ata-validator 1.10.0 → 1.12.0

package/lib/js-compiler.js

@@ -762,9 +762,9 @@ const _formats = require('./formats')
 const FORMAT_CHECKS = {
   email: (s) => { const at = s.indexOf('@'); return at > 0 && at < s.length - 1 && s.indexOf('.', at) > at + 1 },
   date: _formats.date,
-  uuid: (s) => s.length === 36 && /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(s),
+  uuid: _formats.uuid,
   ipv4: _formats.ipv4,
-  hostname: (s) => s.length > 0 && s.length <= 253 && /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)*$/i.test(s),
+  hostname: _formats.hostname,
 }
 
 // Dangerous JS property names that exist on Object.prototype
@@ -850,6 +850,49 @@ function hasNestedIdScope(node, isRoot = true) {
 // the generated code the same way `$ref: "#"` does at the root. A plain
 // cross-reference (A -> B where B does not refer back) is not on a cycle and
 // still inlines.
+// Data can point back at itself, and a schema that references itself would
+// then recurse until the stack runs out. Validation runs in two passes: the
+// fast one counts depth and gives up past CYCLE_DEPTH, the second re-runs with
+// a set of the values currently under check, where a value met twice is a
+// fixed point and counts as satisfied. That is what the interpreted engine
+// does, so both engines answer the same on cyclic input. Legitimate documents
+// never reach the threshold, so they only pay the counter.
+// Raised by a generator that meets a construct it cannot express. The entry
+// point turns it into a decline, so the caller falls back to an engine that
+// can. Emitting nothing would mean "everything is valid", which is the failure
+// mode this project has shipped three times in $ref handling; declining is the
+// only safe way out.
+const DECLINE = Symbol('ata.decline')
+
+const CYCLE_DEPTH = 512
+
+// Declarations the guarded functions close over. Emitted once, ahead of them.
+function emitGuardState () {
+  return 'const _CYC={};const _stk=new Set();let _sd=0,_sg=false\n  '
+}
+
+// Wraps a self-recursive root: `name` is the guarded entry, `name`_b the body.
+function emitRootGuard (name, args, onRepeat) {
+  const call = `${name}_b(${args})`
+  return (
+    `function ${name}(${args}){\n  ` +
+    `if(_sg){if(typeof d!=='object'||d===null)return ${call};if(_stk.has(d))return ${onRepeat};_stk.add(d);try{return ${call}}finally{_stk.delete(d)}}\n  ` +
+    `if(++_sd>${CYCLE_DEPTH})throw _CYC\n  const _r=${call}\n  _sd--\n  return _r\n  }\n  `
+  )
+}
+
+// Runs `attempt`, and on the depth signal runs it again under the guard.
+// `reset` clears anything the abandoned pass left behind.
+function emitGuardedRun (attempt, reset, defSets) {
+  const clears = ['_stk.clear()'].concat(defSets.map((n) => `${n}_s.clear()`)).join(';')
+  return (
+    `_sd=0\n  try{${attempt}}catch(_err){\n  ` +
+    `if(_err!==_CYC)throw _err\n  ` +
+    `${reset}_sg=true;${clears}\n  ` +
+    `try{${attempt}}finally{_sg=false}\n  }\n  `
+  )
+}
+
 function cyclicDefNames (defs) {
   const out = new Set()
   if (!defs || typeof defs !== 'object') return out
@@ -1417,18 +1460,33 @@ function compileToJSCodegen(schema, schemaMap, userFormats) {
     }
   }
 
+  const defSets = ctx.defFns ? Array.from(ctx.defFns.values()) : []
+  const needsGuard = ctx.usesRecursion || defSets.length > 0
+
   let body, hybridBody
   if (ctx.usesRecursion) {
-    // Self-recursive: wrap in named function
-    body = `function _validate(d){\n  ${checkStr}\n  return true\n  }\n  return _validate(d)`
-    // Hybrid: keep _validate as boolean, wrap only the outer call
-    hybridBody = `function _validate(d){\n  ${checkStr}\n  return true\n  }\n  return _validate(d)?R:E(d)`
+    // Self-recursive: a named body reached through the cycle guard, so data
+    // that points back at itself settles instead of exhausting the stack.
+    const decl = emitRootGuard('_validate', 'd', 'true') +
+      `function _validate_b(d){\n  ${checkStr}\n  return true\n  }\n  `
+    const run = emitGuardedRun('return _validate(d)', '', defSets)
+    body = `${decl}function _run(d){\n  ${run}\n  }\n  return _run(d)`
+    // Hybrid: keep the boolean answer, wrap only the outer call
+    hybridBody = `${decl}function _run(d){\n  ${run}\n  }\n  return _run(d)?R:E(d)`
+  } else if (defSets.length > 0) {
+    // No self-reference at the root, but a def on a cycle can still be
+    // re-entered with the same value; the guarded functions need their state.
+    const run = emitGuardedRun(`return _body(d)`, '', defSets)
+    body = `function _body(d){\n  ${checkStr}\n  return true\n  }\n  function _run(d){\n  ${run}\n  }\n  return _run(d)`
+    hybridBody = `function _body(d){\n  ${checkStr}\n  return true\n  }\n  function _run(d){\n  ${run}\n  }\n  return _run(d)?R:E(d)`
   } else {
     body = checkStr + '\n  return true'
     hybridBody = replaceTopLevel(checkStr + '\n  return R')
   }
 
-  const preambleStr = ctx.preamble && ctx.preamble.length ? ctx.preamble.join('\n  ') + '\n  ' : ''
+  const guardStr = needsGuard ? emitGuardState() : ''
+  const preambleStr = guardStr +
+    (ctx.preamble && ctx.preamble.length ? ctx.preamble.join('\n  ') + '\n  ' : '')
 
   try {
     let boolFn
@@ -1695,7 +1753,16 @@ function genCode(schema, v, lines, ctx, knownType) {
           ctx.defFns.set(defName, fnName)
           const bodyLines = []
           genCode(ctx.rootDefs[defName], 'd', bodyLines, ctx)
-          ctx.preamble.push(`function ${fnName}(d){${bodyLines.join('\n  ')}\n  return true}`)
+          // Entered through the cycle guard: see emitGuardState. In the fast
+          // pass the wrapper only counts depth; the set is used by the second,
+          // guarded pass that runs when data turns out to point back at
+          // itself.
+          ctx.preamble.push(
+            `const ${fnName}_s=new Set()\n  function ${fnName}(d){\n  ` +
+              `if(_sg){if(typeof d!=='object'||d===null)return ${fnName}_b(d);if(${fnName}_s.has(d))return true;${fnName}_s.add(d);try{return ${fnName}_b(d)}finally{${fnName}_s.delete(d)}}\n  ` +
+              `if(++_sd>${CYCLE_DEPTH})throw _CYC\n  const _r=${fnName}_b(d)\n  _sd--\n  return _r\n  }\n  ` +
+              `function ${fnName}_b(d){${bodyLines.join('\n  ')}\n  return true}`,
+          )
         }
         lines.push(`if(!${fnName}(${v}))return false`)
         if (!hasSiblings) return
@@ -2900,31 +2967,19 @@ const FORMAT_CODEGEN = {
       : `if(typeof ${v}==='string'){const _at=${v}.indexOf('@');if(_at<=0||_at>=${v}.length-1||${v}.indexOf('.',_at)<=_at+1)return false}`
   },
   date: _formats.dateSource,
-  uuid: (v, isStr) => isStr
-    ? `if(${v}.length!==36||!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(${v}))return false`
-    : `if(typeof ${v}==='string'&&(${v}.length!==36||!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(${v})))return false`,
-  'date-time': (v, isStr) => isStr
-    ? `if(!/^\\d{4}-\\d{2}-\\d{2}[Tt]\\d{2}:\\d{2}:\\d{2}(\\.\\d+)?([Zz]|[+-]\\d{2}:\\d{2})$/.test(${v})||isNaN(Date.parse(${v})))return false`
-    : `if(typeof ${v}==='string'&&(!/^\\d{4}-\\d{2}-\\d{2}[Tt]\\d{2}:\\d{2}:\\d{2}(\\.\\d+)?([Zz]|[+-]\\d{2}:\\d{2})$/.test(${v})||isNaN(Date.parse(${v}))))return false`,
-  time: (v, isStr) => isStr
-    ? `if(!/^([01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(\\.\\d+)?(Z|[+-]\\d{2}:\\d{2})?$/.test(${v}))return false`
-    : `if(typeof ${v}==='string'&&!/^([01]\\d|2[0-3]):[0-5]\\d:[0-5]\\d(\\.\\d+)?(Z|[+-]\\d{2}:\\d{2})?$/.test(${v}))return false`,
+  uuid: _formats.uuidSource,
+  'date-time': _formats.dateTimeSource,
+  time: _formats.timeSource,
   duration: (v, isStr) => isStr
     ? `if(!/^P(?:\\d+Y)?(?:\\d+M)?(?:\\d+W)?(?:\\d+D)?(?:T(?:\\d+H)?(?:\\d+M)?(?:\\d+(?:\\.\\d+)?S)?)?$/.test(${v})||${v}==='P'||${v}.endsWith('T'))return false`
     : `if(typeof ${v}==='string'&&(!/^P(?:\\d+Y)?(?:\\d+M)?(?:\\d+W)?(?:\\d+D)?(?:T(?:\\d+H)?(?:\\d+M)?(?:\\d+(?:\\.\\d+)?S)?)?$/.test(${v})||${v}==='P'||${v}.endsWith('T')))return false`,
-  uri: (v, isStr) => isStr
-    ? `if(!/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(${v})||/[\\s\\u0000-\\u001f\\u007f]/.test(${v}))return false`
-    : `if(typeof ${v}==='string'&&(!/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(${v})||/[\\s\\u0000-\\u001f\\u007f]/.test(${v})))return false`,
+  uri: _formats.uriSource,
   'uri-reference': (v, isStr) => isStr
-    ? `if(/[\\s\\u0000-\\u001f\\u007f]/.test(${v}))return false`
-    : `if(typeof ${v}==='string'&&/[\\s\\u0000-\\u001f\\u007f]/.test(${v}))return false`,
+    ? `{${_formats.noReservedSource(v, '0')}}`
+    : `if(typeof ${v}==='string'){${_formats.noReservedSource(v, '0')}}`,
   ipv4: _formats.ipv4Source,
-  ipv6: (v, isStr) => isStr
-    ? `{const _s=${v};if(_s===''||!/^[0-9a-fA-F:]+$/.test(_s)||_s.split(':').length<3||_s.split(':').length>8)return false}`
-    : `if(typeof ${v}==='string'){const _s=${v};if(_s===''||!/^[0-9a-fA-F:]+$/.test(_s)||_s.split(':').length<3||_s.split(':').length>8)return false}`,
-  hostname: (v, isStr) => isStr
-    ? `if(!/^[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(\\.[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/.test(${v}))return false`
-    : `if(typeof ${v}==='string'&&!/^[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(\\.[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/.test(${v}))return false`,
+  ipv6: _formats.ipv6Source,
+  hostname: _formats.hostnameSource,
 }
 
 // Safe key escaping: use JSON.stringify to handle all special chars (newlines, null bytes, etc.)
@@ -3069,8 +3124,6 @@ function compileToJSCodegenWithErrors(schema, schemaMap, userFormats, sourceOpts
   if (typeof schema === 'object' && schema !== null) {
     const s = JSON.stringify(schema)
     if (s.includes('unevaluatedProperties') || s.includes('unevaluatedItems')) return null
-    // Bail on self-referencing schemas — error codegen doesn't support recursion
-    if (s.includes('"$ref":"#"')) return null
   }
   if (typeof schema === 'boolean') {
     return schema
@@ -3133,7 +3186,12 @@ function compileToJSCodegenWithErrors(schema, schemaMap, userFormats, sourceOpts
                   : null }
   ctx.helperCode.push('const _cpLen=s=>{let n=0;for(const _ of s)n++;return n}')
   const lines = []
-  genCodeE(schema, 'd', '', lines, ctx, '#')
+  try {
+    genCodeE(schema, 'd', '', lines, ctx, '#')
+  } catch (e) {
+    if (e === DECLINE) return null
+    throw e
+  }
   // Inline branch-collapse helper only when the schema actually used a
   // oneOf/anyOf branch path (tracked via ctx.usesBranchCollapse). Keeps the
   // AOT output small for schemas that don't compose. Standalone modules can't
@@ -3144,16 +3202,28 @@ function compileToJSCodegenWithErrors(schema, schemaMap, userFormats, sourceOpts
   if (lines.length === 0) return (d) => ({ valid: true, errors: [] })
 
   const checkStr = lines.join('\n  ')
+  const defSetsE = ctx.defFns ? Array.from(ctx.defFns.values()) : []
+  const needsGuardE = ctx.usesRecursion || defSetsE.length > 0
+  const guardStrE = needsGuardE ? emitGuardState() : ''
+  const helpersE = ctx.helperCode.length ? ctx.helperCode.join('\n  ') + '\n  ' : ''
+
   let body
   if (ctx.usesRecursion) {
-    body = `const _e=[];\n  ` +
-      (ctx.helperCode.length ? ctx.helperCode.join('\n  ') + '\n  ' : '') +
-      `function _validateE(d,_all,_e){\n  ${checkStr}\n  }\n  _validateE(d,_all,_e);\n  ` +
+    // The abandoned first pass may have pushed errors, so the retry starts
+    // from an empty list and the reported errors come from the guarded run
+    // alone.
+    body = `const _e=[];\n  ` + guardStrE + helpersE +
+      emitRootGuard('_validateE', 'd,_all,_e', '') +
+      `function _validateE_b(d,_all,_e){\n  ${checkStr}\n  }\n  ` +
+      emitGuardedRun('_validateE(d,_all,_e)', '_e.length=0;', defSetsE) +
+      `return{valid:_e.length===0,errors:_e}`
+  } else if (defSetsE.length > 0) {
+    body = `const _e=[];\n  ` + guardStrE + helpersE +
+      `function _bodyE(d,_all,_e){\n  ${checkStr}\n  }\n  ` +
+      emitGuardedRun('_bodyE(d,_all,_e)', '_e.length=0;', defSetsE) +
       `return{valid:_e.length===0,errors:_e}`
   } else {
-    body = `const _e=[];\n  ` +
-      (ctx.helperCode.length ? ctx.helperCode.join('\n  ') + '\n  ' : '') +
-      checkStr +
+    body = `const _e=[];\n  ` + helpersE + checkStr +
       `\n  return{valid:_e.length===0,errors:_e}`
   }
   try {
@@ -3232,8 +3302,11 @@ function genCodeE(schema, v, pathExpr, lines, ctx, schemaPrefix) {
   }
   // $ref — resolve local and cross-schema refs
   if (schema.$ref) {
-    // Self-reference "#" — no-op (permissive) to avoid infinite recursion
-    if (schema.$ref === '#') return
+    // A self-reference cannot be expressed here yet: the root helper takes no
+    // path argument, so errors raised through it would carry the path of the
+    // root rather than of the value that failed. This used to fall through as
+    // a permissive no-op, which accepted whatever the reference guarded.
+    if (schema.$ref === '#') throw DECLINE
     const m = schema.$ref.match(/^#\/(?:\$defs|definitions)\/(.+)$/)
     if (m && ctx.rootDefs && ctx.rootDefs[m[1]]) {
       const defName = m[1]
@@ -3248,7 +3321,12 @@ function genCodeE(schema, v, pathExpr, lines, ctx, schemaPrefix) {
           ctx.defFns.set(defName, fnName)
           const bodyLines = []
           genCodeE(ctx.rootDefs[defName], 'd', '_p', bodyLines, ctx, '#/$defs/' + defName)
-          ctx.helperCode.push(`function ${fnName}(d,_p,_all,_e){${bodyLines.join('\n  ')}}`)
+          ctx.helperCode.push(
+            `const ${fnName}_s=new Set()\n  function ${fnName}(d,_p,_all,_e){\n  ` +
+              `if(_sg){if(typeof d!=='object'||d===null)return ${fnName}_b(d,_p,_all,_e);if(${fnName}_s.has(d))return;${fnName}_s.add(d);try{return ${fnName}_b(d,_p,_all,_e)}finally{${fnName}_s.delete(d)}}\n  ` +
+              `if(++_sd>${CYCLE_DEPTH})throw _CYC\n  const _r=${fnName}_b(d,_p,_all,_e)\n  _sd--\n  return _r\n  }\n  ` +
+              `function ${fnName}_b(d,_p,_all,_e){${bodyLines.join('\n  ')}}`,
+          )
         }
         lines.push(`${fnName}(${v},${pathExpr || '""'},_all,_e);if(!_all&&_e.length)return{valid:false,errors:_e}`)
         return

package/lib/version.js

@@ -7,4 +7,4 @@
 //
 // Kept in lockstep with package.json by `tests/test_version_sync.js`.
 
-module.exports = '1.10.0';
+module.exports = '1.12.0';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ata-validator",
-  "version": "1.10.0",
+  "version": "1.12.0",
   "description": "JSON Schema validation with first-class TypeScript and zero runtime cost. AOT compile to per-schema ESM modules with zero validator dependency. Generic Validator<T> for TypeBox/Zod/Valibot composition. Optional runtime API. Standard Schema V1 compatible.",
   "main": "index.js",
   "module": "index.mjs",
@@ -44,7 +44,7 @@
     "release:check": "node scripts/regen-safe-regex-source.js && node tests/test_pack_purity.js && node scripts/check-doc-coverage.js && node tests/test_error_codes_lock.js && node tests/test_safe_regex_source_sync.js && node tests/test_version_sync.js",
     "build": "cmake-js build --target ata",
     "rebuild": "cmake-js rebuild --target ata",
-    "test": "node test.js && node tests/test_removed_aot_methods.js && node tests/test_no_native.js && node tests/test_no_eval.js && node tests/test_property_dependencies.js && node tests/test_v1_dialect.js && node tests/test_buffer_path_parity.js && node tests/test_buffer_gate.js && node tests/test_draft7_semantics.js && node tests/test_metaschema_ref.js && node tests/test_pure_js_unsupported.js && node tests/test_native_load_order.js && node tests/test_pack_purity.js && node tests/test_make_native_package.js && node tests/test_browser_nofs.js && node tests/test_browser_imports_guard.js && node tests/test_version_sync.js && node tests/test_native_loaded.js && node tests/test_safe_regex_source_sync.js && node tests/test_t_builder.js && node tests/test_async_refine.js && node tests/test_safe_regex.js && node tests/test_safe_regex_integration.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js && node tests/test_bundle_standalone.js && node tests/test_standalone_anyof.js && node tests/test_standalone_formats.js && node tests/test_aot_format_mode.js && node tests/test_aot_additional_props_errors.js && node tests/test_id_anchor_refs.js && node tests/test_engine_routing.js && node tests/test_engine_diagnostic.js && node tests/test_format_engine_parity.js && node tests/test_formats_single_pass.js && node tests/test_defs_pointer_alias.js && node tests/test_cross_doc_root_ref.js && node tests/test_codegen_entrypoint_agreement.js && node tests/test_hybrid_agreement.js && node tests/test_codegen_edge_shapes.js && node tests/test_ajv_errors.js && node tests/test_pattern_properties_errors.js && node tests/test_no_input_mutation.js && node tests/test_typed_validator_runner.js && node tests/test_define_schema.js && node tests/test_error_codes_lock.js && node tests/test_error_code_lookup.js && node tests/test_error_order.js && node tests/test_value_equality.js && node tests/test_vocabulary.js && node tests/test_schema_scan.js && node tests/test_lazy_errors.js && node tests/test_plan_compiler.js && node tests/test_nullable.js && node tests/test_validate_and_parse.js && node tests/test_validate_data.js && node tests/test_enrich_error.js && node tests/test_enrich_received.js && node tests/test_rich_errors_optout.js && node tests/test_error_messages.js && node tests/test_source_positions.js && node tests/fuzz_positions.js && node tests/test_data_positions.js && node tests/test_render_shared.js && node tests/test_renderers.js && node tests/test_additive_fields.js && node tests/test_diagnostic_source.js && node tests/test_diagnose.js && node tests/test_correlate.js && node tests/test_diagnostics_score.js && node tests/test_runtime_error_dx.js && node tests/test_aot_error_dx.js && node tests/test_abort_early.js && node tests/test_branch_collapse.js && node tests/test_suggestions.js && node tests/test_cli_validate.js && node tests/test_cli_version.js && node benchmark/bench_aot_size.mjs",
+    "test": "node test.js && node tests/test_removed_aot_methods.js && node tests/test_no_native.js && node tests/test_no_eval.js && node tests/test_property_dependencies.js && node tests/test_v1_dialect.js && node tests/test_buffer_path_parity.js && node tests/test_buffer_gate.js && node tests/test_draft7_semantics.js && node tests/test_metaschema_ref.js && node tests/test_pure_js_unsupported.js && node tests/test_native_load_order.js && node tests/test_pack_purity.js && node tests/test_make_native_package.js && node tests/test_browser_nofs.js && node tests/test_browser_imports_guard.js && node tests/test_version_sync.js && node tests/test_native_loaded.js && node tests/test_safe_regex_source_sync.js && node tests/test_t_builder.js && node tests/test_async_refine.js && node tests/test_safe_regex.js && node tests/test_safe_regex_integration.js && node tests/test_aot_build.js && node tests/test_aot_differential.js && node tests/test_aot_cli_build.js && node tests/test_aot_cli_smoke.js && node tests/test_bundle_standalone.js && node tests/test_standalone_anyof.js && node tests/test_standalone_formats.js && node tests/test_aot_format_mode.js && node tests/test_aot_additional_props_errors.js && node tests/test_id_anchor_refs.js && node tests/test_engine_routing.js && node tests/test_engine_diagnostic.js && node tests/test_format_engine_parity.js && node tests/test_formats_single_pass.js && node tests/test_defs_pointer_alias.js && node tests/test_cross_doc_root_ref.js && node tests/test_codegen_entrypoint_agreement.js && node tests/test_hybrid_agreement.js && node tests/test_codegen_edge_shapes.js && node tests/test_ajv_errors.js && node tests/test_pattern_properties_errors.js && node tests/test_no_input_mutation.js && node tests/test_typed_validator_runner.js && node tests/test_define_schema.js && node tests/test_error_codes_lock.js && node tests/test_error_code_lookup.js && node tests/test_error_order.js && node tests/test_value_equality.js && node tests/test_vocabulary.js && node tests/test_schema_scan.js && node tests/test_lazy_errors.js && node tests/test_lazy_instance.js && node tests/test_cyclic_input.js && node tests/test_native_error_codes.js && node tests/test_verdict_preprocess.js && node tests/test_plan_compiler.js && node tests/test_nullable.js && node tests/test_validate_and_parse.js && node tests/test_validate_data.js && node tests/test_enrich_error.js && node tests/test_enrich_received.js && node tests/test_rich_errors_optout.js && node tests/test_error_messages.js && node tests/test_source_positions.js && node tests/fuzz_positions.js && node tests/test_data_positions.js && node tests/test_render_shared.js && node tests/test_renderers.js && node tests/test_additive_fields.js && node tests/test_diagnostic_source.js && node tests/test_diagnose.js && node tests/test_correlate.js && node tests/test_diagnostics_score.js && node tests/test_runtime_error_dx.js && node tests/test_aot_error_dx.js && node tests/test_abort_early.js && node tests/test_branch_collapse.js && node tests/test_suggestions.js && node tests/test_cli_validate.js && node tests/test_cli_version.js && node benchmark/bench_aot_size.mjs",
     "bench:size": "node benchmark/bench_aot_size.mjs",
     "test:suite": "node tests/run_suite.js && node tests/run_suite.js draft7 && node tests/run_suite.js v1",
     "test:compat": "node tests/test_compat.js",
@@ -112,13 +112,13 @@
     "LICENSE"
   ],
   "optionalDependencies": {
-    "@ata-validator/native-darwin-arm64": "1.10.0",
-    "@ata-validator/native-darwin-x64": "1.10.0",
-    "@ata-validator/native-linux-x64-gnu": "1.10.0",
-    "@ata-validator/native-linux-arm64-gnu": "1.10.0",
-    "@ata-validator/native-linux-x64-musl": "1.10.0",
-    "@ata-validator/native-linux-arm64-musl": "1.10.0",
-    "@ata-validator/native-win32-x64": "1.10.0"
+    "@ata-validator/native-darwin-arm64": "1.12.0",
+    "@ata-validator/native-darwin-x64": "1.12.0",
+    "@ata-validator/native-linux-x64-gnu": "1.12.0",
+    "@ata-validator/native-linux-arm64-gnu": "1.12.0",
+    "@ata-validator/native-linux-x64-musl": "1.12.0",
+    "@ata-validator/native-linux-arm64-musl": "1.12.0",
+    "@ata-validator/native-win32-x64": "1.12.0"
   },
   "peerDependencies": {
     "yaml": "^2.0.0"