mgr/dashboard: bump axe-core from 4.4.3 to 4.10.3 in /src/pybind/mgr/dashboard/frontend

[dependabot]

Bumps axe-core from 4.4.3 to 4.10.3.

Release notes

Sourced from axe-core's releases.

Release 4.10.3

This release addresses a few performance issues, corrects a few typos, and addresses a few inconsistencies between axe and the latest web standards. This may, but is unlikely to reduce the total number of issues found.

Bug Fixes

• aria-allowed-role: Add math to allowed roles for img element (#4658) (f6dddd9), closes #4657
• captions: fix grammar in captions check incomplete message (#4661) (3ef7058)
• consistently parse tabindex, following HTML 5 spec (#4637) (3b0a361), closes #4632
• core: measure perf for async checks (#4609) (e7dc26e)
• locale: fixed typos in german (DE) locale (#4631) (0740980)
• locale: proofread and updated de.json (#4643) (910cdb2)
• no-autoplay-audio: don't timeout for preload=none media elements (#4684) (b7f1ad1)
• target-size: do not treat focusable tabpanels as targets (#4702) (67d4e4f), closes #4421 #4701

Release 4.10.2

This release prevents axe from sometimes crashing when a page changes in the middle of a test.

Bug Fixes

• get-ancestry: don't error when there is no parent (#4617) (6c07102)

Release 4.10.1

Because a few false positives were fixed, this release may see the number of reported issues go down. In pages with lots of very similar elements a performance bottleneck was fixed, allowing axe to finish sometimes up to 10x faster, although for most pages there won't be a difference. Lastly there is a small change to the ancestry selector of elements in shadow DOM. These weren't always guaranteed to be unique. The change means deduplication based on ancestry selectors may not work between 4.10.1 and older versions.

Bug Fixes

• aria-allowed-role: add form to allowed roles of form element (#4588) (d462d67), closes /github.com/dequelabs/axe-core/blob/develop/lib/standards/html-elms.js#L264
• axe.d.ts: add typings for preload options object (#4543) (72e269f)
• button-name,input-button-name,input-img-alt: allow label to give accessible name (#4607) (364eb72), closes #4472 #3696 #3696
• get-ancestry: add nth-child selector for multiple siblings of shadow root (#4606) (bdd94a2), closes #4563
• rules: Change "alternate text" to "alternative text" (#4582) (31e0f61)

Release 4.10.0

This axe-core release introduces a new rule for testing the HTML summary element. Additionally, a number of false positives have been fixed. Upgrading to this release may therefore both increase, or decrease the number of issues found on a website. Most likely the impact of upgrading from axe-core 4.9.2 to axe-core 4.10.0 should be minimal.

Features

• new-rule: summary elements must have an accessible name (#4511) (0d8a99e), closes #4510

Bug Fixes

• aria-allowed-attr: allow aria-multiline=false for element with contenteditable (#4537) (f019068)
• aria-allowed-attr: allow aria-required=false when normally not allowed (#4532) (2e242e1)
• aria-prohibited-attr: allow aria-label/ledby on descendants of widget (#4541) (07c5d91)
• aria-roledescription: keep disabled with { runOnly: 'wcag2a' } (#4526) (5b4cb9d), closes #4523
• autocomplete-valid: incomplete for invalid but safe values (#4500) (e31a974), closes #4492
• build: limit locales to valid files when using the --all-lang option (#4486) (d3db593), closes #4485
• Prevent errors when loading axe in Angular + Jest (#4456) (3ef9353), closes #4400
• Minor grammatical fixes for some rules and checks (#4499) (11fad59)
• landmark-unique: follow spec, aside -> landmark (#4469) (e32f803), closes #4460

... (truncated)

Changelog

Sourced from axe-core's changelog.

4.10.3 (2025-03-04)

Bug Fixes

• aria-allowed-role: Add math to allowed roles for img element (#4658) (f6dddd9), closes #4657
• captions: fix grammar in captions check incomplete message (#4661) (3ef7058)
• consistently parse tabindex, following HTML 5 spec (#4637) (3b0a361), closes #4632
• core: measure perf for async checks (#4609) (e7dc26e)
• locale: fixed typos in german (DE) locale (#4631) (0740980)
• locale: proofread and updated de.json (#4643) (910cdb2)
• no-autoplay-audio: don't timeout for preload=none media elements (#4684) (b7f1ad1)
• target-size: do not treat focusable tabpanels as targets (#4702) (67d4e4f), closes #4421 #4701

4.10.2 (2024-10-21)

Bug Fixes

• get-ancestry: don't error when there is no parent (#4617) (6c07102)

4.10.1 (2024-10-16)

Bug Fixes

• aria-allowed-role: add form to allowed roles of form element (#4588) (d462d67), closes /github.com/dequelabs/axe-core/blob/develop/lib/standards/html-elms.js#L264
• axe.d.ts: add typings for preload options object (#4543) (72e269f)
• button-name,input-button-name,input-img-alt: allow label to give accessible name (#4607) (364eb72), closes #4472 #3696 #3696
• get-ancestry: add nth-child selector for multiple siblings of shadow root (#4606) (bdd94a2), closes #4563
• rules: Change "alternate text" to "alternative text" (#4582) (31e0f61)

4.10.0 (2024-07-29)

Features

• new-rule: summary elements must have an accessible name (#4511) (0d8a99e), closes #4510

Bug Fixes

• aria-allowed-attr: allow aria-multiline=false for element with contenteditable (#4537) (f019068)
• aria-allowed-attr: allow aria-required=false when normally not allowed (#4532) (2e242e1)
• aria-prohibited-attr: allow aria-label/ledby on descendants of widget (#4541) (07c5d91)
• aria-roledescription: keep disabled with { runOnly: 'wcag2a' } (#4526) (5b4cb9d), closes #4523
• autocomplete-valid: incomplete for invalid but safe values (#4500) (e31a974), closes #4492
• build: limit locales to valid files when using the --all-lang option (#4486) (d3db593), closes #4485
• Prevent errors when loading axe in Angular + Jest (#4456) (3ef9353), closes #4400
• Minor grammatical fixes for some rules and checks (#4499) (11fad59)
• landmark-unique: follow spec, aside -> landmark (#4469) (e32f803), closes #4460
• required-attr: allow aria-valuetext on slider instead of valuenow (#4518) (135898b), closes #4515

4.9.1 (2024-05-06)

... (truncated)

Commits

• f49c1c4 chore(release): 4.10.3 (#4718)
• 53a36ea chore(release): 4.10.3
• b7f1ad1 fix(no-autoplay-audio): don't timeout for preload=none media elements (#4684)
• 67d4e4f fix(target-size): do not treat focusable tabpanels as targets (#4702)
• 46ca544 test: resolve nightly failure installing firefox 135 (#4698)
• defcb39 chore: sync generated files (#4674)
• 09320b3 docs: Update rule-descriptions.md to include link to ACT (#4633)
• b13c6c8 chore: fix missing period in ko locales (#4671)
• ef33820 chore: bump chromedriver from 127.0.1 to 131.0.5 (#4667)
• 7bdbf46 chore: bump the npm-low-risk group across 1 directory with 17 updates (#4669)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[github-actions]

Config Diff Tool Output

- removed: osd_pool_default_flag_ec_optimizations
- removed: ec_extent_cache_size
- removed: bluestore_recompression_min_gain
- removed: bluestore_debug_extent_map_encode_check
- removed: breakpad
- removed: ec_pdw_write_mode
- removed: bluestore_allocator_lookup_policy
- removed: crimson_poll_mode
- removed: rgw_d4n_cache_cleaning_interval
- removed: rgw_d4n_backend_address
- removed: rgw_bucket_eexist_override
- removed: d4n_writecache_enabled
- removed: rgw_d4n_l1_write_open_flags
! changed: mgr_data: old: Filesystem path to the Manager's data directory, which contains keyrings and other data
! changed: mgr_data: new: Filesystem path to the ceph-mgr data directory, used to contain keyring.
! changed: seastore_max_concurrent_transactions: old: maximum concurrent transactions that seastore allows (per reactor)
! changed: seastore_max_concurrent_transactions: new: maximum concurrent transactions that seastore allows
! changed: seastore_max_concurrent_transactions: old: 128
! changed: seastore_max_concurrent_transactions: new: 8
! changed: seastore_cache_lru_size: old: Size in bytes of extents to keep in cache (per reactor).
! changed: seastore_cache_lru_size: new: Size in bytes of extents to keep in cache.
! changed: seastore_cache_lru_size: old: 2_G
! changed: seastore_cache_lru_size: new: 64_M
! changed: rgw_admin_entry: old: Note that multisite replication requires the value admin, so this option must be left at the default in such deployments.
! changed: rgw_admin_entry: new: 
! changed: rgw_sts_key: old: Key used for encrypting/ decrypting role session tokens. This key must consist of 16 hexadecimal characters, which can be generated by the command 'openssl rand -hex 16'. All radosgw instances in a zone should use the same key. In multisite configurations, all zones in a realm should use the same key.
! changed: rgw_sts_key: new: Key used for encrypting/ decrypting session token.
! changed: rgw_lfuda_sync_frequency: old: ['startup']
! changed: rgw_lfuda_sync_frequency: new: 
! changed: mon_nvmeofgw_beacon_grace: old: 10
! changed: mon_nvmeofgw_beacon_grace: new: 15
! changed: mon_nvmeofgw_skip_failovers_interval: old: Period in seconds in which no failovers are performed in GW's pool-group this is equal to max GW redeploy interval
! changed: mon_nvmeofgw_skip_failovers_interval: new: Period in seconds in which no failovers are performed in GW's pool-group
! changed: mon_nvmeofgw_skip_failovers_interval: old: 16
! changed: mon_nvmeofgw_skip_failovers_interval: new: 12
! changed: osd_scrub_max_interval: old: Scrub each PG no less often than this interval. Note that this option must be set at ``global`` scope, or for both ``mgr`` and``osd``.
! changed: osd_scrub_max_interval: new: Scrub each PG no less often than this interval
! changed: osd_deep_scrub_interval: old: Deep scrub each PG (i.e., verify data checksums) at least this often. Note that this option must be set at ``global`` scope, or for both ``mgr`` and``osd``.
! changed: osd_deep_scrub_interval: new: Deep scrub each PG (i.e., verify data checksums) at least this often
! changed: osd_scrub_min_interval: old: The desired interval between scrubs of a specific PG. Note that this option must be set at ``global`` scope, or for both ``mgr`` and``osd``.
! changed: osd_scrub_min_interval: new: The desired interval between scrubs of a specific PG.
! changed: osd_deep_scrub_interval_cv: old: The coefficient of variation for the deep scrub interval, specified as a ratio. On average, the next deep scrub for a PG is scheduled osd_deep_scrub_interval after the last deep scrub . The actual time is randomized to a normal distribution with a standard deviation of osd_deep_scrub_interval * osd_deep_scrub_interval_cv (clamped to within 2 standard deviations). The default value guarantees that 95% of deep scrubs will be scheduled in the range [0.8 * osd_deep_scrub_interval, 1.2 * osd_deep_scrub_interval].
! changed: osd_deep_scrub_interval_cv: new: The coefficient of variation for the deep scrub interval, specified as a ratio. On average, the next deep scrub for a PG is scheduled osd_deep_scrub_interval after the last deep scrub . The actual time is randomized to a normal distribution with a standard deviation of osd_deep_scrub_interval * osd_deep_scrub_interval_cv (clamped to within 2 standard deviations). The default value guarantees that 95% of the deep scrubs will be scheduled in the range [0.8 * osd_deep_scrub_interval, 1.2 * osd_deep_scrub_interval].
! changed: osd_deep_scrub_interval_cv: old: deep scrub intervals are varied by a random amount to prevent stampedes. This parameter determines the amount of variation. Technically ``osd_deep_scrub_interval_cv`` is the coefficient of variation for the deep scrub interval.
! changed: osd_deep_scrub_interval_cv: new: deep scrub intervals are varied by a random amount to prevent stampedes. This parameter determines the amount of variation. Technically - osd_deep_scrub_interval_cv is the coefficient of variation for the deep scrub interval.

The above configuration changes are found in the PR. Please update the relevant release documentation if necessary.

[github-actions]

This pull request can no longer be automatically merged: a rebase is needed and changes have to be manually resolved