Bump/primer upstream 0.45.0

.changeset/blue-phones-boil.md

@@ -0,0 +1,5 @@
+---
+'@openproject/primer-view-components': minor
+---
+
+Utilize modern `Tooltip` component for `AvatarStack`

.changeset/every-suns-fold.md

@@ -0,0 +1,5 @@
+---
+'@openproject/primer-view-components': patch
+---
+
+Replacing color tokens for StateLabel draft with new draft tokens

.changeset/proud-baths-brake.md

@@ -0,0 +1,5 @@
+---
+'@openproject/primer-view-components': minor
+---
+
+SelectPanel: Prevents `keydown` events from escaping the SelectPanel when within the items.

.changeset/spotty-birds-cough.md

@@ -0,0 +1,5 @@
+---
+"@openproject/primer-view-components": patch
+---
+
+Add custom label support for ToggleSwitch on/off states

.changeset/warm-bottles-smell.md

@@ -0,0 +1,5 @@
+---
+"@openproject/primer-view-components": patch
+---
+
+Add box-shadow back to the AvatarStack avatars

.changeset/wet-pugs-divide.md

@@ -0,0 +1,5 @@
+---
+"@openproject/primer-view-components": patch
+---
+
+Implement forced colors for progress bar

.github/workflows/codeql-analysis.yml

@@ -21,7 +21,7 @@ jobs:
       with:
         languages: javascript
 
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@v5
       with:
         node-version: 20
         cache: 'npm'

.github/workflows/demo-production-deploy.yml

@@ -72,7 +72,7 @@ jobs:
       with:
         ruby-version: '3.3'
         bundler-cache: true
-    - uses: actions/cache@v4.2.4
+    - uses: actions/cache@v4.3.0
       with:
         path: demo/gemfiles/vendor/bundle
         key: gems-build-kuby-main-ruby-3.3.x-${{ hashFiles('demo/gemfiles/kuby.gemfile.lock') }}

.github/workflows/lint.yml

@@ -26,7 +26,7 @@ jobs:
           CODE_OF_CONDUCT.md
     - uses: xt0rted/markdownlint-problem-matcher@v3
       if: steps.changed-files.outputs.any_changed == 'true'
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@v5
       if: steps.changed-files.outputs.any_changed == 'true'
       with:
         cache: 'npm'
@@ -83,7 +83,7 @@ jobs:
       with:
         files: |
           app/components/**/*.ts
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@v5
       if: steps.changed-files.outputs.any_changed == 'true'
       with:
         cache: 'npm'
@@ -104,7 +104,7 @@ jobs:
         files: |
           app/components/**/*.pcss
           lib/postcss_mixins/*.pcss
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@v5
       if: steps.changed-files.outputs.any_changed == 'true'
       with:
         cache: 'npm'

.github/workflows/publish.yml

@@ -12,7 +12,7 @@ jobs:
         with:
           ruby-version: '3.3'
           bundler-cache: true
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: 20
           cache: 'npm'
@@ -26,7 +26,7 @@ jobs:
           chmod 0600 $HOME/.gem/credentials
         env:
           RUBYGEMS_TOKEN: ${{ secrets.RUBYGEMS_TOKEN_SHARED }}
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: 20
       - name: Create .npmrc

.github/workflows/release-checklist.yml

@@ -18,7 +18,7 @@ jobs:
 
       - name: Get or Create Comment
         if: success() && steps.findPr.outputs.number
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         env:
           PR_NUMBER: ${{ steps.findPr.outputs.pr }}
         with:

.github/workflows/release.yml

@@ -18,7 +18,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: 20
           cache: 'npm'

.github/workflows/release-canary.yml → .github/workflows/release_canary.yml

@@ -10,7 +10,7 @@ jobs:
   release-canary:
     name: npm
     if: ${{ github.repository == 'opf/primer_view_components' }}
-    uses: primer/.github/.github/workflows/release_canary.yml@v2.2.0
+    uses: primer/.github/.github/workflows/release_canary.yml@v2.2.1
     with:
       install: npm i
     secrets:

.github/workflows/release-candidate.yml → .github/workflows/release_candidate.yml

@@ -9,7 +9,7 @@ jobs:
   release-candidate:
     name: npm
     if: ${{ github.repository == 'opf/primer_view_components' }}
-    uses: primer/.github/.github/workflows/release_candidate.yml@v2.2.0
+    uses: primer/.github/.github/workflows/release_candidate.yml@v2.2.1
     secrets:
       gh_token: ${{ secrets.GITHUB_TOKEN }}
       npm_token: ${{ secrets.NPM_AUTH_TOKEN_SHARED }}

.github/workflows/stale.yml

@@ -9,7 +9,7 @@ jobs:
     if: ${{ github.repository == 'primer/view_components' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@v10
         with:
 
           # General settings

.github/workflows/static-files.yml

@@ -18,7 +18,7 @@ jobs:
         with:
           ruby-version: '3.3'
           bundler-cache: true
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: 20
           cache: 'npm'

.github/workflows/test.yml

@@ -36,7 +36,7 @@ jobs:
         with:
           ruby-version: '3.4'
           bundler-cache: true
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: 20
           cache: 'npm'
@@ -75,7 +75,7 @@ jobs:
           ruby-version: ${{ matrix.ruby_version }}
           bundler-cache: true
           cache-version: ${{ matrix.rails_version }}-${{ matrix.ruby_version }}
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: 20
           cache: 'npm'
@@ -121,7 +121,7 @@ jobs:
           ruby-version: ${{ matrix.ruby_version }}
           bundler-cache: true
           cache-version: ${{ matrix.rails_version }}-${{ matrix.ruby_version }}
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: 20
           cache: 'npm'
@@ -185,7 +185,7 @@ jobs:
         with:
           ruby-version: '3.2'
           bundler-cache: true
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: 20
           cache: 'npm'
@@ -208,7 +208,7 @@ jobs:
         with:
           ruby-version: '3.2'
           bundler-cache: true
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: 20
           cache: 'npm'
@@ -237,7 +237,7 @@ jobs:
         with:
           ruby-version: '3.2'
           bundler-cache: true
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v5
         with:
           node-version: 20
           cache: 'npm'
@@ -317,7 +317,7 @@ jobs:
           ruby-version: '3.2'
           bundler-cache: true
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: 20
           cache: 'npm'

.github/workflows/triage.yml

@@ -27,7 +27,7 @@ jobs:
     if: github.event_name == 'pull_request' && github.event.action != 'labeled' && github.event.action != 'unlabeled'
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/labeler@v5
+    - uses: actions/labeler@v6
       with:
         sync-labels: true
         repo-token: "${{ secrets.GITHUB_TOKEN }}"
@@ -53,7 +53,7 @@ jobs:
     name: semver label
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/github-script@v7
+      - uses: actions/github-script@v8
         id: version-result
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
@@ -65,7 +65,7 @@ jobs:
             if (match && match[0]) {
               return match[0][1]
             }
-      - uses: actions/github-script@v7
+      - uses: actions/github-script@v8
         env:
           RELEASE: ${{ steps.version-result.outputs.result }}
         with:

Gemfile

@@ -28,16 +28,16 @@ end
 # rubocop:enable Bundler/DuplicatedGem
 
 # Use Puma as the app server
-gem "puma", "~> 6.6.1"
+gem "puma", "~> 7.0.4"
 
 # Reduces boot times through caching; required in config/boot.rb
 gem "bootsnap", ">= 1.4.2", require: false
 
-gem "lookbook", "~> 2.3.12"
+gem "lookbook", "~> 2.3.13"
 if ENV["VIEW_COMPONENT_PATH"]
   gem "view_component", path: ENV["VIEW_COMPONENT_PATH"]
 else
-  gem "view_component", "4.0.1"
+  gem "view_component", "4.0.2"
 end
 
 gem "kramdown", "~> 2.5"

Gemfile.lock

@@ -56,7 +56,7 @@ GEM
       erubi (~> 1.4)
       parser (>= 2.4)
       smart_properties
-    bigdecimal (3.2.2)
+    bigdecimal (3.2.3)
     bootsnap (1.18.6)
       msgpack (~> 1.2)
     builder (3.3.0)
@@ -70,7 +70,7 @@ GEM
       regexp_parser (>= 1.5, < 3.0)
       xpath (~> 3.2)
     concurrent-ruby (1.3.5)
-    connection_pool (2.5.3)
+    connection_pool (2.5.4)
     crack (1.0.0)
       bigdecimal
       rexml
@@ -115,7 +115,7 @@ GEM
       pp (>= 0.6.0)
       rdoc (>= 4.0.0)
       reline (>= 0.4.2)
-    json (2.13.2)
+    json (2.15.0)
     kramdown (2.5.1)
       rexml (>= 3.3.9)
     language_server-protocol (3.17.0.5)
@@ -127,7 +127,7 @@ GEM
     loofah (2.24.0)
       crass (~> 1.0.2)
       nokogiri (>= 1.12.0)
-    lookbook (2.3.12)
+    lookbook (2.3.13)
       activemodel
       css_parser
       htmlbeautifier (~> 1.3)
@@ -167,10 +167,10 @@ GEM
       date
       stringio
     public_suffix (6.0.2)
-    puma (6.6.1)
+    puma (7.0.4)
       nio4r (~> 2.0)
     racc (1.8.1)
-    rack (3.1.16)
+    rack (3.2.1)
     rack-cors (3.0.0)
       logger
       rack (>= 3.0.14)
@@ -210,7 +210,7 @@ GEM
     regexp_parser (2.11.3)
     reline (0.6.2)
       io-console (~> 0.5)
-    rexml (3.4.1)
+    rexml (3.4.2)
     rouge (4.6.0)
     rubocop (1.80.2)
       json (~> 2.3)
@@ -223,18 +223,18 @@ GEM
       rubocop-ast (>= 1.46.0, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 2.4.0, < 4.0)
-    rubocop-ast (1.46.0)
+    rubocop-ast (1.47.1)
       parser (>= 3.3.7.2)
       prism (~> 1.4)
     rubocop-github (0.26.0)
       rubocop (>= 1.76)
       rubocop-performance (>= 1.24)
       rubocop-rails (>= 2.23)
-    rubocop-performance (1.25.0)
+    rubocop-performance (1.26.0)
       lint_roller (~> 1.1)
       rubocop (>= 1.75.0, < 2.0)
-      rubocop-ast (>= 1.38.0, < 2.0)
-    rubocop-rails (2.32.0)
+      rubocop-ast (>= 1.44.0, < 2.0)
+    rubocop-rails (2.33.4)
       activesupport (>= 4.2.0)
       lint_roller (~> 1.1)
       rack (>= 1.1)
@@ -284,7 +284,7 @@ GEM
     unicode-emoji (4.1.0)
     uri (1.0.3)
     useragent (0.16.11)
-    view_component (4.0.1)
+    view_component (4.0.2)
       activesupport (>= 7.1.0, < 8.1)
       concurrent-ruby (~> 1)
     vite_rails (3.0.19)
@@ -330,11 +330,11 @@ DEPENDENCIES
   erblint-github (~> 1.0.1)
   kramdown (~> 2.5)
   listen (~> 3.9)
-  lookbook (~> 2.3.12)
+  lookbook (~> 2.3.13)
   matrix (~> 0.4.3)
   mocha
   openproject-primer_view_components!
-  puma (~> 6.6.1)
+  puma (~> 7.0.4)
   rack-cors
   railties (= 8.0.2)
   rake (~> 13.3)
@@ -351,7 +351,7 @@ DEPENDENCIES
   sprockets-rails
   thor
   timecop
-  view_component (= 4.0.1)
+  view_component (= 4.0.2)
   vite_rails (~> 3.0)
   webmock
   yard (~> 0.9.37)

app/components/primer/alpha/select_panel_element.ts

@@ -449,6 +449,18 @@ export class SelectPanelElement extends HTMLElement {
       return
     }
 
+    if (
+      event.type === 'keydown' &&
+      event instanceof KeyboardEvent &&
+      (event.target as Element).closest(visibleMenuItemSelectors)
+    ) {
+      const hasModifier = event.ctrlKey || event.altKey || event.metaKey
+      const isAlphabetKey = event.key.length === 1 && /[a-z\d]/i.test(event.key)
+
+      // eslint-disable-next-line no-restricted-syntax
+      if (!hasModifier && isAlphabetKey) event.stopPropagation()
+    }
+
     if (event.target === this.dialog && event.type === 'close') {
       // Remove data-ready so it can be set the next time the panel is opened
       this.dialog.removeAttribute('data-ready')