[Snyk] Upgrade @uswds/uswds from 3.11.0 to 3.12.0 #427
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade @uswds/uswds from 3.11.0 to 3.12.0. See this package in npm: @uswds/uswds See this project in Snyk: https://app.snyk.io/org/data.gov/project/3be75de7-3443-41fe-bed6-a223b97703ed?utm_source=github&utm_medium=referral&page=upgrade-pr
neilmb
approved these changes
May 6, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade @uswds/uswds from 3.11.0 to 3.12.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 1 version ahead of your current version.
The recommended version was released a month ago.
Release notes
Package name: @uswds/uswds
-
3.12.0 - 2025-03-07
Package
A11y
Breaking
Markup change
Description
-
-
-
Enabled native JavaScript translation for date picker calendar labels. The calendar now uses the
-
-
-
Added the
-
-
-
Enabled tooltip functionality on non-button elements. Thanks @ anmazz! (#6035)
Package
A11y
Breaking
Markup change
Description
-
-
-
Updated checkbox and radio styles so that the interactive area now matches the width of the content. Previously, the interactive area extended the full width of its container. (#6192)
-
-
-
Fixed a bug that prevented in-page navigation from scrolling to nested headings. Now, the component can smooth scroll to headings within components like card and summary box.
-
-
-
Resolved Sass deprecation warnings related to the color function. This change ensures compatibility with Dart Sass 2.0.0 and eliminates the use of deprecated color functions. (#6270)
-
-
-
Replaced
Dependency name
Previous version
New version
resolve-id-refs
0.1.0
--
Dependency name
Previous version
New version
@ babel/core
7.26.0
7.26.8
@ babel/preset-env
7.26.0
7.26.8
gulp-sass
5.1.0
6.0.0
postcss
8.4.49
8.5.2
sass
1.83.1
1.84.0
sass-embedded
1.83.1
1.83.4
sass-loader
13.3.2
16.0.4
snyk
1.1295.0
1.1295.3
stylelint
16.11.0
16.12.0
typescript
5.7.2
5.7.3
webpack
5.97.1
5.98.0
- Thanks to @ aduth for making our prettier configuration more explicit. (#6269)
- Thanks to @ szepeviktor for fixing typos. (#6251)
- Thanks to @ jcklpe for updating broken links in the USWDS README. (#6239)
- Thanks to @ aduth for improving the JavaScript examples in our README (#5928)
- Thanks to @ aduth for improving our automated unit test scans (#6171)
-
3.11.0 - 2024-12-18
Package
A11y
Breaking
Markup change
Description
-
-
-
Removed outdated browser normalization styles. This update drops normalize support for Internet Explorer. Thanks @ aduth! (#5555)
-
-
-
Moved
-
-
-
Updated table header styles to be consistent across all table elements. Now, all
Package
A11y
Breaking
Markup change
Description
-
-
Yes
Replaced deprecated
Yes
-
-
Fixed a bug that prevented screen readers from announcing the invalid file type error message. (#6168)
Yes
-
-
Removed
Dependency name
Previous version
New version
@ babel/core
7.25.7
7.26.0
@ babel/preset-env
7.25.7
7.26.0
axe-core
4.10.0
4.10.2
cross-spawn
7.0.3
7.0.6
html-webpack-plugin
5.6.0
5.6.3
mocha
10.7.3
10.8.2
nwsapi (added via npm overrides)
--
2.2.13
postcss
8.4.47
8.4.49
prettier
3.3.3
3.4.2
sass
1.79.4
1.83.0
sass-embedded
1.79.4
1.83.0
snyk
1.1293.1
1.1294.3
stylelint
16.9.0
16.11.0
typescript
5.6.2
5.7.2
webpack
5.95.0
5.97.1
from @uswds/uswds GitHub release notesWhat's new in USWDS 3.12.0
Features
usa-date-picker,usa-date-range-pickerDate.toLocaleStringAPI to automatically build translated labels based on the document'slangattribute. Thanks @ deebloo! (#5679)usa-in-page-navigationdata-minimum-heading-countproperty to the in-page navigation component. This property hides the component when the content region does not contain the minimum number of headings. By default, this attribute hides the in-page navigation component when there are fewer than two headings in the content region.✏️ Teams should customize the value of this property based on their content needs. (#6205)
usa-tooltipBug fixes
usa-checkbox,usa-radiousa-in-page-navigation✏ Teams that use
data-scroll-offsetshould check to make sure this change does not cause regressions in scroll behaviors. Thanks @ jhancock532! (#5878)uswds-coreuswds-coreresolve-id-refsdependency with custom JavaScript. (#6308)Dependencies and security
Dependency updates
Dev dependency updates
Additional updates
Important
USWDS now requires a verified signature on all commits to this repository. Learn more about how to set up signature verification in our CONTRIBUTING.md file.
Additional contributions
0vulnerabilities in regular dependencies (dependencies for USWDS projects installed withnpm install @ uswds/uswds)30moderate,26high vulnerabilities in devDependencies (development dependencies).Release TGZ SHA-256 hash:
8a562ec0c24d93b7eeaeaa9056f54050054344331dd34ca96d5be161442f09cdWhat's new in USWDS 3.11.0
Features
usa-elementsusa-form,usa-input-prefix-suffix,usa-input,uswds-core.usa-input--[width]and.usa-input-group--[width]classes out of theusa-formpackage. These classes are now generated in theusa-inputandusa-input-prefix-suffixpackages and can be used without the.usa-formparent element. Thanks @ aduth! (#6232)usa-tablethead th,tbody th, andtfoot thcells will all have the same visual styles. Thanks @ ajanickiv!✏️ Teams should confirm that their tables display as expected. (#5986)
Bug fixes
usa-button,usa-collection,usa-file-input,usa-icon-list,usa-icon,usa-input-prefix-suffix,usa-modal,usa-paginationxlink:hrefreferences withhref.✏ Teams should update their markup to replace
xlink:hrefreferences withhrefand pull in the updatedloader.svgfile. (#6165)usa-file-input✏ Teams who support additional languages should update the error message string to match the new copy.
usa-footeroverflow: hiddenfromusa-footerto allow the full focus outline to show. This fix also improves horizontal alignment in the slim footer variant. Thanks @ 6TELOIV! (#6237)Markup changes
MDN warns that the deprecated
xlink:hrefattribute can stop working at any time. When referencing SVG icon sprites, teams should usehrefinstead of the deprecatedxlink:hrefattribute.Dependencies and security
0vulnerabilities in regular dependencies (dependencies for USWDS projects installed withnpm install @ uswds/uswds)29moderate,26high vulnerabilities in devDependencies (development dependencies).Release TGZ SHA-256 hash:
1c10cd70a3c627fd14d9ee74a4071e67c4e5ba4bf14ca1c50c19c2fe5885e70aImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: