Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

npm: bump @uswds/uswds from 3.4.1 to 3.7.1 #540

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 11, 2023

Bumps @uswds/uswds from 3.4.1 to 3.7.1.

Release notes

Sourced from @​uswds/uswds's releases.

USWDS 3.7.1

What's new in USWDS 3.7.1

Features

Package A11Y Breaking Markup change Description
usa-footer Removed the usa-layout-grid dependency from the usa-footer package. This update reduces the footer package size. Thanks @​danbrady! (#5289)

Bug fixes

Package A11Y Breaking Markup change Description
usa-banner Removed invalid styles from the banner component. These styles had no effect and were safely removed. Thanks @​aduth! (#5587)
usa-dark-background, usa-section Yes Fixed :visited link styling in usa-section--dark elements. Thanks @​aduth! (#5567)
usa-footer Fixed the right alignment of footer elements. Footer content should now align with other page elements. Thanks @​danbrady! (#5234)
usa-header, usa-nav Fixed the horizontal alignment of header submenu elements. Now, usa-nav__submenu elements should align with other header elements. Thanks @​lpsinger! (#5649)
usa-nav Fixed the vertical alignment of the expand icon on header navigation items. The icon will now maintain vertical alignment when menu button text breaks to multiple lines. Thanks @​aduth! (#5654)
usa-nav Fixed a bug that caused long button text to overflow into its padding. Now, button text breaks to multiple lines as expected and maintains vertical center alignment. (#5655)
usa-nav Fixed a bug that prevented $theme-max-header-width from accepting a value of "none". (#5624)
uswds-core Fixed a bug that prevented the CSS from generating .left-full, .right-full, and .top-full utility classes. (#5633)

Dependencies and security

Dependency name Previous version New version
jsdom 19.0.0 22.1.0

Thanks @​deckar01 for contributing this dependency update!

0 vulnerabilities in regular dependencies (dependencies for USWDS projects installed with npm install @uswds/uswds) 24 moderate, 27 high vulnerabilities in devDependencies (development dependencies).

Release TGZ SHA-256 hash: 6e1d3032e1a7ac614d05fe76c87cc398725d84e5ba0656a7a17c6ca4c7579526

USWDS 3.7.0

What's new in USWDS 3.7.0

Items we've identified with a Markup change have a non-breaking change in their component markup. Teams should update their implementations and templates to reflect this change.

Features

Package A11y Breaking Markup change Description
usa-banner Updated the banner component so that it initializes without requiring import of the usa-accordion package. (#5551)
usa-banner Optimized the us_flag_small.png icon and added a vector us_flag.svg icon. Update this asset in your project for improved image quality. Thanks @​aduth! (#5542)
usa-data-picker Yes Improved keyboard navigation for screen readers in the date picker component. This change enables table navigation controls in the calendar, which creates more consistent and intuitive navigation across browsers and screen readers. (#5374)
usa-icon Added the X social media icon. We added the X social media icon, but also preserved the legacy Twitter icon to allow teams to make the decision on when to update their social media information. (#5589)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@uswds/uswds](https://github.com/uswds/uswds) from 3.4.1 to 3.7.1.
- [Release notes](https://github.com/uswds/uswds/releases)
- [Commits](uswds/uswds@v3.4.1...v3.7.1)

---
updated-dependencies:
- dependency-name: "@uswds/uswds"
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependabot This issue or pull request was generated by Dependabot dependencies Pull requests that update a dependency file labels Dec 11, 2023
@dependabot dependabot bot requested a review from a team December 11, 2023 05:46
Copy link

vercel bot commented Dec 11, 2023

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
ldaf ✅ Ready (Inspect) Visit Preview 💬 Add feedback Dec 11, 2023 5:53am

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependabot This issue or pull request was generated by Dependabot dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants