Cucumber.js saw a minor but potentially impactful update between versions 1.3.1 and 1.3.2. Both versions represent the official JavaScript implementation of Cucumber, a popular behavior-driven development (BDD) framework. Key differences lie in the dependencies, specifically the gherkin and coffee-script packages, alongside the release dates. Version 1.3.2 updated its dependency on gherkin from version 4.0.0 to version 4.1.0, while coffee-script was updated from version 1.10.0 to version 1.12.4. These updates likely include bug fixes, performance improvements, and potentially new features within the Gherkin parser and CoffeeScript compiler, that developers should consider when upgrading, as these can impact feature file parsing and overall compatibility.
The newer version was released on March 20, 2017, approximately six months after version 1.3.1 which was released on September 30, 2016. Both versions rely on a similar core set of dependencies like co, glob, lodash and commander for asynchronous control flow, file system operations, utility functions and command-line interface handling, respectively. Developers should evaluate the changes introduced in gherkin 4.1.0 and coffee-script 1.12.4 before upgrading to ensure compatibility with their existing Cucumber feature files and CoffeeScript code, if being used. The update to gherkin is important since it ensures better parsing and understanding of feature files written in Gherkin syntax.
The are not vulnerabilities for the version 1.3.2 of the package cucumber