[stable34] chore(deps-dev): bump axe-core from 4.13.0 to 4.14.0

[dependabot]

Bumps axe-core from 4.13.0 to 4.14.0.

Release notes

Sourced from axe-core's releases.

Release 4.14.0

This release enables a new rule, and introduces new violations in some existing rules. These can cause the issue totals to go up from a previous version. Similarly we've included various bug fixes to false positives which may see the issue count go down as well. This release focused on various performance improvements which should speed runs up 20% - 40% on most pages. On especially large pages we've measured a 15x performance improvement.

Features

• add EN 301 549 v4 tags to target-size (#5361) (8200d2b), closes #5311
• i18n: add Azerbaijani locale (#5385) (02e5fd4)
• label-content-name-mismatch: Enable rule by default (#5421) (c0d6163), references #5227

Bug Fixes

• aria-allowed-attr: report case-sensitive aria attributes with non-lowercase values (#5418) (1e33c6c), closes #5280, references #5224
• aria-hidden-focus: suggest removing aria-hidden in the fail messages (#5397) (aa4a0a1), references #4552 #5357 #4552
• aria-prohibited-attr: quote the element name in no-role messages (#5391) (24736a4), references #3730 #5357 #3730
• aria-required-children: allow caption in table, grid and treegrid (#5412) (ed987a2), references #5265
• aria-required-children: explain presentational children that cannot be ignored (#5407) (35a38d8), references #4833 #5357 #4833
• avoid-inline-spacing: test the text that gets the spacing from the element (#5411) (96e3e06), references #4232 #4232
• checks: add incomplete messages to checks that can return undefined (#5388) (6f1a6fe), references #5375 #5375
• checks: make listitem failure messages actionable (#5357) (6dd1be2)
• color-contrast: handle "none" and exponents in color strings (#5422) (cf5ed89), references #5313 #4136 #4007 #4269
• color-contrast: treat empty low-contrast text inputs as incomplete (#5359) (47029de), closes #4260, references #2130 #2130
• commons/dom: treat dialog as non-modal when elementsFromPoint is unsupported (#5202) (757b44a), references #4997
• commons/text/visibleVirtual: sanitize visible text once, not at every level (#5368) (2d47182), closes #5207, references #5207 act-rules/act-rules.github.io#2443
• core: use the fallback message when a check has no incomplete message (#5367) (4887c3a), closes #5344, references #5355
• label-content-name-mismatch: add support for cjk word splitting (#5437) (d53cb0a)
• label-content-name-mismatch: compare visible label to name by word (#5345) (4e3fcf5), references #5203 act-rules/act-rules.github.io#2443 #5207 #5308 #5203 #5346 #5207 #5207 #5302 #4311 #5203 #5302 #5302 #5344 #5203
• label-content-name-mismatch: ignore parenthesised content (#5360) (388132d), references act-rules/act-rules.github.io#2443 #5308 #5207 #5207 #5207
• label-content-name-mismatch: mark value-text roles incomplete (#5355) (5258f44), closes #4561, references #4561 #5344 #5345
• label-content-name-mismatch: normalize CJK and full-width text before comparing (#5419) (52dd387), references #5420 #5340 #5345 #5400 #5355 #5308 #5400
• no-focusable-content: say how to fix in the default fail message (#5392) (b84b76b), references #3267 #5357 #3194 #5357 #3267
• p-as-heading: ignore paragraphs with heading roles (#5348) (cbc33b9), references #5283
• process-message: separate array values with a comma and a space (#5393) (6ba9ee4), references #3344 #3344
• reporter: make addReporter isDefault set the default reporter (#5395) (eb854ed), references #4058 #4058
• scrollable-region-focusable: negative tabindex content needs review instead of failing outright (#5364) (72e8624)
• target-size: ignore overlapping links with the same destination (#5428) (2ba0812), references #5406 #4224
• Update de.json (#5353) (4d306cb)
• utils: resolve @​import url against the stylesheet that contains it (#5269) (e618fb6), closes #5268

Changelog

Sourced from axe-core's changelog.

