Bump axe-core from 3.5.5 to 4.6.3

[dependabot]

Bumps axe-core from 3.5.5 to 4.6.3.

Release notes

Sourced from axe-core's releases.

Release 4.6.3

This release can reduce the number of issues reported. On color-contrast it will result in fewer incomplete results (aka "needs review"), which may result in a few more color-contrast violations found.

Bug Fixes

• aria-required-children: allow separator in menu(bar) (#3868) (46c9499)
• autocomplete-valid: allow webauthn token (#3866) (a3d1b9d)
• color-contrast: correctly compute color contrast of <slot> elements (#3847) (844cea1)
• color-contrast: skip ligature icons (#3867) (7dfbd9a)
• link-in-text-block: allow links with identical colors (#3861) (6761f36)
• scrollable-region-focusable: skip native controls (#3862) (aaf44e9)

Release 4.6.2

This release will not impact the number of violations returns.

Bug Fixes

• color-contrast: fix color-contrast check when running in an extension (#3838) (31a3e01)

Release 4.6.1

This release will not impact the number of violations returns.

Bug Fixes

• d.ts: add optional include to ContextObject (#3830) (36ed242)

Release 4.6.0

This release adds requirements introduced in WAI-ARIA 1.2, which can result in new issues. The color contrast rule has been improved which should reduce the number of incomplete (aka "needs review") results.

Lastly, this release adds the ability to include or exclude elements inside shadow DOM trees from a test run. See [dom selection] for details.

Features

• aria-required-attr: require aria-controls on combobox and aria-valuenow on focusable separator (#3786) (5259e88)
• checks/label-content-name-mismatch: deprecate occuranceThreshold option in favor of occurrenceThreshold to fix typo (#3782) (5026d65)
• commons: deprecate flattenShadowColors in favor of flattenColors (#3792) (af49daf)
• context: allow selecting shadow DOM nodes (#3798) (9e1e31b)
• list,listitem: do not allow group as allowed parent or child (#3784) (d1cbf6f)
• required-attr: require aria-checked for checkbox-like and radio-like roles (#3785) (563e4e9)
• utils: new shadowSelectAll utility (#3796) (5865462)

Bug Fixes

• aria-allowed-role: allow combobox on button, checkbox and combobox on input[type=button] (#3354) (ac688c0), closes #3353
• aria-required-children: allow menu as child of menu (#3820) (a6569e5)
• color-contrast: consider -webkit-text-stroke & -webkit-text-fill-color (#3791) (228daf1)
• color-contrast: correctly calculate background color of text nodes with different size than their container (#3703) (123b83c)
• get-role: handle presentation role inheritance for vnodes with no parent (#3801) (b971caf)
• html-lang-valid: only run rule when attribute has value (#3663) (1a7eecb), closes #3624

... (truncated)

Changelog

Sourced from axe-core's changelog.

4.6.3 (2023-01-23)

Bug Fixes

• aria-required-children: allow separator in menu(bar) (#3868) (46c9499)
• autocomplete-valid: allow webauthn token (#3866) (a3d1b9d)
• color-contrast: correctly compute color contrast of elements (#3847) (844cea1)
• color-contrast: skip ligature icons (#3867) (7dfbd9a)
• link-in-text-block: allow links with identical colors (#3861) (6761f36)
• scrollable-region-focusable: skip native controls (#3862) (aaf44e9)

4.6.2 (2022-12-23)

Bug Fixes

• color-contrast: fix color-contrast check when running in an extension (#3838) (31a3e01)

4.6.1 (2022-12-14)

Bug Fixes

• d.ts: add optional include to ContextObject (#3830) (36ed242)

4.6.0 (2022-12-12)

Features

• aria-required-attr: require aria-controls on combobox and aria-valuenow on focusable separator (#3786) (5259e88)
• checks/label-content-name-mismatch: deprecate occuranceThreshold option in favor of occurrenceThreshold to fix typo (#3782) (5026d65)
• commons: deprecate flattenShadowColors in favor of flattenColors (#3792) (af49daf)
• context: allow selecting shadow DOM nodes (#3798) (9e1e31b)
• list,listitem: do not allow group as allowed parent or child (#3784) (d1cbf6f)
• required-attr: require aria-checked for checkbox-like and radio-like roles (#3785) (563e4e9)
• utils: new shadowSelectAll utility (#3796) (5865462)

Bug Fixes

• aria-allowed-role: allow combobox on button, checkbox and combobox on input[type=button] (#3354) (ac688c0), closes #3353
• aria-required-children: allow menu as child of menu (#3820) (a6569e5)
• color-contrast: consider -webkit-text-stroke & -webkit-text-fill-color (#3791) (228daf1)
• color-contrast: correctly calculate background color of text nodes with different size than their container (#3703) (123b83c)
• get-role: handle presentation role inheritance for vnodes with no parent (#3801) (b971caf)
• html-lang-valid: only run rule when attribute has value (#3663) (1a7eecb), closes #3624
• metadata: Map aria-required-children to ACT rule bc4a75 (#3790) (a33a523)

4.5.2 (2022-11-14)

Bug Fixes

• aria-required-children: allow menu and menubar to be empty (#3770) (d11aed8)

... (truncated)

Commits

• 4d06caa Merge pull request #3879 from dequelabs/release-463-fixed
• 895143a ci: fix sri-validation job regex (#3874)
• 1797e5b ci: restore_build before publish (#3877)
• fddc1cd Merge pull request #3872 from dequelabs/release-4.6.3
• a5ac9b5 chore(release): 4.6.3
• 7dfbd9a fix(color-contrast): skip ligature icons (#3867)
• 46c9499 fix(aria-required-children): allow separator in menu(bar) (#3868)
• d7daf12 docs(readme): mistyped a name (#3870)
• a3d1b9d fix(autocomplete-valid): allow webauthn token (#3866)
• 6761f36 fix(link-in-text-block): allow links with identical colors (#3861)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)