What's Changed

• Upgrade dependencies
• AppArmor-related documentation updates (thanks @d33bs)
• Requirements documentation updates (thanks @WilliamCollishaw)
• Improve security posture

New Contributors

• @dependabot[bot] made their first contribution in #721
• @d33bs made their first contribution in #725
• @WilliamCollishaw made their first contribution in #730

Full Changelog: 9.0.0...9.0.1

Pa11y 9 requires a stable (even-numbered) Node.js version of 20 or above, updates to the latest version of Puppeteer (24) and Axe (4.10), updates several other dependencies, and includes some GitHub actions and documentation cleanup.

Changes in pa11y@9

• Breaking: Upgrade Node.js support: Pa11y 9 requires a stable (even-numbered) Node.js version of 20 or above
• Significant dependency changes (potentially impacting Pa11y results):
  • Upgrade puppeteer to 24 from 22. This updates the underlying Chrome version (to 135).
  • Upgrade axe-core to 4.10 from 4.8. This includes rule fixes that may change results when using the axe runner. See axe-core releases for complete details.
• Other dependency changes:
  • Upgrade bfj to 9.1 from 8.0.
  • Upgrade commander to 13.1 from 12.0.
  • Upgrade envinfo to 7.14 from 7.11.
  • Upgrade semver to 7.7 from 7.6.
• GitHub Actions changes: Update workflows for Node 22/24, Ubuntu 24.04 compatibility, and publishing package with provenance.
• Other changes: Refactor code and tests for dependency compatibility, update support table and fix some links in the README.

New contributors in pa11y@9

• @kaitlinnewson made their first contribution

Full diff for pa11y@9

• 8.0.0...9.0.0

Pa11y 8 makes the latest version of Puppeteer (22) available to Pa11y and updates several other dependencies.

Changes

• Major dependency changes
  • Upgrade puppeteer to 22 from 20
    • This may affect Pa11y's operating system support and the behaviour of Pa11y's browser automation.
  • Upgrade commander to 12 from 11
  • Remove dependency p-timeout
    • This will only affect users who had depended on p-timeout's presence as a side effect of installing Pa11y.
• Minor dependency changes:
  • Upgrade semver to 7.6 from 7.5

Many thanks to @aarongoldenthal for contributing these dependency upgrades to Pa11y.

Full diff

• 7.0.0...8.0.0

Changes

• Breaking: Upgrade Node.js support: Pa11y 7 requires a stable (even-numbered) Node.js version of 18 or above
• Breaking: Upgrade dependency puppeteer to 20 from 9: this may affect Pa11y's operating system support and the behaviour of Pa11y's browser automation
• Breaking: Upgrade dependency commander to 11 from 8
• Breaking: Upgrade dependency bfj to 8 from 7
• Upgrade axe-core to ~4.8.2 from ~4.2.1
• Support versions of Ubuntu above 20.04 without further configuration (thanks @aarongoldenthal)
• Increase confidence in macOS and Windows support (thanks @aarongoldenthal)
• Fix mistakes in documentation about runners (thanks @aarongoldenthal)
• Update stale links in documentation (thanks @gavinr)
• Update support policy

New contributors

• @gavinr made their first contribution
• @danyalaytekin made their first contribution

Full diff

• 6.2.3...7.0.0