[Snyk] Upgrade @uswds/uswds from 3.9.0 to 3.10.0 #210
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade @uswds/uswds from 3.9.0 to 3.10.0. See this package in npm: @uswds/uswds See this project in Snyk: https://app.snyk.io/org/ospo/project/19b58f20-e9ca-4126-b15c-1578162b83bb?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade @uswds/uswds from 3.9.0 to 3.10.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 1 version ahead of your current version.
The recommended version was released on 21 days ago.
Release notes
Package name: @uswds/uswds
-
3.10.0 - 2024-11-13
Package
A11y
Breaking
Markup change
Description
-
-
-
Updated the order of combo box search results. The component now displays options that start with the query at the top of the list, followed by options that contain the query. This behavior more closely aligns with user expectation. (#6122)
Package
A11y
Breaking
Markup change
Description
-
-
-
Removed inline style tags from indeterminate checkbox SVGs. These style tags were unnecessary and caused a conflict with Cypress automated testing. (#6162)
-
-
-
Fixed a bug that caused file input image previews to break when a Content Security Policy is enabled. The component now uses event listeners in place of inline JavaScript to handle error states. Thanks @ jeffpw-goog! (#5997)
-
-
-
Fixed a bug that prevented the modal package from bundling with a custom prefix. The component no longer uses hard-coded class names in its JavaScript. Thanks @ sanason! (#6026)
Yes
-
Yes
Removed the
Yes
-
Yes
Updated the time picker hint text to improve clarity. This update allows the component to meet the success criteria in WCAG 3.3.2. (#6147)
Dependency name
Previous version
Updated version
object-assign
4.1.1
--
Dependency name
Previous version
Updated version
@ babel/core
7.25.2
7.25.7
@ babel/preset-env
7.25.4
7.25.7
browserify
17.0.0
17.0.1
eslint-plugin-import
2.30.0
2.31.0
eslint-plugin-no-unsanitized
4.1.0
4.1.2
postcss
8.4.45
8.4.47
sass
1.78.0
1.79.4
sass-embedded
1.78.0
1.79.4
snyk
1.1293.0
1.1293.1
twig-html-loader
0.1.9
--
webpack
5.94.0
5.95.0
-
3.9.0 - 2024-10-04
Package
A11y
Breaking
Markup change
Description
-
-
-
Enhanced the visual cue when
Yes
-
-
Added
-
-
-
Added new
Package
A11y
Breaking
Markup change
Description
-
Yes
-
Fixed a bug that caused
⚠️ Considered breaking because the alignment and display of the alert may shift.
-
Yes
-
Updated the width of unstyled buttons at narrow screen widths. Now, unstyled buttons receive a width of
⚠️ Considered breaking because the display of unstyled buttons will change at narrow screen widths. Check your codebase for any instances of
-
Yes
-
Fixed a bug that caused the component to ignore the
⚠️ Considered breaking because fonts in cards may change if you've set
Yes
-
-
Removed custom screen reader instructions in the combo box component. Combo box now relies on the default instructions provided by screen readers. (#6022)
Yes
-
-
Fixed a bug that caused
Yes
Yes
-
Removed the CSS order property from the mobile view in standard variants of the header component. Now, the visual order of the component matches the tab order. If you would like to visually keep the search bar at the top of the menu, you will need to reorder your markup in the mobile view. (#6037)
⚠️ Considered breaking because the position of the search bar will change in the mobile menu.
Yes
-
Yes
Added the
-
-
Yes
Updated the USA.gov link in Spanish versions of the identifier. The link text now reads "Visite USAGov en Español" and the link url is now "https://www.usa.gov/es/". (#5892)
Yes
-
Yes
Removed numeric representation of months in the memorable date component. Recent usability testing indicated that having both numbers and names to represent months was confusing for screen reader users. (#6028)
Yes
-
-
Added text underline styles to pagination links. Pagination links are now visually consistent with other USWDS text links. (#5970)
Dependency name
Previous version
Updated version
@ 18f/identity-stylelint-config
4.0.0
4.1.0
@ babel/core
7.24.5
7.25.2
@ babel/preset-env
7.24.5
7.25.4
@ types/node
20.12.11
20.14.10
autoprefixer
10.4.19
10.4.20
axe-core
4.9.1
4.10.0
babel-loader
9.1.3
--
eslint-plugin-import
2.29.1
2.30.0
eslint-plugin-no-unsanitized
4.0.2
4.1.0
gulp-changed
4.0.3
--
gulp-clean
0.4.0
--
gulp-cli
2.3.0
--
mocha
10.4.0
10.7.3
normalize.css
8.0.1
--
path
0.12.7
--
postcss
8.4.38
8.4.45
postcss-preset-env
9.5.11
9.6.0
prettier
3.2.5
3.3.3
sass
1.77.0
1.78.0
sass-embedded
1.77.0
1.78.0
snyk
1.1291.0
1.1293.0
stylelint
16.5.0
16.9.0
typescript
5.4.5
5.6.2
webpack
5.91.0
5.94.0
from @uswds/uswds GitHub release notesWhat's new in USWDS 3.10.0
Features
usa-combo-boxBug fixes
usa-checkbox✏️ Teams should update the
checkbox-indeterminate.svgandcheckbox-indeterminate-alt.svgfiles in their projects.usa-file-inputusa-modelusa-step-indicatoraria-labelfrom the wrapper of the step indicator component. This resolves an automated testing error related to having an invalid attribute on adivelement. (#6146)✏️ Teams should remove the the
aria-labelfrom the.usa-step-indicatorelement in their step indicator markup.usa-time-picker✏️ Teams should replace the words "hh:mm" in the time picker hint text with "Select a time from the dropdown. Type into the input to filter options."
Markup changes
Step indicator
To remove automated testing errors, teams should update the step indicator markup to remove the
aria-labelon theusa-step-indicatorelement:Time picker
If teams are using "hh:mm" in their time picker hint text, they should update the text to "Select a time from the dropdown. Type into the input to filter options.":
Dependencies and security
Dependency updates
Dev Dependency updates
Thanks @ aduth and @ anselmbradford for contributing to our dependency updates!
0vulnerabilities in regular dependencies (dependencies for USWDS projects installed withnpm install @ uswds/uswds)29moderate,26high vulnerabilities in devDependencies (development dependencies).Release TGZ SHA-256 hash:
fdd1f9fc4cbfeb0fca7feeba1c94b205ba4ee22d03f63bb916c8750982715fb7What's new in USWDS 3.9.0
Features
usa-character-countmaxlengthis exceeded in the character count component. Now, the component uses standard USWDS error styles to visually enhance the error state. (#5908)usa-date-picker,usa-date-range-pickeraria-disabledto the list of expected attributes in the date picker and date range picker components. Now, the component will disable toggle when thearia-disabledattribute is present. (#6013)uswds-core,usa-layout-grid$theme-utility-breakpoints-customsetting. This setting generates responsive variants of USWDS utilities at custom breakpoints. Values must be set withpxvalues inside a Sass map. Thanks @ jamigibbs! (#6048)Bug fixes
usa-alert,usa-site-alert$theme-site-margins-widthto unexpectedly adjust the alignment inside the alert and site alert components. Alignment on the alert and site alert components will likely shift from this change. Confirm that your implementation of the component aligns as expected. (#5636)usa-buttonautoto better match USWDS link styles. Users should confirm that the variant visually displays as expected in their projects. Thanks @ aduth! (#5631)@ include button-unstyledin your custom styles. These items may be affected by this change.usa-card$theme-card-font-familysetting. Confirm that your implementation of the card component displays with the expected font family. (#5974)$theme-card-font-family.usa-combo-boxusa-date-picker,usa-date-range-pickermouseoverevents to prevent keyboard navigation. Now when you hover your mouse over the date picker buttons, only the hover state will be triggered. (#5774)usa-headerusa-footer,templatesautocomplete="email"attribute to the big footer variant and the "Create an account" template. This attribute allows the components to meet the standards outlined in WCAG 1.3.5. (#6002)✏️ Teams should update their markup if they use an email field in their big footer.
usa-identifier✏️ Teams should update this text if they use the Spanish-language identifier.
usa-memorable-date✏️ Teams should update their memorable date component to remove the leading numbers.
usa-paginationDependencies and security
Thanks @ aduth for contributing to our dependency updates and @ skyf0l for fixing a typo in our package.json!
0vulnerabilities in regular dependencies (dependencies for USWDS projects installed withnpm install @ uswds/uswds)29moderate,26high vulnerabilities in devDependencies (development dependencies).Release TGZ SHA-256 hash:
140cb2162e6c60a6a6ecbc71d8d047819d4ec26f9dd6c7056bd4bd8a266af2abImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: