chore(deps): bump the frontend group in /frontend with 2 updates by dependabot[bot] · Pull Request #330 · arieleven/qasight

dependabot · 2026-11-14T04:03:48Z

Bumps the frontend group in /frontend with 2 updates: axe-core and vite.

Updates axe-core from 4.10.3 to 4.14.0

Release notes

Release 4.14.0

This release enables a new rule, and introduces new violations in some existing rules. These can cause the issue totals to go up from a previous version. Similarly we've included various bug fixes to false positives which may see the issue count go down as well. This release focused on various performance improvements which should speed runs up 20% - 40% on most pages. On especially large pages we've measured a 15x performance improvement.

Features

add EN 301 549 v4 tags to target-size (#5361) (8200d2b), closes #5311

i18n: add Azerbaijani locale (#5385) (02e5fd4)

label-content-name-mismatch: Enable rule by default (#5421) (c0d6163), references #5227

Bug Fixes

aria-allowed-attr: report case-sensitive aria attributes with non-lowercase values (#5418) (1e33c6c), closes #5280, references #5224

aria-hidden-focus: suggest removing aria-hidden in the fail messages (#5397) (aa4a0a1), references #4552 #5357 #4552

aria-prohibited-attr: quote the element name in no-role messages (#5391) (24736a4), references #3730 #5357 #3730

aria-required-children: allow caption in table, grid and treegrid (#5412) (ed987a2), references #5265

aria-required-children: explain presentational children that cannot be ignored (#5407) (35a38d8), references #4833 #5357 #4833

avoid-inline-spacing: test the text that gets the spacing from the element (#5411) (96e3e06), references #4232 #4232

checks: add incomplete messages to checks that can return undefined (#5388) (6f1a6fe), references #5375 #5375

checks: make listitem failure messages actionable (#5357) (6dd1be2)

color-contrast: handle "none" and exponents in color strings (#5422) (cf5ed89), references #5313 #4136 #4007 #4269

color-contrast: treat empty low-contrast text inputs as incomplete (#5359) (47029de), closes #4260, references #2130 #2130

commons/dom: treat dialog as non-modal when elementsFromPoint is unsupported (#5202) (757b44a), references #4997

commons/text/visibleVirtual: sanitize visible text once, not at every level (#5368) (2d47182), closes #5207, references #5207 act-rules/act-rules.github.io#2443

core: use the fallback message when a check has no incomplete message (#5367) (4887c3a), closes #5344, references #5355

label-content-name-mismatch: add support for cjk word splitting (#5437) (d53cb0a)

label-content-name-mismatch: compare visible label to name by word (#5345) (4e3fcf5), references #5203 act-rules/act-rules.github.io#2443 #5207 #5308 #5203 #5346 #5207 #5207 #5302 #4311 #5203 #5302 #5302 #5344 #5203

label-content-name-mismatch: ignore parenthesised content (#5360) (388132d), references act-rules/act-rules.github.io#2443 #5308 #5207 #5207 #5207

label-content-name-mismatch: mark value-text roles incomplete (#5355) (5258f44), closes #4561, references #4561 #5344 #5345

label-content-name-mismatch: normalize CJK and full-width text before comparing (#5419) (52dd387), references #5420 #5340 #5345 #5400 #5355 #5308 #5400

no-focusable-content: say how to fix in the default fail message (#5392) (b84b76b), references #3267 #5357 #3194 #5357 #3267

p-as-heading: ignore paragraphs with heading roles (#5348) (cbc33b9), references #5283

process-message: separate array values with a comma and a space (#5393) (6ba9ee4), references #3344 #3344

reporter: make addReporter isDefault set the default reporter (#5395) (eb854ed), references #4058 #4058

scrollable-region-focusable: negative tabindex content needs review instead of failing outright (#5364) (72e8624)

target-size: ignore overlapping links with the same destination (#5428) (2ba0812), references #5406 #4224

Update de.json (#5353) (4d306cb)

utils: resolve @import url against the stylesheet that contains it (#5269) (e618fb6), closes #5268

Release 4.13.0

In summary, this release adds:

Support Element Internals: A modern way for building accessible component libraries Axe-core is the first accessibility tool to support this major new web feature! Thanks to RedHat and Adobe for working with us to figure out the right way forward.

A new Swedish translation, thanks to our a community contribution

A new Finish contribution (not open source), thanks to our Scandinavian partner

... (truncated)

Changelog

Sourced from axe-core's changelog.

4.14.0 (2026-10-05)

Features

add EN 301 549 v4 tags to target-size (#5361) (8200d2b), closes #5311

i18n: add Azerbaijani locale (#5385) (02e5fd4)

label-content-name-mismatch: Enable rule by default (#5421) (c0d6163), references #5227

Bug Fixes

aria-allowed-attr: report case-sensitive aria attributes with non-lowercase values (#5418) (1e33c6c), closes #5280, references #5224

aria-hidden-focus: suggest removing aria-hidden in the fail messages (#5397) (aa4a0a1), references #4552 #5357 #4552

aria-prohibited-attr: quote the element name in no-role messages (#5391) (24736a4), references #3730 #5357 #3730

aria-required-children: allow caption in table, grid and treegrid (#5412) (ed987a2), references #5265

aria-required-children: explain presentational children that cannot be ignored (#5407) (35a38d8), references #4833 #5357 #4833

avoid-inline-spacing: test the text that gets the spacing from the element (#5411) (96e3e06), references #4232 #4232

checks: add incomplete messages to checks that can return undefined (#5388) (6f1a6fe), references #5375 #5375

checks: make listitem failure messages actionable (#5357) (6dd1be2)

color-contrast: handle "none" and exponents in color strings (#5422) (cf5ed89), references #5313 #4136 #4007 #4269

color-contrast: treat empty low-contrast text inputs as incomplete (#5359) (47029de), closes #4260, references #2130 #2130

commons/dom: treat dialog as non-modal when elementsFromPoint is unsupported (#5202) (757b44a), references #4997

commons/text/visibleVirtual: sanitize visible text once, not at every level (#5368) (2d47182), closes #5207, references #5207 act-rules/act-rules.github.io#2443

core: use the fallback message when a check has no incomplete message (#5367) (4887c3a), closes #5344, references #5355

label-content-name-mismatch: add support for cjk word splitting (#5437) (d53cb0a)

label-content-name-mismatch: compare visible label to name by word (#5345) (4e3fcf5), references #5203 act-rules/act-rules.github.io#2443 #5207 #5308 #5203 #5346 #5207 #5207 #5302 #4311 #5203 #5302 #5302 #5344 #5203

label-content-name-mismatch: ignore parenthesised content (#5360) (388132d), references act-rules/act-rules.github.io#2443 #5308 #5207 #5207 #5207

label-content-name-mismatch: mark value-text roles incomplete (#5355) (5258f44), closes #4561, references #4561 #5344 #5345

label-content-name-mismatch: normalize CJK and full-width text before comparing (#5419) (52dd387), references #5420 #5340 #5345 #5400 #5355 #5308 #5400

no-focusable-content: say how to fix in the default fail message (#5392) (b84b76b), references #3267 #5357 #3194 #5357 #3267

p-as-heading: ignore paragraphs with heading roles (#5348) (cbc33b9), references #5283

process-message: separate array values with a comma and a space (#5393) (6ba9ee4), references #3344 #3344

reporter: make addReporter isDefault set the default reporter (#5395) (eb854ed), references #4058 #4058

scrollable-region-focusable: negative tabindex content needs review instead of failing outright (#5364) (72e8624)

target-size: ignore overlapping links with the same destination (#5428) (2ba0812), references #5406 #4224

Update de.json (#5353) (4d306cb)

utils: resolve @import url against the stylesheet that contains it (#5269) (e618fb6), closes #5268

4.13.0 (2026-08-05)

Features

aria-actions: add aria-actions to allowed ARIA attributes (#5200) (029655d), closes #4584 #5199, references #5215 #5215

aria-allowed-attr: flag deprecated ARIA attributes as needs-review (#5246) (518f3cc), closes #3341

aria-prohibited-attr: allow many elements to be named and disallow label and body from being named (#5259) (d8b1ea5)

aria-roles: add sectionheader and sectionfooter roles (#5238) (c36c109), closes #4734, references #4734

aria/get-aria-value: new function to get aria values of a node (#5109) (a7d8f3e), references #5042

aria/has-attr-value: new function to check if node has aria value (#5136) (61f2624), references #5109

aria: support role=image as equivalent to role=img (#5248) (5aa8aaf), closes #4656, references #5272

checks/aria: support ARIA element internals properties (#5172) (9b7f754)

checks/label: support ARIA element internals properties (#5170) (21c5f8b)

... (truncated)

Commits

e797173 chore(release): v4.14.0 (#5438)
6976881 chore(release): 4.14.0
d53cb0a fix(label-content-name-mismatch): add support for cjk word splitting (#5437)
35a38d8 fix(aria-required-children): explain presentational children that cannot be i...
2ba0812 fix(target-size): ignore overlapping links with the same destination (#5428)
1e33c6c fix(aria-allowed-attr): report case-sensitive aria attributes with non-lowerc...
f59642e chore: bump mocha from 11.8.0 to 12.0.2 (#5426)
6efcb6e chore: bump emoji-regex from 10.6.0 to 11.0.0 (#5427)
2da49a3 chore: bump the npm-low-risk group across 1 directory with 7 updates (#5425)
aa4a0a1 fix(aria-hidden-focus): suggest removing aria-hidden in the fail messages (#5...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for axe-core since your current version.

Updates vite from 8.3.7 to 8.3.8

Release notes

Sourced from vite's releases.

v8.3.8

Bug Fixes

build: keep magicString and ast in transform hook meta (#24012) (a3b28e8)

bundled-dev: emit assets referenced by inline workers during load (#23103) (5e50bae)

config: skip native loader compat checks for type-only imports (#24021) (e554294)

css: reject CSS entrypoints when build.cssCodeSplit: false (#23112) (e4ad62b)

deps: update all non-major dependencies (#24027) (a13aa04)

hide console window when running yarn config get on Windows (#24013) (3f6c4cd)

Performance Improvements

css: import sass once instead of per file (#24041) (db8b119)

defer net use until a UNC path is resolved on Windows (#24014) (b643046)

Miscellaneous Chores

deps: update dependency @types/node to v26 (#24029) (dd780cd)

enable vitest plugin in Oxlint (#24052) (ce979e4)

enable vitest style rules in Oxlint (#24053) (b8c8270)

revert "fix(build): keep magicString and ast in transform hook meta (#24012)" (#24065) (afc44f0)

Code Refactoring

optimizer: use non-capturing group for external types regex (#24048) (ef23433)

Tests

avoid joining logs for assertion (#24057) (fbb0a4e)

Changelog

Sourced from vite's changelog.

8.3.8 (2026-11-11)

Bug Fixes

build: keep magicString and ast in transform hook meta (#24012) (a3b28e8)

bundled-dev: emit assets referenced by inline workers during load (#23103) (5e50bae)

config: skip native loader compat checks for type-only imports (#24021) (e554294)

css: reject CSS entrypoints when build.cssCodeSplit: false (#23112) (e4ad62b)

deps: update all non-major dependencies (#24027) (a13aa04)

hide console window when running yarn config get on Windows (#24013) (3f6c4cd)

Performance Improvements

css: import sass once instead of per file (#24041) (db8b119)

defer net use until a UNC path is resolved on Windows (#24014) (b643046)

Miscellaneous Chores

deps: update dependency @types/node to v26 (#24029) (dd780cd)

enable vitest plugin in Oxlint (#24052) (ce979e4)

enable vitest style rules in Oxlint (#24053) (b8c8270)

revert "fix(build): keep magicString and ast in transform hook meta (#24012)" (#24065) (afc44f0)

Code Refactoring

optimizer: use non-capturing group for external types regex (#24048) (ef23433)

Tests

avoid joining logs for assertion (#24057) (fbb0a4e)

Commits

b39e6e6 release: v8.3.8 (#24066)
afc44f0 chore: revert "fix(build): keep magicString and ast in transform hook met...
e4ad62b fix(css): reject CSS entrypoints when build.cssCodeSplit: false (#23112)
5e50bae fix(bundled-dev): emit assets referenced by inline workers during load (#23103)
fbb0a4e test: avoid joining logs for assertion (#24057)
b8c8270 chore: enable vitest style rules in Oxlint (#24053)
ce979e4 chore: enable vitest plugin in Oxlint (#24052)
a3b28e8 fix(build): keep magicString and ast in transform hook meta (#24012)
dd780cd chore(deps): update dependency @types/node to v26 (#24029)
b643046 perf: defer net use until a UNC path is resolved on Windows (#24014)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the frontend group in /frontend with 2 updates: [axe-core](https://github.com/dequelabs/axe-core) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `axe-core` from 4.10.3 to 4.14.0 - [Release notes](https://github.com/dequelabs/axe-core/releases) - [Changelog](https://github.com/dequelabs/axe-core/blob/develop/CHANGELOG.md) - [Commits](dequelabs/axe-core@v4.10.3...v4.14.0) Updates `vite` from 8.3.7 to 8.3.8 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.8/packages/vite) --- updated-dependencies: - dependency-name: axe-core dependency-version: 4.14.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: vite dependency-version: 8.3.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-11-14T04:03:51Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions · 2026-11-14T04:04:23Z

✅ QASight: `unit` passed

2 passed · 0 failed · 0 skipped in 0.3s · pass rate 100.0%

Stage	Runner	Result	Tests	Passed	Failed	Skipped	Time
unit	pytest	✅ pass	2	2	0	0	0.3s

No test changed outcome since the last run on main.

_{Run f6234fad-5404-46c0-87a0-e381b63b5e04 · workflow run · generated by QASight}

dependabot Bot requested a review from arieleven as a code owner November 14, 2026 04:03

dependabot Bot added the no-changelog label Nov 14, 2026

Navigation Menu

Repository navigation

chore(deps): bump the frontend group in /frontend with 2 updates - #330

chore(deps): bump the frontend group in /frontend with 2 updates#330
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-c9eba9165d

dependabot Bot commented on behalf of github Nov 14, 2026

Uh oh!

dependabot Bot commented on behalf of github Nov 14, 2026

Uh oh!

github-actions Bot commented Nov 14, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 14, 2026

Release 4.14.0

Features

Bug Fixes

Release 4.13.0

4.14.0 (2026-10-05)

Features

Bug Fixes

4.13.0 (2026-08-05)

Features

v8.3.8

Bug Fixes

Performance Improvements

Miscellaneous Chores

Code Refactoring

Tests

8.3.8 (2026-11-11)

Bug Fixes

Performance Improvements

Miscellaneous Chores

Code Refactoring

Tests

Uh oh!

dependabot Bot commented on behalf of github Nov 14, 2026

Labels

Uh oh!

github-actions Bot commented Nov 14, 2026

✅ QASight: unit passed

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

✅ QASight: `unit` passed