Release v4.8.2

.eslintrc.js

@@ -39,6 +39,7 @@ module.exports = {
  {
  files: ['*.test.ts', '*.test.tsx', '*.spec.ts', '*.spec.tsx'],
  rules: {
+ '@typescript-eslint/no-empty-function': 'off',
  '@typescript-eslint/no-explicit-any': 'off',
  '@typescript-eslint/no-non-null-assertion': 'off'
  }

.github/dependabot.yml

@@ -0,0 +1,42 @@
+version: 2
+
+updates:
+ - package-ecosystem: 'github-actions'
+ directory: '/'
+ schedule:
+ interval: 'monthly'
+ open-pull-requests-limit: 10
+ commit-message:
+ prefix: 'chore'
+ groups:
+ # Any updates not caught by the group config will get individual PRs
+ gha-low-risk:
+ update-types:
+ - 'minor'
+ - 'patch'
+
+ - package-ecosystem: 'npm'
+ directory: '/'
+ schedule:
+ interval: 'monthly'
+ open-pull-requests-limit: 10
+ commit-message:
+ prefix: 'chore'
+ ignore:
+ # Handled separately by its own workflow
+ - dependency-name: '@axe-core/*'
+ - dependency-name: 'axe-core'
+ # Prevent updates to ESM-only versions
+ - dependency-name: 'execa'
+ versions: ['>=6.0.0']
+ - dependency-name: 'node-fetch'
+ versions: ['>=3.0.0']
+ # Breaking change due to node version requirements
+ - dependency-name: 'commander'
+ versions: ['>=10.0.0']
+ groups:
+ # Any updates not caught by the group config will get individual PRs
+ npm-low-risk:
+ update-types:
+ - 'minor'
+ - 'patch'

.github/workflows/auto-patch-release.yml

@@ -5,6 +5,7 @@ jobs:
  create_patch_release:
  name: Create release
  runs-on: ubuntu-latest
+ timeout-minutes: 3
  steps:
  - name: Determine if we skip cancel checks
  id: skip-checks

.github/workflows/create-release-candidate.yml

@@ -0,0 +1,24 @@
+name: Create release candidate 
+
+on:
+ workflow_dispatch:
+ inputs:
+ version-locked:
+ type: boolean
+ description: Prevent this action from creating a minor or major release
+ default: true
+
+jobs:
+ create-release-candidate:
+ timeout-minutes: 2
+ runs-on: ubuntu-latest
+ steps:
+ - uses: dequelabs/axe-api-team-public/.github/actions/create-release-candidate-v1@main
+ with:
+ token: ${{ secrets.GITHUB_TOKEN }}
+ base: 'master'
+ head: 'develop'
+ release-script-path: './.github/scripts/prepare_release.sh'
+ version-locked: ${{ inputs.version-locked }}
+ env:
+ GH_TOKEN: ${{ secrets.GH_PROJECT_TOKEN }}

.github/workflows/create-release.yml

@@ -12,9 +12,10 @@ jobs:
  create_release:
  name: Create release
  runs-on: ubuntu-latest
+ timeout-minutes: 3
  steps:
  - name: Checkout repo
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
  with:
  token: ${{ secrets.GITHUB_TOKEN }}
  fetch-depth: 0
@@ -44,7 +45,7 @@ jobs:
  git checkout master
  git reset --hard "$commitHash"
  - name: Create pull request
- uses: peter-evans/create-pull-request@v3
+ uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38 # tag=v5
  with:
  token: ${{ secrets.GITHUB_TOKEN }}
  branch: release

.github/workflows/deploy.yml

@@ -4,15 +4,17 @@ on:
  push:
  branches:
  - develop
+ - release
  - master
 
 jobs:
  canary:
  runs-on: ubuntu-latest
+ timeout-minutes: 10
  if: github.ref_name == 'develop' && github.repository_owner == 'dequelabs'
  steps:
- - uses: actions/checkout@v3
- - uses: actions/setup-node@v3
+ - uses: actions/checkout@v4
+ - uses: actions/setup-node@v4
  with:
  node-version: 18
  cache: 'npm'
@@ -34,12 +36,39 @@ jobs:
  --force-publish \
  --yes
 
+ relase-candidate:
+ runs-on: ubuntu-latest
+ if: github.ref_name == 'release' && github.repository_owner == 'dequelabs'
+ steps:
+ - uses: actions/checkout@v4
+ - uses: actions/setup-node@v4
+ with:
+ node-version: 18
+ cache: 'npm'
+ - run: npm ci
+ # Ensure packages are built
+ - run: npm run build
+ # Make sure the working tree is clean
+ - run: git reset --hard HEAD
+ - run: npm config set "//registry.npmjs.org/:_authToken" ${{ secrets.NPM_TOKEN }}
+ - run: |
+ npx lerna publish prepatch \
+ --no-verify-access \
+ --no-git-tag-version \
+ --no-push \
+ --canary \
+ --dist-tag=rc \
+ --exact \
+ --preid=$(git rev-parse --short HEAD) \
+ --force-publish \
+ --yes
+
  production:
  runs-on: ubuntu-latest
  if: github.ref_name == 'master' && github.repository_owner == 'dequelabs'
  steps:
- - uses: actions/checkout@v3
- - uses: actions/setup-node@v3
+ - uses: actions/checkout@v4
+ - uses: actions/setup-node@v4
  with:
  node-version: 18
  cache: 'npm'
@@ -53,4 +82,10 @@ jobs:
  npx lerna publish from-package \
  --force-publish='*' \
  --yes
- - uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
+ - run: |
+ PKG_VERSION=$(jq -r .version < lerna.json)
+ gh release create $PKG_VERSION \
+ --title "Release $PKG_VERSION" \
+ --generate-notes \
+ --repo ${{ github.repository }}
+ --target master

.github/workflows/semantic-pr-footer.yml

@@ -0,0 +1,15 @@
+name: Semantic PR footer
+
+on:
+ pull_request:
+ types:
+ - opened
+ - reopened
+ - edited
+ - synchronize
+
+jobs:
+ semantic-pr-footer:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: dequelabs/axe-api-team-public/.github/actions/semantic-pr-footer-v1@main

.github/workflows/semantic-pr-title.yml

@@ -10,6 +10,7 @@ on:
 
 jobs:
  semantic-pr-title:
+ timeout-minutes: 1
  runs-on: ubuntu-latest
  steps:
  - uses: dequelabs/semantic-pr-title@v1

.github/workflows/sync-master-develop.yml

@@ -8,6 +8,7 @@ on:
 jobs:
  create_sync_pull_request:
  runs-on: ubuntu-latest
+ timeout-minutes: 2
  steps:
  - uses: dequelabs/action-sync-branches@v1
  with: