[Snyk] Upgrade: , govuk-frontend,

[alex742]

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@azure/identity
from 4.3.0 to 4.4.1 | 11 versions ahead of your current version | 2 months ago
on 2024-07-31
govuk-frontend
from 5.4.0 to 5.6.0 | 3 versions ahead of your current version | 22 days ago
on 2024-08-29
@ministryofjustice/frontend
from 2.1.3 to 2.2.0 | 1 version ahead of your current version | 2 months ago
on 2024-07-31

Release notes

Package name: govuk-frontend

• 5.6.0 - 2024-08-29
  

  To install this version with npm, run npm install [email protected]. You can also find more information about how to stay up to date in our documentation.

  New features

  Make it easier to navigate complex services with the Service navigation component

  We've added a new Service navigation component to help users to navigate services with multiple top-level sections. This replaces the navigation functions of the Header component, which will be deprecated in a future release of GOV.UK Frontend.

  This component includes some features we consider experimental. We intend to iterate these features in response to user feedback. These are:

  • moving the service name from the Header to the Service navigation
  • providing slots for injecting custom HTML into specified locations within the component

  We introduced this change in pull request #5206: Service navigation component.

• 5.5.0 - 2024-08-09
  

  This release includes an updated list of organisations and brand colours. We’ve also added a new feature to stop long words from ‘breaking out’ of components.

  To install this version with npm, run npm install [email protected]. You can also find more information about how to stay up to date in our documentation.

  New features

  We've updated the list of organisations and brand colours included in Frontend

  We've overhauled the list of organisations and organisation brand colours that are shipped with GOV.UK Frontend.

  The previous list was outdated and had not kept up with changes to the machinery of government. We’ve updated the list to:

  • add all current government departments and their brand colours
  • add variants of brand colours that meet a 4.5:1 contrast ratio against white, where required
  • provide warnings if defunct organisations are still being referenced in your Sass code

  To enable these changes, set the feature flag variable $govuk-new-organisation-colours to true before you import GOV.UK Frontend in your Sass files:

  // application.scss
  $govuk-new-organisation-colours: true;
  @ import "govuk-frontend/all";

  You can also silence warnings about defunct organisations by adding organisation-colours to the $govuk-suppressed-warnings setting.

  We introduced this change in pull request #3407: Update organisation colours.

  Stop long words breaking out of components with govuk-!-text-break-word

  We've added a new override class to help display long words with no obvious break points when the space is too narrow to display them on one line. An example of a long word might be an email address entered by a user.

  Wrapping the content with the govuk-!-text-break-word class forces words that are too long for the parent element to break onto a new line.

  A confirmation email will be sent to <span class="govuk-!-text-break-word">arthur_phillip_dent.42@peoplepersonalitydivision.siriuscyberneticscorporation.corp</span>.

  Sass users can also use the govuk-text-break-word mixin.

  We introduced this change in pull request #5159: Add break-word typography helper.

  Recommended changes

  Update the $websafe parameter on the govuk-organisation-colour function

  The govuk-organisation-colour Sass function's $websafe parameter has been renamed to $contrast-safe.

  This is to more accurately describe the functionality of the parameter.

  The old parameter name will stop working in the next major version of GOV.UK Frontend.

  We introduced this change in pull request #3407: Update organisation colours.

  Fixes

  We've made fixes to GOV.UK Frontend in the following pull requests:

  • #5046: Skip ‘empty’ tasks in the task list
  • #5066: Fix whitespace affecting text alignment in pagination block variant
  • #5158: Remove ↑ up and ↓ down arrow key bindings from tabs
  • #5191: Fix rendering of Back link's href and text for falsy values
• 5.4.1 - 2024-07-12
  

  To install this version with npm, run npm install [email protected]. You can also find more information about how to stay up to date in our documentation.

  Recommended changes

  Update Breadcrumbs to use nav and aria-label

  We've made changes to the Breadcrumbs component to improve how it appears to screen readers.

  We've changed the wrapping element to use the nav tag to expose it as a navigational landmark, and added an aria-label attribute to differentiate it as breadcrumb navigation.

  This change was introduced in pull request #4995: Update Breadcrumb component to improve screen reader accessibility.

  Fixes

  We've made fixes to GOV.UK Frontend in the following pull requests:

  • #5114: Fix divider width for small checkboxes – thanks to @ colinrotherham
  • #5043: Refactor the accordion JavaScript
  • #5044: Remove session storage checks from accordion JavaScript
  • #5060: Reintroduce additional bottom margin to Error Summary content
  • #5070: Fix alignment of content in conditional checkboxes and radio buttons
  • #5090: Remove redundant tag CSS from phase banner
• 5.4.0 - 2024-05-17
  

  To install this version with npm, run npm install [email protected]. You can also find more information about how to stay up to date in our documentation.

  This release includes new features to help you include only the components your service uses. Doing this can help reduce the size of the JavaScript and CSS files sent to users, improving their experience.

  New features

  Create individual components with createAll

  We've added a new createAll function that lets you initialise specific components in the same way that initAll does.

  The createAll function will:

  • find all elements in the page with the corresponding data-module attribute
  • instantiate a component object for each element
  • catch errors and log them in the console
  • return an array of all the successfully instantiated component objects.
  import { createAll, Button, Checkboxes } from 'govuk-frontend'

  createAll(Button)
  createAll(Checkboxes)

  You can also pass a config object and a scope within which to search for elements.

  You can find out more about how to use the createAll function in our documentation.

  This change was introduced in pull request #4975: Add createAll function to initialise individual components.

  Use tabular numbers easily with govuk-!-font-tabular-numbers

  We've added a new override class for tabular number styling: govuk-!-font-tabular-numbers.

  Using tabular numbers can make it easier for users to read numbers intended for comparison to one another, or for numbers that dynamically update.

  It was previously only possible to use tabular numbers by using the govuk-font-tabular-numbers Sass mixin.

  This change was introduced in pull request #4973: Add override class for tabular numbers.

  Deprecated features

  Importing layers using all files

  You'll see a warning when compiling your Sass if you import any of our layers using the all file. Importing using the all files is deprecated, and we’ll remove them in the next major release.

  In your import statements, use a trailing /index rather than /all to load GOV.UK Frontend's files.
  For example:

  • @ import "govuk/index"; instead of @ import "govuk/all";;
  • @ import "govuk/<PATH>/index"; instead of @ import "govuk/<PATH>/all";;

  You do not need /index at the end of each import path if you’re using Dart Sass, LibSass 3.6.0 or higher, or Ruby Sass 3.6.0 or higher.

  This change was introduced in pull request #4955: Rename all files to index for our Sass entry points.

  Fixes

  We've made fixes to GOV.UK Frontend in the following pull requests:

  • #4942: Remove duplicate errorMessage argument for the password input component - thanks to Tim South for contributing this change
  • #4961: Fix tree-shaking when importing govuk-frontend
  • #4963: Fix input value not being set if the value was '0' – thanks to @ dwp-dmitri-algazin for reporting this issue
  • #4971: Fix Error Summary component outputting list HTML when no errorList is provided
  • #442: Update content to streamline installation info
  • #438: Split up the 'Import CSS, assets and JavaScript' page

from govuk-frontend GitHub release notes

Package name: @ministryofjustice/frontend

• 2.2.0 - 2024-07-31
  

  2.2.0 (2024-07-31)

  You can find out how to stay up-to-date with new releases.

  New feature: use the date picker component to help users select dates

  The date picker component enables users to:

  • select a date from the calendar view
  • also enter a date using a text input
  • identify available dates
• 2.1.3 - 2024-05-07
  

  2.1.3 (2024-05-07)

  Bug Fixes

  • package.json & package-lock.json to reduce vulnerabilities (#592) (d815589)

from @ministryofjustice/frontend GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[mattyod]

closing as stale