Update development-dependencies (minor)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@changesets/cli (source)	^2.28.1 → ^2.31.1
@types/pdfmake (source)	^0.2.11 → ^0.3.0
axe-core (source)	^4.11.1 → ^4.13.0
sass	^1.97.2 → ^1.98.0

---

Release Notes

changesets/changesets (@​changesets/cli)

v2.31.1

Compare Source

Patch Changes

• #​2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.

v2.31.0

Compare Source

Minor Changes

• #​1889 96ca062 Thanks @​mixelburg! - Error on unsupported flags for individual CLI commands and print the matching command usage to make mistakes easier to spot.

• #​1873 42943b7 Thanks @​mixelburg! - Respond to --help on all subcommands. Previously, --help was only handled when it was the sole argument; passing it alongside a subcommand (e.g. changeset version --help) would silently execute the command instead. Now --help always exits early and prints per-command usage when a known subcommand is provided, or the general help text otherwise.

Patch Changes

• d2121dc Thanks @​Andarist! - Fix npm auth for path-based registries during publish by preserving configured registry URLs instead of normalizing them.

• #​1888 036fdd4 Thanks @​mixelburg! - Fix several changeset version issues with workspace protocol dependencies. Valid explicit workspace: ranges and aliases are no longer rewritten unnecessarily, and workspace path references are handled correctly during versioning.

• #​1903 5c4731f Thanks @​Andarist! - Gracefully handle stale npm info data leading to duplicate publish attempts.

• #​1867 f61e716 Thanks @​Andarist! - Improved detection for published state of prerelease-only packages without latest dist-tag on GitHub Packages registry.

• Updated dependencies [036fdd4, 036fdd4, 036fdd4]:

  • @​changesets/assemble-release-plan@6.0.10
  • @​changesets/get-dependents-graph@2.1.4
  • @​changesets/apply-release-plan@7.1.1
  • @​changesets/get-release-plan@4.0.16
  • @​changesets/config@3.1.4

v2.30.0

Compare Source

Minor Changes

• #​1840 057cca2 Thanks @​wotan-allfather! - Add --since flag to add command

  The add command now supports a --since flag that allows you to specify which branch, tag, or git ref to use when detecting changed packages. This is useful for gitflow workflows where you have multiple target branches and the baseBranch config option doesn't cover all use cases.

  Example: changeset add --since=develop

  If not provided, the command falls back to the baseBranch value in your .changeset/config.json.

• #​1845 2b4a66a Thanks @​Andarist! - Delegate OTP prompting to the package manager instead of handling it in-process. This allows Changesets to use the package manager's native web auth support.

• #​1774 667fe5a Thanks @​bluwy! - Support importing custom commit option ES module. Previously, it used require() which only worked for CJS modules, however now it uses import() which supports both CJS and ES modules.

• #​1839 73b1809 Thanks @​leochiu-a! - Add a --message (-m) flag to changeset add (and default changeset) so the changeset summary can be provided from the command line. When --message is present, the summary prompt is skipped while the final confirmation step is kept.

• #​1806 0e8e01e Thanks @​luisadame! - Changeset CLI can now be run from the nested directories in the project, where the .changeset directory has to be found in one of the parent directories

Patch Changes

• #​1849 9dc3230 Thanks @​Andarist! - Compute the terminal's size lazily to avoid spurious stderr output in non-interactive mode

• #​1857 2a73025 Thanks @​mixelburg! - Fix confusing prompt labels when entering changeset summary after external editor fallback

• #​1842 6df3a5e Thanks @​RodrigoHamuy! - Allow private packages to depend on skipped packages without requiring them to also be skipped. Private packages are not published to npm, so it is safe for them to have dependencies on ignored or unversioned packages.

• #​1776 503fcaa Thanks @​bluwy! - Support absolute paths in changeset status --output <path>

• Updated dependencies [667fe5a, 1772598, b6f4c74, 6df3a5e, 6df3a5e, 27fd8f4]:

  • @​changesets/apply-release-plan@7.1.0
  • @​changesets/config@3.1.3
  • @​changesets/get-release-plan@4.0.15
  • @​changesets/read@0.6.7

dequelabs/axe-core (axe-core)