4.14.0 (2026-10-05)

Features

• add EN 301 549 v4 tags to target-size (#5361) (8200d2b), closes #5311
• i18n: add Azerbaijani locale (#5385) (02e5fd4)
• label-content-name-mismatch: Enable rule by default (#5421) (c0d6163), references #5227

Bug Fixes

• aria-allowed-attr: report case-sensitive aria attributes with non-lowercase values (#5418) (1e33c6c), closes #5280, references #5224
• aria-hidden-focus: suggest removing aria-hidden in the fail messages (#5397) (aa4a0a1), references #4552 #5357 #4552
• aria-prohibited-attr: quote the element name in no-role messages (#5391) (24736a4), references #3730 #5357 #3730
• aria-required-children: allow caption in table, grid and treegrid (#5412) (ed987a2), references #5265
• aria-required-children: explain presentational children that cannot be ignored (#5407) (35a38d8), references #4833 #5357 #4833
• avoid-inline-spacing: test the text that gets the spacing from the element (#5411) (96e3e06), references #4232 #4232
• checks: add incomplete messages to checks that can return undefined (#5388) (6f1a6fe), references #5375 #5375
• checks: make listitem failure messages actionable (#5357) (6dd1be2)
• color-contrast: handle "none" and exponents in color strings (#5422) (cf5ed89), references #5313 #4136 #4007 #4269
• color-contrast: treat empty low-contrast text inputs as incomplete (#5359) (47029de), closes #4260, references #2130 #2130
• commons/dom: treat dialog as non-modal when elementsFromPoint is unsupported (#5202) (757b44a), references #4997
• commons/text/visibleVirtual: sanitize visible text once, not at every level (#5368) (2d47182), closes #5207, references #5207 act-rules/act-rules.github.io#2443
• core: use the fallback message when a check has no incomplete message (#5367) (4887c3a), closes #5344, references #5355
• label-content-name-mismatch: add support for cjk word splitting (#5437) (d53cb0a)
• label-content-name-mismatch: compare visible label to name by word (#5345) (4e3fcf5), references #5203 act-rules/act-rules.github.io#2443 #5207 #5308 #5203 #5346 #5207 #5207 #5302 #4311 #5203 #5302 #5302 #5344 #5203
• label-content-name-mismatch: ignore parenthesised content (#5360) (388132d), references act-rules/act-rules.github.io#2443 #5308 #5207 #5207 #5207
• label-content-name-mismatch: mark value-text roles incomplete (#5355) (5258f44), closes #4561, references #4561 #5344 #5345
• label-content-name-mismatch: normalize CJK and full-width text before comparing (#5419) (52dd387), references #5420 #5340 #5345 #5400 #5355 #5308 #5400
• no-focusable-content: say how to fix in the default fail message (#5392) (b84b76b), references #3267 #5357 #3194 #5357 #3267
• p-as-heading: ignore paragraphs with heading roles (#5348) (cbc33b9), references #5283
• process-message: separate array values with a comma and a space (#5393) (6ba9ee4), references #3344 #3344
• reporter: make addReporter isDefault set the default reporter (#5395) (eb854ed), references #4058 #4058
• scrollable-region-focusable: negative tabindex content needs review instead of failing outright (#5364) (72e8624)
• target-size: ignore overlapping links with the same destination (#5428) (2ba0812), references #5406 #4224
• Update de.json (#5353) (4d306cb)
• utils: resolve @​import url against the stylesheet that contains it (#5269) (e618fb6), closes #5268

Commits

• e797173 chore(release): v4.14.0 (#5438)
• 6976881 chore(release): 4.14.0
• d53cb0a fix(label-content-name-mismatch): add support for cjk word splitting (#5437)
• 35a38d8 fix(aria-required-children): explain presentational children that cannot be i...
• 2ba0812 fix(target-size): ignore overlapping links with the same destination (#5428)
• 1e33c6c fix(aria-allowed-attr): report case-sensitive aria attributes with non-lowerc...
• f59642e chore: bump mocha from 11.8.0 to 12.0.2 (#5426)
• 6efcb6e chore: bump emoji-regex from 10.6.0 to 11.0.0 (#5427)
• 2da49a3 chore: bump the npm-low-risk group across 1 directory with 7 updates (#5425)
• aa4a0a1 fix(aria-hidden-focus): suggest removing aria-hidden in the fail messages (#5...
• Additional commits viewable in compare view

