microsoft · v-sohmondal · Mar 11, 2026 · Mar 11, 2026 · Mar 11, 2026 · May 14, 2026
@@ -28,7 +28,7 @@ or
 
 -   `staticSitePort` (int). If using `staticSiteDir`, you can set the local website TCP port for the extension to use when serving the static site. If unspecified, a port will be set automatically. If the pipeline serves additional processes, set the port to avoid conflicts. If using `baselineFile`, set the port to make sure future scans will match the baseline file.
 
--   `keepUrlFragment` (boolean). Default: `false`. To keep the hash fragment in the URLs. If set to false, it will remove the hash fragment from URL for example, http://www.example.com/#foo will be considered as http://www.example.com.
+-   `keepUrlFragment` (boolean). To keep the hash fragment in the URLs. If set to false, it will remove the hash fragment from URL for example, http://www.example.com/#foo will be considered as http://www.example.com.
 
 -   `authType` (Choose one: `AAD` - Azure Active Directory). For sites with authenticated pages, use with `serviceAccountName` and `serviceAccountPassword` to specify the authentication type. Learn [how to set up authentication](https://aka.ms/AI-action-auth).
 

@@ -23,7 +23,7 @@ describe('Sample task tests', () => {
         expect(testSubject.stdOutContained("##[debug][Telemetry] tracking a 'ScanCompleted' event"));
 
         function filterStdOut(stdout: string) {
-            const logs = stdout.match(/-------------------(.|\n)*This scan used axe-core 4\.10\.2/);
+            const logs = stdout.match(/-------------------(.|\n)*This scan used axe-core 4\.11\.3/);
             return logs ? logs[0] : '';
         }
     });

@@ -29,9 +29,9 @@
     "dependencies": {
         "@types/react": "^19.0.6",
         "@types/react-dom": "^19.0.2",
-        "accessibility-insights-report": "6.0.0",
+        "accessibility-insights-report": "7.5.0",
         "accessibility-insights-scan": "^3.2.0",
-        "axe-core": "^4.10.2",
+        "axe-core": "^4.11.3",
         "express": "^5.1.0",
         "filenamify-url": "^3.1.0",
         "get-port": "^7.1.0",

@@ -53,7 +53,7 @@ Failed instances
 * 1 × frame-title-unique:  Ensure <iframe> and <frame> elements contain a unique title attribute
 * 1 × frame-title:  Ensure <iframe> and <frame> elements have an accessible name
 * 1 × heading-order:  Ensure the order of headings is semantically correct
-* 1 × hidden-content:  Informs users about hidden content.
+* 1 × hidden-content:  Inform users about hidden content.
 * 1 × html-has-lang:  Ensure every HTML document has a lang attribute
 * 1 × html-lang-valid:  Ensure the lang attribute of the <html> element has a valid value
 * 1 × html-xml-lang-mismatch:  Ensure that HTML elements with both valid lang and xml:lang attributes agree on the base language of the page
@@ -88,22 +88,22 @@ Failed instances
 * 1 × object-alt:  Ensure <object> elements have alternative text
 * 1 × p-as-heading:  Ensure bold, italic text and font-size is not used to style <p> elements as a heading
 * 1 × page-has-heading-one:  Ensure that the page, or at least one of its frames contains a level-one heading
-* 1 × presentation-role-conflict:  Elements marked as presentational should not have global ARIA or tabindex to ensure all screen readers ignore them
+* 1 × presentation-role-conflict:  Ensure elements marked as presentational do not have global ARIA or tabindex so that all screen readers ignore them
 * 1 × region:  Ensure all page content is contained by landmarks
 * 1 × role-img-alt:  Ensure [role="img"] elements have alternative text
 * 1 × scope-attr-valid:  Ensure the scope attribute is used correctly on tables
-* 1 × scrollable-region-focusable:  Ensure elements that have scrollable content are accessible by keyboard
+* 1 × scrollable-region-focusable:  Ensure elements that have scrollable content are accessible by keyboard in Safari
 * 1 × select-name:  Ensure select element has an accessible name
 * 1 × server-side-image-map:  Ensure that server-side image maps are not used
 * 1 × skip-link:  Ensure all skip links have a focusable target
 * 1 × summary-name:  Ensure summary elements have discernible text
-* 1 × svg-img-alt:  Ensure <svg> elements with an img, graphics-document or graphics-symbol role have an accessible text
+* 1 × svg-img-alt:  Ensure <svg> elements with an img, graphics-document or graphics-symbol role have accessible text
 * 1 × tabindex:  Ensure tabindex attribute values are not greater than 0
 * 1 × table-duplicate-name:  Ensure the <caption> element does not contain the same text as the summary attribute
 * 1 × table-fake-caption:  Ensure that tables with a caption use the <caption> element.
 * 1 × target-size:  Ensure touch targets have sufficient size and space
 * 1 × td-has-header:  Ensure that each non-empty data cell in a <table> larger than 3 by 3  has one or more table headers
-* 1 × td-headers-attr:  Ensure that each cell in a table that uses the headers attribute refers only to other cells in that table
+* 1 × td-headers-attr:  Ensure that each cell in a table that uses the headers attribute refers only to other <th> elements in that table
 * 1 × th-has-data-cells:  Ensure that <th> elements and elements with role=columnheader/rowheader have data cells they describe
 * 1 × valid-lang:  Ensure lang attributes have valid values
 * 1 × video-caption:  Ensure <video> elements have captions

@@ -53,7 +53,7 @@
 * **1 × frame-title-unique**:  Ensure \<iframe> and \<frame> elements contain a unique title attribute
 * **1 × frame-title**:  Ensure \<iframe> and \<frame> elements have an accessible name
 * **1 × heading-order**:  Ensure the order of headings is semantically correct
-* **1 × hidden-content**:  Informs users about hidden content.
+* **1 × hidden-content**:  Inform users about hidden content.
 * **1 × html-has-lang**:  Ensure every HTML document has a lang attribute
 * **1 × html-lang-valid**:  Ensure the lang attribute of the \<html> element has a valid value
 * **1 × html-xml-lang-mismatch**:  Ensure that HTML elements with both valid lang and xml:lang attributes agree on the base language of the page
@@ -88,22 +88,22 @@
 * **1 × object-alt**:  Ensure \<object> elements have alternative text
 * **1 × p-as-heading**:  Ensure bold, italic text and font-size is not used to style \<p> elements as a heading
 * **1 × page-has-heading-one**:  Ensure that the page, or at least one of its frames contains a level-one heading
-* **1 × presentation-role-conflict**:  Elements marked as presentational should not have global ARIA or tabindex to ensure all screen readers ignore them
+* **1 × presentation-role-conflict**:  Ensure elements marked as presentational do not have global ARIA or tabindex so that all screen readers ignore them
 * **1 × region**:  Ensure all page content is contained by landmarks
 * **1 × role-img-alt**:  Ensure [role="img"] elements have alternative text
 * **1 × scope-attr-valid**:  Ensure the scope attribute is used correctly on tables
-* **1 × scrollable-region-focusable**:  Ensure elements that have scrollable content are accessible by keyboard
+* **1 × scrollable-region-focusable**:  Ensure elements that have scrollable content are accessible by keyboard in Safari
 * **1 × select-name**:  Ensure select element has an accessible name
 * **1 × server-side-image-map**:  Ensure that server-side image maps are not used
 * **1 × skip-link**:  Ensure all skip links have a focusable target
 * **1 × summary-name**:  Ensure summary elements have discernible text
-* **1 × svg-img-alt**:  Ensure \<svg> elements with an img, graphics-document or graphics-symbol role have an accessible text
+* **1 × svg-img-alt**:  Ensure \<svg> elements with an img, graphics-document or graphics-symbol role have accessible text
 * **1 × tabindex**:  Ensure tabindex attribute values are not greater than 0
 * **1 × table-duplicate-name**:  Ensure the \<caption> element does not contain the same text as the summary attribute
 * **1 × table-fake-caption**:  Ensure that tables with a caption use the \<caption> element.
 * **1 × target-size**:  Ensure touch targets have sufficient size and space
 * **1 × td-has-header**:  Ensure that each non-empty data cell in a \<table> larger than 3 by 3  has one or more table headers
-* **1 × td-headers-attr**:  Ensure that each cell in a table that uses the headers attribute refers only to other cells in that table
+* **1 × td-headers-attr**:  Ensure that each cell in a table that uses the headers attribute refers only to other \<th> elements in that table
 * **1 × th-has-data-cells**:  Ensure that \<th> elements and elements with role=columnheader/rowheader have data cells they describe
 * **1 × valid-lang**:  Ensure lang attributes have valid values
 * **1 × video-caption**:  Ensure \<video> elements have captions

@@ -61,9 +61,9 @@ __metadata:
     "@types/serve-static": ^1.15.7
     "@typescript-eslint/eslint-plugin": ^6.18.1
     "@typescript-eslint/parser": ^6.18.1
-    accessibility-insights-report: 6.0.0
+    accessibility-insights-report: 7.5.0
     accessibility-insights-scan: ^3.2.0
-    axe-core: ^4.10.2
+    axe-core: ^4.11.3
     eslint: ^8.57.0
     eslint-plugin-security: ^1.7.1
     express: ^5.1.0
@@ -7194,9 +7194,9 @@ __metadata:
   languageName: unknown
   linkType: soft
 
-"accessibility-insights-report@npm:6.0.0":
-  version: 6.0.0
-  resolution: "accessibility-insights-report@npm:6.0.0"
+"accessibility-insights-report@npm:7.0.0":
+  version: 7.0.0
+  resolution: "accessibility-insights-report@npm:7.0.0"
   dependencies:
     "@fluentui/react": ^8.118.1
     axe-core: 4.10.2
@@ -7207,24 +7207,24 @@ __metadata:
     react-dom: ^18.3.1
     react-helmet-async: ^2.0.5
     uuid: ^9.0.1
-  checksum: 84596cd8613e8fafee96f5178beac9636400907baaaeb1d04aedfbb548fe6c38d1d213da76ef00f31fe14b5259f7e730c3256e6b72a36679fd029ccf50f80b21
+  checksum: f9f056fae2588287ba520e4ba359927352405013348c454936f449b551712fb448e28087e4a59aea26450630fc57b41f72ad57f5fbbd5215ffed8a7ba7195a8a
   languageName: node
   linkType: hard
 
-"accessibility-insights-report@npm:7.0.0":
-  version: 7.0.0
-  resolution: "accessibility-insights-report@npm:7.0.0"
+"accessibility-insights-report@npm:7.5.0":
+  version: 7.5.0
+  resolution: "accessibility-insights-report@npm:7.5.0"
   dependencies:
     "@fluentui/react": ^8.118.1
-    axe-core: 4.10.2
+    axe-core: 4.11.3
     classnames: ^2.5.1
-    lodash: ^4.17.21
+    lodash: ^4.18.0
     luxon: ^3.5.0
     react: ^18.3.1
     react-dom: ^18.3.1
     react-helmet-async: ^2.0.5
-    uuid: ^9.0.1
-  checksum: f9f056fae2588287ba520e4ba359927352405013348c454936f449b551712fb448e28087e4a59aea26450630fc57b41f72ad57f5fbbd5215ffed8a7ba7195a8a
+    uuid: ^14.0.0
+  checksum: 564f531cf53d74818d6e272869eae1579c3fe7a607b00af4c6db5c1f7a670860f48268b2ed1e0dedfac38d9b94141f17247de303cf5041e662f78dc6d4f051d8
   languageName: node
   linkType: hard
 
@@ -8034,20 +8034,34 @@ __metadata:
   languageName: node
   linkType: hard
 
-"axe-core@npm:4.10.2, axe-core@npm:^4.10.2, axe-core@npm:~4.10.2":
+"axe-core@npm:4.10.2, axe-core@npm:~4.10.2":
   version: 4.10.2
   resolution: "axe-core@npm:4.10.2"
   checksum: 2b9b1c93ea73ea9f206604e4e17bd771d2d835f077bde54517d73028b8865c69b209460e73d5b109968cbdb39ab3d28943efa5695189bd79e16421ce1706719e
   languageName: node
   linkType: hard
 
+"axe-core@npm:4.11.3":
+  version: 4.11.3
+  resolution: "axe-core@npm:4.11.3"
+  checksum: b01fc82cd0e809db09166a90bbb8942a978eefab5ba1ebab8faebd94969e0bd36df9848e4e510520cd08cde9800a6d14888ebbca380dfc4594db48e9b494d399
+  languageName: node
+  linkType: hard
+
 "axe-core@npm:=4.7.0":
   version: 4.7.0
   resolution: "axe-core@npm:4.7.0"
   checksum: f086bcab42be1761ba2b0b127dec350087f4c3a853bba8dd58f69d898cefaac31a1561da23146f6f3c07954c76171d1f2ce460e555e052d2b02cd79af628fa4a
   languageName: node
   linkType: hard
 
+"axe-core@npm:^4.11.3":
+  version: 4.11.4
+  resolution: "axe-core@npm:4.11.4"
+  checksum: a7b1bf7cbec7a3c5752de11f28b552bf1ef7cbe9191bfeb887bc8fe02d727feadab4889426d7da11e6a9f18045aa6e4249112f5b7590fa02c79f97f2a9f40cd5
+  languageName: node
+  linkType: hard
+
 "axobject-query@npm:^3.2.1":
   version: 3.2.1
   resolution: "axobject-query@npm:3.2.1"
@@ -23067,6 +23081,15 @@ __metadata:
   languageName: node
   linkType: hard
 
+"uuid@npm:^14.0.0":
+  version: 14.0.0
+  resolution: "uuid@npm:14.0.0"
+  bin:
+    uuid: dist-node/bin/uuid
+  checksum: 08608584a79e987cdae000fa8eb724fa51dd8aafc136cd9fa9a8c87d07b246c56eec5fd9027fdb3e49a863eedf758bc19e325909ce281955c7a027fed67dc89e
+  languageName: node
+  linkType: hard
+
 "uuid@npm:^3.0.1":
   version: 3.4.0
   resolution: "uuid@npm:3.4.0"