[Snyk] Upgrade @uswds/uswds from 3.10.0 to 3.11.0 #388
+6
−5
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade @uswds/uswds from 3.10.0 to 3.11.0. See this package in npm: @uswds/uswds See this project in Snyk: https://app.snyk.io/org/data.gov/project/3be75de7-3443-41fe-bed6-a223b97703ed?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade @uswds/uswds from 3.10.0 to 3.11.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 1 version ahead of your current version.
The recommended version was released 21 days ago.
Release notes
Package name: @uswds/uswds
-
3.11.0 - 2024-12-18
Package
A11y
Breaking
Markup change
Description
-
-
-
Removed outdated browser normalization styles. This update drops normalize support for Internet Explorer. Thanks @ aduth! (#5555)
-
-
-
Moved
-
-
-
Updated table header styles to be consistent across all table elements. Now, all
Package
A11y
Breaking
Markup change
Description
-
-
Yes
Replaced deprecated
Yes
-
-
Fixed a bug that prevented screen readers from announcing the invalid file type error message. (#6168)
Yes
-
-
Removed
Dependency name
Previous version
New version
@ babel/core
7.25.7
7.26.0
@ babel/preset-env
7.25.7
7.26.0
axe-core
4.10.0
4.10.2
cross-spawn
7.0.3
7.0.6
html-webpack-plugin
5.6.0
5.6.3
mocha
10.7.3
10.8.2
nwsapi (added via npm overrides)
--
2.2.13
postcss
8.4.47
8.4.49
prettier
3.3.3
3.4.2
sass
1.79.4
1.83.0
sass-embedded
1.79.4
1.83.0
snyk
1.1293.1
1.1294.3
stylelint
16.9.0
16.11.0
typescript
5.6.2
5.7.2
webpack
5.95.0
5.97.1
-
3.10.0 - 2024-11-13
Package
A11y
Breaking
Markup change
Description
-
-
-
Updated the order of combo box search results. The component now displays options that start with the query at the top of the list, followed by options that contain the query. This behavior more closely aligns with user expectation. (#6122)
Package
A11y
Breaking
Markup change
Description
-
-
-
Removed inline style tags from indeterminate checkbox SVGs. These style tags were unnecessary and caused a conflict with Cypress automated testing. (#6162)
-
-
-
Fixed a bug that caused file input image previews to break when a Content Security Policy is enabled. The component now uses event listeners in place of inline JavaScript to handle error states. Thanks @ jeffpw-goog! (#5997)
-
-
-
Fixed a bug that prevented the modal package from bundling with a custom prefix. The component no longer uses hard-coded class names in its JavaScript. Thanks @ sanason! (#6026)
Yes
-
Yes
Removed the
Yes
-
Yes
Updated the time picker hint text to improve clarity. This update allows the component to meet the success criteria in WCAG 3.3.2. (#6147)
Dependency name
Previous version
Updated version
object-assign
4.1.1
--
Dependency name
Previous version
Updated version
@ babel/core
7.25.2
7.25.7
@ babel/preset-env
7.25.4
7.25.7
browserify
17.0.0
17.0.1
eslint-plugin-import
2.30.0
2.31.0
eslint-plugin-no-unsanitized
4.1.0
4.1.2
postcss
8.4.45
8.4.47
sass
1.78.0
1.79.4
sass-embedded
1.78.0
1.79.4
snyk
1.1293.0
1.1293.1
twig-html-loader
0.1.9
--
webpack
5.94.0
5.95.0
from @uswds/uswds GitHub release notesWhat's new in USWDS 3.11.0
Features
usa-elementsusa-form,usa-input-prefix-suffix,usa-input,uswds-core.usa-input--[width]and.usa-input-group--[width]classes out of theusa-formpackage. These classes are now generated in theusa-inputandusa-input-prefix-suffixpackages and can be used without the.usa-formparent element. Thanks @ aduth! (#6232)usa-tablethead th,tbody th, andtfoot thcells will all have the same visual styles. Thanks @ ajanickiv!✏️ Teams should confirm that their tables display as expected. (#5986)
Bug fixes
usa-button,usa-collection,usa-file-input,usa-icon-list,usa-icon,usa-input-prefix-suffix,usa-modal,usa-paginationxlink:hrefreferences withhref.✏ Teams should update their markup to replace
xlink:hrefreferences withhrefand pull in the updatedloader.svgfile. (#6165)usa-file-input✏ Teams who support additional languages should update the error message string to match the new copy.
usa-footeroverflow: hiddenfromusa-footerto allow the full focus outline to show. This fix also improves horizontal alignment in the slim footer variant. Thanks @ 6TELOIV! (#6237)Markup changes
MDN warns that the deprecated
xlink:hrefattribute can stop working at any time. When referencing SVG icon sprites, teams should usehrefinstead of the deprecatedxlink:hrefattribute.Dependencies and security
0vulnerabilities in regular dependencies (dependencies for USWDS projects installed withnpm install @ uswds/uswds)29moderate,26high vulnerabilities in devDependencies (development dependencies).Release TGZ SHA-256 hash:
1c10cd70a3c627fd14d9ee74a4071e67c4e5ba4bf14ca1c50c19c2fe5885e70aWhat's new in USWDS 3.10.0
Features
usa-combo-boxBug fixes
usa-checkbox✏️ Teams should update the
checkbox-indeterminate.svgandcheckbox-indeterminate-alt.svgfiles in their projects.usa-file-inputusa-modelusa-step-indicatoraria-labelfrom the wrapper of the step indicator component. This resolves an automated testing error related to having an invalid attribute on adivelement. (#6146)✏️ Teams should remove the the
aria-labelfrom the.usa-step-indicatorelement in their step indicator markup.usa-time-picker✏️ Teams should replace the words "hh:mm" in the time picker hint text with "Select a time from the dropdown. Type into the input to filter options."
Markup changes
Step indicator
To remove automated testing errors, teams should update the step indicator markup to remove the
aria-labelon theusa-step-indicatorelement:Time picker
If teams are using "hh:mm" in their time picker hint text, they should update the text to "Select a time from the dropdown. Type into the input to filter options.":
Dependencies and security
Dependency updates
Dev Dependency updates
Thanks @ aduth and @ anselmbradford for contributing to our dependency updates!
0vulnerabilities in regular dependencies (dependencies for USWDS projects installed withnpm install @ uswds/uswds)29moderate,26high vulnerabilities in devDependencies (development dependencies).Release TGZ SHA-256 hash:
fdd1f9fc4cbfeb0fca7feeba1c94b205ba4ee22d03f63bb916c8750982715fb7Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: