chore(release): v4.9.0 (#4380)

##
[4.9.0](dequelabs/axe-core@v4.8.4...v4.9.0)
(2024-03-25)

### Features

- adding the wcag131 tag to the aria-hidden-body rule
([#4349](dequelabs/axe-core#4349))
([dd4c3c3](dequelabs/axe-core@dd4c3c3)),
closes [#4315](dequelabs/axe-core#4315)
- **checks:** deprecate aria-busy check
([#4356](dequelabs/axe-core#4356))
([be0b555](dequelabs/axe-core@be0b555)),
closes [#4347](dequelabs/axe-core#4347)
[#4340](dequelabs/axe-core#4340)
- **color:** add color channel values and luminosity, saturation, clip
functions ([#4366](dequelabs/axe-core#4366))
([9e70199](dequelabs/axe-core@9e70199)),
closes
[/github.com/dequelabs/axe-core/pull/4365/files#r1517706612](https://github.com/dequelabs//github.com/dequelabs/axe-core/pull/4365/files/issues/r1517706612)
- **i18n:** add Greek Translations
([#3836](dequelabs/axe-core#3836))
([3ea9a48](dequelabs/axe-core@3ea9a48))
- **i18n:** Add Italian translation
([#4344](dequelabs/axe-core#4344))
([de1baa9](dequelabs/axe-core@de1baa9))
- **i18n:** Add Simplified Chinese translation
([#4379](dequelabs/axe-core#4379))
([bda7c8d](dequelabs/axe-core@bda7c8d))
- **i18n:** Add Taiwanese Mandarin translation
([#4299](dequelabs/axe-core#4299))
([c5e11de](dequelabs/axe-core@c5e11de))

### Bug Fixes

- Add LICENSE-3RD-PARTY.txt file
([#4304](dequelabs/axe-core#4304))
([daa0fe6](dequelabs/axe-core@daa0fe6))
- add Object.values polyfill for node <=6
([#4274](dequelabs/axe-core#4274))
([5eb867b](dequelabs/axe-core@5eb867b))
- **aria-required-children:** avoid confusing aria-busy message in
failures ([#4347](dequelabs/axe-core#4347))
([591607d](dequelabs/axe-core@591607d)),
closes [#fail13](https://github.com/dequelabs/axe-core/issues/fail13)
[#4340](dequelabs/axe-core#4340)
- avoid reading element-specific node properties of non-element node
types ([#4317](dequelabs/axe-core#4317))
([b853b18](dequelabs/axe-core@b853b18)),
closes [#4316](dequelabs/axe-core#4316)
[#4316](dequelabs/axe-core#4316)
- **color-contrast:** handle text that is outside `overflow: hidden`
ancestor ([#4357](dequelabs/axe-core#4357))
([bdb7300](dequelabs/axe-core@bdb7300)),
closes [#4253](dequelabs/axe-core#4253)
- **color-contrast:** support color blend modes hue, saturation, color,
luminosity ([#4365](dequelabs/axe-core#4365))
([7ae4761](dequelabs/axe-core@7ae4761))
- **d.ts:** RawNodesResult issues
([#4229](dequelabs/axe-core#4229))
([d660518](dequelabs/axe-core@d660518))
- **d.ts:** RunOptions.reporter can be any string
([#4218](dequelabs/axe-core#4218))
([e53f5c5](dequelabs/axe-core@e53f5c5))
- **i18n:** update Italian translations
([#4377](dequelabs/axe-core#4377))
([4d65d4b](dequelabs/axe-core@4d65d4b))
- **listitem:** clarify roleNotValid message
([#4374](dequelabs/axe-core#4374))
([0f8a9af](dequelabs/axe-core@0f8a9af))
- **scrollable-region-focusable:** missing wcag213 tag
([#4201](dequelabs/axe-core#4201))
([0080a72](dequelabs/axe-core@0080a72))
- **target-size:** always pass 10x targets (avoid perf bottleneck)
([#4376](dequelabs/axe-core#4376))
([be327c4](dequelabs/axe-core@be327c4))
- **target-size:** do not crash for nodes with many overlapping widgets
([#4373](dequelabs/axe-core#4373))
([1dbea83](dequelabs/axe-core@1dbea83)),
closes [#4359](dequelabs/axe-core#4359)
[#4359](dequelabs/axe-core#4359)
[#4360](dequelabs/axe-core#4360)
- **utils/get-selector:** ignore 'xmlns' attribute when generating a
selector ([#4303](dequelabs/axe-core#4303))
([938b411](dequelabs/axe-core@938b411))

This PR was opened by a robot 🤖 🎉

Author: WilcoFiers

.circleci/config.yml

@@ -5,15 +5,15 @@ defaults: &defaults
 
 unix_box: &unix_box
   docker:
-    - image: cimg/node:16.18-browsers
+    - image: cimg/node:18.18-browsers
 
 unix_nightly_box: &unix_nightly_box
   docker:
     - image: cimg/node:lts-browsers
 
 orbs:
   puppeteer: threetreeslight/puppeteer@0.1.2
-  browser-tools: circleci/browser-tools@1.4.4
+  browser-tools: circleci/browser-tools@1.4.8
 
 set_npm_auth: &set_npm_auth
   run: npm config set "//registry.npmjs.org/:_authToken" $NPM_AUTH
@@ -33,9 +33,7 @@ restore_build: &restore_build
 commands:
   browser-tools-job:
     steps:
-      - browser-tools/install-browser-tools:
-          # TODO: remove when chromedriver downloads are fixed
-          chrome-version: 116.0.5845.96
+      - browser-tools/install-browser-tools
 
 jobs:
   # Fetch and cache dependencies.
@@ -243,15 +241,15 @@ jobs:
       - <<: *restore_dependency_cache_unix
       - run: npm run test:rule-help-version
 
-  # Test node API
-  test_node:
+  # Test jsdom API
+  test_jsdom:
     <<: *defaults
     <<: *unix_box
     steps:
       - checkout
       - <<: *restore_dependency_cache_unix
       - <<: *restore_build
-      - run: npm run test:node
+      - run: npm run test:jsdom
 
   # Release a "next" version
   next_release:
@@ -363,7 +361,7 @@ workflows:
       - test_rule_help_version:
           requires:
             - build_unix
-      - test_node:
+      - test_jsdom:
           requires:
             - build_unix
       # Verify the sri history is correct
@@ -388,7 +386,7 @@ workflows:
             - test_virtual_rules
             - build_api_docs
             - test_rule_help_version
-            - test_node
+            - test_jsdom
             - verify_sri
           filters:
             branches:
@@ -406,7 +404,7 @@ workflows:
             - test_virtual_rules
             - build_api_docs
             - test_rule_help_version
-            - test_node
+            - test_jsdom
           filters:
             branches:
               only: develop

.eslintrc.js

@@ -2,7 +2,7 @@ module.exports = {
   root: true,
   extends: ['prettier'],
   parserOptions: {
-    ecmaVersion: 2021
+    ecmaVersion: 2023
   },
   env: {
     node: true,

.github/dependabot.yml

@@ -0,0 +1,44 @@
+version: 2
+
+updates:
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'monthly'
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: 'chore'
+    groups:
+      # Any updates not caught by the group config will get individual PRs
+      gha-low-risk:
+        update-types:
+          - 'minor'
+          - 'patch'
+
+  - package-ecosystem: 'npm'
+    directory: '/'
+    schedule:
+      interval: 'monthly'
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: 'chore'
+    ignore:
+      # Prevent updates to ESM-only versions
+      - dependency-name: 'chalk'
+        versions: ['>=5.0.0']
+      - dependency-name: 'execa'
+        versions: ['>=6.0.0']
+      - dependency-name: 'inquirer'
+        versions: ['>=9.0.0']
+      - dependency-name: 'chai'
+        versions: ['>=5.0.0']
+      # Prevent Webpack error caused by v0.11+ of esbuild
+      # @see https://github.com/dequelabs/axe-core/issues/3771
+      - dependency-name: 'esbuild'
+        versions: ['>=0.11.0']
+    groups:
+      # Any updates not caught by the group config will get individual PRs
+      npm-low-risk:
+        update-types:
+          - 'minor'
+          - 'patch'

