature Set**: 100% Zod 4 API compatibility
+- **1142 Tests Passing**: Comprehensive test coverage across all features
+- **Production Ready**: All validators, codecs, and utilities fully tested
+
+### ✨ New Features
+
+#### **v.cidrv6() - IPv6 CIDR Block Validator**
+New validator for IPv6 CIDR notation validation:
+- Supports full IPv6 addresses with prefix lengths (0-128)
+- Validates compressed IPv6 notation (`::`, `::1`, etc.)
+- Rejects IPv4 CIDR blocks
+
+#### **.apply() - External Function Chaining**
+Apply external functions to validators for advanced composition:
+- Enables functional composition patterns
+- Supports custom validation pipelines
+- Full TypeScript type inference
+
+#### **.safeExtend() - Type-Safe Object Extension**
+Safely extend object schemas without accidentally overriding existing fields:
+- Prevents accidental field overrides in object schemas
+- Clear error messages listing all conflicting keys
+- Supports chaining multiple safeExtend calls
+
+### 🌍 Internationalization Updates
+- Added i18n messages for all new features in **27+ languages**
+- New messages: `stringCidrv6`, `safeExtendOverlap`
+- Updated all locale files with translations
+
+### 🔧 Build System Improvements
+- **Fixed ESM module resolution**: Directory imports now correctly resolve to `/index.js`
+- **Updated fix-imports script**: Now handles directory-based imports properly
+- **Renamed to CommonJS**: `scripts/fix-imports.cjs` for ESM package compatibility
+
+### 📊 Performance
+VLD continues to outperform Zod across all benchmarks:
+- **2.52x faster** average performance
+- **9/10 benchmark wins** vs Zod
+- **2.41x less memory** usage overall
+- **83x faster** schema creation
+
+### 🧪 Testing
+- **49 test suites** - All passing
+- **1142 tests** - Comprehensive coverage
+- **TypeScript strict mode** - Full type safety verified
+
+## [1.3.1] - 2025-11-12
+
+### 🎯 **100% Test Success Rate Achieved**
+- **Perfect Test Coverage**: All 695 tests now passing (0 failures)
+- **IPv6 Validation Fix**: Resolved final failing test for IPv6-mapped addresses
+- **Security Validation**: All 4 critical security fixes thoroughly tested
+
+### 🔧 Bug Fixes
+- **IPv6 Validation**: Fixed validation for IPv4-mapped IPv6 addresses (`::ffff:192.0.2.1`)
+- **Test Coverage**: Updated documentation to reflect 695 passing tests (up from 694)
+
+### ✅ Quality Assurance
+- **100% Test Success**: Achieved perfect test success rate across all test suites
+- **Security Hardening**: All security vulnerabilities validated with comprehensive tests
+- **Performance Maintained**: No performance impact from security improvements
+
+## [1.3.0] - 2025-11-12
+
+### 🔒 **Critical Security Update**
+- **SECURITY**: Fixed 4 critical security vulnerabilities identified in comprehensive bug analysis
+- **Enhanced Security**: Comprehensive protection against prototype pollution, ReDoS attacks, and type safety issues
+- **Security-First**: All validators now include security controls while maintaining backwards compatibility
+
+### 🛡️ Security Fixes Implemented
+
+#### **BUG-001: Union Validator Type Safety** ✅ FIXED
+- **Issue**: Constructor name spoofing vulnerability in union validators
+- **Solution**: Replaced constructor name checking with secure feature detection
+- **Impact**: Prevents malicious validator objects from bypassing type checks
+- **Location**: `src/validators/union.ts`
+
+#### **BUG-002: Prototype Pollution Prevention** ✅ FIXED
+- **Issue**: Prototype pollution vulnerability in codec utilities
+- **Solution**: Added comprehensive input validation and suspicious content detection
+- **Impact**: Prevents `__proto__`, `constructor`, and `prototype` pollution attacks
+- **Location**: `src/utils/codec-utils.ts`
+
+#### **BUG-004: IPv6 ReDoS Prevention** ✅ FIXED
+- **Issue**: Regular Expression Denial of Service (ReDoS) vulnerability in IPv6 validation
+- **Solution**: Replaced complex regex with multi-step validation approach
+- **Impact**: Prevents catastrophic backtracking attacks while maintaining IPv6 support
+- **Location**: `src/validators/string.ts`, `src/coercion/string.ts`
+
+#### **BUG-005: Safe String Coercion** ✅ FIXED
+- **Issue**: Unsafe type coercion without length limits or sanitization
+- **Solution**: Added length limits (1M characters) and control character sanitization
+- **Impact**: Prevents DoS attacks and information disclosure through malicious strings
+- **Location**: `src/coercion/string.ts`
+
+### 📊 Quality Improvements
+- **Test Coverage**: Maintained excellent coverage at **96.55%** with **695 passing tests**
+- **Performance**: All security improvements maintain VLD's performance advantages
+- **Backwards Compatibility**: All changes are fully backwards compatible
+- **Security Testing**: Comprehensive security test suite added with 18 dedicated tests
+
+### 🧪 Testing & Validation
+- **Security Test Suite**: Added comprehensive security validation tests
+- **Performance Tests**: Verified security fixes don't impact performance
+- **Integration Tests**: Validated compatibility with existing codebases
+- **Memory Tests**: Confirmed no memory leaks with security enhancements
+
+### 📝 Documentation Updates
+- **Security Documentation**: Detailed security analysis reports created
+- **Bug Fix Reports**: Comprehensive documentation of all fixes implemented
+- **Test Coverage**: Updated coverage metrics to reflect new security tests
+- **README**: Updated to reflect latest test coverage and security improvements
+
+### 🔧 Technical Details
+- **Zero Breaking Changes**: All security improvements are backwards compatible
+- **Immutable Architecture**: Security hardening maintains VLD's immutable validator pattern
+- **Type Safety**: Enhanced type checking without compromising TypeScript inference
+- **Error Handling**: Improved error messages for security-related validation failures
+
+## [1.2.0] - 2025-08-24 
+
+### 🎯 **100% Test Success Rate Achieved** 
+- **569 tests passing** with 0 failures across all test suites
+- **97.3% statement coverage** (up from 97.18%)
+- **93.5% branch coverage** 
+- **96.78% function coverage**
+- **97.6% line coverage**
+- All Zod-compatible codec tests now fully passing
+
+### 🚀 Major Features Added
+
+#### **Codec System - Bidirectional Transformations**
+- **NEW**: Complete codec system for bidirectional data transformations
+  - `v.codec()` factory method for creating custom codecs
+  - Full encode/decode support with type safety
+  - Async codec support with `parseAsync()` and `encodeAsync()` methods
+  - Comprehensive error handling for both directions
+
+#### **19 Built-in Zod-Compatible Codecs**
+
+**String Conversion Codecs:**
+- `stringToNumber` - String ↔ Number with validation
+- `stringToInt` - String ↔ Integer with validation  
+- `stringToBigInt` - String ↔ BigInt conversion
+- `numberToBigInt` - Number ↔ BigInt conversion
+- `stringToBoolean` - Flexible string ↔ boolean (`'true'`, `'1'`, `'yes'`, `'on'` → `true`)
+
+**Date Conversion Codecs:**
+- `isoDatetimeToDate` - ISO 8601 string ↔ Date object
+- `epochSecondsToDate` - Unix seconds ↔ Date object  
+- `epochMillisToDate` - Unix milliseconds ↔ Date object
+
+**JSON and Complex Data:**
+- `jsonCodec()` - Generic JSON string ↔ any type
+- `base64Json()` - Base64-encoded JSON with schema validation
+- `jwtPayload()` - JWT payload decoder (read-only)
+
+**URL and Web:**
+- `stringToURL` - String ↔ URL object
+- `stringToHttpURL` - HTTP/HTTPS URL validation and conversion
+- `uriComponent` - URI component encode/decode
+
+**Binary Data:**
+- `base64ToBytes` - Base64 ↔ Uint8Array
+- `base64urlToBytes` - URL-safe Base64 ↔ Uint8Array  
+- `hexToBytes` - Hexadecimal ↔ Uint8Array
+- `utf8ToBytes` - UTF-8 string ↔ Uint8Array
+- `bytesToUtf8` - Uint8Array ↔ UTF-8 string
+
+#### **New Validator Types**
+- `v.base64()` - Base64 string validation with URL-safe mode
+- `v.hex()` - Hexadecimal string validation with lowercase mode
+- `v.uint8Array()` - Uint8Array validation with length constraints
+
+#### **Enhanced Utilities**
+- Comprehensive codec utility functions in `codec-utils.ts`
+- Cross-platform Base64 encoding/decoding (Node.js + Browser)
+- Secure error handling for all codec operations
+
+### 📚 Documentation Updates
+- **README.md**: Comprehensive codec documentation with examples
+- **API.md**: Complete codec API reference with TypeScript examples
+- **New Examples**: 
+  - `examples/codecs.js` - JavaScript codec examples
+  - `examples/codecs.ts` - TypeScript codec examples with full type safety
+- Updated CLAUDE.md with codec development guidance
+
+### 🔧 Technical Improvements  
+- **Zero Circular Dependencies**: Refactored codec architecture
+- **Full Type Safety**: Complete TypeScript support with inference
+- **97.3% Test Coverage**: Comprehensive test suite with 569 passing tests
+- **Error Message Localization**: All codec errors support 27+ languages
+
+### 🎯 Zod Compatibility
+- **100% Zod Codec Parity**: All Zod codecs implemented and compatible
+- **Beyond Zod**: Additional codecs not available in Zod
+- **Drop-in Replacement**: Seamless migration path from Zod codecs
+
+### Performance
+- **Optimized Transformations**: Efficient bidirectional conversions
+- **Memory Efficient**: Immutable codec architecture prevents leaks
