jQuery 3.7.0 introduces several notable changes compared to version 3.6.4, impacting both the development workflow and potentially the runtime behavior of web applications relying on the library. A key difference lies in the updated development dependencies. Version 3.7.0 replaces Sizzle (a selector engine) , present in 3.6.4, reflecting a potential shift in how jQuery handles DOM element selection internally, possibly for performance or modernization reasons. Furthermore, 3.7.0 includes playwright-webkit, and karma-webkit-launcher suggesting enhanced cross-browser testing capabilities, particularly focusing on the WebKit engine used by Safari. The karma dependency is explicitly defined as 6.4.1, while in 3.6.4 it was a flexible ^6.3.17, indicating a tighter control over the testing environment in the newer version.
While the core functionality remains consistent (DOM manipulation), developers should carefully review any code reliant on specific selector behaviors or edge cases previously handled by Sizzle. The updated testing infrastructure suggests a higher emphasis on ensuring compatibility across various browsers, which is beneficial for building robust and cross-platform web applications. The file count between versions changed by 1(125 vs 126), the unpacked size is reduced by about 85KB moving to the newer version. Finally, note the newer release date, making jQuery 3.7.0 the most up-to-date stable version with the latest bug fixes and improvements.
The are not vulnerabilities for the version 3.7.0 of the package jquery