[Snyk] Upgrade @uswds/uswds from 3.4.1 to 3.5.0 #143
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade @uswds/uswds from 3.4.1 to 3.5.0. See this package in npm: https://www.npmjs.com/package/@uswds/uswds See this project in Snyk: https://app.snyk.io/org/data.gov/project/3be75de7-3443-41fe-bed6-a223b97703ed?utm_source=github&utm_medium=referral&page=upgrade-pr
btylerburton
approved these changes
Jul 12, 2023
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade @uswds/uswds from 3.4.1 to 3.5.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: @uswds/uswds
-
3.5.0 - 2023-06-09
Package
A11y
Breaking
Description
—
—
Stopped using font smoothing. No longer use font smoothing for dark backgrounds and disabled buttons. (#5250)
Yes
—
Improved legibility of buttons in forced colors mode. Added a consistent border in forced colors mode. (#5147)
Yes
—
Improved consistency of disabled styles in forced colors mode. (#5295)
Yes
—
Improved consistency and visibility of disabled styles. Disabled form inputs now use a consistent gray background. (#5063)
⚠️ We don't consider this a breaking change, but teams should check disabled form elements to assure that the new styles are working in their layouts.
Yes
—
Labeled external links for screen readers. Added a label for screen readers that identifies external links and if they open in a new tab. (#5166)
Yes
—
Added settings for announcing external links. Added
—
Yes
Removed
—
—
Added
—
Yes
Updated individual Sass map settings without affecting defaults. Now adjusting a single Sass map setting will no longer set all other values in the map to
—
—
Added two new settings to customize accordion background colors. You can now customize accordion button and content background colors with
Package
A11y
Breaking
Description
—
—
Removed the
—
—
Fixed a bug that caused inaccurate megamenu template markup. The markup in megamenu code examples now accurately includes the
Yes
—
Fixed a typo in the sortable table JavaScript that caused the aria-label in table headers to have an unnecessary single quote. (#5280)
—
—
Removed unused utility builder comments from compiled CSS. This update significantly reduces the compiled file size. (#5209)
—
—
Fixed a bug that removed default positioning. If the
—
—
Fixed a bug that prevented links that start with a number from scrolling when clicked. (#5200)
—
—
Removed redundant and invalid height declaration. (#5187)
Yes
—
Fixed a bug that caused button
Yes
—
Added spacebar trigger to links styled as buttons. Now any item that looks like a button will trigger with the spacebar, even if the element is a link. (#4385)
Yes
Yes
Replaced
⚠️ This is marked as a breaking change because it changes the recommended card component markup to include
Yes
Yes
Improved accessible markup of overflow ellipses. We replaced the
⚠️ This is marked as a breaking change because it changes the recommended component markup. In the
—
—
Fixed an issue with large file previews. Now adding large files no longer results in an infinite spinner. Adding large files should now result in an accurate preview. (#5114)
Yes
—
Improved the file input experience for voice command and screen reader users. Voice command users can now interact with the component by speaking the visible instructions text. Additionally, screen reader users now have access to both the instructions text and the file selection status. (#5213)
Yes
—
Improved consistency of keyboard actions. Users can now to use Tab to escape the Combo box selection without making a choice, and Space to select the current highlighted option when within the dropdown menu. (#5160)
Yes
—
Adjusted forced colors mode styles to ensure visibility and increase consistency. Forced colors mode styles will now override the background color and display the button outline. The open/close icons now dynamically adjust to
—
Yes
Updated Accessibility statement link text. Updated the identifier to use the text "Accessibility statement" (EN) / "Declaración de accesibilidad" (ES) for the required link to an accessibility statement.
⚠️ This is a breaking change because it changes the content of the identifier. Earlier versions of the identifier will continue to work as expected. (#5278)
Guidance
Yes
—
Updated guidance to suggest identifying required and optional fields. We added a new section on identifying required fields and now suggest labeling required fields with a red asterisk and optional fields with the word optional. (uswds/uswds-site#1834)
Dependency name
Previous version
New version
@ chanzuckerberg/axe-storybook-testing
5.0.1
6.3.0
axe-core
4.3.4
4.6.3
extract-loader
5.1.0
—
webpack
5.58.1
5.76.0
-
3.4.1 - 2023-03-13
Type
Package
A11y
Breaking
Description
Feature
—
—
Update the URL in the address bar when navigating from the In-Page Navigation. Now users can see the proper anchor link in the address bar when navigating. Thanks @ aduth! (#5068)
Bug
—
—
Fixed invisible link text for links styled as buttons within forms. Now link text does not match the primary button color when nested inside of a form and the
Bug
—
—
Logo text width setting now works as expected. Now the design system respects the value passed to
from @uswds/uswds GitHub release notesWhat's new in USWDS 3.5.0
Features
usa-button,usa-dark-background,uswds-coreusa-button,usa-checkbox,usa-date-picker,usa-pagination,usa-radio,usa-range,usa-search,uswds-coreusa-button,usa-checkbox,usa-combo-box,usa-date-picker,usa-date-range-picker,usa-file-input,usa-input,usa-input-mask,usa-input-prefix-suffix,usa-radio,usa-range,usa-select,usa-textarea,uswds-coreusa-button,usa-checkbox,usa-combo-box,usa-date-picker,usa-date-range-picker,usa-file-input,usa-input,usa-input-prefix-suffix,usa-radio,usa-range,usa-select,usa-textarea,usa-time-picker,uswds-coreusa-link,uswds-coreuswds-core$theme-external-link-sr-label-tab-sameand$theme-external-link-sr-label-tab-newto control how screen readers announce external links. (#5166)usa-content,usa-paragraph,usa-prose,uswds-coreusa-prose-mixins and placeholders from Sass. Users should instead usetypeset-mixins in their place. This is a breaking change only if your project Sass usesusa-prose-mixins and placeholders. It does not affect the look of anyusa-prose–styled element.(#5158)uswds-core$theme-heading-margin-topand$theme-paragraph-margin-topsystem variables. (#5158)uswds-corefalse. Users can now update only the map values they wish to change. This is a breaking change only if your project deactivated mapped settings by not declaring them. (#5216)usa-accordion,usa-banner,usa-nav,uswds-core$theme-accordion-button-background-colorand$theme-accordion-background-color. (#5269)Bug fixes
usa-headeridattribute from theusa-logoelement. (#5319)usa-headerusa-megamenuclass. (#5311)usa-tableuswds-core,uswds-utilitiesusa-tooltipdata-positionattribute is not specified, the tooltip position will now default to "top". (#5228)usa-in-page-navigationusa-alertusa-buttontypeattribute to render empty. (#5247)usa-buttonusa-cardbuttonelements with links styled as buttons.<a href="#" class="usa-button"></a>for the call to action instead of abuttonelement. (#4385)usa-paginationrole="presentation"witharia-label="ellipsis indicating non-visible pages"forusa-pagination__overflowitems to better conform to WCAG 2.0 and 2.1.usa-pagination__overflowelement, usearia-label="ellipsis indicating non-visible pages"instead ofrole="presentation". (#5197)usa-file-inputusa-file-inputusa-combo-boxusa-accordion,usa-banner,usa-navButtonTextcolors. (#5286)usa-identifierDependencies and security
0vulnerabilities in regular dependencies (dependencies for USWDS projects installed withnpm install @ uswds/uswds)1 moderate 29 highvulnerabilities in devDependencies (development dependencies)Release TGZ SHA-256 hash:
e0dbab25bffaaf02b3b7317690939d9e0e63bc5c824046e778de8f4c15227a9cWhat's new in USWDS 3.4.1
There were a couple features and bug fixes that we intended to include in USWDS 3.4.0, but inadvertently omitted from that release.
Features and bug fixes
usa-in-page-navigationusa-formusa-buttonclass is present. (#5112)usa-header$theme-header-logo-text-width. Thanks @ RSD-accessboard! (#5008)Dependencies and security
No dependency changes
0vulnerabilities in regular dependencies (dependencies for USWDS projects installed withnpm install uswds)1 moderate 33 highvulnerabilities in devDependencies (development dependencies)Release TGZ SHA-256 hash:
af1cd42c60b73fbbfa9c27b8ee52fb735b1a2234c6b3aa17de5bbf8a9190ca62Commit messages
Package name: @uswds/uswds
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs