eslint-plugin-zod 3.11.0 → 3.12.1

package/README.md

@@ -57,22 +57,23 @@ This plugin is primarily built for `zod`, so some rules are exclusive to `zod` a
 
 ### `zod` exclusive rules
 
-| Name                                                                               | Description                                                                                                                    | 💼  | 🔧  | 💡  | ❌  |
-| :--------------------------------------------------------------------------------- | :----------------------------------------------------------------------------------------------------------------------------- | :-- | :-- | :-- | :-- |
-| [array-style](docs/rules/array-style.md)                                           | Enforce consistent Zod array style                                                                                             | ✅  | 🔧  |     |     |
-| [no-number-schema-with-finite](docs/rules/no-number-schema-with-finite.md)         | Disallow deprecated `z.number().finite()`. In Zod 4+ number schemas do not allow infinite values by default, so it is a no-op. | ✅  | 🔧  |     |     |
-| [no-number-schema-with-int](docs/rules/no-number-schema-with-int.md)               | Disallow usage of `z.number().int()` as it is considered legacy                                                                | ✅  | 🔧  |     |     |
-| [no-number-schema-with-is-finite](docs/rules/no-number-schema-with-is-finite.md)   | Disallow using deprecated `isFinite` on a Zod number schema; in v4+ it is always `true`.                                       | ✅  |     |     |     |
-| [no-number-schema-with-is-int](docs/rules/no-number-schema-with-is-int.md)         | Disallow using deprecated `isInt` on a Zod number schema; check the `format` property instead.                                 | ✅  |     |     |     |
-| [no-number-schema-with-safe](docs/rules/no-number-schema-with-safe.md)             | Disallow deprecated `z.number().safe()`. Use `z.int()`; `.safe()` is now identical to `.int()`.                                | ✅  | 🔧  |     |     |
-| [no-number-schema-with-step](docs/rules/no-number-schema-with-step.md)             | Disallow deprecated `z.number().step()`. Use `.multipleOf()` instead.                                                          | ✅  | 🔧  |     |     |
-| [no-optional-and-default-together](docs/rules/no-optional-and-default-together.md) | Disallow using both `.optional()` and `.default()` on the same Zod schema                                                      | ✅  | 🔧  |     |     |
-| [no-string-schema-with-uuid](docs/rules/no-string-schema-with-uuid.md)             | Disallow usage of `z.string().uuid()` in favor of the dedicated `z.uuid()` schema                                              | ✅  | 🔧  |     |     |
-| [no-throw-in-refine](docs/rules/no-throw-in-refine.md)                             | Disallow throwing errors directly inside Zod refine callbacks                                                                  | ✅  |     |     |     |
-| [no-transform-in-record-key](docs/rules/no-transform-in-record-key.md)             | Disallow transforms in z.record() key schemas, which can cause silent key mutations and data loss through key collisions       |     |     |     |     |
-| [prefer-enum-over-literal-union](docs/rules/prefer-enum-over-literal-union.md)     | Prefer `z.enum()` over `z.union()` when all members are string literals.                                                       | ✅  | 🔧  |     |     |
-| [prefer-meta-last](docs/rules/prefer-meta-last.md)                                 | Enforce `.meta()` as last method                                                                                               | ✅  | 🔧  |     |     |
-| [prefer-string-schema-with-trim](docs/rules/prefer-string-schema-with-trim.md)     | Enforce `z.string().trim()` to prevent accidental leading/trailing whitespace                                                  | ✅  | 🔧  |     |     |
+| Name                                                                                             | Description                                                                                                                    | 💼  | 🔧  | 💡  | ❌  |
+| :----------------------------------------------------------------------------------------------- | :----------------------------------------------------------------------------------------------------------------------------- | :-- | :-- | :-- | :-- |
+| [array-style](docs/rules/array-style.md)                                                         | Enforce consistent Zod array style                                                                                             | ✅  | 🔧  |     |     |
+| [no-number-schema-with-finite](docs/rules/no-number-schema-with-finite.md)                       | Disallow deprecated `z.number().finite()`. In Zod 4+ number schemas do not allow infinite values by default, so it is a no-op. | ✅  | 🔧  |     |     |
+| [no-number-schema-with-int](docs/rules/no-number-schema-with-int.md)                             | Disallow usage of `z.number().int()` as it is considered legacy                                                                | ✅  | 🔧  |     |     |
+| [no-number-schema-with-is-finite](docs/rules/no-number-schema-with-is-finite.md)                 | Disallow using deprecated `isFinite` on a Zod number schema; in v4+ it is always `true`.                                       | ✅  |     |     |     |
+| [no-number-schema-with-is-int](docs/rules/no-number-schema-with-is-int.md)                       | Disallow using deprecated `isInt` on a Zod number schema; check the `format` property instead.                                 | ✅  |     |     |     |
+| [no-number-schema-with-safe](docs/rules/no-number-schema-with-safe.md)                           | Disallow deprecated `z.number().safe()`. Use `z.int()`; `.safe()` is now identical to `.int()`.                                | ✅  | 🔧  |     |     |
+| [no-number-schema-with-step](docs/rules/no-number-schema-with-step.md)                           | Disallow deprecated `z.number().step()`. Use `.multipleOf()` instead.                                                          | ✅  | 🔧  |     |     |
+| [no-optional-and-default-together](docs/rules/no-optional-and-default-together.md)               | Disallow using both `.optional()` and `.default()` on the same Zod schema                                                      | ✅  | 🔧  |     |     |
+| [no-string-schema-with-uuid](docs/rules/no-string-schema-with-uuid.md)                           | Disallow usage of `z.string().uuid()` in favor of the dedicated `z.uuid()` schema                                              | ✅  | 🔧  |     |     |
+| [no-throw-in-refine](docs/rules/no-throw-in-refine.md)                                           | Disallow throwing errors directly inside Zod refine callbacks                                                                  | ✅  |     |     |     |
+| [no-transform-in-record-key](docs/rules/no-transform-in-record-key.md)                           | Disallow transforms in z.record() key schemas, which can cause silent key mutations and data loss through key collisions       |     |     |     |     |
+| [prefer-enum-over-literal-union](docs/rules/prefer-enum-over-literal-union.md)                   | Prefer `z.enum()` over `z.union()` when all members are string literals.                                                       | ✅  | 🔧  |     |     |
+| [prefer-meta-last](docs/rules/prefer-meta-last.md)                                               | Enforce `.meta()` as last method                                                                                               | ✅  | 🔧  |     |     |
+| [prefer-string-schema-with-trim](docs/rules/prefer-string-schema-with-trim.md)                   | Enforce `z.string().trim()` to prevent accidental leading/trailing whitespace                                                  | ✅  | 🔧  |     |     |
+| [prefer-trim-before-string-length-checks](docs/rules/prefer-trim-before-string-length-checks.md) | Enforce `.trim()` is called before string length checks to ensure accurate validation                                          | ✅  | 🔧  |     |     |
 
