Sourced from @​uswds/uswds's releases.

USWDS 3.9.0

What's new in USWDS 3.9.0

Features

Package	A11y	Breaking	Markup change	Description
usa-character-count	-	-	-	Enhanced the visual cue when maxlength is exceeded in the character count component. Now, the component uses standard USWDS error styles to visually enhance the error state. (#5908)
usa-date-picker, usa-date-range-picker	Yes	-	-	Added aria-disabled to the list of expected attributes in the date picker and date range picker components. Now, the component will disable toggle when the aria-disabled attribute is present. (#6013)
uswds-core, usa-layout-grid	-	-	-	Added new $theme-utility-breakpoints-custom setting. This setting generates responsive variants of USWDS utilities at custom breakpoints. Values must be set with px values inside a Sass map. Thanks @​jamigibbs! (#6048)

Bug fixes

Package	A11y	Breaking	Markup change	Description
usa-alert, usa-site-alert	-	Yes	-	Fixed a bug that caused $theme-site-margins-width to unexpectedly adjust the alignment inside the alert and site alert components. Alignment on the alert and site alert components will likely shift from this change. Confirm that your implementation of the component aligns as expected. (#5636):warning: Considered breaking because the alignment and display of the alert may shift.
usa-button	-	Yes	-	Updated the width of unstyled buttons at narrow screen widths. Now, unstyled buttons receive a width of auto to better match USWDS link styles. Users should confirm that the variant visually displays as expected in their projects. Thanks @​aduth! (#5631):warning: Considered breaking because the display of unstyled buttons will change at narrow screen widths. Check your codebase for any instances of @include button-unstyled in your custom styles. These items may be affected by this change.
usa-card	-	Yes	-	Fixed a bug that caused the component to ignore the $theme-card-font-family setting. Confirm that your implementation of the card component displays with the expected font family. (#5974):warning: Considered breaking because fonts in cards may change if you've set $theme-card-font-family.
usa-combo-box	Yes	-	-	Removed custom screen reader instructions in the combo box component. Combo box now relies on the default instructions provided by screen readers. (#6022)
usa-date-picker, usa-date-range-picker	Yes	-	-	Fixed a bug that caused mouseover events to prevent keyboard navigation. Now when you hover your mouse over the date picker buttons, only the hover state will be triggered. (#5774)
usa-header	Yes	Yes	-	Removed the CSS order property from the mobile view in standard variants of the header component. Now, the visual order of the component matches the tab order. If you would like to visually keep the search bar at the top of the menu, you will need to reorder your markup in the mobile view. (#6037):warning: Considered breaking because the position of the search bar will change in the mobile menu.
usa-footer, templates	Yes	-	Yes	Added the autocomplete="email" attribute to the big footer variant and the "Create an account" template. This attribute allows the components to meet the standards outlined in WCAG 1.3.5. (#6002):pencil2: Teams should update their markup if they use an email field in their big footer.
usa-identifier	-	-	Yes	Updated the USA.gov link in Spanish versions of the identifier. The link text now reads "Visite USAGov en Español" and the link url is now "https://www.usa.gov/es/". (#5892):pencil2: Teams should update this text if they use the Spanish-language identifier.
usa-memorable-date	Yes	-	Yes	Removed numeric representation of months in the memorable date component. Recent usability testing indicated that having both numbers and names to represent months was confusing for screen reader users. (#6028):pencil2: Teams should update their memorable date component to remove the leading numbers.
usa-pagination	Yes	-	-	Added text underline styles to pagination links. Pagination links are now visually consistent with other USWDS text links. (#5970)

Dependencies and security

Dependency name	Previous version	Updated version
@​18f/identity-stylelint-config	4.0.0	4.1.0
@​babel/core	7.24.5	7.25.2
@​babel/preset-env	7.24.5	7.25.4
@​types/node	20.12.11	20.14.10
autoprefixer	10.4.19	10.4.20
axe-core	4.9.1	4.10.0
babel-loader	9.1.3	--
eslint-plugin-import	2.29.1	2.30.0
eslint-plugin-no-unsanitized	4.0.2	4.1.0
gulp-changed	4.0.3	--
gulp-clean	0.4.0	--
gulp-cli	2.3.0	--
mocha	10.4.0	10.7.3
normalize.css	8.0.1	--
path	0.12.7	--
postcss	8.4.38	8.4.45
postcss-preset-env	9.5.11	9.6.0
prettier	3.2.5	3.3.3
sass	1.77.0	1.78.0
sass-embedded	1.77.0	1.78.0
snyk	1.1291.0	1.1293.0

... (truncated)

• 32da2de Merge pull request #6096 from uswds/release-3.9.0
• 1530937 Update uswds-3.9.0-zip-hash.txt
• 3441c5e Merge pull request #6097 from uswds/al-set-nav-button-width
• 900e6e1 Set .usa-nav__primary button width to 100%
• c37c061 Create uswds-3.9.0-zip-hash.txt
• 11f1533 3.9.0
• 36d8a46 Merge pull request #6094 from uswds/dw-add-notifications
• 57c489e Merge branch 'develop' into dw-add-notifications
• 97a7484 Merge pull request #6095 from uswds/dw-audit-deps-3.9.0
• fd53cd1 Clean cache, rebuild, and audit package
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)