fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@double-great/stylelint-a11y	3.0.4 -> 3.4.0			devDependencies	minor
@hpcc-js/wasm-graphviz (source)	1.10.0 -> 1.13.0			dependencies	minor
@parcel/transformer-elm	2.15.4 -> 2.16.0			devDependencies	minor
@parcel/transformer-sass	2.15.4 -> 2.16.0			devDependencies	minor
actions/cache	v4.2.3 -> v4.3.0			action	minor
actions/checkout	v4.2.2 -> v4.3.0			action	minor
axe-core (source)	4.10.3 -> 4.11.0			devDependencies	minor
docker/login-action	v3.4.0 -> v3.6.0			action	minor
docker/metadata-action	v5.7.0 -> v5.8.0			action	minor
github/codeql-action	v3.29.4 -> v3.30.8			action	minor
node (source)	22.17.1 -> 22.20.0				minor
parcel	2.15.4 -> 2.16.0			devDependencies	minor
start-server-and-test	2.0.12 -> 2.1.2			devDependencies	minor
stylelint (source)	16.23.0 -> 16.25.0			devDependencies	minor

---

Release Notes

double-great/stylelint-a11y (@​double-great/stylelint-a11y)

v3.4.0

Compare Source

Added

• Strict configuration (@double-great/stylelint-a11y/strict) that enables all accessibility rules
• CONTRIBUTING.md with comprehensive guide for adding new rules
• Severity levels documentation showing how to configure rules as errors or warnings
• Basic configuration examples in README
• Inline rule disabling documentation
• Badges for npm version and MIT license
• Links to test directories in Testing Infrastructure section
• Test coverage for strict configuration

Changed

• Enhanced README with better organization and more comprehensive documentation
• Updated Testing Infrastructure section with links instead of bold text

Fixed

• Corrected plugin to plugins in recommended.js configuration

v3.3.0

Compare Source

Added

• Advanced testing infrastructure with comprehensive CI/CD workflows
• System-level performance regression testing suite
• Cross-platform compatibility testing for Node.js environments
• Integration tests for real-world stylelint plugin functionality
• Enhanced rule configuration options with customizable parameters
• Meta objects for all rules with documentation URLs and fixable status
• Comprehensive rule documentation with examples and configuration options

Changed

• Enhanced stylelint standards compliance with proper meta objects across all rules
• Standardized rule message formatting for consistent error reporting
• Improved Jest configuration with proper Node.js module support
• Updated all rule implementations to follow modern stylelint plugin patterns
• Enhanced rule functionality with configurable options for better customization
• Improved error messages for better developer experience

Fixed

• Removed deprecated experimental VM modules flag from Jest scripts for Node.js compatibility
• Resolved CI performance test expectations for consistent build environments
• Cleaned up test infrastructure and removed redundant configuration files
• Fixed rule message clarity and consistency across all accessibility rules

v3.2.0

Compare Source

Added

• Comprehensive E2E testing infrastructure with real-world projects
• Integration testing suite for plugin functionality
• Performance benchmarking with regression detection
• Test helper utilities for simplified testing
• Support for SCSS/Sass project testing
• Large codebase performance testing
• CLI integration tests with full stylelint compatibility
• Development documentation in README
• Pull request template for consistent PR descriptions

Changed

• Standardized import patterns across all rules for better consistency
• Fixed rule order in exports object to maintain alphabetical sorting
• Improved Jest configuration for multiple test types
• Enhanced ESLint configuration for E2E tests
• Updated actions/checkout from v4 to v5 (#​77)

Fixed

• Fixed media-prefers-reduced-motion rule incorrectly adding duplicate media queries when prefers-reduced-motion is already nested inside another media query (#​66)

Developer Experience

• Added npm scripts for granular test execution (test:unit, test:integration, test:e2e, test:all)
• Simplified test utilities for faster development
• Cross-platform compatibility testing
• Performance metrics and scaling tests
• Individual rule benchmarks included

v3.1.0

Compare Source

Added

• Added endIndex support for better error reporting (#​74)
• Added Stylelint v16 minimum version requirement documentation
• Added explicit lint step to GitHub Actions test workflow
• Added push trigger for main branch to test workflow
• Added scheduled runs for dependency management workflow (twice monthly)
• Added concurrency controls and timeout to test workflow

Changed

• Updated to ESLint v9 (#​75)
• Updated all dependencies to latest versions (#​73)
• Fixed test column expectations for Stylelint v16 position reporting changes
• Fixed deprecation warnings in report() function
• Changed test workflow schedule from Thursday to Sunday at midnight
• Improved dependabot grouping configuration
• Renamed test job for better clarity

Fixed

• Prevented .coverage folder from being included in npm package (#​72)
• Fixed misleading step name in dependency management workflow

hpcc-systems/hpcc-js-wasm (@​hpcc-js/wasm-graphviz)

v1.13.0

Compare Source

Features

• Bump versions (f85a87c)

1.12.9 (2022-02-06)

Bug Fixes

• graphviz: Add additional exports for Graphviz params (9d96281), closes #​92

1.12.8 (2022-01-17)

1.12.7 (2021-12-09)

1.12.6 (2021-10-23)

1.12.5 (2021-10-17)

1.12.4 (2021-09-25)

1.12.3 (2021-09-19)

Bug Fixes

• Global install missing yargs (a767e79)

1.12.2 (2021-09-19)

Bug Fixes

• Bundle yargs into cli.js (92dc2ba)

1.12.1 (2021-09-19)

Bug Fixes

• Add cli to "files" section (189ba5a)

v1.12.1

Compare Source

v1.12.0

Compare Source

Features

• Add Command Line Interface (caa0b11)

1.11.1 (2021-09-18)

Bug Fixes

• graphviz: Add missing options (and defaults) (f14588b)

v1.11.0

Compare Source

Features

• Bump versions (e303d91)

1.10.3 (2021-08-11)

Bug Fixes

• Revert to es5 code generation (e29f5f4)

1.10.2 (2021-08-11)

Bug Fixes

• Rollback merging of NodeJS and Web builds (7c2c294)

1.10.1 (2021-08-11)

parcel-bundler/parcel (@​parcel/transformer-elm)

v2.16.0

Compare Source

Added

• JavaScript
  • Code split re-exports when scope hoisting is disabled – Details

Fixed

• JavaScript
  • Scope macro asset unique keys to the parent asset – Details

actions/cache (actions/cache)

v4.3.0

Compare Source

What's Changed

• Add note on runner versions by @​GhadimiR in #​1642
• Prepare v4.3.0 release by @​Link- in #​1655

New Contributors

• @​GhadimiR made their first contribution in #​1642

Full Changelog: actions/cache@v4...v4.3.0

v4.2.4

Compare Source

What's Changed

• Update README.md by @​nebuk89 in #​1620
• Upgrade @actions/cache to 4.0.5 and move @protobuf-ts/plugin to dev depdencies by @​Link- in #​1634
• Prepare release 4.2.4 by @​Link- in #​1636

New Contributors

• @​nebuk89 made their first contribution in #​1620

Full Changelog: actions/cache@v4...v4.2.4

actions/checkout (actions/checkout)

v4.3.0

Compare Source

What's Changed

• docs: update README.md by @​motss in https://github.com/actions/checkout/pull/1971
• Add internal repos for checking out multiple repositories by @​mouismail in https://github.com/actions/checkout/pull/1977
• Documentation update - add recommended permissions to Readme by @​benwells in https://github.com/actions/checkout/pull/2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in https://github.com/actions/checkout/pull/2044
• Update README.md by @​nebuk89 in https://github.com/actions/checkout/pull/2194
• Update CODEOWNERS for actions by @​TingluoHuang in https://github.com/actions/checkout/pull/2224
• Update package dependencies by @​salmanmkc in https://github.com/actions/checkout/pull/2236
• Prepare release v4.3.0 by @​salmanmkc in https://github.com/actions/checkout/pull/2237

New Contributors

• @​motss made their first contribution in https://github.com/actions/checkout/pull/1971
• @​mouismail made their first contribution in https://github.com/actions/checkout/pull/1977
• @​benwells made their first contribution in https://github.com/actions/checkout/pull/2043
• @​nebuk89 made their first contribution in https://github.com/actions/checkout/pull/2194
• @​salmanmkc made their first contribution in https://github.com/actions/checkout/pull/2236

Full Changelog: actions/checkout@v4...v4.3.0

dequelabs/axe-core (axe-core)

v4.11.0

Compare Source

Features

• add RGAA tags to rules (#​4862) (53a925a)
• aria-prohibited-attr: add support for fallback roles (#​4325) (62a19a9)
• axe.d.ts: add nodeSerializer typings (#​4551) (a2f3a48), closes #​4093
• DqElement: deprecate fromFrame function (#​4881) (374c376), closes #​4093
• DqElement: Truncate large html strings when the element has a large outerHTML string (#​4796) (404a4fb), closes #​4544
• get-xpath: return proper relative selector for id (#​4846) (1035f9e), closes #​4845
• i18n: Add Portugal Portuguese translation (#​4725) (5b6a65a)
• incomplete with node on which an error occurred (#​4863) (32ed8da)
• locale: Added ru locale (#​4565) (067b01d)
• tap: some best practice rules map to RGAA (#​4895) (bc33f4c)
• td-headers-attr: report headers attribute referencing other elements as unsupported (#​4589) (ec7c6c8), closes #​3987

Bug Fixes

• aria-allowed-role: add form to allowed roles of form element (#​4588) (8aa47ac), closes /github.com/dequelabs/axe-core/blob/develop/lib/standards/html-elms.js#L264
• aria-allowed-role: Add math to allowed roles for img element (#​4658) (95b6c18), closes #​4657
• autocomplete-valid : Ignore readonly autocomplete field (#​4721) (491f4ec), closes #​4708
• autocomplete-valid: treat values "xon" and "xoff" as non-WCAG-violations (#​4878) (52bc611), closes #​4877
• axe.d.ts: add typings for preload options object (#​4543) (cfd2974)
• button-name,input-button-name,input-img-alt: allow label to give accessible name (#​4607) (a9710d7), closes #​4472 #​3696 #​3696
• captions: fix grammar in captions check incomplete message (#​4661) (11de515)
• color-contrast: do not run on elements with font-size: 0 (#​4822) (d77c885), closes #​4820
• consistently parse tabindex, following HTML 5 spec (#​4637) (645a850), closes #​4632
• core: measure perf for async checks (#​4609) (7e9bacf)
• fix grammar when using "alternative text" in a sentence (#​4811) (237a586), closes #​4394
• get-ancestry: add nth-child selector for multiple siblings of shadow root (#​4606) (1cdd6c3), closes #​4563
• get-ancestry: don't error when there is no parent (#​4617) (a005703)
• locale: fix typos in japanese (ja) locale (#​4856) (3462cc5)
• locale: fixed typos in german (DE) locale (#​4631) (b7736de)
• locale: proofread and updated de.json (#​4643) (8060ada)
• meta-viewport: lower impact to moderate (#​4887) (2f32aa5), closes #​4714
• no-autoplay-audio: don't timeout for preload=none media elements (#​4684) (cdc871e)
• performanceTimer: throwing in axe catch clause (#​4852) (a4ade04), closes /github.com/dequelabs/axe-core/blob/e7dae4ec48cbfef74de9f833fdcfb178c1002985/lib/core/base/rule.js#L297-L300
• performanceTimer: work in frames (#​4834) (d7dfebc)
• rules: Change "alternate text" to "alternative text" (#​4582) (b03ada3)
• target-size: do not treat focusable tabpanels as targets (#​4702) (60d11f2), closes #​4421 #​4701
• type: correct RuleError type (#​4893) (d1aa8e2)
• types: correct raw types (#​4903) (3eade11)

4.10.3 (2025-03-04)

Bug Fixes

• aria-allowed-role: Add math to allowed roles for img element (#​4658) (f6dddd9), closes #​4657
• captions: fix grammar in captions check incomplete message (#​4661) (3ef7058)
• consistently parse tabindex, following HTML5 spec (#​4637) (3b0a361), closes #​4632
• core: measure perf for async checks (#​4609) (e7dc26e)
• locale: fixed typos in german (DE) locale (#​4631) (0740980)
• locale: proofread and updated de.json (#​4643) (910cdb2)
• no-autoplay-audio: don't timeout for preload=none media elements (#​4684) (b7f1ad1)
• target-size: do not treat focusable tabpanels as targets (#​4702) (67d4e4f), closes #​4421 #​4701

4.10.2 (2024-10-21)

Bug Fixes

• get-ancestry: don't error when there is no parent (#​4617) (6c07102)

4.10.1 (2024-10-16)

Bug Fixes

• aria-allowed-role: add form to allowed roles of form element (#​4588) (d462d67), closes /github.com/dequelabs/axe-core/blob/develop/lib/standards/html-elms.js#L264
• axe.d.ts: add typings for preload options object (#​4543) (72e269f)
• button-name,input-button-name,input-img-alt: allow label to give accessible name (#​4607) (364eb72), closes #​4472 #​3696 #​3696
• get-ancestry: add nth-child selector for multiple siblings of shadow root (#​4606) (bdd94a2), closes #​4563
• rules: Change "alternate text" to "alternative text" (#​4582) (31e0f61)

docker/login-action (docker/login-action)

v3.6.0

Compare Source

• Add registry-auth input for raw authentication to registries by @​crazy-max in #​887
• Bump @​aws-sdk/client-ecr to 3.890.0 in #​882 #​890
• Bump @​aws-sdk/client-ecr-public to 3.890.0 in #​882 #​890
• Bump @​docker/actions-toolkit from 0.62.1 to 0.63.0 in #​883
• Bump brace-expansion from 1.1.11 to 1.1.12 in #​880
• Bump undici from 5.28.4 to 5.29.0 in #​879
• Bump tmp from 0.2.3 to 0.2.4 in #​881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

Compare Source

• Support dual-stack endpoints for AWS ECR by @​Spacefish @​crazy-max in #​874 #​876
• Bump @​aws-sdk/client-ecr to 3.859.0 in #​860 #​878
• Bump @​aws-sdk/client-ecr-public to 3.859.0 in #​860 #​878
• Bump @​docker/actions-toolkit from 0.57.0 to 0.62.1 in #​870
• Bump form-data from 2.5.1 to 2.5.5 in #​875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

docker/metadata-action (docker/metadata-action)

v5.8.0

Compare Source

• New is_not_default_branch global expression by @​crazy-max in #​535
• Allow to match part of the git tag or value for semver/pep440 types by @​crazy-max in #​536 #​537
• Bump @​actions/github from 6.0.0 to 6.0.1 in #​523
• Bump @​docker/actions-toolkit from 0.56.0 to 0.62.1 in #​526
• Bump form-data from 2.5.1 to 2.5.5 in #​533
• Bump moment-timezone from 0.5.47 to 0.6.0 in #​525
• Bump semver from 7.7.1 to 7.7.2 in #​524

Full Changelog: docker/metadata-action@v5.7.0...v5.8.0

github/codeql-action (github/codeql-action)

v3.30.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.8 - 10 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.7 - 06 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.6 - 02 Oct 2025

• Update default CodeQL bundle version to 2.23.2. #​3168

See the full CHANGELOG.md for more information.

v3.30.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.5 - 26 Sep 2025

• We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #​3160

See the full CHANGELOG.md for more information.

v3.30.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.4 - 25 Sep 2025

• We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #​3099 and #​3100
• We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #​3107
• You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #​3130
• Update default CodeQL bundle version to 2.23.1. #​3118

See the full CHANGELOG.md for more information.

v3.30.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.3 - 10 Sep 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.2 - 09 Sep 2025

• Fixed a bug which could cause language autodetection to fail. #​3084
• Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #​3064

See the full CHANGELOG.md for more information.

v3.30.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.1 - 05 Sep 2025

• Update default CodeQL bundle version to 2.23.0. #​3077

See the full CHANGELOG.md for more information.

v3.30.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.0 - 01 Sep 2025

• Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #​3054

See the full CHANGELOG.md for more information.

v3.29.11

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.11 - 21 Aug 2025

• Update default CodeQL bundle version to 2.22.4. #​3044

See the full CHANGELOG.md for more information.

v3.29.10

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.10 - 18 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.29.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.9 - 12 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.29.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.8 - 08 Aug 2025

• Fix an issue where the Action would autodetect unsupported languages such as HTML. #​3015

See the full CHANGELOG.md for more information.

v3.29.7

Compare Source

This is a re-release of v3.29.5 to mitigate an issue that was discovered with v3.29.6.

v3.29.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.6 - 07 Aug 2025

• The cleanup-level input to the analyze Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. #​2999
• Update default CodeQL bundle version to 2.22.3. #​3000

See the full CHANGELOG.md for more information.

v3.29.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.5 - 29 Jul 2025

• Update default CodeQL bundle version to 2.22.2. #​2986

See the full CHANGELOG.md for more information.

nodejs/node (node)

v22.20.0

Compare Source

v22.19.0

Compare Source

v22.18.0

Compare Source

bahmutov/start-server-and-test (start-server-and-test)

v2.1.2

Compare Source

Bug Fixes

• deps: update dependency wait-on to v8.0.5 (#​407) (e09a718)

v2.1.1

Compare Source

Bug Fixes

• deps: update dependency debug to v4.4.3 (#​406) (d0db7f6)

v2.1.0

Compare Source

Features

• support axios proxy (#​402) (b399fec)

v2.0.13

Compare Source

Bug Fixes

• deps: update dependency wait-on to v8.0.4 (#​405) (6385e1d)

stylelint/stylelint (stylelint)

v16.25.0

Compare Source

It adds 3 new features, including experimental support for bulk suppressions. It's also our first immutable release, with the package published to npm using trusted publishing and our dependencies updated on a cool down for improved supply chain security.

• Added: support for bulk suppressions ([#​8564](https://redirect.github.com/stylelint/sty

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.