+- **Async Support**: Non-blocking operations for I/O-bound transformations
+
+## [1.1.1] - 2025-08-18
+
+### Security
+- **CRITICAL**: Fixed prototype pollution vulnerability in VldObject passthrough mode
+  - Added protection against `__proto__`, `constructor`, and `prototype` key pollution
+  - Comprehensive security test suite added
+
+### Fixed
+- Removed unnecessary escape characters in regex patterns (URL validation)
+- Fixed escape characters in locale files (Afrikaans)
+- Added ESLint configuration for code quality
+
+### Added
+- Security test suite with prototype pollution prevention tests
+- Coverage improvement tests for better code quality
+- ESLint configuration with TypeScript support
+
+### Changed
+- Improved test coverage to 97.1% statements
+- All linting issues resolved
+
+## [1.1.0] - 2025-08-12
+
+### Added
+- Professional benchmark suite with real-world performance testing
+  - `benchmarks/quick-bench.cjs` - Fast performance comparison
+  - `benchmarks/memory.cjs` - Memory usage analysis
+  - `benchmarks/startup.cjs` - Startup time comparison
+  - `benchmarks/performance.cjs` - Comprehensive benchmark suite
+- Complete documentation overhaul in `/docs` folder:
+  - `API.md` - Full API reference with all methods and examples
+  - `GETTING_STARTED.md` - Beginner-friendly guide
+  - `MIGRATION.md` - Step-by-step Zod to VLD migration
+  - `PERFORMANCE.md` - Performance optimization guide
+  - `ADVANCED_FEATURES.md` - Deep dive into advanced features
+
+### Changed
+- Updated README with accurate benchmark results showing 2.07x average improvement
+- All documentation converted to English
+- Improved build process with automatic ES module import fixes
+- Test coverage increased to 99.5%
+- Cleaned up project structure for better maintainability
+
+### Removed
+- Deleted `coverage/` folder (unnecessary for npm package)
+- Removed 12 old benchmark files
+- Cleaned up `src/errors/` and `src/types/` folders
+- Removed redundant test files focused on coverage metrics
+- Deleted unnecessary example files
+
+### Fixed
+- Fixed ES module import issues with `.js` extension resolver
+- Resolved CommonJS compatibility for benchmark files
+- Fixed all TypeScript compilation errors
+- Corrected package.json export configurations
+
+### Performance
+- Memory usage: 86% less than Zod
+- Startup time: 1.94x faster
+- Schema creation: 8.22x faster
+- Overall performance: 2.07x faster average
+
+## [1.0.0] - 2025-08-11
+
+### Initial Release
+
+#### Core Features
+- **Blazing Fast Performance**: 2-4x faster than Zod in most operations
+- **Zero Dependencies**: Lightweight with no external packages
+- **Full TypeScript Support**: Excellent type inference and IntelliSense
+- **Zod API Compatibility**: Drop-in replacement with identical API
+- **Tree-Shakeable**: Only import what you need
+
+#### Validation Types
+- **Primitives**: string, number, boolean, bigint, symbol, date, undefined, null, void, any, unknown, never
+- **Collections**: array, tuple, object, record, map, set
+- **Compositions**: union, intersection, literal, enum
+- **Modifiers**: optional, nullable, nullish, default, catch
+
+#### Advanced Features
+- **Type Coercion**: Automatic type conversion for common cases
+- **Custom Validation**: `refine()` and `superRefine()` for custom logic
+- **Data Transformation**: `transform()` for post-validation processing
+- **Object Utilities**: `pick()`, `omit()`, `extend()`, `merge()`, `partial()`
+- **Error Formatting**: Tree, pretty, and flatten utilities
+
+#### Internationalization
+- Built-in support for 27+ languages
+- Easy locale switching with `setLocale()`
+- Comprehensive translation coverage
+
+#### String Validators
+- Email, URL, UUID validation
+- IP address (v4/v6) validation
+- Regex pattern matching
+- Length constraints (min, max, length)
+- Content checks (includes, startsWith, endsWith)
+- Transformations (trim, toLowerCase, toUpperCase)
+
+#### Number Validators
+- Range validation (min, max)
+- Type constraints (int, positive, negative, finite, safe)
+- Mathematical checks (multipleOf)
+
+#### Performance Optimizations
+- Optimized for V8 JavaScript engine
+- Minimal memory allocations
+- Fast-path optimizations for common cases
+- Immutable validators prevent memory leaks
+- Pre-computed validation strategies
+
+#### Developer Experience
+- Clear, actionable error messages
+- Comprehensive test suite (99.5% coverage)
+- Extensive documentation and examples
+- TypeScript-first design
+- Intuitive, chainable API
+
+---
+
 For more details, see the [GitHub Releases](https://github.com/ersinkoc/vld/releases)