[github-actions]

Possible performance regression detected

Show Output

4 queries added

= /remote.php/dav/files/test
= /remote.php/dav/files/test/test.txt
= /remote.php/dav/files/test/many_files
= /remote.php/dav/files/test/new_file.txt
≠ /remote.php/dav/files/test/new_file.txt with 4 queries added
  - UPDATE "oc_filecache" SET "size" = :dcValue4 WHERE ("fileid" = :dcValue1) AND ("storage" = :dcValue2) AND (("size" <> :dcValue3) OR ("size" IS NULL))
  - UPDATE "oc_filecache" SET "size" = :dcValue4 WHERE ("fileid" = :dcValue1) AND ("storage" = :dcValue2) AND (("size" <> :dcValue3) OR ("size" IS NULL))
  - SELECT "path" FROM "oc_filecache" WHERE ("storage" = :dcValue1) AND ("fileid" = :dcValue2)
  - SELECT "path" FROM "oc_filecache" WHERE ("storage" = :dcValue1) AND ("fileid" = :dcValue2)
  + SELECT "storage", "path", "mimetype" FROM "oc_filecache" WHERE "fileid" = :dcValue1
  + SELECT "storage_id", "root_id", "user_id", "mount_point", "mount_id", "f"."path", "mount_provider_class" FROM "oc_mounts" "m" INNER JOIN "oc_filecache" "f" ON "m"."root_id" = "f"."fileid" WHERE ("m"."storage_id" = :dcValue1) AND ("f"."storage" = :dcValue2) AND (("f"."fileid" = :dcValue3) OR ("f"."path" = '') OR (("f"."path" || :dcValue4) = SUBSTR(:dcValue5, :dcValue6, LENGTH("f"."path") + :dcValue7))) AND ("user_id" = :dcValue8)
  + SELECT "filecache"."fileid", "storage", "path", "path_hash", "filecache"."parent", "filecache"."name", "mimetype", "mimepart", "size", "mtime", "storage_mtime", "encrypted", "filecache"."etag", "filecache"."permissions", "checksum", "unencrypted_size", "metadata_etag", "creation_time", "upload_time", "meta"."json" AS "meta_json", "meta"."sync_token" AS "meta_sync_token" FROM "oc_filecache" "filecache" LEFT JOIN "oc_filecache_extended" "fe" ON "filecache"."fileid" = "fe"."fileid" LEFT JOIN "oc_files_metadata" "meta" ON "filecache"."fileid" = "meta"."file_id" WHERE ("filecache"."fileid" = :dcValue1) AND ("storage" = :dcValue2)
  + DELETE FROM "oc_filecache" WHERE ("storage" = :dcValue1) AND ("fileid" = :dcValue2)
  + DELETE FROM "oc_filecache_extended" WHERE "fileid" = :dcValue1
  + SELECT "fileid" FROM "oc_filecache" WHERE ("storage" = :dcValue1) AND ("path_hash" = :dcValue2)
  + UPDATE "oc_file_locks" SET "lock" = :dcValue1, "ttl" = :dcValue2 WHERE ("key" = :dcValue3) AND ("lock" = :dcValue4)
  + SELECT "filecache"."fileid", "storage", "path", "path_hash", "filecache"."parent", "filecache"."name", "mimetype", "mimepart", "size", "mtime", "storage_mtime", "encrypted", "filecache"."etag", "filecache"."permissions", "checksum", "unencrypted_size", "metadata_etag", "creation_time", "upload_time", "meta"."json" AS "meta_json", "meta"."sync_token" AS "meta_sync_token" FROM "oc_filecache" "filecache" LEFT JOIN "oc_filecache_extended" "fe" ON "filecache"."fileid" = "fe"."fileid" LEFT JOIN "oc_files_metadata" "meta" ON "filecache"."fileid" = "meta"."file_id" WHERE ("path_hash" = :dcValue1) AND ("storage" = :dcValue2)
= ./occ profiler:list

[AndyScherzinger]

@dependabot recreate