chore(deps): update dependency axe-core to v4.12.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
axe-core (source)	devDependencies	minor	4.10.3 → 4.12.1

---

Release Notes

dequelabs/axe-core (axe-core)

v4.12.1

Compare Source

v4.12.0

Compare Source

Features

• add gather-internals.js external script (#​5099) (c61d58b), closes #​5080
• aria-allowed/prohibited-attr, aria-required-parent/children: partially support element internals role (#​5080) (417b48a), closes #​5039 #​4259
• axe.externalAPIs: add public api for setting elementInternal data (#​5105) (63bab8f)
• core: expose normalizeRunOptions (#​4998) (b8e6a59)
• expose axe.resetLocale() to restore the default locale (#​5108) (c2b5292), closes #​5107
• getRules: include rule enabled state in returned objects (#​5118) (75bf772), closes #​5116
• list,listitem: support element internals role (#​5119) (7d9d696)
• new-rule: check that aria-tab have an accessible name (#​5001) (0d4e4e7), closes #​4842
• rules: deprecate landmark-complementary-is-top-level rules (#​4992) (9e09139), closes #​4950
• utils: add getElementInternals function (#​5077) (1c15f82)

Bug Fixes

• aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#​4974) (c6245e7)
• aria-conditional-attr: add support for radio (#​5100) (8223c98)
• aria-valid-attr-value: handle multiple aria-errormessage IDs (#​4973) (0489e30)
• aria: prevent getOwnedVirtual from returning duplicate nodes (#​4987) (48ca955), closes #​4840
• commons/text: exclude natively hidden elements from aria-labelledby accessible name (#​5076) (ea7202c), closes #​4704
• DqElement: avoid calling constructors with cloneNode (#​5013) (0281fa1)
• existing-rule: aria-busy now shows an error message for a use with unallowed children (#​5017) (2067b87)
• helpUrl: ensure axe.configure always updates the help URLs (#​5114) (c4f60ff)
• label-content-name-mismatch: match visible text with aria-label and exclude invisible text (#​5096) (3a012a1)
• locale: ensure all subtags are correctly set (#​5112) (13005ed)
• scrollable-region-focusable: clarify the issue is in safari (#​4995) (4ec5211), closes WebKit#190870 WebKit#277290
• scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#​4993) (838707a)
• target-size: determine offset using clientRects if target is display:inline (#​5012) (a4b8091)
• target-size: ignore position: fixed elements that are offscreen when page is scrolled (#​5066) (1229a6e), closes #​5065
• target-size: ignore widgets that are inline with other inline elements (#​5000) (a8dd81b)
• utils/getAncestry: escape node name (#​5079) (d1fabaa), closes #​5078
• utils: Add null check to parseCrossOriginStylesheet, closes #​5074 (#​5075) (f12ef32)
• utils: update isShadowRoot to use spec-compliant custom element regex (#​5059) (edc6ce2), closes #​5030

4.11.4 (2026-04-23)

Bug Fixes

• commons/text: exclude natively hidden elements from aria-labelledby accessible name (#​5076) (df34adf), closes #​4704
• utils/getAncestry: escape node name (#​5079) (6e68d0a), closes #​5078

4.11.3 (2026-04-13)

Bug Fixes

• aria-allowed-attr: restrict br and wbr elements to aria-hidden only (#​4974) (1d80163)
• target-size: ignore position: fixed elements that are offscreen when page is scrolled (#​5066) (5906273), closes #​5065

4.11.2 (2026-03-30)

Bug Fixes

• aria-valid-attr-value: handle multiple aria-errormessage IDs (#​4973) (9322148)
• aria: prevent getOwnedVirtual from returning duplicate nodes (#​4987) (99d1e77), closes #​4840
• DqElement: avoid calling constructors with cloneNode (#​5013) (88bc57f)
• existing-rule: aria-busy now shows an error message for a use with unallowed children (#​5017) (dded75a)
• scrollable-region-focusable: clarify the issue is in safari (#​4995) (2567afd), closes WebKit#190870 WebKit#277290
• scrollable-region-focusable: do not fail scroll areas when all content is visible without scrolling (#​4993) (240f8b5)
• target-size: determine offset using clientRects if target is display:inline (#​5012) (69d81c1)
• target-size: ignore widgets that are inline with other inline elements (#​5000) (cf8a3c0)

4.11.1 (2026-01-06)

Bug Fixes

• allow shadow roots in axe.run contexts (#​4952) (d4aee16), closes #​4941
• color contrast fails for oklch and oklab with none (#​4959) (8f249fd)
• color-contrast: do not incomplete on textarea (#​4968) (d271788), closes #​4947
• commons/color: Match browser behavior for out-of-gamut oklch colors (#​4908) (5036be8)
• don't runs rules that select html on nested html elements (#​4969) (1e9a5c3)
• replaced luminance threshold constant 0.03928 with 0.04045 (#​4934) (316967d), closes #​4933
• rgaa: adjust mapping of aria-hidden-* and valid-lang (#​4935) (77571f2)
• valid-lang: update valid-langs for newer language codes (#​4966) (c3f5446), closes #​4963

v4.11.4

Compare Source

v4.11.3

Compare Source

v4.11.2

Compare Source

v4.11.1

Compare Source

v4.11.0

Compare Source

Features

• add RGAA tags to rules (#​4862) (53a925a)
• aria-prohibited-attr: add support for fallback roles (#​4325) (62a19a9)
• axe.d.ts: add nodeSerializer typings (#​4551) (a2f3a48), closes #​4093
• DqElement: deprecate fromFrame function (#​4881) (374c376), closes #​4093
• DqElement: Truncate large html strings when the element has a large outerHTML string (#​4796) (404a4fb), closes #​4544
• get-xpath: return proper relative selector for id (#​4846) (1035f9e), closes #​4845
• i18n: Add Portugal Portuguese translation (#​4725) (5b6a65a)
• incomplete with node on which an error occurred (#​4863) (32ed8da)
• locale: Added ru locale (#​4565) (067b01d)
• tap: some best practice rules map to RGAA (#​4895) (bc33f4c)
• td-headers-attr: report headers attribute referencing other elements as unsupported (#​4589) (ec7c6c8), closes #​3987

Bug Fixes

• aria-allowed-role: add form to allowed roles of form element (#​4588) (8aa47ac), closes /github.com/dequelabs/axe-core/blob/develop/lib/standards/html-elms.js#L264
• aria-allowed-role: Add math to allowed roles for img element (#​4658) (95b6c18), closes #​4657
• autocomplete-valid : Ignore readonly autocomplete field (#​4721) (491f4ec), closes #​4708
• autocomplete-valid: treat values "xon" and "xoff" as non-WCAG-violations (#​4878) (52bc611), closes #​4877
• axe.d.ts: add typings for preload options object (#​4543) (cfd2974)
• button-name,input-button-name,input-img-alt: allow label to give accessible name (#​4607) (a9710d7), closes #​4472 #​3696 #​3696
• captions: fix grammar in captions check incomplete message (#​4661) (11de515)
• color-contrast: do not run on elements with font-size: 0 (#​4822) (d77c885), closes #​4820
• consistently parse tabindex, following HTML 5 spec (#​4637) (645a850), closes #​4632
• core: measure perf for async checks (#​4609) (7e9bacf)
• fix grammar when using "alternative text" in a sentence (#​4811) (237a586), closes #​4394
• get-ancestry: add nth-child selector for multiple siblings of shadow root (#​4606) (1cdd6c3), closes #​4563
• get-ancestry: don't error when there is no parent (#​4617) (a005703)
• locale: fix typos in japanese (ja) locale (#​4856) (3462cc5)
• locale: fixed typos in german (DE) locale (#​4631) (b7736de)
• locale: proofread and updated de.json (#​4643) (8060ada)
• meta-viewport: lower impact to moderate (#​4887) (2f32aa5), closes #​4714
• no-autoplay-audio: don't timeout for preload=none media elements (#​4684) (cdc871e)
• performanceTimer: throwing in axe catch clause (#​4852) (a4ade04), closes /github.com/dequelabs/axe-core/blob/e7dae4ec48cbfef74de9f833fdcfb178c1002985/lib/core/base/rule.js#L297-L300
• performanceTimer: work in frames (#​4834) (d7dfebc)
• rules: Change "alternate text" to "alternative text" (#​4582) (b03ada3)
• target-size: do not treat focusable tabpanels as targets (#​4702) (60d11f2), closes #​4421 #​4701
• type: correct RuleError type (#​4893) (d1aa8e2)
• types: correct raw types (#​4903) (3eade11)

4.10.3 (2025-03-04)

Bug Fixes

• aria-allowed-role: Add math to allowed roles for img element (#​4658) (f6dddd9), closes #​4657
• captions: fix grammar in captions check incomplete message (#​4661) (3ef7058)
• consistently parse tabindex, following HTML5 spec (#​4637) (3b0a361), closes #​4632
• core: measure perf for async checks (#​4609) (e7dc26e)
• locale: fixed typos in german (DE) locale (#​4631) (0740980)
• locale: proofread and updated de.json (#​4643) (910cdb2)
• no-autoplay-audio: don't timeout for preload=none media elements (#​4684) (b7f1ad1)
• target-size: do not treat focusable tabpanels as targets (#​4702) (67d4e4f), closes #​4421 #​4701

4.10.2 (2024-10-21)

Bug Fixes

• get-ancestry: don't error when there is no parent (#​4617) (6c07102)

4.10.1 (2024-10-16)

Bug Fixes

• aria-allowed-role: add form to allowed roles of form element (#​4588) (d462d67), closes /github.com/dequelabs/axe-core/blob/develop/lib/standards/html-elms.js#L264
• axe.d.ts: add typings for preload options object (#​4543) (72e269f)
• button-name,input-button-name,input-img-alt: allow label to give accessible name (#​4607) (364eb72), closes #​4472 #​3696 #​3696
• get-ancestry: add nth-child selector for multiple siblings of shadow root (#​4606) (bdd94a2), closes #​4563
• rules: Change "alternate text" to "alternative text" (#​4582) (31e0f61)

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.