 <!-- end auto-generated rules list -->
 

package/dist/index.cjs

@@ -23,6 +23,7 @@ const require_prefer_meta_last = require("./rules/prefer-meta-last.cjs");
 const require_prefer_meta = require("./rules/prefer-meta.cjs");
 const require_prefer_namespace_import = require("./rules/prefer-namespace-import.cjs");
 const require_prefer_string_schema_with_trim = require("./rules/prefer-string-schema-with-trim.cjs");
+const require_prefer_trim_before_string_length_checks = require("./rules/prefer-trim-before-string-length-checks.cjs");
 const require_require_brand_type_parameter = require("./rules/require-brand-type-parameter.cjs");
 const require_require_error_message = require("./rules/require-error-message.cjs");
 const require_require_schema_suffix = require("./rules/require-schema-suffix.cjs");
@@ -58,6 +59,7 @@ const eslintPluginZod = {
 		"prefer-meta-last": require_prefer_meta_last.preferMetaLast,
 		"prefer-namespace-import": require_prefer_namespace_import.preferNamespaceImport,
 		"prefer-string-schema-with-trim": require_prefer_string_schema_with_trim.preferStringSchemaWithTrim,
+		"prefer-trim-before-string-length-checks": require_prefer_trim_before_string_length_checks.preferTrimBeforeStringLengthChecks,
 		"require-brand-type-parameter": require_require_brand_type_parameter.requireBrandTypeParameter,
 		"require-error-message": require_require_error_message.requireErrorMessage,
 		"require-schema-suffix": require_require_schema_suffix.requireSchemaSuffix,
@@ -90,6 +92,7 @@ const recommendedConfig = {
 		"zod/prefer-meta": "error",
 		"zod/prefer-meta-last": "error",
 		"zod/prefer-string-schema-with-trim": "error",
+		"zod/prefer-trim-before-string-length-checks": "error",
 		"zod/require-brand-type-parameter": "error",
 		"zod/require-error-message": "error"
 	}

package/dist/index.mjs

@@ -23,6 +23,7 @@ import { preferMetaLast } from "./rules/prefer-meta-last.mjs";
 import { preferMeta } from "./rules/prefer-meta.mjs";
 import { preferNamespaceImport } from "./rules/prefer-namespace-import.mjs";
 import { preferStringSchemaWithTrim } from "./rules/prefer-string-schema-with-trim.mjs";
+import { preferTrimBeforeStringLengthChecks } from "./rules/prefer-trim-before-string-length-checks.mjs";
 import { requireBrandTypeParameter } from "./rules/require-brand-type-parameter.mjs";
 import { requireErrorMessage } from "./rules/require-error-message.mjs";
 import { requireSchemaSuffix } from "./rules/require-schema-suffix.mjs";
@@ -58,6 +59,7 @@ const eslintPluginZod = {
 		"prefer-meta-last": preferMetaLast,
 		"prefer-namespace-import": preferNamespaceImport,
 		"prefer-string-schema-with-trim": preferStringSchemaWithTrim,
+		"prefer-trim-before-string-length-checks": preferTrimBeforeStringLengthChecks,
 		"require-brand-type-parameter": requireBrandTypeParameter,
 		"require-error-message": requireErrorMessage,
 		"require-schema-suffix": requireSchemaSuffix,
@@ -90,6 +92,7 @@ const recommendedConfig = {
 		"zod/prefer-meta": "error",
 		"zod/prefer-meta-last": "error",
 		"zod/prefer-string-schema-with-trim": "error",
+		"zod/prefer-trim-before-string-length-checks": "error",
 		"zod/require-brand-type-parameter": "error",
 		"zod/require-error-message": "error"
 	}

package/dist/meta.cjs

@@ -5,7 +5,7 @@ const { name: PLUGIN_NAME, version: PLUGIN_VERSION, homepage } = JSON.parse((0,
 /** @see https://github.com/marcalexiei/eslint-plugin-zod/pull/97 */
 const PLUGIN_HOMEPAGE = homepage.replace(/#[^#]*$/, "");
 function getRuleURL(ruleID) {
-	return `${PLUGIN_HOMEPAGE}/blob/HEAD/docs/rules/${ruleID}.md`;
+	return `${PLUGIN_HOMEPAGE}/blob/v${PLUGIN_VERSION}/docs/rules/${ruleID}.md`;
 }
 //#endregion
 exports.PLUGIN_NAME = PLUGIN_NAME;

package/dist/meta.mjs

@@ -4,7 +4,7 @@ const { name: PLUGIN_NAME, version: PLUGIN_VERSION, homepage } = JSON.parse(read
 /** @see https://github.com/marcalexiei/eslint-plugin-zod/pull/97 */
 const PLUGIN_HOMEPAGE = homepage.replace(/#[^#]*$/, "");
 function getRuleURL(ruleID) {
-	return `${PLUGIN_HOMEPAGE}/blob/HEAD/docs/rules/${ruleID}.md`;
+	return `${PLUGIN_HOMEPAGE}/blob/v${PLUGIN_VERSION}/docs/rules/${ruleID}.md`;
 }
 //#endregion
 export { PLUGIN_NAME, PLUGIN_VERSION, getRuleURL };

package/dist/rules/prefer-trim-before-string-length-checks.cjs

@@ -0,0 +1,63 @@
+const require_create_plugin_rule = require("../utils/create-plugin-rule.cjs");
+const require_track_zod_schema_imports = require("../utils/track-zod-schema-imports.cjs");
+const require_find_parent_schema_matching_condition = require("../utils/find-parent-schema-matching-condition.cjs");
+//#region src/rules/prefer-trim-before-string-length-checks.ts
+const { zodImportAllowedSource, trackZodSchemaImports } = require_track_zod_schema_imports.createZodSchemaImportTrack("zod");
+const LENGTH_CHECK_METHODS = [
+	"min",
+	"max",
+	"length"
+];
+const preferTrimBeforeStringLengthChecks = require_create_plugin_rule.createZodPluginRule({
+	name: "prefer-trim-before-string-length-checks",
+	meta: {
+		type: "problem",
+		fixable: "code",
+		docs: {
+			zodImportAllowedSource,
+			description: "Enforce `.trim()` is called before string length checks to ensure accurate validation"
+		},
+		messages: { trimBeforeLengthCheck: "`.trim()` must be called before length checks (`.min()`, `.max()`, `.length()`) to ensure accurate validation." },
+		schema: []
+	},
+	defaultOptions: [],
+	create(context) {
+		const { importDeclarationListener, detectZodSchemaRootNode, collectZodChainMethods } = trackZodSchemaImports();
+		return {
+			ImportDeclaration: importDeclarationListener,
+			CallExpression(node) {
+				const zodSchemaMeta = detectZodSchemaRootNode(node);
+				if (zodSchemaMeta?.schemaType !== "string") return;
+				if (require_find_parent_schema_matching_condition.findParentSchemaMatchingCondition(zodSchemaMeta.node, {
+					schemaName: "record",
+					condition: (callParent) => callParent.arguments.length > 0 && callParent.arguments[0] === zodSchemaMeta.node
+				})) return;
+				const methods = collectZodChainMethods(zodSchemaMeta.node);
+				const trimIndex = methods.findIndex((m) => m.name === "trim");
+				if (trimIndex === -1) return;
+				const firstLengthCheckIndex = methods.findIndex((m) => LENGTH_CHECK_METHODS.includes(m.name));
+				if (firstLengthCheckIndex === -1) return;
+				if (trimIndex < firstLengthCheckIndex) return;
+				if (zodSchemaMeta.schemaDecl === "named") {
+					context.report({
+						node,
+						messageId: "trimBeforeLengthCheck"
+					});
+					return;
+				}
+				context.report({
+					node,
+					messageId: "trimBeforeLengthCheck",
+					fix(fixer) {
+						const stringMethodNode = methods[0].node;
+						const trimMethodNode = methods[trimIndex].node;
+						const trimCallee = trimMethodNode.callee;
+						return [fixer.removeRange([trimCallee.object.range[1], trimMethodNode.range[1]]), fixer.insertTextAfter(stringMethodNode, ".trim()")];
+					}
+				});
+			}
+		};
+	}
+});
+//#endregion
+exports.preferTrimBeforeStringLengthChecks = preferTrimBeforeStringLengthChecks;

package/dist/rules/prefer-trim-before-string-length-checks.mjs

@@ -0,0 +1,63 @@
+import { createZodPluginRule } from "../utils/create-plugin-rule.mjs";
+import { createZodSchemaImportTrack } from "../utils/track-zod-schema-imports.mjs";
+import { findParentSchemaMatchingCondition } from "../utils/find-parent-schema-matching-condition.mjs";
+//#region src/rules/prefer-trim-before-string-length-checks.ts
+const { zodImportAllowedSource, trackZodSchemaImports } = createZodSchemaImportTrack("zod");
+const LENGTH_CHECK_METHODS = [
+	"min",
+	"max",
+	"length"
+];
+const preferTrimBeforeStringLengthChecks = createZodPluginRule({
+	name: "prefer-trim-before-string-length-checks",
+	meta: {
+		type: "problem",
+		fixable: "code",
+		docs: {
+			zodImportAllowedSource,
+			description: "Enforce `.trim()` is called before string length checks to ensure accurate validation"
+		},
+		messages: { trimBeforeLengthCheck: "`.trim()` must be called before length checks (`.min()`, `.max()`, `.length()`) to ensure accurate validation." },
+		schema: []
+	},
+	defaultOptions: [],
+	create(context) {
+		const { importDeclarationListener, detectZodSchemaRootNode, collectZodChainMethods } = trackZodSchemaImports();
+		return {
+			ImportDeclaration: importDeclarationListener,
+			CallExpression(node) {
+				const zodSchemaMeta = detectZodSchemaRootNode(node);
+				if (zodSchemaMeta?.schemaType !== "string") return;
+				if (findParentSchemaMatchingCondition(zodSchemaMeta.node, {
+					schemaName: "record",
+					condition: (callParent) => callParent.arguments.length > 0 && callParent.arguments[0] === zodSchemaMeta.node
+				})) return;
+				const methods = collectZodChainMethods(zodSchemaMeta.node);
+				const trimIndex = methods.findIndex((m) => m.name === "trim");
+				if (trimIndex === -1) return;
+				const firstLengthCheckIndex = methods.findIndex((m) => LENGTH_CHECK_METHODS.includes(m.name));
+				if (firstLengthCheckIndex === -1) return;
+				if (trimIndex < firstLengthCheckIndex) return;
+				if (zodSchemaMeta.schemaDecl === "named") {
+					context.report({
+						node,
+						messageId: "trimBeforeLengthCheck"
+					});
+					return;
+				}
+				context.report({
+					node,
+					messageId: "trimBeforeLengthCheck",
+					fix(fixer) {
+						const stringMethodNode = methods[0].node;
+						const trimMethodNode = methods[trimIndex].node;
+						const trimCallee = trimMethodNode.callee;
+						return [fixer.removeRange([trimCallee.object.range[1], trimMethodNode.range[1]]), fixer.insertTextAfter(stringMethodNode, ".trim()")];
+					}
+				});
+			}
+		};
+	}
+});
+//#endregion
+export { preferTrimBeforeStringLengthChecks };

package/dist/rules/schema-error-property-style.cjs

@@ -3,7 +3,7 @@ const require_create_plugin_rule = require("../utils/create-plugin-rule.cjs");
 const require_track_zod_schema_imports = require("../utils/track-zod-schema-imports.cjs");
 let _typescript_eslint_utils = require("@typescript-eslint/utils");
 let esquery = require("esquery");
-esquery = require_runtime.__toESM(esquery);
+esquery = require_runtime.__toESM(esquery, 1);
 //#region src/rules/schema-error-property-style.ts
 const { zodImportAllowedSource, trackZodSchemaImports } = require_track_zod_schema_imports.createZodSchemaImportTrack("all");
 const schemaErrorPropertyStyle = require_create_plugin_rule.createZodPluginRule({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "eslint-plugin-zod",
-  "version": "3.11.0",
+  "version": "3.12.1",
   "type": "module",
   "description": "ESLint plugin that adds custom linting rules to enforce best practices when using Zod",
   "engines": {
@@ -62,26 +62,26 @@
   },
   "devDependencies": {
     "@changesets/changelog-github": "0.6.0",
-    "@changesets/cli": "2.30.0",
-    "@marcalexiei/eslint-config": "6.0.0",
+    "@changesets/cli": "2.31.0",
+    "@marcalexiei/eslint-config": "7.0.0",
     "@marcalexiei/prettier-config": "1.1.4",
     "@types/esquery": "1.5.4",
-    "@types/node": "25.5.2",
-    "@typescript-eslint/rule-tester": "8.58.1",
-    "@vitest/eslint-plugin": "1.6.14",
+    "@types/node": "25.6.0",
+    "@typescript-eslint/rule-tester": "8.59.2",
+    "@vitest/eslint-plugin": "1.6.16",
     "dedent": "1.7.2",
-    "eslint": "10.2.0",
+    "eslint": "10.3.0",
     "eslint-doc-generator": "3.3.2",
     "eslint-import-resolver-typescript": "4.4.4",
-    "eslint-plugin-eslint-plugin": "7.3.2",
+    "eslint-plugin-eslint-plugin": "7.3.3",
     "eslint-plugin-import-x": "4.16.2",
     "eslint-plugin-n": "17.24.0",
-    "knip": "6.3.1",
-    "prettier": "3.8.1",
-    "tsdown": "0.21.7",
-    "typescript": "6.0.2",
-    "typescript-eslint": "8.58.1",
-    "vitest": "4.1.3"
+    "knip": "6.11.0",
+    "prettier": "3.8.3",
+    "tsdown": "0.21.10",
+    "typescript": "6.0.3",
+    "typescript-eslint": "8.59.2",
+    "vitest": "4.1.5"
   },
   "scripts": {
     "build": "tsdown",