v4.13.0

Compare Source

Features

• aria-actions: add aria-actions to allowed ARIA attributes (#​5200) (029655d), closes #​4584 #​5199, references #​5215 #​5215
• aria-allowed-attr: flag deprecated ARIA attributes as needs-review (#​5246) (518f3cc), closes #​3341
• aria-prohibited-attr: allow many elements to be named and disallow label and body from being named (#​5259) (d8b1ea5)
• aria-roles: add sectionheader and sectionfooter roles (#​5238) (c36c109), closes #​4734, references #​4734
• aria/get-aria-value: new function to get aria values of a node (#​5109) (a7d8f3e), references #​5042
• aria/has-attr-value: new function to check if node has aria value (#​5136) (61f2624), references #​5109
• aria: support role=image as equivalent to role=img (#​5248) (5aa8aaf), closes #​4656, references #​5272
• checks/aria: support ARIA element internals properties (#​5172) (9b7f754)
• checks/label: support ARIA element internals properties (#​5170) (21c5f8b)
• checks/navigation: support ARIA element internals properties (#​5167) (2c3a98f)
• commons/aria: support ARIA element internals properties (#​5171) (31f09e7)
• commons/dom: support ARIA element internals properties (#​5163) (f0a12cf)
• commons/forms: support ARIA element internals properties (#​5165) (27a4686)
• commons/matches/fromPrimative: deprecate in favor of correct spelling (#​5270) (31cfb2e)
• commons/text: support ARIA element internals properties (#​5169) (e841a33)
• commons/text: support form-associated labels via element internals (#​5182) (57cfe0a), closes #​5045, references #​5170 #​5039 #​5151 #​5039
• dom/getResolvedRefs: new function to get the resolved virtual nodes of idrefs (#​5151) (489cdea), references #​5109
• element-internals: enable ElementInternals by default (#​5284) (2740d42), closes #​5277
• i18n: Add Swedish locale (#​5190) (dcd13f2), references #​5189
• matches: add inSectioningContent, hasChild, and isSummaryForDetails matches (#​5262) (c47cdcd)
• rules: support ARIA element internals properties (#​5168) (065baf7)
• standards/ariaAttrs: add caseInsensitive property for attributes (#​5224) (bcd791c)

Bug Fixes

• aria-allowed-role: allow roles on a non-details summary (#​5242) (3bd9875), closes #​3911, references #​3443 #​3911
• aria-allowed-role: restrict figure roles with child figcaption (#​5240) (178a635), closes #​3443
• aria-prohibited-attr: visible aria-labelledby requires review only (#​5285) (fd6fa9f)
• axe.d.ts: make enabled property of RuleMetadata optional (#​5129) (90fce18)
• color-contrast: fix various stacking context bugs (#​5214) (d5e5b04), references #​8 #​5213
• gather-internals: handle non-HTMLElement nodes (#​5161) (06e84c3)
• get-selector: escape control characters in attribute selectors (#​5273) (4b60ac5), closes #​5204 #​5204
• image-alt: allow whitespace alt on presentational images (#​5218) (c5dd0ef), closes #​5216
• landmark-unique: exclude section/form with non-landmark roles from landmark match (#​5085) (c5fd013), closes #​4722 #​5064
• name the image role in role-img-alt and svg-img-alt metadata (#​5279) (995a269), closes #​5272, references #​5248 #​5248
• standards: update aria-errormessage and aria-details to be idrefs (#​5157) (fb94f8a)

4.12.1 (2026-06-09)

Bug Fixes

• axe.d.ts: make enabled property of RuleMetadata optional (#​5129) (7eb3d2d)

v4.12.1

Compare Source

v4.12.0

Compare Source

Features

• add gather-internals.js external script (#​5099) (c61d58b), closes #​5080
• aria-allowed/prohibited-attr, aria-required-parent/children: partially support element internals role (#​5080) (417b48a), closes #​5039 #​4259
• axe.externalAPIs: add public api for setting elementInternal data (#​5105) (63bab8f)
• core: expose normalizeRunOptions (#​4998) (b8e6a59)
• expose axe.resetLocale() to restore the default locale (#​5108) (c2b5292), closes #​5107
• getRules: include rule enabled state in returned objects (#​5118) (75bf772), closes #​5116
• list,listitem: support element internals role (#​5119) (7d9d696)
• new-rule: check that aria-tab have an accessible name (#​5001) (0d4e4e7), closes #​4842
• rules: deprecate landmark-complementary-is-top-level rules (#​4992) (9e09139), closes #​4950
• utils: add getElementInternals function (#​5077) (1c15f82)

Bug Fixes

• aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#​4974) (c6245e7)
• aria-conditional-attr: add support for radio (#​5100) (8223c98)
• aria-valid-attr-value: handle multiple aria-errormessage IDs (#​4973) (0489e30)
• aria: prevent getOwnedVirtual from returning duplicate nodes (#​4987) (48ca955), closes #​4840
• commons/text: exclude natively hidden elements from aria-labelledby accessible name (#​5076) (ea7202c), closes #​4704
• DqElement: avoid calling constructors with cloneNode (#​5013) (0281fa1)
• existing-rule: aria-busy now shows an error message for a use with unallowed children (#​5017) (2067b87)
• helpUrl: ensure axe.configure always updates the help URLs (#​5114) (c4f60ff)
• label-content-name-mismatch: match visible text with aria-label and exclude invisible text (#​5096) (3a012a1)
• locale: ensure all subtags are correctly set (#​5112) (13005ed)
• scrollable-region-focusable: clarify the issue is in safari (#​4995) (4ec5211), closes WebKit#190870 WebKit#277290
• scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#​4993) (838707a)
• target-size: determine offset using clientRects if target is display:inline (#​5012) (a4b8091)
• target-size: ignore position: fixed elements that are offscreen when page is scrolled (#​5066) (1229a6e), closes #​5065
• target-size: ignore widgets that are inline with other inline elements (#​5000) (a8dd81b)
• utils/getAncestry: escape node name (#​5079) (d1fabaa), closes #​5078
• utils: Add null check to parseCrossOriginStylesheet, closes #​5074 (#​5075) (f12ef32)
• utils: update isShadowRoot to use spec-compliant custom element regex (#​5059) (edc6ce2), closes #​5030

4.11.4 (2026-04-23)

Bug Fixes

• commons/text: exclude natively hidden elements from aria-labelledby accessible name (#​5076) (df34adf), closes #​4704
• utils/getAncestry: escape node name (#​5079) (6e68d0a), closes #​5078

4.11.3 (2026-04-13)

Bug Fixes

• aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#​4974) (1d80163)
• target-size: ignore position: fixed elements that are offscreen when page is scrolled (#​5066) (5906273), closes #​5065

4.11.2 (2026-03-30)

Bug Fixes

• aria-valid-attr-value: handle multiple aria-errormessage IDs (#​4973) (9322148)
• aria: prevent getOwnedVirtual from returning duplicate nodes (#​4987) (99d1e77), closes #​4840
• DqElement: avoid calling constructors with cloneNode (#​5013) (88bc57f)
• existing-rule: aria-busy now shows an error message for a use with unallowed children (#​5017) (dded75a)
• scrollable-region-focusable: clarify the issue is in safari (#​4995) (2567afd), closes WebKit#190870 WebKit#277290
• scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#​4993) (240f8b5)
• target-size: determine offset using clientRects if target is display:inline (#​5012) (69d81c1)
• target-size: ignore widgets that are inline with other inline elements (#​5000) (cf8a3c0)

4.11.1 (2026-01-06)

Bug Fixes

• allow shadow roots in axe.run contexts (#​4952) (d4aee16), closes #​4941
• color contrast fails for oklch and oklab with none (#​4959) (8f249fd)
• color-contrast: do not incomplete on textarea (#​4968) (d271788), closes #​4947
• commons/color: Match browser behavior for out-of-gamut oklch colors (#​4908) (5036be8)
• don't runs rules that select html on nested html elements (#​4969) (1e9a5c3)
• replaced luminance threshold constant 0.03928 with 0.04045 (#​4934) (316967d), closes #​4933
• rgaa: adjust mapping of aria-hidden-* and valid-lang (#​4935) (77571f2)
• valid-lang: update valid-langs for newer language codes (#​4966) (c3f5446), closes #​4963

v4.11.4

Compare Source

Features

• add gather-internals.js external script (#​5099) (c61d58b), closes #​5080
• aria-allowed/prohibited-attr, aria-required-parent/children: partially support element internals role (#​5080) (417b48a), closes #​5039 #​4259
• axe.externalAPIs: add public api for setting elementInternal data (#​5105) (63bab8f)
• core: expose normalizeRunOptions (#​4998) (b8e6a59)
• expose axe.resetLocale() to restore the default locale (#​5108) (c2b5292), closes #​5107
• getRules: include rule enabled state in returned objects (#​5118) (75bf772), closes #​5116
• list,listitem: support element internals role (#​5119) (7d9d696)
• new-rule: check that aria-tab have an accessible name (#​5001) (0d4e4e7), closes #​4842
• rules: deprecate landmark-complementary-is-top-level rules (#​4992) (9e09139), closes #​4950
• utils: add getElementInternals function (#​5077) (1c15f82)

Bug Fixes

• aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#​4974) (c6245e7)
• aria-conditional-attr: add support for radio (#​5100) (8223c98)
• aria-valid-attr-value: handle multiple aria-errormessage IDs (#​4973) (0489e30)
• aria: prevent getOwnedVirtual from returning duplicate nodes (#​4987) (48ca955), closes #​4840
• commons/text: exclude natively hidden elements from aria-labelledby accessible name (#​5076) (ea7202c), closes #​4704
• DqElement: avoid calling constructors with cloneNode (#​5013) (0281fa1)
• existing-rule: aria-busy now shows an error message for a use with unallowed children (#​5017) (2067b87)
• helpUrl: ensure axe.configure always updates the help URLs (#​5114) (c4f60ff)
• label-content-name-mismatch: match visible text with aria-label and exclude invisible text (#​5096) (3a012a1)
• locale: ensure all subtags are correctly set (#​5112) (13005ed)
• scrollable-region-focusable: clarify the issue is in safari (#​4995) (4ec5211), closes WebKit#190870 WebKit#277290
• scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#​4993) (838707a)
• target-size: determine offset using clientRects if target is display:inline (#​5012) (a4b8091)
• target-size: ignore position: fixed elements that are offscreen when page is scrolled (#​5066) (1229a6e), closes #​5065
• target-size: ignore widgets that are inline with other inline elements (#​5000) (a8dd81b)
• utils/getAncestry: escape node name (#​5079) (d1fabaa), closes #​5078
• utils: Add null check to parseCrossOriginStylesheet, closes #​5074 (#​5075) (f12ef32)
• utils: update isShadowRoot to use spec-compliant custom element regex (#​5059) (edc6ce2), closes #​5030

4.11.4 (2026-04-23)

Bug Fixes

• commons/text: exclude natively hidden elements from aria-labelledby accessible name (#​5076) (df34adf), closes #​4704
• utils/getAncestry: escape node name (#​5079) (6e68d0a), closes #​5078

4.11.3 (2026-04-13)

Bug Fixes

• aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#​4974) (1d80163)
• target-size: ignore position: fixed elements that are offscreen when page is scrolled (#​5066) (5906273), closes #​5065

4.11.2 (2026-03-30)

Bug Fixes

• aria-valid-attr-value: handle multiple aria-errormessage IDs (#​4973) (9322148)
• aria: prevent getOwnedVirtual from returning duplicate nodes (#​4987) (99d1e77), closes #​4840
• DqElement: avoid calling constructors with cloneNode (#​5013) (88bc57f)
• existing-rule: aria-busy now shows an error message for a use with unallowed children (#​5017) (dded75a)
• scrollable-region-focusable: clarify the issue is in safari (#​4995) (2567afd), closes WebKit#190870 WebKit#277290
• scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#​4993) (240f8b5)
• target-size: determine offset using clientRects if target is display:inline (#​5012) (69d81c1)
• target-size: ignore widgets that are inline with other inline elements (#​5000) (cf8a3c0)

4.11.1 (2026-01-06)

Bug Fixes

• allow shadow roots in axe.run contexts (#​4952) (d4aee16), closes #​4941
• color contrast fails for oklch and oklab with none (#​4959) (8f249fd)
• color-contrast: do not incomplete on textarea (#​4968) (d271788), closes #​4947
• commons/color: Match browser behavior for out-of-gamut oklch colors (#​4908) (5036be8)
• don't runs rules that select html on nested html elements (#​4969) (1e9a5c3)
• replaced luminance threshold constant 0.03928 with 0.04045 (#​4934) (316967d), closes #​4933
• rgaa: adjust mapping of aria-hidden-* and valid-lang (#​4935) (77571f2)
• valid-lang: update valid-langs for newer language codes (#​4966) (c3f5446), closes #​4963

sass/dart-sass (sass)

v1.103.1

Compare Source

• No user-visible changes.

v1.103.0

Compare Source

• Potentially breaking compatibility fix: Colors now preserve "analogous
  sets" of missing channels during conversions, per the CSS spec. For example,
  color.to-space(lch(50% none none), lab) now returns lab(50% none none)
  instead of lab(50% 0 0).

v1.102.0

Compare Source

• Use the 2.4 gamma transfer function for rec2020, as specified by the latest
  draft of CSS Color 4.

v1.101.7

Compare Source

• No user-visible changes.

v1.101.6

Compare Source

• No user-visible changes.

v1.101.5

Compare Source

• No user-visible changes.

v1.101.4

Compare Source

• Avoid emitting rgb() or rgba() functions with non-percent decimal
  channels. Older browsers only support integer values or (potentially decimal)
  percentages for these functions, so in order to preserve
  backwards-compatibility while retaining full precision for modern browsers,
  legacy colors that contain at least one non-integer channel will now use
  percentages for their channels (for example, rgb(0%, 100%, 50%) rather than
  rgb(0, 255, 127.5)).

• Fix a bug where the values of plain-CSS if() expressions were emitted using
  their meta.inspect() format rather than their CSS serialization format.

v1.101.3

Compare Source

• No user-visible changes.

v1.101.0

Compare Source

• Potentially breaking bug fix: The Node package importer now properly
  supports resolving import-only variants of Sass files declared in the
  exports, sass, and style fields of package.json. Previously, these
  files were ignored even when loaded via @import, so any code relying on
  loading module-system-only files this way may break.

v1.100.0

Compare Source

• Writing two compound selectors adjacent to

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • Between 12:00 AM and 05:59 AM, only on Monday (* 0-5 * * 1)
• Automerge
  • Monday through Friday (* * * * 1-5)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 15cc998

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR