chore(deps-dev): bump axe-core from 4.13.0 to 4.14.0 by dependabot[bot] · Pull Request #65366 · nextcloud/server

dependabot · 2026-10-10T02:36:20Z

Bumps axe-core from 4.13.0 to 4.14.0.

Release notes

Release 4.14.0

This release enables a new rule, and introduces new violations in some existing rules. These can cause the issue totals to go up from a previous version. Similarly we've included various bug fixes to false positives which may see the issue count go down as well. This release focused on various performance improvements which should speed runs up 20% - 40% on most pages. On especially large pages we've measured a 15x performance improvement.

Features

add EN 301 549 v4 tags to target-size (#5361) (8200d2b), closes #5311

i18n: add Azerbaijani locale (#5385) (02e5fd4)

label-content-name-mismatch: Enable rule by default (#5421) (c0d6163), references #5227

Bug Fixes

aria-allowed-attr: report case-sensitive aria attributes with non-lowercase values (#5418) (1e33c6c), closes #5280, references #5224

aria-hidden-focus: suggest removing aria-hidden in the fail messages (#5397) (aa4a0a1), references #4552 #5357 #4552

aria-prohibited-attr: quote the element name in no-role messages (#5391) (24736a4), references #3730 #5357 #3730

aria-required-children: allow caption in table, grid and treegrid (#5412) (ed987a2), references #5265

aria-required-children: explain presentational children that cannot be ignored (#5407) (35a38d8), references #4833 #5357 #4833

avoid-inline-spacing: test the text that gets the spacing from the element (#5411) (96e3e06), references #4232 #4232

checks: add incomplete messages to checks that can return undefined (#5388) (6f1a6fe), references #5375 #5375

checks: make listitem failure messages actionable (#5357) (6dd1be2)

color-contrast: handle "none" and exponents in color strings (#5422) (cf5ed89), references #5313 #4136 #4007 #4269

color-contrast: treat empty low-contrast text inputs as incomplete (#5359) (47029de), closes #4260, references #2130 #2130

commons/dom: treat dialog as non-modal when elementsFromPoint is unsupported (#5202) (757b44a), references #4997

commons/text/visibleVirtual: sanitize visible text once, not at every level (#5368) (2d47182), closes #5207, references #5207 act-rules/act-rules.github.io#2443

core: use the fallback message when a check has no incomplete message (#5367) (4887c3a), closes #5344, references #5355

label-content-name-mismatch: add support for cjk word splitting (#5437) (d53cb0a)

label-content-name-mismatch: compare visible label to name by word (#5345) (4e3fcf5), references #5203 act-rules/act-rules.github.io#2443 #5207 #5308 #5203 #5346 #5207 #5207 #5302 #4311 #5203 #5302 #5302 #5344 #5203

label-content-name-mismatch: ignore parenthesised content (#5360) (388132d), references act-rules/act-rules.github.io#2443 #5308 #5207 #5207 #5207

label-content-name-mismatch: mark value-text roles incomplete (#5355) (5258f44), closes #4561, references #4561 #5344 #5345

label-content-name-mismatch: normalize CJK and full-width text before comparing (#5419) (52dd387), references #5420 #5340 #5345 #5400 #5355 #5308 #5400

no-focusable-content: say how to fix in the default fail message (#5392) (b84b76b), references #3267 #5357 #3194 #5357 #3267

p-as-heading: ignore paragraphs with heading roles (#5348) (cbc33b9), references #5283

process-message: separate array values with a comma and a space (#5393) (6ba9ee4), references #3344 #3344

reporter: make addReporter isDefault set the default reporter (#5395) (eb854ed), references #4058 #4058

scrollable-region-focusable: negative tabindex content needs review instead of failing outright (#5364) (72e8624)

target-size: ignore overlapping links with the same destination (#5428) (2ba0812), references #5406 #4224

Update de.json (#5353) (4d306cb)

utils: resolve @import url against the stylesheet that contains it (#5269) (e618fb6), closes #5268

Changelog

Sourced from axe-core's changelog.

4.14.0 (2026-10-05)

Features

add EN 301 549 v4 tags to target-size (#5361) (8200d2b), closes #5311

i18n: add Azerbaijani locale (#5385) (02e5fd4)

label-content-name-mismatch: Enable rule by default (#5421) (c0d6163), references #5227

Bug Fixes

aria-allowed-attr: report case-sensitive aria attributes with non-lowercase values (#5418) (1e33c6c), closes #5280, references #5224

aria-hidden-focus: suggest removing aria-hidden in the fail messages (#5397) (aa4a0a1), references #4552 #5357 #4552

aria-prohibited-attr: quote the element name in no-role messages (#5391) (24736a4), references #3730 #5357 #3730

aria-required-children: allow caption in table, grid and treegrid (#5412) (ed987a2), references #5265

aria-required-children: explain presentational children that cannot be ignored (#5407) (35a38d8), references #4833 #5357 #4833

avoid-inline-spacing: test the text that gets the spacing from the element (#5411) (96e3e06), references #4232 #4232

checks: add incomplete messages to checks that can return undefined (#5388) (6f1a6fe), references #5375 #5375

checks: make listitem failure messages actionable (#5357) (6dd1be2)

color-contrast: handle "none" and exponents in color strings (#5422) (cf5ed89), references #5313 #4136 #4007 #4269

color-contrast: treat empty low-contrast text inputs as incomplete (#5359) (47029de), closes #4260, references #2130 #2130

commons/dom: treat dialog as non-modal when elementsFromPoint is unsupported (#5202) (757b44a), references #4997

commons/text/visibleVirtual: sanitize visible text once, not at every level (#5368) (2d47182), closes #5207, references #5207 act-rules/act-rules.github.io#2443

core: use the fallback message when a check has no incomplete message (#5367) (4887c3a), closes #5344, references #5355

label-content-name-mismatch: add support for cjk word splitting (#5437) (d53cb0a)

label-content-name-mismatch: compare visible label to name by word (#5345) (4e3fcf5), references #5203 act-rules/act-rules.github.io#2443 #5207 #5308 #5203 #5346 #5207 #5207 #5302 #4311 #5203 #5302 #5302 #5344 #5203

label-content-name-mismatch: ignore parenthesised content (#5360) (388132d), references act-rules/act-rules.github.io#2443 #5308 #5207 #5207 #5207

label-content-name-mismatch: mark value-text roles incomplete (#5355) (5258f44), closes #4561, references #4561 #5344 #5345

label-content-name-mismatch: normalize CJK and full-width text before comparing (#5419) (52dd387), references #5420 #5340 #5345 #5400 #5355 #5308 #5400

no-focusable-content: say how to fix in the default fail message (#5392) (b84b76b), references #3267 #5357 #3194 #5357 #3267

p-as-heading: ignore paragraphs with heading roles (#5348) (cbc33b9), references #5283

process-message: separate array values with a comma and a space (#5393) (6ba9ee4), references #3344 #3344

reporter: make addReporter isDefault set the default reporter (#5395) (eb854ed), references #4058 #4058

scrollable-region-focusable: negative tabindex content needs review instead of failing outright (#5364) (72e8624)

target-size: ignore overlapping links with the same destination (#5428) (2ba0812), references #5406 #4224

Update de.json (#5353) (4d306cb)

utils: resolve @import url against the stylesheet that contains it (#5269) (e618fb6), closes #5268

Commits

e797173 chore(release): v4.14.0 (#5438)
6976881 chore(release): 4.14.0
d53cb0a fix(label-content-name-mismatch): add support for cjk word splitting (#5437)
35a38d8 fix(aria-required-children): explain presentational children that cannot be i...
2ba0812 fix(target-size): ignore overlapping links with the same destination (#5428)
1e33c6c fix(aria-allowed-attr): report case-sensitive aria attributes with non-lowerc...
f59642e chore: bump mocha from 11.8.0 to 12.0.2 (#5426)
6efcb6e chore: bump emoji-regex from 10.6.0 to 11.0.0 (#5427)
2da49a3 chore: bump the npm-low-risk group across 1 directory with 7 updates (#5425)
aa4a0a1 fix(aria-hidden-focus): suggest removing aria-hidden in the fail messages (#5...
Additional commits viewable in compare view

AndyScherzinger · 2026-10-17T13:13:24Z

@dependabot recreate

Bumps [axe-core](https://github.com/dequelabs/axe-core) from 4.13.0 to 4.14.0. - [Release notes](https://github.com/dequelabs/axe-core/releases) - [Changelog](https://github.com/dequelabs/axe-core/blob/develop/CHANGELOG.md) - [Commits](dequelabs/axe-core@v4.13.0...v4.14.0) --- updated-dependencies: - dependency-name: axe-core dependency-version: 4.14.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from a team as a code owner October 10, 2026 02:36

dependabot Bot added the 3. to review Waiting for reviews label Oct 10, 2026

dependabot Bot requested a review from a team as a code owner October 10, 2026 02:36

dependabot Bot added the feature: dependencies label Oct 10, 2026

dependabot Bot requested review from kristian-zendato, pringelmann and susnux and removed request for a team October 10, 2026 02:36

github-actions Bot approved these changes Oct 10, 2026

View reviewed changes

nextcloud-command enabled auto-merge October 10, 2026 02:57

github-actions Bot changed the title ~~chore(deps-dev): bump axe-core from 4.13.0 to 4.14.0~~ [stable35] chore(deps-dev): bump axe-core from 4.13.0 to 4.14.0 Oct 10, 2026

AndyScherzinger added this to the Nextcloud 35.0.3 milestone Oct 17, 2026

AndyScherzinger approved these changes Oct 17, 2026

View reviewed changes

dependabot Bot changed the title ~~[stable35] chore(deps-dev): bump axe-core from 4.13.0 to 4.14.0~~ chore(deps-dev): bump axe-core from 4.13.0 to 4.14.0 Oct 17, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/stable35/axe-core-4.14.0 branch from c54c9c4 to e3070f9 Compare October 17, 2026 13:14

github-actions Bot approved these changes Oct 17, 2026

View reviewed changes

nextcloud-command merged commit 3d99ebc into stable35 Oct 17, 2026
85 checks passed

nextcloud-command deleted the dependabot/npm_and_yarn/stable35/axe-core-4.14.0 branch October 17, 2026 13:27

Navigation Menu

Repository navigation

chore(deps-dev): bump axe-core from 4.13.0 to 4.14.0 - #65366

chore(deps-dev): bump axe-core from 4.13.0 to 4.14.0#65366
nextcloud-command merged 1 commit into
stable35from
dependabot/npm_and_yarn/stable35/axe-core-4.14.0

dependabot Bot commented on behalf of github Oct 10, 2026 •

edited

Loading

Uh oh!

AndyScherzinger commented Oct 17, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Oct 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release 4.14.0

Features

Bug Fixes

4.14.0 (2026-10-05)

Features

Bug Fixes

Uh oh!

AndyScherzinger commented Oct 17, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Oct 10, 2026 •

edited

Loading