Upgrade: Bump axe-core from 4.4.1 to 4.9.1

[dependabot]

Bumps axe-core from 4.4.1 to 4.9.1.

Release notes

Sourced from axe-core's releases.

Release 4.9.1

This release addresses a number of false positives, which may result in fewer issues reported. It also prevents a problem where axe-core wouldn't load on pages due to a conflict with a long-ago deprecated javascript library.

Bug Fixes

• Prevent errors when loading axe in a page with prototype.js
• aria-allowed-attr: allow meter role allowed aria-* attributes on meter element (#4435) (7ac6392)
• aria-allowed-role: add gridcell, separator, slider and treeitem to allowed roles of button element (#4398) (4788bf8)
• aria-roles: correct abstract roles (types) for aria-roles(#4421)
• aria-valid-attr-value: aria-controls & aria-haspopup incomplete (#4418)
• fix building axe-core translation files with region locales (#4396) (5c318f3), closes #4388
• invalidrole: allow upper and mixed case role names (#4358) (105016c), closes #2695
• isVisibleOnScreen: account for position: absolute elements inside overflow container (#4405) (2940f6e), closes #4016
• label-content-name-mismatch: better dismiss and wysiwyg symbolic text characters (#4402)
• region: Decorative images ignored by region rule (#4412)
• target-size: ignore descendant elements in shadow dom (#4410) (6091367)
• target-size: pass for element that has nearby elements that are obscured (#4422) (3a90bb7), closes #4387

Release 4.9.0

Features

• adding the wcag131 tag to the aria-hidden-body rule (#4349) (dd4c3c3), closes #4315
• checks: deprecate aria-busy check (#4356) (be0b555), closes #4347 #4340
• color: add color channel values and luminosity, saturation, clip functions (#4366) (9e70199), closes dequelabs/axe-core#4365
• i18n: add Greek Translations (#3836) (3ea9a48)
• i18n: Add Italian translation (#4344) (de1baa9)
• i18n: Add Simplified Chinese translation (#4379) (bda7c8d)
• i18n: Add Taiwanese Mandarin translation (#4299) (c5e11de)

Bug Fixes

• Add LICENSE-3RD-PARTY.txt file (#4304) (daa0fe6)
• add Object.values polyfill for node <=6 (#4274) (5eb867b)
• aria-required-children: avoid confusing aria-busy message in failures (#4347) (591607d), closes #fail13 #4340
• avoid reading element-specific node properties of non-element node types (#4317) (b853b18), closes #4316 #4316
• color-contrast: handle text that is outside overflow: hidden ancestor (#4357) (bdb7300), closes #4253
• color-contrast: support color blend modes hue, saturation, color, luminosity (#4365) (7ae4761)
• d.ts: RawNodesResult issues (#4229) (d660518)
• d.ts: RunOptions.reporter can be any string (#4218) (e53f5c5)
• i18n: update Italian translations (#4377) (4d65d4b)
• listitem: clarify roleNotValid message (#4374) (0f8a9af)
• scrollable-region-focusable: missing wcag213 tag (#4201) (0080a72)
• target-size: always pass 10x targets (avoid perf bottleneck) (#4376) (be327c4)
• target-size: do not crash for nodes with many overlapping widgets (#4373) (1dbea83), closes #4359 #4359 #4360
• utils/get-selector: ignore 'xmlns' attribute when generating a selector (#4303) (938b411)

Release 4.8.4

This release should not result in different issue numbers. For TypeScript users, an error in type definitions has been corrected. This release could require a correction to how axe-core types are used. This release may change selectors on elements with the xmlns attribute, as the selectors axe-core prosed with those was invalid. Deduplication based on selectors between this and and prior versions of axe-core can fail because of this change.

... (truncated)

Changelog

Sourced from axe-core's changelog.

4.9.1 (2024-05-06)

Bug Fixes

• Prevent errors when loading axe in a page with prototype.js
• aria-allowed-attr: allow meter role allowed aria-* attributes on meter element (#4435) (7ac6392)
• aria-allowed-role: add gridcell, separator, slider and treeitem to allowed roles of button element (#4398) (4788bf8)
• aria-roles: correct abstract roles (types) for aria-roles(#4421)
• aria-valid-attr-value: aria-controls & aria-haspopup incomplete (#4418)
• fix building axe-core translation files with region locales (#4396) (5c318f3), closes #4388
• invalidrole: allow upper and mixed case role names (#4358) (105016c), closes #2695
• isVisibleOnScreen: account for position: absolute elements inside overflow container (#4405) (2940f6e), closes #4016
• label-content-name-mismatch: better dismiss and wysiwyg symbolic text characters (#4402)
• region: Decorative images ignored by region rule (#4412)
• target-size: ignore descendant elements in shadow dom (#4410) (6091367)
• target-size: pass for element that has nearby elements that are obscured (#4422) (3a90bb7), closes #4387

4.9.0 (2024-03-25)

Features

• adding the wcag131 tag to the aria-hidden-body rule (#4349) (dd4c3c3), closes #4315
• checks: deprecate aria-busy check (#4356) (be0b555), closes #4347 #4340
• color: add color channel values and luminosity, saturation, clip functions (#4366) (9e70199), closes dequelabs/axe-core#4365
• i18n: add Greek Translations (#3836) (3ea9a48)
• i18n: Add Italian translation (#4344) (de1baa9)
• i18n: Add Simplified Chinese translation (#4379) (bda7c8d)
• i18n: Add Taiwanese Mandarin translation (#4299) (c5e11de)

Bug Fixes

• Add LICENSE-3RD-PARTY.txt file (#4304) (daa0fe6)
• add Object.values polyfill for node <=6 (#4274) (5eb867b)
• aria-required-children: avoid confusing aria-busy message in failures (#4347) (591607d), closes #fail13 #4340
• avoid reading element-specific node properties of non-element node types (#4317) (b853b18), closes #4316 #4316
• color-contrast: handle text that is outside overflow: hidden ancestor (#4357) (bdb7300), closes #4253
• color-contrast: support color blend modes hue, saturation, color, luminosity (#4365) (7ae4761)
• d.ts: RawNodesResult issues (#4229) (d660518)
• d.ts: RunOptions.reporter can be any string (#4218) (e53f5c5)
• i18n: update Italian translations (#4377) (4d65d4b)
• listitem: clarify roleNotValid message (#4374) (0f8a9af)
• scrollable-region-focusable: missing wcag213 tag (#4201) (0080a72)
• target-size: always pass 10x targets (avoid perf bottleneck) (#4376) (be327c4)
• target-size: do not crash for nodes with many overlapping widgets (#4373) (1dbea83), closes #4359 #4359 #4360
• utils/get-selector: ignore 'xmlns' attribute when generating a selector (#4303) (938b411)

4.8.4 (2024-02-07)

Bug Fixes

... (truncated)

Commits

• fff9b9d chore(release): v4.9.1 (#4446)
• 0f2b8ac chore(changelog): Update for 4.9.1
• a2b8da3 Update changelog
• 821b864 chore(release): 4.9.1
• f8c918d fix(region): Decorative images ignored by region rule (#4412)
• 738e9e2 Update test/integration/full/region/region-pass.html
• 8938496 targeted test failure cases
• 53782f2 additional test coverage
• b29a90d Update lib/checks/navigation/region-evaluate.js
• bc6dc71 Merge branch 'develop' into region-rule-ignores-decorative-image
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Superseded by #5919.