Fix/exclusive zod validation issue 36

.github/dependabot.yml

@@ -5,6 +5,15 @@ updates:
     schedule:
       interval: "weekly"
     open-pull-requests-limit: 10
+    ignore:
+      - dependency-name: "@types/node"
+        update-types:
+          [
+            "version-update:semver-major",
+            "version-update:semver-minor",
+            "version-update:semver-patch",
+          ]
+        versions: [">= 25.0.0"]
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:

CHANGELOG.md

@@ -1,9 +1,8 @@
 # [2.1.0](https://github.com/filipo11021/nodejs-password-hashing/compare/v2.0.0...v2.1.0) (2026-01-23)
 
-
 ### Features
 
-* add pepper support to argon2 hashing ([#34](https://github.com/filipo11021/nodejs-password-hashing/issues/34)) ([4d508df](https://github.com/filipo11021/nodejs-password-hashing/commit/4d508dfb97b24f82fb1932f7b0263be42ee357af))
+- add pepper support to argon2 hashing ([#34](https://github.com/filipo11021/nodejs-password-hashing/issues/34)) ([4d508df](https://github.com/filipo11021/nodejs-password-hashing/commit/4d508dfb97b24f82fb1932f7b0263be42ee357af))
 
 # [2.0.0](https://github.com/filipo11021/nodejs-password-hashing/compare/v1.0.2...v2.0.0) (2026-01-21)
 

package.json

@@ -46,7 +46,7 @@
   "devDependencies": {
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/git": "^10.0.1",
-    "@types/node": "^25.0.10",
+    "@types/node": "~24.10.9",
     "@types/phc__format": "^1.0.1",
     "lefthook": "^2.0.15",
     "oxlint": "^1.41.0",

src/argon2/argon2.ts

@@ -11,19 +11,19 @@ import { MAX_UINT24, MAX_UINT32 } from "../utils/numbers.ts";
 
 const optionsSchema = z
   .object({
-    memory: z.number().max(MAX_UINT32),
-    passes: z.number().min(2).max(MAX_UINT32),
-    parallelism: z.number().min(1).max(MAX_UINT24),
-    tagLength: z.number().min(4).max(MAX_UINT32),
+    memory: z.number().lt(MAX_UINT32),
+    passes: z.number().gt(1).lt(MAX_UINT32),
+    parallelism: z.number().gt(1).lt(MAX_UINT24),
+    tagLength: z.number().gt(4).lt(MAX_UINT32),
     saltLength: z.number().min(16).max(1024),
     pepper: z.string().min(1).max(1024).optional(),
   })
   .refine(
     (params) => {
-      return params.memory >= 8 * params.parallelism;
+      return params.memory > 8 * params.parallelism;
     },
     {
-      message: "memory parameter must be at least 8 * parallelism",
+      message: "memory parameter must be greater than 8 * parallelism",
     },
   )
   .readonly();