Skip to content

Bump axe-core from 4.3.5 to 4.6.0

scriptuser requested to merge dependabot-npm_and_yarn-axe-core-4.6.0 into main

Bumps axe-core from 4.3.5 to 4.6.0.

Release notes

Sourced from axe-core's releases.

Release 4.6.0

This release adds requirements introduced in WAI-ARIA 1.2, which can result in new issues. The color contrast rule has been improved which should reduce the number of incomplete (aka "needs review") results.

Lastly, this release adds the ability to include or exclude elements inside shadow DOM trees from a test run. See [dom selection] for details.

Features

  • aria-required-attr: require aria-controls on combobox and aria-valuenow on focusable separator (#3786) (5259e88)
  • checks/label-content-name-mismatch: deprecate occuranceThreshold option in favor of occurrenceThreshold to fix typo (#3782) (5026d65)
  • commons: deprecate flattenShadowColors in favor of flattenColors (#3792) (af49daf)
  • context: allow selecting shadow DOM nodes (#3798) (9e1e31b)
  • list,listitem: do not allow group as allowed parent or child (#3784) (d1cbf6f)
  • required-attr: require aria-checked for checkbox-like and radio-like roles (#3785) (563e4e9)
  • utils: new shadowSelectAll utility (#3796) (5865462)

Bug Fixes

  • aria-allowed-role: allow combobox on button, checkbox and combobox on input[type=button] (#3354) (ac688c0), closes #3353
  • aria-required-children: allow menu as child of menu (#3820) (a6569e5)
  • color-contrast: consider -webkit-text-stroke & -webkit-text-fill-color (#3791) (228daf1)
  • color-contrast: correctly calculate background color of text nodes with different size than their container (#3703) (123b83c)
  • get-role: handle presentation role inheritance for vnodes with no parent (#3801) (b971caf)
  • html-lang-valid: only run rule when attribute has value (#3663) (1a7eecb), closes #3624
  • metadata: Map aria-required-children to ACT rule bc4a75 (#3790) (a33a523)

Release 4.5.2

This release can result in fewer issues reported on link-in-text-block and aria-required-children. This release addresses an issue where color-contrast and target-size violations were not reported after the page was scrolled.

Bug Fixes

  • aria-required-children: allow menu and menubar to be empty (#3770) (d11aed8)
  • create-grid: include elements scrolled out of view in the grid (#3773) (a563263)
  • do not warn when using webpack (#3777) (d6cef9a)
  • link-in-text-block: don't match style or script text (#3775) (ab877f9)
  • prevent undefined relatedNodes from halting axe (#3778) (efefb18)

Release 4.5.1

This release does not change results of axe-core. It resolves a problem where axe had gotten unnecessarily picky about which order things need to be loaded in in some test environments.

Bug Fixes

  • allow axe to run in certain configurations of jsdom (#3755) (b74c5d4)
  • prevent crash on jsdom when preloading CSSOM (#3754) (b1f0c6b)

Release 4.5.0

This release may increase or decrease the number of violations reported. This can be because some rules have changed in which ruleset they run (best practice to WCAG, and vice versa). It can also be because the rules themselves got stricter in some places so are able to find new violations, and got more permissive in other places in order to handle more edge cases.

Tags that indicate which success criteria a rule tests violations for have been changed for several rules. In some cases new success criteria tags were added, and in others criteria tags were removed.

... (truncated)

Changelog

Sourced from axe-core's changelog.

4.6.0 (2022-12-12)

Features

  • aria-required-attr: require aria-controls on combobox and aria-valuenow on focusable separator (#3786) (5259e88)
  • checks/label-content-name-mismatch: deprecate occuranceThreshold option in favor of occurrenceThreshold to fix typo (#3782) (5026d65)
  • commons: deprecate flattenShadowColors in favor of flattenColors (#3792) (af49daf)
  • context: allow selecting shadow DOM nodes (#3798) (9e1e31b)
  • list,listitem: do not allow group as allowed parent or child (#3784) (d1cbf6f)
  • required-attr: require aria-checked for checkbox-like and radio-like roles (#3785) (563e4e9)
  • utils: new shadowSelectAll utility (#3796) (5865462)

Bug Fixes

  • aria-allowed-role: allow combobox on button, checkbox and combobox on input[type=button] (#3354) (ac688c0), closes #3353
  • aria-required-children: allow menu as child of menu (#3820) (a6569e5)
  • color-contrast: consider -webkit-text-stroke & -webkit-text-fill-color (#3791) (228daf1)
  • color-contrast: correctly calculate background color of text nodes with different size than their container (#3703) (123b83c)
  • get-role: handle presentation role inheritance for vnodes with no parent (#3801) (b971caf)
  • html-lang-valid: only run rule when attribute has value (#3663) (1a7eecb), closes #3624
  • metadata: Map aria-required-children to ACT rule bc4a75 (#3790) (a33a523)

4.5.2 (2022-11-14)

Bug Fixes

  • aria-required-children: allow menu and menubar to be empty (#3770) (d11aed8)
  • create-grid: include elements scrolled out of view in the grid (#3773) (a563263)
  • do not warn when using webpack (#3777) (d6cef9a)
  • link-in-text-block: don't match style or script text (#3775) (ab877f9)
  • prevent undefined relatedNodes from halting axe (#3778) (efefb18)

4.5.1 (2022-11-01)

Bug Fixes

  • allow axe to run in certain configurations of jsdom (#3755) (b74c5d4)
  • prevent crash on jsdom when preloading CSSOM (#3754) (b1f0c6b)

4.5.0 (2022-10-17)

Features

Highlights

  • new rule: Add WCAG 2.2 target-size rule (off by default) (#3616) (691f1b6)
  • new rule: Add meta-refresh-no-exceptions (off by default, wcag2aaa) (#3530) (27031a8)
  • identical-links-same-purpose: Disable by default (wcag2aaa rule) (#3615) (a2c2d2f)
  • link-in-text-block: Remove experimental and enable by default (#3706) (37b6e7a)
  • i18n: Add Norwegian Bokmål locale (#3375) (2886d33)

... (truncated)

Commits
  • 54eb9be Merge pull request #3824 from dequelabs/release-2022-12-12
  • d4b53cc chore(release): 4.6.0
  • a6569e5 fix(aria-required-children): allow menu as child of menu (#3820)
  • 07a5dad ci: fix the release script fix (#3822)
  • a0e2f49 ci: fix release script not installing (#3821)
  • 123b83c fix(color-contrast): correctly calculate background color of text nodes with ...
  • 08e2d20 ci: bump cimg/go image (#3816)
  • b971caf fix(get-role): handle presentation role inheritance for vnodes with no parent...
  • 6d01604 ci: Add a workflow for creating releases (#3804)
  • 551192a ci: run on node 16.18 (#3815)
  • Additional commits viewable in compare view

Dependabot commands
You can trigger Dependabot actions by commenting on this MR
  • $dependabot rebase will rebase this MR
  • $dependabot recreate will recreate this MR rewriting all the manual changes and resolving conflicts

Merge request reports