Bump vnu-jar from 20.5.29 to 22.9.29

[dependabot]

Bumps vnu-jar from 20.5.29 to 22.9.29.

Release notes

Sourced from vnu-jar's releases.

30 June 2020

This release adds a new --stdout option to the command-line checker (to cause all errors and warnings to be reported to stdout rather than stderr), along with fixing some bugs in the command-line-checker behavior. The release also provides a number of improvements in ARIA role checking and in CSS checking, as well as support for checking a number of HTML features that weren’t supported previously. Note that this is the last release for which the Web-based checker will be configured to listen on all interfaces; after this release, the checker will bind by default to 127.0.0.1 — so to make the checker listen on a different address, you’ll need to specify the address.

More: https://github.com/validator/validator/blob/master/CHANGELOG.md#20630

The files in this release provide a portable standalone version of the Nu Html Checker in a number different forms: as a Java jar file, as a Java war file, and a binary runtime images that can be used even on a system that doesn’t have Java installed.

Use the binary images and jar file either for batch checking of documents from the command line and other scripts/apps, as documented at https://validator.github.io/validator/, or as a self-contained service for browser-based checking of HTML documents over the Web—similar to https://validator.w3.org/nu/.

Use the war file to deploy the Nu Html Checker through a servlet container such as Tomcat, as documented at https://validator.github.io/validator/#servlet.

latest

51a4b5c6f716a440a4968b36002906c6bd9e7914 — Make self-closing-tag user-counter actually count all cases

Changelog

Sourced from vnu-jar's changelog.

With a few exceptions, this is a record of mainly just user-facing changes — that is, either changes to the actual behavior of the checker, or changes to any options/interfaces the checker exposes for developers.

NN.NN.NN

NN XXX NNNN

• Warn about void elements that use self-closing tag syntax
• Allow loading attribute for the iframe element (lazy loading)
• Allow autocomplete=username with input[type=email]
• Allow operator=lighter for SVG feComposite element
• Allow more values for SVG feBlend element mode attribute
• CLI: Add nu.validator.htmlparser.tools|test classes to vnu.jar
• CLI/Docker: Enable setting timeouts & bind address w/ environment vars
• CSS: Support color-adjust
• Docker: Migrate Dockerfile to “distroless” image (reduces image size)
• ARIA: Added many changes to align with current ARIA in HTML and ARIA specs
• Update doc-fetching backend to Apache HTTP Components HttpClient 4.5.9
• Make the checker use HTTP 1.0 for all requests it sends, not HTTP 1.1
• Make the checker ignore error for malformed/missing HTTP closing chunk
• Release: All autopublished-on-push release artifacts are now released under the tag latest; no more jar, war, windows, linux, osx
• Docker: Image moved to https://ghcr.io/validator/validator
• NPMs now released to GitHub Packages, in addition to npmjs.com
• Maven packages now released to GitHub Packages, in addition to Central
• Add --additional-java-system-properties option for build script

20.6.30

30 June 2020

• CLI: Add new --stdout option, to report all messages to stdout
• CLI: Ensure the --version option reports the actual version
• CLI: Actually check SVG files, rather than just seeming to (bug fix)
• CSS: Improvements in calc(), min()/max() checking, more
• Allow height and width attributes for SVG symbol element
• Allow capture attribute for the input[type=file] element
• Allow disabled attribute for the link[rel=stylesheet] element
• Treat custom elements as labelable elements for label[for] handling
• ARIA: Fix bug that disallowed implicit combobox/listbox for select
• ARIA: Improve error message for alt-less img with ARIA attributes
• ARIA: Allow section[role=doc-glossary]

20.3.16

16 March 2020

• Disallow accept-charset values other than UTF-8
• Disallow object[typemustmatch]
• Allow SVG feDropShadow element (from Filter Effects spec)
• Allow loading attribute for the img element (lazy loading)
• Allow rel=modulepreload for the link element
• Allow integrity attribute on link[rel=preload|modulepreload]
• Allow integrity attribute on script[type=module]
• Allow autofocus as a global attribute

... (truncated)

Commits

• 2b99a9e Put more facts on the ground
• 258bc62 Don’t warn about self-closing-tag syntax for SVG/MathML elements
• daaba76 Add temporary self-closing-tag user-counter hack
• bd8080e Prevent NPE in htmlParser profile-setting code
• 9b46b73 Put some facts on the ground
• 230b6e7 Bump crazy-max/ghaction-import-gpg from 4 to 5
• 3eae393 Update css-validator
• 9e4252f Add multiplatform docker support (#1400)
• 2abdc4c Bump actions/setup-python from 3 to 4
• 7573f64 Update index.html
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Dependabot tried to add @XhmikosR as a reviewer to this PR, but received the following error from GitHub:

POST https://api.github.com/repos/wedataintelligence/bootstrap/pulls/240/requested_reviewers: 422 - Reviews may only be requested from collaborators. One or more of the users or teams you specified is not a collaborator of the wedataintelligence/bootstrap repository. // See: https://docs.github.com/rest/reference/pulls#request-reviewers-for-a-pull-request

[dependabot]

The following labels could not be found: dependencies, v5.