build(deps): Bump org.webjars.npm:codbex__harmonia from 2.6.0 to 2.9.0

[dependabot]

Bumps org.webjars.npm:codbex__harmonia from 2.6.0 to 2.9.0.

Changelog

Sourced from org.webjars.npm:codbex__harmonia's changelog.

v2.9.0

A release that adds the new Backdrop, Bottom Navigation, Floating Action Button and One-Time Password Input components, rebuilds the Tree around a proper row, reworks the Sidebar's group and menu actions, and fixes how every component treats aria-disabled. The five breaking changes are the Tree rewrite, the Sidebar group actions, the aria-disabled keyboard behaviour, the removal of data-disabled from the Menu and the Select, and the removal of data-label in favor of aria-label, all covered below.

New component: Bottom Navigation

• Bottom Navigation (x-h-bottom-nav) - a bar of top-level destinations along the bottom of the screen, for the primary navigation of an application on a phone.
• New --bottom-nav-height theme variable and h-bottom-nav utility class, so the layout around the bar can clear it without hard coding the value.

New component: Floating Action Button

• Floating Action Button (x-h-fab) - a prominent, elevated button for the single most important action of a screen.

New component: Backdrop

• Backdrop (x-h-backdrop) - a full-screen scrim that dims the page and animates its content in and out, for use behind command palettes, custom modals, or any panel that should sit above the rest of the interface.

New component: One-Time Password Input

• One-Time Password Input (x-h-otp) - turns a native input into one or more groups of single-character cells for entering a verification code or PIN.

Accessibility: aria-disabled no longer hides an item from the keyboard

• Breaking: an aria-disabled item now stays in the arrow order. Listbox options, select options, menu items, submenu triggers, menubar triggers, tabs and tree items marked aria-disabled="true" are reached by the arrow keys, Home, End and typeahead, can hold the roving tab stop, and are announced as unavailable. They still cannot be selected, activated, expanded or collapsed. Previously they were skipped, which hid them from screen reader users. Use the native disabled attribute, which is unchanged, when an item should be hidden rather than announced.
• Descendants of a disabled tree item are reachable too, and none of them can be activated.
• Breaking: data-disabled is gone from the Menu and the Select. x-h-menu-item, x-h-menu-sub and x-h-select-option now read aria-disabled="true" like every other component. To migrate, rename the attribute. data-disabled is unchanged on x-h-input-group-addon and x-h-field, where it is a styling hook only.
• A disabled submenu trigger is now genuinely inert. Neither hover, click, ArrowRight nor Enter opens it.
• Fixed: Enter and Space could activate a disabled menu item. Activating one is now a complete no-op, and it no longer closes the menu.
• Fixed: an aria-disabled tab was fully clickable. Tabs are now dimmed and pointer-inert, and a click or Enter no longer reaches the author's own selection handler.

Rating

• Breaking: the Rating is locked with aria-disabled="true". The disabled, data-disabled and data-readonly attributes are gone, and the separate read-only state with them. To migrate, replace them with aria-disabled="true", which requires the explicit value. This also fixes data-readonly="false" having made a rating read-only.
• Breaking: a locked Rating stays a focusable slider. It used to become role="img" with every value attribute stripped and no tab stop, so a keyboard user could not reach it. It now keeps role="slider", its tab stop and its aria-valuenow / aria-valuetext in every state, and only refuses input.
• Fixed: a locked Rating destroyed the accessible name. The score was written into aria-label on every render, overwriting the author's own name, and with aria-labelledby the score was never announced at all. The score now stays in aria-valuetext and the name is never touched.
• New: data-value-label makes the announced score translatable. {value} and {max} are substituted, defaulting to {value} of {max} stars.

Translatable generated text

Strings that embed a number in English prose used to be hardcoded. Each is now a template with {token} placeholders substituted, so a translation can reorder the numbers rather than only replace words around them.

• Carousel - data-item-label names each slide. {index} and {count} are substituted, defaulting to {index} of {count}.
• Bubble - data-valuetext-label sets the position announced on the audio seek slider. {current} and {duration} are substituted, defaulting to {current} of {duration}.
• Calendar - data-more-label sets the month-view overflow button. {count} is substituted, defaulting to +{count} more.
• Charts - a new seriesLabel config key names a series that has no name of its own, defaulting to Series {index}. A new tableLabels key sets the column headers of the hidden data table, replacing the hardcoded Category, Segment and Value.

Accessible names: data-label removed where aria-label already works

• Breaking: data-label is gone from the Rating, the Carousel, the carousel indicators, the reactions group and the dual Range. Each sits on an element the author writes, so aria-label could always be set on it directly. To migrate, rename the attribute to aria-label. Every default name is unchanged.
• data-label stays where the element is generated, for the single Range's handle and the dual Range's data-min-label / data-max-label. On a dual Range data-label no longer names the group, so move that one to aria-label.

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)