AXE-3659: merge upstream axe-core v4.12.1 into the fork (fork-preserving)

.github/actions/install-deps/action.yml

@@ -0,0 +1,79 @@
+name: 'Install Dependencies'
+description: 'Install OS and Project dependencies'
+
+inputs:
+  node-version:
+    description: 'Node.js version to install'
+    required: false
+  start-xvfb:
+    description: 'If provided, this is the display number to run xvfb on. Should be in `:N` format, e.g., `:99`.'
+    required: false
+  nightly:
+    description: 'If true, installs the nightly versions of browsers.'
+    required: false
+outputs:
+  chrome-path:
+    description: 'Path to the installed Chrome binary'
+    value: ${{ steps.setup-chrome.outputs.chrome-path }}
+  firefox-path:
+    description: 'Path to the installed Firefox binary'
+    value: ${{ steps.setup-firefox.outputs.firefox-path }}
+  chromedriver-path:
+    description: 'Path to the installed ChromeDriver binary'
+    value: ${{ steps.setup-chrome.outputs.chromedriver-path }}
+  chrome-version:
+    description: 'Version of the installed Chrome binary'
+    value: ${{ steps.setup-chrome.outputs.chrome-version }}
+  chromedriver-version:
+    description: 'Version of the installed ChromeDriver binary'
+    value: ${{ steps.setup-chrome.outputs.chromedriver-version }}
+  firefox-version:
+    description: 'Version of the installed Firefox binary'
+    value: ${{ steps.setup-firefox.outputs.firefox-version }}
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Setup Node.js
+      uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+      with:
+        registry-url: 'https://registry.npmjs.org'
+        node-version: ${{ inputs.node-version }}
+        node-version-file: ${{ inputs.node-version == '' && '.nvmrc' || '' }}
+        cache: npm
+    - name: Fix Chrome Sandbox Permissions
+      shell: bash
+      run: |
+        sudo chown root:root /opt/google/chrome/chrome-sandbox
+        sudo chmod 4755 /opt/google/chrome/chrome-sandbox
+    - name: Install Xvfb
+      shell: bash
+      if: ${{ inputs.start-xvfb }}
+      run: |
+        sudo apt-get update
+        sudo apt-get install -y xvfb x11-xserver-utils
+    - name: Install Google Chrome for Testing
+      id: setup-chrome
+      uses: browser-actions/setup-chrome@b94431e051d1c52dcbe9a7092a4f10f827795416 # v2.1.0
+      with:
+        # @see https://github.com/dequelabs/axe-core/issues/5027
+        chrome-version: ${{ inputs.nightly == 'true' && 'beta' || 145 }}
+        install-chromedriver: true
+        install-dependencies: true
+    - name: Install Firefox
+      id: setup-firefox
+      uses: browser-actions/setup-firefox@5914774dda97099441f02628f8d46411fcfbd208 # v1.7.0
+      with:
+        firefox-version: ${{ inputs.nightly == 'true' && 'latest-nightly' || 'latest' }}
+    - name: Install Project Dependencies
+      shell: bash
+      run: npm ci
+    - name: Start Xvfb
+      if: ${{ inputs.start-xvfb }}
+      env:
+        DISPLAY: ${{ inputs.start-xvfb }}
+      shell: bash
+      # This is the same resolution as what CircleCI used.
+      # Maintaining it for consistency between the environments
+      # since something may be resolution dependent.
+      run: Xvfb "$DISPLAY" -screen 0 1280x1024x24 &

.github/bin/determine-version.sh

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+
+set -eo pipefail
+
+echo "::group::Determining new prerelease version"
+
+NAME=$(npm pkg get name | tr -d '"')
+LATEST_VERSION=$(npm pkg get version | tr -d '"')
+
+SHORT_SHA=$(echo "${GITHUB_SHA}" | cut -c1-7)
+NEW_VERSION="$LATEST_VERSION-canary.${SHORT_SHA}"
+
+echo "Latest version in package.json: $LATEST_VERSION"
+echo "New prerelease version: $NEW_VERSION"
+
+echo "version=$NEW_VERSION" >> "$GITHUB_OUTPUT"
+echo "name=$NAME" >> "$GITHUB_OUTPUT"
+
+echo "::endgroup::"

.github/bin/extract-release-notes.sh

@@ -0,0 +1,37 @@
+#!/usr/bin/env bash
+
+set -eu -o pipefail
+
+# Extracts the body of the most recent release section from CHANGELOG.md —
+# everything between the latest version header and the previous one. The
+# version header itself is not included. The result is written as a
+# multiline `notes` step output to $GITHUB_OUTPUT when set (GitHub
+# Actions), otherwise to stdout.
+#
+# The awk pattern /# \[?[0-9]/ matches version-header lines (`#`, space,
+# optional `[`, digit), e.g. `### [4.11.4](...) (2026-04-23)`. The pattern
+# is not anchored, so it matches the `# [4` substring inside `###`. On the
+# first match it sets `found=1` and skips the line (so the header itself
+# is not printed); on the next match (the previous release's header) it
+# exits. `found{print}` prints every line in between.
+#
+# Walking through a typical CHANGELOG.md:
+#
+#   Line                              v-header?  found    Action
+#   --------------------------------  ---------  ------   -------
+#   # Changelog                       no         0        nothing
+#   All notable changes...            no         0        nothing
+#   ### [4.11.4](...) (2026-04-23)    yes        0 -> 1   skip
+#   (blank)                           no         1        print
+#   ### Bug Fixes                     no         1        print
+#   - **commons/text:** ...           no         1        print
+#   - **utils/getAncestry:** ...      no         1        print
+#   ### [4.11.3](...) (2026-04-13)    yes        1        exit
+
+repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+
+{
+  echo 'notes<<EOF'
+  awk '/# \[?[0-9]/{if(found) exit; found=1; next} found{print}' "$repo_root/CHANGELOG.md"
+  echo 'EOF'
+} >> "${GITHUB_OUTPUT:-/dev/stdout}"

.github/bin/validate-npm-deploy.sh

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+
+set -eo pipefail
+
+if [ -z "$PACKAGE_NAME" ] || [ -z "$VERSION" ]; then
+  echo "::error::PACKAGE_NAME and VERSION environment variables must be set."
+  exit 1
+fi
+
+NPM_ROOT_PATH=$(npm root -g)
+
+npm install -g "${PACKAGE_NAME}@${VERSION}" || {
+  echo "::error::✗ Failed to install package: ${PACKAGE_NAME}@${VERSION}"
+  exit 1
+}
+
+cd "$NPM_ROOT_PATH" || {
+  echo "::error::✗ Failed to change directory to global npm root: $NPM_ROOT_PATH"
+  exit 1
+}
+
+node -pe "window={}; document={}; require('${PACKAGE_NAME}');" || {
+  echo "::error::✗ Failed to import CommonJS module for package: ${PACKAGE_NAME}"
+  exit 1
+}
+
+cd "${NPM_ROOT_PATH}/${PACKAGE_NAME}" || {
+  echo "::error::✗ Failed to change directory to package path: ${NPM_ROOT_PATH}/${PACKAGE_NAME}"
+  exit 1
+}
+
+types=$(node -pe "require('./package.json').types")
+if [ "$types" == "undefined" ]
+then
+  types=$(node -pe "require('./package.json').typings")
+fi
+if [ "$types" != "undefined" ] && [ ! -f "$types" ]
+then
+  echo "::error::The types file is missing"
+  exit 1;
+fi
+echo "Types file '$types' is present in the package"