mgr/dashboard: bump axe-core from 4.4.3 to 4.9.1 in /src/pybind/mgr/dashboard/frontend

[dependabot]

Bumps axe-core from 4.4.3 to 4.9.1.

Release notes

Sourced from axe-core's releases.

Release 4.9.1

This release addresses a number of false positives, which may result in fewer issues reported. It also prevents a problem where axe-core wouldn't load on pages due to a conflict with a long-ago deprecated javascript library.

Bug Fixes

• Prevent errors when loading axe in a page with prototype.js
• aria-allowed-attr: allow meter role allowed aria-* attributes on meter element (#4435) (7ac6392)
• aria-allowed-role: add gridcell, separator, slider and treeitem to allowed roles of button element (#4398) (4788bf8)
• aria-roles: correct abstract roles (types) for aria-roles(#4421)
• aria-valid-attr-value: aria-controls & aria-haspopup incomplete (#4418)
• fix building axe-core translation files with region locales (#4396) (5c318f3), closes #4388
• invalidrole: allow upper and mixed case role names (#4358) (105016c), closes #2695
• isVisibleOnScreen: account for position: absolute elements inside overflow container (#4405) (2940f6e), closes #4016
• label-content-name-mismatch: better dismiss and wysiwyg symbolic text characters (#4402)
• region: Decorative images ignored by region rule (#4412)
• target-size: ignore descendant elements in shadow dom (#4410) (6091367)
• target-size: pass for element that has nearby elements that are obscured (#4422) (3a90bb7), closes #4387

Release 4.9.0

Features

• adding the wcag131 tag to the aria-hidden-body rule (#4349) (dd4c3c3), closes #4315
• checks: deprecate aria-busy check (#4356) (be0b555), closes #4347 #4340
• color: add color channel values and luminosity, saturation, clip functions (#4366) (9e70199), closes dequelabs/axe-core#4365
• i18n: add Greek Translations (#3836) (3ea9a48)
• i18n: Add Italian translation (#4344) (de1baa9)
• i18n: Add Simplified Chinese translation (#4379) (bda7c8d)
• i18n: Add Taiwanese Mandarin translation (#4299) (c5e11de)

Bug Fixes

• Add LICENSE-3RD-PARTY.txt file (#4304) (daa0fe6)
• add Object.values polyfill for node <=6 (#4274) (5eb867b)
• aria-required-children: avoid confusing aria-busy message in failures (#4347) (591607d), closes #fail13 #4340
• avoid reading element-specific node properties of non-element node types (#4317) (b853b18), closes #4316 #4316
• color-contrast: handle text that is outside overflow: hidden ancestor (#4357) (bdb7300), closes #4253
• color-contrast: support color blend modes hue, saturation, color, luminosity (#4365) (7ae4761)
• d.ts: RawNodesResult issues (#4229) (d660518)
• d.ts: RunOptions.reporter can be any string (#4218) (e53f5c5)
• i18n: update Italian translations (#4377) (4d65d4b)
• listitem: clarify roleNotValid message (#4374) (0f8a9af)
• scrollable-region-focusable: missing wcag213 tag (#4201) (0080a72)
• target-size: always pass 10x targets (avoid perf bottleneck) (#4376) (be327c4)
• target-size: do not crash for nodes with many overlapping widgets (#4373) (1dbea83), closes #4359 #4359 #4360
• utils/get-selector: ignore 'xmlns' attribute when generating a selector (#4303) (938b411)

Release 4.8.4

This release should not result in different issue numbers. For TypeScript users, an error in type definitions has been corrected. This release could require a correction to how axe-core types are used. This release may change selectors on elements with the xmlns attribute, as the selectors axe-core prosed with those was invalid. Deduplication based on selectors between this and and prior versions of axe-core can fail because of this change.

... (truncated)

Changelog

Sourced from axe-core's changelog.

4.9.1 (2024-05-06)

Bug Fixes

• Prevent errors when loading axe in a page with prototype.js
• aria-allowed-attr: allow meter role allowed aria-* attributes on meter element (#4435) (7ac6392)
• aria-allowed-role: add gridcell, separator, slider and treeitem to allowed roles of button element (#4398) (4788bf8)
• aria-roles: correct abstract roles (types) for aria-roles(#4421)
• aria-valid-attr-value: aria-controls & aria-haspopup incomplete (#4418)
• fix building axe-core translation files with region locales (#4396) (5c318f3), closes #4388
• invalidrole: allow upper and mixed case role names (#4358) (105016c), closes #2695
• isVisibleOnScreen: account for position: absolute elements inside overflow container (#4405) (2940f6e), closes #4016
• label-content-name-mismatch: better dismiss and wysiwyg symbolic text characters (#4402)
• region: Decorative images ignored by region rule (#4412)
• target-size: ignore descendant elements in shadow dom (#4410) (6091367)
• target-size: pass for element that has nearby elements that are obscured (#4422) (3a90bb7), closes #4387

4.9.0 (2024-03-25)

Features

• adding the wcag131 tag to the aria-hidden-body rule (#4349) (dd4c3c3), closes #4315
• checks: deprecate aria-busy check (#4356) (be0b555), closes #4347 #4340
• color: add color channel values and luminosity, saturation, clip functions (#4366) (9e70199), closes dequelabs/axe-core#4365
• i18n: add Greek Translations (#3836) (3ea9a48)
• i18n: Add Italian translation (#4344) (de1baa9)
• i18n: Add Simplified Chinese translation (#4379) (bda7c8d)
• i18n: Add Taiwanese Mandarin translation (#4299) (c5e11de)

Bug Fixes

• Add LICENSE-3RD-PARTY.txt file (#4304) (daa0fe6)
• add Object.values polyfill for node <=6 (#4274) (5eb867b)
• aria-required-children: avoid confusing aria-busy message in failures (#4347) (591607d), closes #fail13 #4340
• avoid reading element-specific node properties of non-element node types (#4317) (b853b18), closes #4316 #4316
• color-contrast: handle text that is outside overflow: hidden ancestor (#4357) (bdb7300), closes #4253
• color-contrast: support color blend modes hue, saturation, color, luminosity (#4365) (7ae4761)
• d.ts: RawNodesResult issues (#4229) (d660518)
• d.ts: RunOptions.reporter can be any string (#4218) (e53f5c5)
• i18n: update Italian translations (#4377) (4d65d4b)
• listitem: clarify roleNotValid message (#4374) (0f8a9af)
• scrollable-region-focusable: missing wcag213 tag (#4201) (0080a72)
• target-size: always pass 10x targets (avoid perf bottleneck) (#4376) (be327c4)
• target-size: do not crash for nodes with many overlapping widgets (#4373) (1dbea83), closes #4359 #4359 #4360
• utils/get-selector: ignore 'xmlns' attribute when generating a selector (#4303) (938b411)

4.8.4 (2024-02-07)

Bug Fixes

... (truncated)

Commits

• fff9b9d chore(release): v4.9.1 (#4446)
• 0f2b8ac chore(changelog): Update for 4.9.1
• a2b8da3 Update changelog
• 821b864 chore(release): 4.9.1
• f8c918d fix(region): Decorative images ignored by region rule (#4412)
• 738e9e2 Update test/integration/full/region/region-pass.html
• 8938496 targeted test failure cases
• 53782f2 additional test coverage
• b29a90d Update lib/checks/navigation/region-evaluate.js
• bc6dc71 Merge branch 'develop' into region-rule-ignores-decorative-image
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #75.