Skip to content

cherry: a11y aria-labels → main - #1518

Merged
Flotapponnier merged 1 commit into
mainfrom
cherry/a11y-aria-labels-main
Jul 26, 2026
Merged

cherry: a11y aria-labels → main#1518
Flotapponnier merged 1 commit into
mainfrom
cherry/a11y-aria-labels-main

Conversation

@Flotapponnier

Copy link
Copy Markdown
Collaborator

Cherry of #1517.

* chain-kpis: register Sei + Mode + Ronin + Immutable zkEVM (DefiLlama slugs verified live)

* chore(deps): bump next + js-yaml + pin hono via override (fix 3 High CVEs)

- next 16.2.6 -> 16.2.12 (fixes 4 High advisories: SSRF in Server
  Actions, SSRF in rewrites, App Router middleware bypass, DoS)
- @modelcontextprotocol/sdk 1.26.0 -> 1.29.0
- js-yaml ^4.1.1 -> ^4.3.0 (fixes O(n^2) merge-key DoS; stay in 4.x
  since 5.x is a breaking API change)
- pnpm.overrides: hono >=4.12.32 (was pinned to 4.12.18 via MCP SDK
  transitive; fixes CORS 'reflect any Origin' + JWT scheme bypass on
  the public /api/mcp endpoint)

pnpm audit --audit-level=high: 4 -> 2 remaining (both are transitive
sharp / brace-expansion advisories that Next / ESLint own and are
harder to reach without breaking-change bumps upstream).

pnpm typecheck clean.

* a11y: add aria-label to 9 leaderboard search inputs

Search inputs across the leaderboard grid (hl-cohort, hl-hip3,
perp-by-asset, perp-venues, pm-data-feeds, pm-venues, providers-table,
rpc-chains, rpc-providers-pivot) only had placeholder text. Screen
readers annouced them as 'edit' with no context; NVDA + JAWS + VoiceOver
users had to interact with the field to discover what it filtered.

Adds aria-label mirroring the placeholder ('Search venue', 'Search
builder', etc.) so the field has an accessible name whether the
placeholder is visible or the user has typed into it.

Files that already carried aria-label (badges-catalog, benchmark-grid,
compare-selector, search-dialog) are untouched.
@Flotapponnier
Flotapponnier merged commit 6d02948 into main Jul 26, 2026
1 check failed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant