Skip to content

Bump axe-core from 4.3.5 to 4.4.2

scriptuser requested to merge dependabot-npm_and_yarn-axe-core-4.4.2 into main

Bumps axe-core from 4.3.5 to 4.4.2.

Release notes

Sourced from axe-core's releases.

Release 4.4.2

This release could reduce the number of violations reported and it could increase the number of incomplete items reported. We've tweaked a few remediation messages of rules for greater consistency and clarity. Role presentation and role none are now allowed on the HTML nav element. The aria-hidden-focusable rule now returns reports incomplete instead of a violation if the element has the onfocus attribute.

Bug Fixes

  • aria-hidden-focusable: report incomplete with onfocus (#3407) (6755e89)
  • aria-hidden-focus: Update rule help & description (#3422) (7cfb4b1)
  • aria-valid-attr-value: add note about element id being in a different shadow DOM tree (#3421) (24f74df)
  • color-contrast: consistently return color contrast information in the data object for pseudo elements (#3453) (1a9d95e)
  • deprecatedrole,color-contrast: fix message to properly include deprecated role, improve color-contrast pass messages (#3387) (650e503)
  • html-elms: update role allowances for nav element (#3402) (8aa816a), closes #3401
  • standards: fix address typo in html-elms.js (#3418) (f235cc7), closes #3417

Release v4.4.1

Bug Fixes

  • DPUB: deprecate endnote, rather than endnotes (plural) (#3373) (1ba9917)
  • d.ts: correct getFrameContexts return type (#3370) (a1b9611)

Release v4.4.0

Features

  • add new ARIA roles (#3138) (61be7e5)
  • aria-allowed-attr: report violation for non-global ARIA attrs on element without role (#3342) (fb5d990)
  • aria-allowed-attr: report violations for non-global ARIA attributes on elements without a role (#3102) (87cfc0b)
  • color-contrast: add support for CSS mix-blend-mode (#3226) (d497f40)
  • commons: deprecate shadowElementsFromPoint (#3311) (c3a7d16)
  • configure: Deprecate branding: Object, use a string instead. (#3278) (1f01309)
  • dpub: upgrade to DPUB 1.1 and report deprecated roles (#3280) (034a846)
  • options: make axe.ping configurable with pingWaitTime (#3273) (ce4dfaf)
  • rule: add new color-contrast-enhanced rule (WCAG AAA) (#3235) (bec20fc), closes #2934

Bug Fixes

  • allowed-role: area without href can have a button or link role (#3275) (bf7e60a)
  • aria-allowed-attr: check for invalid aria-attributes for role="row" (#3160) (cfa900d)
  • aria-allowed-attr: revert violation for non-global ARIA attrs on element without role (#3243) (112b960)
  • aria-allowed-children,aria-allowed-parent: allow group role in listbox (#3195) (cb01975)
  • aria-allowed-role: allow title, aria-label and aria-labelledby on a img element with a supported role (#3224) (006a681)
  • aria-allowed-role: landmark roles banner on header and contentinfo on footer to only report on top-level rule (#3142) (1fd4b00)
  • aria-allowed-roles: allow role=radio on img with non-empty name (#3320) (accafdf)
  • aria-allowed-roles: update role allowances for section element (#3238) (99676ec), closes #3237
  • aria-allowed-role: Update allowed roles based on ARIA spec updates (#3124) (00f6efc)
  • aria-allowed-role: updates the allowed roles for the wbr element to none and presentation (#3192) (2f439b3), closes #3177
  • aria-prohibited-attr: update metadata message (#3206) (d1a768e)
  • autocomplete-valid: Allow custom autocomplete attribute values (#3225) (6076ee8)
  • axe.configure: do not remove newline characters from locale doT strings (#3216) (ea2ce17)
  • axe.d.ts: allow Node for include/exclude object (#3338) (e699939)
  • axe.run: add option to increase iframe ping timeout (#3233) (ec937e3)
  • check for hidden elements on aria-errormessage (#3156) (95d37dd)

... (truncated)

Changelog

Sourced from axe-core's changelog.

4.4.2 (2022-05-12)

Bug Fixes

  • aria-hidden-focusable: report incomplete with onfocus (#3407) (6755e89)
  • aria-hidden-focus: Update rule help & description (#3422) (7cfb4b1)
  • aria-valid-attr-value: add note about element id being in a different shadow DOM tree (#3421) (24f74df)
  • color-contrast: consistently return color contrast information in the data object for pseudo elements (#3453) (1a9d95e)
  • deprecatedrole,color-contrast: fix message to properly include deprecated role, improve color-contrast pass messages (#3387) (650e503)
  • html-elms: update role allowances for nav element (#3402) (8aa816a), closes #3401
  • standards: fix address typo in html-elms.js (#3418) (f235cc7), closes #3417

4.4.1 (2022-02-03)

Bug Fixes

  • DPUB: deprecate endnote, rather than endnotes (plural) (#3373) (1ba9917)
  • d.ts: correct getFrameContexts return type (#3370) (a1b9611)

4.4.0 (2022-01-26)

Features

  • add new ARIA roles (#3138) (61be7e5)
  • aria-allowed-attr: report violation for non-global ARIA attrs on element without role (#3342) (fb5d990)
  • aria-allowed-attr: report violations for non-global ARIA attributes on elements without a role (#3102) (87cfc0b)
  • color-contrast: add support for CSS mix-blend-mode (#3226) (d497f40)
  • commons: deprecate shadowElementsFromPoint (#3311) (c3a7d16)
  • configure: Deprecate branding: Object, use a string instead. (#3278) (1f01309)
  • dpub: upgrade to DPUB 1.1 and report deprecated roles (#3280) (034a846)
  • options: make axe.ping configurable with pingWaitTime (#3273) (ce4dfaf)
  • rule: add new color-contrast-enhanced rule (WCAG AAA) (#3235) (bec20fc), closes #2934

Bug Fixes

  • allowed-role: area without href can have a button or link role (#3275) (bf7e60a)
  • aria-allowed-attr: check for invalid aria-attributes for role="row" (#3160) (cfa900d)
  • aria-allowed-attr: revert violation for non-global ARIA attrs on element without role (#3243) (112b960)
  • aria-allowed-children,aria-allowed-parent: allow group role in listbox (#3195) (cb01975)
  • aria-allowed-role: allow title, aria-label and aria-labelledby on a img element with a supported role (#3224) (006a681)
  • aria-allowed-role: landmark roles banner on header and contentinfo on footer to only report on top-level rule (#3142) (1fd4b00)
  • aria-allowed-roles: allow role=radio on img with non-empty name (#3320) (accafdf)
  • aria-allowed-roles: update role allowances for section element (#3238) (99676ec), closes #3237
  • aria-allowed-role: Update allowed roles based on ARIA spec updates (#3124) (00f6efc)
  • aria-allowed-role: updates the allowed roles for the wbr element to none and presentation (#3192) (2f439b3), closes #3177
  • aria-prohibited-attr: update metadata message (#3206) (d1a768e)
  • autocomplete-valid: Allow custom autocomplete attribute values (#3225) (6076ee8)
  • axe.configure: do not remove newline characters from locale doT strings (#3216) (ea2ce17)
  • axe.d.ts: allow Node for include/exclude object (#3338) (e699939)
  • axe.run: add option to increase iframe ping timeout (#3233) (ec937e3)

... (truncated)

Commits
  • c31d85c Merge pull request #3454 from dequelabs/release-4.4.2
  • bdd71d5 chore(release): 4.4.2
  • 7194b0f ci: fix nightly build (#3434)
  • 7cfb4b1 fix(aria-hidden-focus): Update rule help & description (#3422)
  • 222fdef docs: add link from issue_impact to rule-descriptions (#3420)
  • f235cc7 fix(standards): fix address typo in html-elms.js (#3418)
  • 6755e89 fix(aria-hidden-focusable): report incomplete with onfocus (#3407)
  • a459075 ci(act): Add nightly job to run latest ACT rules (#3403)
  • 8aa816a fix(html-elms): update role allowances for nav element (#3402)
  • 9db7c63 chore(i18n): update Japanese translation (#3319)
  • Additional commits viewable in compare view

Dependabot commands
You can trigger Dependabot actions by commenting on this MR
  • $dependabot rebase will rebase this MR
  • $dependabot recreate will recreate this MR rewriting all the manual changes and resolving conflicts

Merge request reports