.github/workflows/format.yml

@@ -6,26 +6,21 @@ jobs:
   prettier:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.head.ref }}
       - name: Install dependencies
         run: npm ci
-      - name: Cache node_modules
-        uses: actions/cache@v3
-        with:
-          path: |
-            ./node_modules
-          key: npm-workspace-cache-${{ runner.os }}-${{ hashFiles('./package-lock.json') }}
-      - uses: actions/setup-node@v1
+      - uses: actions/setup-node@v4
         with:
           node-version: 16
+          cache: 'npm'
       # Workflows are not allowed to edit workflows. As result, we need to prevent Prettier from formatting them.
       - name: Prevent workflows from being formatted
-        run: echo ".github" >> .prettierignore
+        run: echo ".github" >> .prettierignore && cat .prettierignore
       - run: npm run fmt
       # Prevent the prettierignore change from being committed.
       - run: git checkout .prettierignore
-      - uses: stefanzweifel/git-auto-commit-action@v4
+      - uses: stefanzweifel/git-auto-commit-action@8756aa072ef5b4a080af5dc8fef36c5d586e521d # tag=v5
         with:
           commit_message: ':robot: Automated formatting fixes'

.github/workflows/label-extension-linter-issues.yml

@@ -11,13 +11,13 @@ jobs:
       issues: write
     steps:
       - name: Label Extension Issues
-        uses: andymckay/labeler@1.0.4
+        uses: andymckay/labeler@e6c4322d0397f3240f0e7e30a33b5c5df2d39e90 # tag=1
         if: contains(toJson(github.event.issue.body), '### Product\n\naxe Extension\n\n')
         with:
           add-labels: 'extension'
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Label Linting Issues
-        uses: andymckay/labeler@1.0.4
+        uses: andymckay/labeler@e6c4322d0397f3240f0e7e30a33b5c5df2d39e90 # tag=1
         if: contains(toJson(github.event.issue.body), '### Product\n\naxe Linter\n\n')
         with:
           add-labels: 'linting'

.github/workflows/release.yml

@@ -7,16 +7,13 @@ jobs:
     name: Create release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: actions/cache@v3
-        with:
-          path: ./node_modules
-          key: npm-cache-${{ runner.os }}-${{ hashFiles('./package-lock.json') }}
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
           node-version: 16
+          cache: 'npm'
       - name: Run release script and open PR
         run: |
           git config user.name "API Team CI User"
@@ -42,11 +39,9 @@ jobs:
               --output-indicator-new=! CHANGELOG.md | egrep '^!' | awk -F'^[!]' '{print $2}' | sed -e 's/\n/$0A/g'
           )
 
-          echo "chore(release): v$Version" > /tmp/pr.txt
-          echo "" >> /tmp/pr.txt
           echo "$ReleaseNotes" >> /tmp/pr.txt
           echo "" >> /tmp/pr.txt
           echo "This PR was opened by a robot :robot: :tada:" >> /tmp/pr.txt
-          hub pull-request --file /tmp/pr.txt --base master
+          gh pr create --title "chore(release): v$Version" --body-file "/tmp/pr.txt" --base master
         env:
           GITHUB_TOKEN: ${{ secrets.PAT }}

.github/workflows/test.yml

@@ -0,0 +1,45 @@
+name: Tests
+
+on:
+  pull_request:
+  push:
+    branches:
+      - master
+      - develop
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'npm'
+      - run: npm ci
+      - run: npm run build
+      # v4 download seems to have some flakiness with the download of artifacts so pinning to v3 for now
+      # @see https://github.com/actions/download-artifact/issues/249
+      - uses: actions/upload-artifact@v3
+        with:
+          name: axe-core
+          path: axe.js
+          retention-days: 1
+
+  test_node:
+    strategy:
+      matrix:
+        node: [6, 18, 20]
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    needs: build
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node}}
+      - uses: actions/download-artifact@v3
+        with:
+          name: axe-core
+      - run: npm run test:node

.github/workflows/update-generated-files.yaml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 

.husky/pre-commit

@@ -1,5 +1,2 @@
-#!/usr/bin/env sh
-. "$(dirname -- "$0")/_/husky.sh"
-
 npx grunt configure
 npx lint-staged

.jsdoc.json

@@ -12,7 +12,7 @@
     "destination": "./doc/api",
     "encoding": "utf8",
     "recurse": true,
-    "template": "./node_modules/minami"
+    "template": "./node_modules/clean-jsdoc-theme"
   },
   "plugins": ["plugins/markdown"]
 }