Karate Files

Important Fixes

• karate.get('a.b.c') dot-notation path traversal restored (regression vs 1.5.2) [#2833]
• #(...) embedded-expression ReferenceError now deferred to match-time instead of failing at def time, so schema templates can be defined before the referenced variables exist [#2831]
• karate.response exposed in non-mock test context (case-insensitive header() access now works as documented) [#2830]
• Java.type(...) class reference can again resolve static nested classes / enums via property chaining (regression vs 1.5.2) [#2829]
• * set obj.field = 'foo' + bar no longer fails with MATH_ADD_EXPR is not a valid assignment target — intermediate paths on the LHS are auto-vivified [#2828]
• Cucumber JSON / JUnit XML writers no longer NPE on synthetic step results, fixing intermittent empty cucumber-json output [#2827]

New Features & Enhancements

• request.cache(key, fn) for per-request memoization in markup templates
• ka:dispatch directive for declarative custom-event dispatch from markup
• context.actions POST-handler registry with eager dispatch on registration
• Markup: header set, fragment signature error reporting, lenient evaluation mode
• Driver: v1 parity for previously missing methods + bare-keyword bindings
• ScenarioRuntime.evalAsStep for evaluating raw Gherkin step text
• ScenarioRuntime.hotReload + Step.parseAndUpdateFrom for live step reloading
• Dependency-check report includes an inline Suppression Rules section
• CI now reports suppressed CVEs; OWASP dep-check upgraded to 12.2.2 (with workaround for the broken CPE→CVE lookup in 12.x)

View the complete list of all issues fixed in this release.

Full Changelog: https://github.com/karatelabs/karate/compare/v2.0.7...v2.0.8

Important: refer 2.0.0 release notes for those upgrading from 1.X

Artifacts

• Maven artifacts
• Standalone JAR (download below)
• CVE / SBOM report (download below)