USWDS 2.12.2

[thisisdano]

What's new in USWDS 2.12.2

Improvements and bug fixes

• Fixed a duplicate-file bug in File Input. If a file with the same name was uploaded in two separate file input fields, the preview spinner would spin indefinitely. We now assign each upload an individual ID, and the image preview loads properly. (USWDS - File Input: Creates unique ID per upload. Fixes #4144 #4313) Thanks @mahoneycm!
• Added ability to add a custom error message for wrong file type error in File Upload. Add the data attribute data-errorMessage to usa-file-input to include a custom error message. (USWDS - File Input - Add ability to use custom error message when wrong file type is used for file-input.js #3890) Thanks @hilvitzs!
• Fixed external link icon color. We resolved an issue with visited links where the icon color may not match the color of the link. (Links: Use add-color-icon mixin with currentColor for external link #4297) Thanks @aduth!
• Removed extraneous href from Collection calendar. The usa-collection__calendar-date should not include an href, so we removed it. (USWDS - Collection: Removed href from fancy-date divs. Resolves #4285 #4308) Thanks @mahoneycm!

Security and dependencies

• Added automatic sanitizing. The design system now automatically sanitizes content in elements we compose with JavaScript. This means that components like Combobox, Tooltip, File Input, and Date Picker will sanitize any content passed to them. This helps protect any design system implementation against malicious XSS attacks through these components. (USWDS | xss audit, standardization #4329)

Dependencies

Package	Old	New
@babel/preset-env	7.15.0	7.15.8
@types/node	16.6.1	16.11.6
autoprefixer	10.3.1	10.3.7
axe-core	4.3.2	4.3.4
chrome-launcher	0.14.0	0.14.1
eslint-plugin-import	2.24.0	2.25.2
eslint-plugin-no-unsanitized	3.1.5	3.2.0
gulp-postcss	9.0.0	9.0.1
mocha	9.0.3	9.1.3
postcss	8.3.6	8.3.11
prettier	2.3.2	2.4.1
sass	1.38.0	1.43.4
snyk	1.683.0	1.746.0
stylelint-scss	3.20.1	3.21.0
typescript	4.3.5	4.4.4
yargs	17.1.1	17.2.1

0 vulnerabilities in regular dependencies (dependencies for USWDS projects installed with npm install uswds)

Internal only: 2 low, 12 moderate, 14 high, 1 critical vulnerabilities in devDependencies (development dependencies)

Release ZIP SHA-256 hash: 2c4a794c11dca65db04d6552312241ae6c397b7fd4ea5c8094698461d8d3f687

---

This discussion was created from the release USWDS 2.12.2.