chore(deps): bump @aemforms/af-core from 1.0.10 to 1.0.11 in /ui.frontend by dependabot[bot] · Pull Request #2017 · adobe/aem-core-forms-components

dependabot · 2026-11-02T11:35:05Z

Bumps @aemforms/af-core from 1.0.10 to 1.0.11.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@aemforms/af-core]() from 1.0.10 to 1.0.11. --- updated-dependencies: - dependency-name: "@aemforms/af-core" dependency-version: 1.0.11 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

Use GitHub Update branch instead of automatically rebasing and force-pushing pull-request branches. Dependabot-triggered resync failed with a read-only workflow token (403). Skip the sync job for all PRs without changing permissions or the af-core dependency update. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

rismehta · 2026-11-02T11:46:54Z

Disabled automatic base-branch resync in commit 810f4fbc7bb87b48b3e2f736ae2c964c23910e27.

RCA: the original failed run rebased the PR branch and then unconditionally ran git push --force. The branch was already up to date, but the push failed with HTTP 403 for github-actions[bot]. Dependabot-triggered pull_request workflows receive a read-only GITHUB_TOKEN by default, so that workflow could not push. This was unrelated to resolving or installing the af-core update.

Change: temporarily disable the entire sync job with if: ${{ false }} and an explanatory comment. This is not a bot-only exemption: the custom resync job is disabled for any PR using this workflow revision. No permissions were elevated, no repository settings were changed, and the bot's manifest/lockfile update is unchanged. Use GitHub's Update branch instead.

Verified: the new run 41439376164 completed as skipped. Workflow schema validation, exact false-guard/unchanged-workflow assertions, dependency-file preservation checks, and git diff --check passed.

The original failed run remains historical; rerunning that old revision is not necessary. Once this PR merges into dev, future PRs against that branch inherit the disabled resync job. Other base branches inherit it when this change is promoted there. The bot-authored PR description has been left intact.

Remove sync-pr.yml entirely instead of retaining a disabled job. Use GitHub Update branch when synchronization is needed. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

rismehta · 2026-11-02T11:52:02Z

Removed .github/workflows/sync-pr.yml completely in commit c41341d629a0484870e8f0b5c48f1c220f2b30db, superseding the temporary false guard. Verified this PR now deletes the workflow while preserving the original af-core manifest/lockfile update. Use GitHub Update branch when needed.

adobe-bot · 2026-11-02T12:16:24Z

Accessibility Violations Found

Id	Impact
aria-required-attr	critical
empty-heading	minor
label-title-only	serious
target-size	serious

adobe-bot · 2026-11-02T12:16:40Z

Accessibility Violations Found

Id	Impact
aria-required-attr	critical
empty-heading	minor
label-title-only	serious
target-size	serious

adobe-bot · 2026-11-02T12:27:25Z

Accessibility Violations Found

Id	Impact
aria-required-attr	critical
empty-heading	minor
label-title-only	serious
target-size	serious

adobe-bot · 2026-11-02T12:28:34Z

Accessibility Violations Found

Id	Impact
aria-required-attr	critical
empty-heading	minor
label-title-only	serious
target-size	serious

adobe-bot · 2026-11-02T12:31:30Z

Accessibility Violations Found

Id	Impact
aria-required-attr	critical
empty-heading	minor
label-title-only	serious
target-size	serious

adobe-bot · 2026-11-02T12:33:24Z

Accessibility Violations Found

Id	Impact
aria-required-attr	critical
empty-heading	minor
label-title-only	serious
target-size	serious

…tend (#2017) (#2018) * chore(deps): bump @aemforms/af-core in /ui.frontend Bumps [@aemforms/af-core]() from 1.0.10 to 1.0.11. --- updated-dependencies: - dependency-name: "@aemforms/af-core" dependency-version: 1.0.11 dependency-type: direct:production update-type: version-update:semver-patch ... * chore(ci): temporarily disable automatic PR base resync Use GitHub Update branch instead of automatically rebasing and force-pushing pull-request branches. Dependabot-triggered resync failed with a read-only workflow token (403). Skip the sync job for all PRs without changing permissions or the af-core dependency update. * chore(ci): remove obsolete PR resync workflow Remove sync-pr.yml entirely instead of retaining a disabled job. Use GitHub Update branch when synchronization is needed. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

@releng

…#2019) * Fix FORMS-22028: LOC: Unlocalized strings in "Configure" dialog for "Adaptive Form Scribble" component * Fix FORMS-22023: LOC: Unlocalized strings in "Configure" dialog for "Adaptive Form Scribble" component * chore(deps): propose af-core updates against dev Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(build): remove duplicate AEM SDK dependency Keep the existing SDK dependency required by the NGDM image picker while removing the duplicate rejected by Maven 3.10. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(build): map legacy package IDs for Maven validation Map content-package groups to real Maven coordinates in FileVault validation without changing installed package identities, dependency version ranges, plugin versions, or validation severity. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(ci): pin compatible Maven for the Java 21 build Use checksum-verified Maven 3.9.16 instead of the floating image Maven 3.10, which is incompatible with FileVault 1.2.2 legacy dependency resolution. Restore unchanged package/plugin configuration and keep the Java 21 image current. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix(ci): pin compatible Node and Lighthouse versions Use Node 22.23.4 through the pinned official Node orb for both shared browser jobs and pin Lighthouse 13.6.0 exactly. Node 20.10 lacks import.meta.dirname, causing Lighthouse to scan undefined/locales. Keep audit logic and thresholds unchanged. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Merge pull request #2016 from adobe/fix/dependabot-af-core-cooldown fix(deps): exempt af-core releases from Dependabot cooldown * chore(deps): bump @aemforms/af-core from 1.0.10 to 1.0.11 in /ui.frontend (#2017) * chore(deps): bump @aemforms/af-core in /ui.frontend Bumps [@aemforms/af-core]() from 1.0.10 to 1.0.11. --- updated-dependencies: - dependency-name: "@aemforms/af-core" dependency-version: 1.0.11 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * chore(ci): temporarily disable automatic PR base resync Use GitHub Update branch instead of automatically rebasing and force-pushing pull-request branches. Dependabot-triggered resync failed with a read-only workflow token (403). Skip the sync job for all PRs without changing permissions or the af-core dependency update. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * chore(ci): remove obsolete PR resync workflow Remove sync-pr.yml entirely instead of retaining a disabled job. Use GitHub Update branch when synchronization is needed. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Rishi Mehta <rismehta@adobe.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * @releng [maven-scm] :prepare release core-forms-components-reactor-3.0.176 * @releng [maven-scm] :prepare for next development iteration * Update VERSIONS.md and README.md to include version 3.0.176 --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Artem Sova <alp60583@adobe.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: ci-build <ci-build@aemforms>

dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 2, 2026

chore(ci): remove obsolete PR resync workflow

c41341d

Remove sync-pr.yml entirely instead of retaining a disabled job. Use GitHub Update branch when synchronization is needed. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

rismehta merged commit 6dae19c into dev Nov 2, 2026
7 checks passed

rismehta deleted the dependabot/npm_and_yarn/ui.frontend/dev/aemforms/af-core-1.0.11 branch November 2, 2026 13:04

rismehta mentioned this pull request Nov 2, 2026

Merge dev into master: af-core 1.0.11 and resync removal #2018

Merged

3 of 10 tasks

Navigation Menu

Repository navigation

chore(deps): bump @aemforms/af-core from 1.0.10 to 1.0.11 in /ui.frontend - #2017

chore(deps): bump @aemforms/af-core from 1.0.10 to 1.0.11 in /ui.frontend#2017
rismehta merged 3 commits into
devfrom
dependabot/npm_and_yarn/ui.frontend/dev/aemforms/af-core-1.0.11

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

rismehta commented Nov 2, 2026

Uh oh!

rismehta commented Nov 2, 2026

Uh oh!

adobe-bot commented Nov 2, 2026

Uh oh!

adobe-bot commented Nov 2, 2026

Uh oh!

adobe-bot commented Nov 2, 2026

Uh oh!

adobe-bot commented Nov 2, 2026

Uh oh!

adobe-bot commented Nov 2, 2026

Uh oh!

adobe-bot commented Nov 2, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

rismehta commented Nov 2, 2026

Uh oh!

rismehta commented Nov 2, 2026

Uh oh!

adobe-bot commented Nov 2, 2026

Accessibility Violations Found

Uh oh!

adobe-bot commented Nov 2, 2026

Accessibility Violations Found

Uh oh!

adobe-bot commented Nov 2, 2026

Accessibility Violations Found

Uh oh!

adobe-bot commented Nov 2, 2026

Accessibility Violations Found

Uh oh!

adobe-bot commented Nov 2, 2026

Accessibility Violations Found

Uh oh!

adobe-bot commented Nov 2, 2026

Accessibility Violations Found

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants