[Snyk] Upgrade govuk-frontend from 3.0.0 to 3.5.0 #400

snyk-bot · 2020-02-25T02:22:22Z

Snyk has created this PR to upgrade govuk-frontend from 3.0.0 to 3.5.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 5 versions ahead of your current version.
The recommended version was released a month ago, on 2020-01-21.

Release notes

Package name: govuk-frontend

3.5.0 - 2020-01-21
New features

Add classes to the character count component's count message

If you're using Nunjucks, you can now add classes to the character count component's count message using the countMessage.classes option.
- Pull request #1650: Make Character Count use hint component for message and allow custom classes to be added.
Fixes
3.4.0 - 2019-11-19
New features

Add classes to the page wrapper

If you're using Nunjucks, you can now add classes to the page wrapper using the containerClasses variable.

Pull request #1626: Allow creating custom width containers and using them with template.

Set a custom width for wrappers

If you're using Sass, you can now use the govuk-width-container mixin to create a custom wrapper class with a specific width. You can then add that class to the following wrappers to override the width of the govuk-width-container class:
To create your custom wrapper class, include the govuk-width-container mixin. Pass in the width in pixels.

For example:
```
.app-width-container--wide {
  @include govuk-width-container(1200px);
}
```
If you’re using Nunjucks, you should then add your class using either the:
- containerClasses variable in the page template
- containerClasses option in the header or footer
Use the $govuk-page-width Sass variable instead if all your pages are the same width.
- Pull request #1626: Allow creating custom width containers and using them with template.
Add attributes to the <body> element of a page

You can now add attributes to the <body> element of a page, by using the bodyAttributes variable in the page template.
- Pull request #1623: Allow attributes to be set on template .
Fixes
3.3.0 - 2019-10-07
This release contains some smaller features and bug fixes that include accessibility improvements.

New features

Allow lang to be set on <title> and <main> of template

You can now set the lang attribute in the title and main of page template.

This will help with scenarios where some of the elements, such as navigation and footer, are in English whereas the title and page content are in a different language.
- Pull request #1576: Allow lang to be set on title and main of template.
Add new override class to hide elements

You can now use the .govuk-!-display-none override class to hide elements.
- Pull request #1586: Add display none override class.
Visual updates to the warning text component

Align ‘Warning text’ icon with first line of the content fixing #1352 Some changes were made to the size and spacing of the icon to help with positioning.
- Pull request #1578: Change position and spacing relationship of warning text icon
Fixes
Closes #1600
3.2.0 - 2019-09-11
This release is another smaller release with some new features and fixes 🐛 🔨

If you're using GOV.UK Frontend with GOV.UK Template, the button component is now readable when it has an active focus state.

Thanks to Emma Lewis for helping with this release.

New features

Add classes to the form group wrapper of the character count component

You can now add classes to the form group wrapper of the character count component.
```
govukCharacterCount({
  formGroup: {
    classes: 'app-character-count--custom-modifier'
  }
})
```
- Pull request #1553: Include formGroup on character count and pass through to textarea to allow class to be added to character count form group. Thanks to Emma Lewis.
Fixes
3.1.0 - 2019-09-02
This release contains a few improvements and fixes that include accessibility improvements to the details component.

Thanks to @htmlandbacon and @andrew-mcgregor for their help with this release.

Changelog

New features

Add attributes to the fieldset on the date input component

You can now pass attributes to add to the fieldset on the date input component.

Pull request #1541: Allow date input fieldset attributes to be set. Thanks to andrew-mcgregor for raising this.

Add ARIA role to the fieldset component

You can now pass an ARIA role to the fieldset component.

Pull request #1541: Allow date input fieldset attributes to be set.

Add inputmode to the input component

You can now pass inputmode to the input component.
```
govukInput({
  inputmode: 'email'
})
```
- Pull request #1527: Add inputmode option to the input component
Fixes

3.0.0 - 2019-07-29

In this release, we’ve made some important changes to improve the accessibility of pages built with GOV.UK Frontend. This includes making sure that the styles, components and patterns in GOV.UK Frontend meet level AA of WCAG 2.1.

We recommend you update GOV.UK Frontend with npm.

If you’re updating compiled files, you only need to:

update and add data-module attributes
update CSS class names

Contact the GOV.UK Design System team if you need help updating or installing GOV.UK Frontend.

Thanks to @colinrotherham, edwardhorsford, @frankieroberto and @Nooshu for their help with this release.

Breaking changes

You must make the following changes when you migrate to this release, or your service may break.

Update file paths, attributes and class names

To make sure GOV.UK Frontend's files do not conflict with your code, we've moved our package files into a directory called govuk.

If you’re using Sass

Add govuk/ after govuk-frontend/ to @import paths in your Sass file.

For example:

@import "node_modules/govuk-frontend/govuk/all";

If you’ve added node_modules/govuk-frontend as a Sass include path, add govuk/ to your @import paths:

@import "govuk/all";

If you’re using Javascript

You must do the following.

Update file paths.
Update and add data-module attributes.
Update CSS class names.

Update file paths

You must add govuk/ to your import paths.

If you're importing node_modules/govuk-frontend/all.js, change this import path to node_modules/govuk-frontend/govuk/all.js.

If you’re importing a specific path, add govuk/ after govuk-frontend/. For example, if you're importing the button component:

import Button from 'govuk-frontend/govuk/components/button/button'

Update and add data-module attributes

You do not need to do anything if you're using Nunjucks macros and the initAll function.

If you are not using Nunjucks macros, add a govuk- prefix to data-module attribute values. For example:

<div class="govuk-accordion" data-module="govuk-accordion">
...
</div>

The button and details components now also use the data-module attribute for initialisation. If you are not using Nunjucks macros, add:

data-module="govuk-button" to each <button> HTML tag
data-module="govuk-details" to each <details> HTML tag

If you're using your own JavaScript code to initialise components, add a govuk- prefix to any selectors that find components using the data-module attribute.

Pull request #1443: Ensure GOV.UK Frontend component selectors cannot conflict when initialised

Update CSS class names

You do not need to do anything if you're using Nunjucks.

If you're using HTML or custom JavaScript, change:

js-character-count to govuk-js-character-count
js-header-toggle in the GOV.UK Frontend header component to govuk-js-header-toggle

Pull request #1444: Renames js- css prefix to govuk-js-

If you’re using Nunjucks

Change the list of paths in nunjucks.configure so that the only GOV.UK Frontend path is node_modules/govuk-frontend/:

nunjucks.configure([
  "node_modules/govuk-frontend/"
])

If you've extended the page template, add govuk/ to the template path:

{% extends "govuk/template.njk" %}

Change the import paths in your components so they include govuk/components/. For example:

{% from "govuk/components/breadcrumbs/macro.njk" import govukBreadcrumbs %}

Update asset paths

In the assets path, add govuk/ after govuk-frontend/:

/node_modules/govuk-frontend/govuk/assets

If your code uses Express.js, you must also use the following code in your configuration file:

app.use('/assets', express.static(path.join(__dirname, '/node_modules/govuk-frontend/govuk/assets')))

Pull requests:

Migrate to the new accessible focus states

The focus state of components now meets the new WCAG 2.1 level AA requirements.

You must update your component’s focus state to make your design consistent with our new focus styles.

If you've extended or created components, you can no longer use the govuk-focusable or govuk-focusable-fill Sass mixins.

If you're using govuk-focusable, you must remove it. There’s no direct replacement, so you must use our Sass variables to make your components consistent with GOV.UK Frontend.

If you're using govuk-focusable-fill, include the govuk-focused-text mixin inside your component's :focus selector. For example:

.app-component:focus {
  @include govuk-focused-text;
}

Pull requests:

Update colours

You can now use the following new colour variables that we've added to the colour palette:

dark-blue
dark-grey
mid-grey
light-grey

5 Sass colour variables no longer exist. Replace the following colour variables if you're using Sass:

Colour variable removed	Suggested replacement
bright-red	red
grey-1	dark-grey
grey-2	mid-grey
grey-3	light-grey
grey-4	light-grey

You should check the contrast ratio of your colours.

If you're not using Sass, change the values of the following colours:

Colour name	Old value	Replace with
purple	#2e358b	#4c2c92
red	#b10e1e	#d4351c
yellow	#ffbf47	#ffdd00
green	#006435	#00703c
grey-2	#bfc1c3	#b1b4b6
grey-3	#dee0e2	#f3f2f1
grey-4	#f8f8f8	#f3f2f1
light-blue	#2b8cc4	#5694ca
blue	#005ea5	#1d70b8
bright-red	#df3034	#d4351c

We've also changed the background of the following components:

buttons - green instead of a custom green
confirmation panels - green instead of turquoise
links in their hover state - dark-blue instead of light-blue

If you're using legacy projects like GOV.UK Elements, you can keep your current colours by turning on compatibility mode.

Read our blog post about why we changed the colour palette.

Pull request #1288: Update colour palette.

Check the new version of the font

The size and baseline of the Design System's font are now more consistent with other fonts. Text now aligns vertically in text boxes without you needing to adjust it.

If you've extended or created components, you should check that your text is still vertically aligned correctly.

If you're using GOV.UK Frontend and GOV.UK Template, you can turn on compatibility mode to keep using the font from GOV.UK Template.

Pull requests:

Update links from error summary components to radios and checkboxes

If you've linked from an error summary component to the first input in a radios or checkboxes component, the link will no longer work.

This is because the id of the first input no longer has the suffix -1.

If there are links back to radios or checkboxes components in your error summary component, remove -1 from the end of the href attribute.

Pull request #1426: Make radios and checkboxes components easier to link to from error summary

Update the markup for tabs

You do not need to do anything if you're using Nunjucks macros.

If you are not using Nunjucks macros, remove the govuk-tabs__tab--selected class from the first tab's link, then add the govuk-tabs__list-item--selected class to that link's parent list item.

For example:

<li class="govuk-tabs__list-item govuk-tabs__list-item--selected">
  <a class="govuk-tabs__tab" href="#tab1">
    Tab 1
  </a>
</li>

Pull request #1496: Update the focus state for tabs

Update start button icon

Start buttons have a new icon. Your start buttons will lose their current icons unless you replace the old icon with the new one.

If you're using Nunjucks:

set the isStartButton option to true
remove the .govuk-button--start class

For example:

govukButton({
  text: "Start now",
  href: "#",
  isStartButton: true
})

If you're using HTML, add the SVG code from the start button example in the Design System.

Pull request #1341: Add new start button icon

Adjust text alignment in tables

Text now aligns to the top of table cells. If you've used a different alignment in a table, you should use your own CSS styles to keep the alignment the same.

For example, to align text in the centre:

.app-table--vertical-align-middle .govuk-table__header,
.app-table--vertical-align-middle .govuk-table__cell {
  vertical-align: middle;
  ...
}

Pull request #1345: Set 'vertical-align:top' positioning on table headers and cells

Replace Sass mixins in grids

If you're using the @govuk-grid-column Sass mixin to create custom grid classes, you must remove the $class parameter.

If you're passing a class name, put the mixin inside your selector. For example:

.your-class-name {
  @include govuk-grid-column(...)
}

You can no longer use the govuk-grid-row mixin. You can replace it with the .govuk-grid-row class in your HTML.

You must also replace calls to the grid-width mixin with calls to the govuk-grid-width mixin.

Pull requests:

Rename the border width variable

If you use Sass and you’ve extended or created components that use the border width variable, rename $govuk-border-width-mobile to $govuk-border-width-narrow.

Pull request #1287: Rename border-width-mobile to reflect how it's used

New features

Add attributes to table headings

You can now add attributes like classes, rowspan and colspan to table row headers.

Pull request #1367: Allow for classes, rowspan, colspan and attributes on row headers. Thanks to edwardhorsford.

Use page wrapper auto spacing

You can now add the .govuk-main-wrapper--auto-spacing modifier class to your <main> element to add responsive padding to the top and bottom of the page.

This will add the correct amount of padding depending on if there are elements above the <main> element inside the govuk-width-container wrapper. Elements above the <main> element could include a back link or breadcrumb component.

If you need to control the spacing manually, use the .govuk-main-wrapper--l modifier instead.

The govuk-main-wrapper and govuk-main-wrapper--l Sass mixins are now deprecated. Contact us if you need to continue using these mixins.

Pull request #1493: Add automatic vertical spacing modifier for main wrapper

GDS Transport now falls back to Arial in Internet Explorer 8 (IE8)

IE8 will now use Arial instead of GDS Transport.

This is because IE8 requires a very large Embedded Open Type (.eot) font file for external fonts. Arial will take less time to render for IE8 users, who are likely to be on older computers.

Pull request #1434: Update font to use v2 of GOV.UK Transport font. Thanks to @Nooshu.

Fixes

from govuk-frontend GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade govuk-frontend from 3.0.0 to 3.5.0. See this package in NPM: https://www.npmjs.com/package/govuk-frontend See this project in Snyk: https://app.snyk.io/org/digital-prison-services/project/3a9264f5-7767-4468-83fa-438a7586fa8b?utm_source=github&utm_medium=upgrade-pr

steverendell · 2020-03-23T17:06:56Z

Included in general update PR

steverendell closed this Mar 23, 2020

timharrison-moj deleted the snyk-upgrade-3b4a8eeaac0ab6fb518441f6a46bbd07 branch June 19, 2020 13:48

[Snyk] Upgrade govuk-frontend from 3.0.0 to 3.5.0 #400

[Snyk] Upgrade govuk-frontend from 3.0.0 to 3.5.0 #400

Conversation

snyk-bot commented Feb 25, 2020

Snyk has created this PR to upgrade govuk-frontend from 3.0.0 to 3.5.0.

New features

Add classes to the character count component's count message

Fixes

New features

Add classes to the page wrapper

Set a custom width for wrappers

Add attributes to the <body> element of a page

Fixes

New features

Allow lang to be set on <title> and <main> of template

Add new override class to hide elements

Visual updates to the warning text component

Fixes

New features

Add classes to the form group wrapper of the character count component

Fixes

Changelog

New features

Add attributes to the fieldset on the date input component

Add ARIA role to the fieldset component

Add inputmode to the input component

Fixes

Breaking changes

Update file paths, attributes and class names

If you’re using Sass

If you’re using Javascript

Update file paths

Update and add data-module attributes

Update CSS class names

If you’re using Nunjucks

Update asset paths

Migrate to the new accessible focus states

Update colours

Check the new version of the font

Update links from error summary components to radios and checkboxes

Update the markup for tabs

Update start button icon

Adjust text alignment in tables

Replace Sass mixins in grids

Rename the border width variable

New features

Add attributes to table headings

Use page wrapper auto spacing

GDS Transport now falls back to Arial in Internet Explorer 8 (IE8)

Fixes

steverendell commented Mar 23, 2020

Add attributes to the `<body>` element of a page

Allow `lang` to be set on `<title>` and `<main>` of template