Update development-dependencies (minor)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@changesets/cli (source)	^2.28.1 → ^2.31.0
@types/pdfmake (source)	^0.2.11 → ^0.3.0
axe-core (source)	^4.11.1 → ^4.12.1
sass	^1.97.2 → ^1.98.0

---

Release Notes

changesets/changesets (@​changesets/cli)

v2.31.0

Compare Source

Minor Changes

• #​1889 96ca062 Thanks @​mixelburg! - Error on unsupported flags for individual CLI commands and print the matching command usage to make mistakes easier to spot.

• #​1873 42943b7 Thanks @​mixelburg! - Respond to --help on all subcommands. Previously, --help was only handled when it was the sole argument; passing it alongside a subcommand (e.g. changeset version --help) would silently execute the command instead. Now --help always exits early and prints per-command usage when a known subcommand is provided, or the general help text otherwise.

Patch Changes

• d2121dc Thanks @​Andarist! - Fix npm auth for path-based registries during publish by preserving configured registry URLs instead of normalizing them.

• #​1888 036fdd4 Thanks @​mixelburg! - Fix several changeset version issues with workspace protocol dependencies. Valid explicit workspace: ranges and aliases are no longer rewritten unnecessarily, and workspace path references are handled correctly during versioning.

• #​1903 5c4731f Thanks @​Andarist! - Gracefully handle stale npm info data leading to duplicate publish attempts.

• #​1867 f61e716 Thanks @​Andarist! - Improved detection for published state of prerelease-only packages without latest dist-tag on GitHub Packages registry.

• Updated dependencies [036fdd4, 036fdd4, 036fdd4]:

  • @​changesets/assemble-release-plan@​6.0.10
  • @​changesets/get-dependents-graph@​2.1.4
  • @​changesets/apply-release-plan@​7.1.1
  • @​changesets/get-release-plan@​4.0.16
  • @​changesets/config@​3.1.4

v2.30.0

Compare Source

Minor Changes

• #​1840 057cca2 Thanks @​wotan-allfather! - Add --since flag to add command

  The add command now supports a --since flag that allows you to specify which branch, tag, or git ref to use when detecting changed packages. This is useful for gitflow workflows where you have multiple target branches and the baseBranch config option doesn't cover all use cases.

  Example: changeset add --since=develop

  If not provided, the command falls back to the baseBranch value in your .changeset/config.json.

• #​1845 2b4a66a Thanks @​Andarist! - Delegate OTP prompting to the package manager instead of handling it in-process. This allows Changesets to use the package manager's native web auth support.

• #​1774 667fe5a Thanks @​bluwy! - Support importing custom commit option ES module. Previously, it used require() which only worked for CJS modules, however now it uses import() which supports both CJS and ES modules.

• #​1839 73b1809 Thanks @​leochiu-a! - Add a --message (-m) flag to changeset add (and default changeset) so the changeset summary can be provided from the command line. When --message is present, the summary prompt is skipped while the final confirmation step is kept.

• #​1806 0e8e01e Thanks @​luisadame! - Changeset CLI can now be run from the nested directories in the project, where the .changeset directory has to be found in one of the parent directories

Patch Changes

• #​1849 9dc3230 Thanks @​Andarist! - Compute the terminal's size lazily to avoid spurious stderr output in non-interactive mode

• #​1857 2a73025 Thanks @​mixelburg! - Fix confusing prompt labels when entering changeset summary after external editor fallback

• #​1842 6df3a5e Thanks @​RodrigoHamuy! - Allow private packages to depend on skipped packages without requiring them to also be skipped. Private packages are not published to npm, so it is safe for them to have dependencies on ignored or unversioned packages.

• #​1776 503fcaa Thanks @​bluwy! - Support absolute paths in changeset status --output <path>

• Updated dependencies [667fe5a, 1772598, b6f4c74, 6df3a5e, 6df3a5e, 27fd8f4]:

  • @​changesets/apply-release-plan@​7.1.0
  • @​changesets/config@​3.1.3
  • @​changesets/get-release-plan@​4.0.15
  • @​changesets/read@​0.6.7

dequelabs/axe-core (axe-core)

v4.12.1

Compare Source

v4.12.0

Compare Source

Features

• add gather-internals.js external script (#​5099) (c61d58b), closes #​5080
• aria-allowed/prohibited-attr, aria-required-parent/children: partially support element internals role (#​5080) (417b48a), closes #​5039 #​4259
• axe.externalAPIs: add public api for setting elementInternal data (#​5105) (63bab8f)
• core: expose normalizeRunOptions (#​4998) (b8e6a59)
• expose axe.resetLocale() to restore the default locale (#​5108) (c2b5292), closes #​5107
• getRules: include rule enabled state in returned objects (#​5118) (75bf772), closes #​5116
• list,listitem: support element internals role (#​5119) (7d9d696)
• new-rule: check that aria-tab have an accessible name (#​5001) (0d4e4e7), closes #​4842
• rules: deprecate landmark-complementary-is-top-level rules (#​4992) (9e09139), closes #​4950
• utils: add getElementInternals function (#​5077) (1c15f82)

Bug Fixes

• aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#​4974) (c6245e7)
• aria-conditional-attr: add support for radio (#​5100) (8223c98)
• aria-valid-attr-value: handle multiple aria-errormessage IDs (#​4973) (0489e30)
• aria: prevent getOwnedVirtual from returning duplicate nodes (#​4987) (48ca955), closes #​4840
• commons/text: exclude natively hidden elements from aria-labelledby accessible name (#​5076) (ea7202c), closes #​4704
• DqElement: avoid calling constructors with cloneNode (#​5013) (0281fa1)
• existing-rule: aria-busy now shows an error message for a use with unallowed children (#​5017) (2067b87)
• helpUrl: ensure axe.configure always updates the help URLs (#​5114) (c4f60ff)
• label-content-name-mismatch: match visible text with aria-label and exclude invisible text (#​5096) (3a012a1)
• locale: ensure all subtags are correctly set (#​5112) (13005ed)
• scrollable-region-focusable: clarify the issue is in safari (#​4995) (4ec5211), closes WebKit#190870 WebKit#277290
• scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#​4993) (838707a)
• target-size: determine offset using clientRects if target is display:inline (#​5012) (a4b8091)
• target-size: ignore position: fixed elements that are offscreen when page is scrolled (#​5066) (1229a6e), closes #​5065
• target-size: ignore widgets that are inline with other inline elements (#​5000) (a8dd81b)
• utils/getAncestry: escape node name (#​5079) (d1fabaa), closes #​5078
• utils: Add null check to parseCrossOriginStylesheet, closes #​5074 (#​5075) (f12ef32)
• utils: update isShadowRoot to use spec-compliant custom element regex (#​5059) (edc6ce2), closes #​5030

4.11.4 (2026-04-23)

Bug Fixes

• commons/text: exclude natively hidden elements from aria-labelledby accessible name (#​5076) (df34adf), closes #​4704
• utils/getAncestry: escape node name (#​5079) (6e68d0a), closes #​5078

4.11.3 (2026-04-13)

Bug Fixes

• aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#​4974) (1d80163)
• target-size: ignore position: fixed elements that are offscreen when page is scrolled (#​5066) (5906273), closes #​5065

4.11.2 (2026-03-30)

Bug Fixes

• aria-valid-attr-value: handle multiple aria-errormessage IDs (#​4973) (9322148)
• aria: prevent getOwnedVirtual from returning duplicate nodes (#​4987) (99d1e77), closes #​4840
• DqElement: avoid calling constructors with cloneNode (#​5013) (88bc57f)
• existing-rule: aria-busy now shows an error message for a use with unallowed children (#​5017) (dded75a)
• scrollable-region-focusable: clarify the issue is in safari (#​4995) (2567afd), closes WebKit#190870 WebKit#277290
• scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#​4993) (240f8b5)
• target-size: determine offset using clientRects if target is display:inline (#​5012) (69d81c1)
• target-size: ignore widgets that are inline with other inline elements (#​5000) (cf8a3c0)

4.11.1 (2026-01-06)

Bug Fixes

• allow shadow roots in axe.run contexts (#​4952) (d4aee16), closes #​4941
• color contrast fails for oklch and oklab with none (#​4959) (8f249fd)
• color-contrast: do not incomplete on textarea (#​4968) (d271788), closes #​4947
• commons/color: Match browser behavior for out-of-gamut oklch colors (#​4908) (5036be8)
• don't runs rules that select html on nested html elements (#​4969) (1e9a5c3)
• replaced luminance threshold constant 0.03928 with 0.04045 (#​4934) (316967d), closes #​4933
• rgaa: adjust mapping of aria-hidden-* and valid-lang (#​4935) (77571f2)
• valid-lang: update valid-langs for newer language codes (#​4966) (c3f5446), closes #​4963

v4.11.4

Compare Source

Features

• add gather-internals.js external script (#​5099) (c61d58b), closes #​5080
• aria-allowed/prohibited-attr, aria-required-parent/children: partially support element internals role (#​5080) (417b48a), closes #​5039 #​4259
• axe.externalAPIs: add public api for setting elementInternal data (#​5105) (63bab8f)
• core: expose normalizeRunOptions (#​4998) (b8e6a59)
• expose axe.resetLocale() to restore the default locale (#​5108) (c2b5292), closes #​5107
• getRules: include rule enabled state in returned objects (#​5118) (75bf772), closes #​5116
• list,listitem: support element internals role (#​5119) (7d9d696)
• new-rule: check that aria-tab have an accessible name (#​5001) (0d4e4e7), closes #​4842
• rules: deprecate landmark-complementary-is-top-level rules (#​4992) (9e09139), closes #​4950
• utils: add getElementInternals function (#​5077) (1c15f82)

Bug Fixes

• aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#​4974) (c6245e7)
• aria-conditional-attr: add support for radio (#​5100) (8223c98)
• aria-valid-attr-value: handle multiple aria-errormessage IDs (#​4973) (0489e30)
• aria: prevent getOwnedVirtual from returning duplicate nodes (#​4987) (48ca955), closes #​4840
• commons/text: exclude natively hidden elements from aria-labelledby accessible name (#​5076) (ea7202c), closes #​4704
• DqElement: avoid calling constructors with cloneNode (#​5013) (0281fa1)
• existing-rule: aria-busy now shows an error message for a use with unallowed children (#​5017) (2067b87)
• helpUrl: ensure axe.configure always updates the help URLs (#​5114) (c4f60ff)
• label-content-name-mismatch: match visible text with aria-label and exclude invisible text (#​5096) (3a012a1)
• locale: ensure all subtags are correctly set (#​5112) (13005ed)
• scrollable-region-focusable: clarify the issue is in safari (#​4995) (4ec5211), closes WebKit#190870 WebKit#277290
• scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#​4993) (838707a)
• target-size: determine offset using clientRects if target is display:inline (#​5012) (a4b8091)
• target-size: ignore position: fixed elements that are offscreen when page is scrolled (#​5066) (1229a6e), closes #​5065
• target-size: ignore widgets that are inline with other inline elements (#​5000) (a8dd81b)
• utils/getAncestry: escape node name (#​5079) (d1fabaa), closes #​5078
• utils: Add null check to parseCrossOriginStylesheet, closes #​5074 (#​5075) (f12ef32)
• utils: update isShadowRoot to use spec-compliant custom element regex (#​5059) (edc6ce2), closes #​5030

4.11.4 (2026-04-23)

Bug Fixes

• commons/text: exclude natively hidden elements from aria-labelledby accessible name (#​5076) (df34adf), closes #​4704
• utils/getAncestry: escape node name (#​5079) (6e68d0a), closes #​5078

4.11.3 (2026-04-13)

Bug Fixes

• aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#​4974) (1d80163)
• target-size: ignore position: fixed elements that are offscreen when page is scrolled (#​5066) (5906273), closes #​5065

4.11.2 (2026-03-30)

Bug Fixes

• aria-valid-attr-value: handle multiple aria-errormessage IDs (#​4973) (9322148)
• aria: prevent getOwnedVirtual from returning duplicate nodes (#​4987) (99d1e77), closes #​4840
• DqElement: avoid calling constructors with cloneNode (#​5013) (88bc57f)
• existing-rule: aria-busy now shows an error message for a use with unallowed children (#​5017) (dded75a)
• scrollable-region-focusable: clarify the issue is in safari (#​4995) (2567afd), closes WebKit#190870 WebKit#277290
• scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#​4993) (240f8b5)
• target-size: determine offset using clientRects if target is display:inline (#​5012) (69d81c1)
• target-size: ignore widgets that are inline with other inline elements (#​5000) (cf8a3c0)

4.11.1 (2026-01-06)

Bug Fixes

• allow shadow roots in axe.run contexts (#​4952) (d4aee16), closes #​4941
• color contrast fails for oklch and oklab with none (#​4959) (8f249fd)
• color-contrast: do not incomplete on textarea (#​4968) (d271788), closes #​4947
• commons/color: Match browser behavior for out-of-gamut oklch colors (#​4908) (5036be8)
• don't runs rules that select html on nested html elements (#​4969) (1e9a5c3)
• replaced luminance threshold constant 0.03928 with 0.04045 (#​4934) (316967d), closes #​4933
• rgaa: adjust mapping of aria-hidden-* and valid-lang (#​4935) (77571f2)
• valid-lang: update valid-langs for newer language codes (#​4966) (c3f5446), closes #​4963

sass/dart-sass (sass)

v1.101.0

Compare Source

• Potentially breaking bug fix: The Node package importer now properly
  supports resolving import-only variants of Sass files declared in the
  exports, sass, and style fields of package.json. Previously, these
  files were ignored even when loaded via @import, so any code relying on
  loading module-system-only files this way may break.

v1.100.0

Compare Source

• Writing two compound selectors adjacent to one another without any whitespace
  between them, such as [class]a, is now deprecated. This was always an error
  in CSS and Sass only supported it by mistake.

  See the Sass website for
  details.

v1.99.0

Compare Source

• Add support for parent selectors (&) at the root of the document. These are
  emitted as-is in the CSS output, where they're interpreted as the scoping
  root.

• User-defined functions named calc or clamp are no longer forbidden. If
  such a function exists without a namespace in the current module, it will be
  used instead of the built-in calc() or clamp() function.

• User-defined functions whose names begin with - and end with -expression,
  -url, -and, -or, or -not are no longer forbidden. These were
  originally intended to match vendor prefixes, but in practice no vendor
  prefixes for these functions ever existed in real browsers.

• User-defined functions named EXPRESSION, URL, and ELEMENT, those that
  begin with - and end with -ELEMENT, as well as the same names with some
  lowercase letters are now deprecated, These are names conflict with plain CSS
  functions that have special syntax.

  See the Sass website for details.

• In a future release, calls to functions whose names begin with - and end
  with -expression and -url will no longer have special parsing. For now,
  these calls are deprecated if their behavior will change in the future.

  See the Sass website for details.

• Calls to functions whose names begin with - and end with -progid:... are
  deprecated.

  See the Sass website for details.

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • Between 12:00 AM and 05:59 AM, only on Monday (* 0-5 * * 1)
• Automerge
  • Monday through Friday (* * * * 1-5)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 7532e31

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR