1.14.0

Docs: Update AUTHORS.txt

Datepicker: Hide the UI on destroy

When the datepicker UI is shown and then destroyed programmatically:
```js
$( "#datepicker" ).datepicker( "destroy" );
```
hide the datepicker UI without the need for an explicit user action.
Previously, in 1.12 the UI would not disappear immediately but only after the
first `mousedown`. In later 1.13 versions, the UI would not disappear at all.

Fixes gh-2178
Closes gh-2268

Build: Bump actions/setup-node from 4.0.2 to 4.0.3 in the github-actions group

Bumps the github-actions group with 1 update: [actions/setup-node](https://github.com/actions/setup-node).

Updates `actions/setup-node` from 4.0.2 to 4.0.3
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/60edb5dd545a775178f52524783378180af0d1f8...1e60f620b9541d16bece96c5465dc8ee9832be0b)

Closes gh-2276

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Tests: Update jQuery Migrate from 3.4.1 to 3.5.2, simplify Migrate setup

Apart from updating jQuery Migrate, the setup is now changed so that exact
Migrate versions are only references when fetching npm packages; other than
that, they're represented as `jquery-migrate-1.x` & `jquery-migrate-3.x`. This
will allow smaller changes when updating jQuery Migrate in the future.

Closes gh-2273

Demos: Make autocomplete demos work on jqueryui.com

The `jqueryui.com` demos build process deAMDifies HTML files, replacing required
JS files with direct script tags. On the other hand, when running demos locally
from the jQuery UI repository, RequireJS is used.

This used to work fine until we got a new `search.js` file introduced in
gh-2187. The deAMDifying process doesn't touch non-HTML files which made loading
autocomplete demos crash on "require is not a function"

To resolve the issues without a major rearchitecture of the build process,
the `search.js` file now detects AMD and uses `require`, falling back to relying
on the `jQuery` global in the other case.

Closes gh-2274
Ref gh-2187
Ref jquery/jqueryui.com#216

Build: Group dependabot PRs updating GitHub Actions

We have monthly automatic dependabot PRs for GitHub Actions. Unfortunately,
as of now we get a separate PR for every dependency which is a bit spammy
compared to regular commits updating source.

Thankfully, there's now a way to tell dependabot to submit a single PR per
a defined group. This change defines a single group to have a single dependabot
PR for all action updates.

Closes gh-2267
Ref jquery/jquery#5503

Release: Update download.jqueryui.com from 2.3.6 to 2.3.7

Build: Bump actions/checkout from 4.1.6 to 4.1.7

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.6 to 4.1.7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/a5ac7e51b41094c92402da3b24376905380afc29...692973e3d937129bcbf40652eb9f2f61becf3332)

Closes gh-2266

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Release: Update download.jqueryui.com from 2.3.5 to 2.3.6

Release: Update download.jqueryui.com from 2.3.4 to 2.3.5

Release: Fix the release script

Release: Update download.jqueryui.com from 2.2.14 to 2.3.4

Build: Update AUTHORS.txt

Dialog: Add aria-modal support

Reflect the `modal` dialog option into the `aria-modal` attribute -
when `modal` is `true`, set `aria-modal` to `"true"`.

This helps some accessibility tools like VoiceOver with their rotor
functionality as it reduces the number of elements presented.

Fixes gh-2246
Closes gh-2257

Co-authored-by: Michał Gołębiowski-Owczarek <m.goleb@gmail.com>

Tests: remove testswarm grunt task

Closes gh-2263

Tests: conslidate GH actions runs; separate git & stable jQuery versions

- also add hard retries to runs

Closes gh-2260

Build: Bump actions/checkout from 4.1.4 to 4.1.6

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.4 to 4.1.6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/0ad4b8fadaa221de15dcec353f45205ec38ea70b...a5ac7e51b41094c92402da3b24376905380afc29)

Closes gh-2259

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Build: Test on more jQuery Core versions

The initial 1.14.0 announcement only promised support for the latest version
of jQuery Core within each major. The main goal was to avoid testing on too many
old versions. However, just testing on the latest one seems too drastic. For
now, add `3.6.4` to the mix; we'll work on a more detailed policy soon.

Closes gh-2258

Build: Report compressed sizes in compare_size

Just like it has always worked in Core. This will help with size comparisons
between 1.13 & 1.14.

After this PR:

```
$ grunt sizer
Running "requirejs:js" (requirejs) task

Running "uglify:main" (uglify) task
>> 1 file created 549 kB → 267 kB

Running "compare_size:all" (compare_size) task
   raw     gz Sizes
549319 128757 dist/jquery-ui.js
266710  69612 dist/jquery-ui.min.js

Done.
```

Before, only the less interesting `raw` sizes were reported.

Closes gh-2254
Ref gh-2248

Tests: remove code supporting jenkins and testswarm

Close gh-2251

Core: Update compatible jQuery versions

Instead of `>=1.8.0 <4.0.0`, specify `>=1.12.0 <5.0.0`.

Effect: Update jQuery Color from 2.2.0 to 3.0.0

Breaking changes applicable to jQuery UI:
* Use a space when serializing, remove the transparent case ([#88](https://github.com/jquery/jquery-color/issues/88), [aaf03cc](https://github.com/jquery/jquery-color/commit/aaf03ccec3bd8c15733d8e72e214cf63150a2569))

See https://github.com/jquery/jquery-color/releases/tag/3.0.0 for more
information.

Fixes gh-2240

Build: Add `/.github`, `/build` & `/external` to .gitignore

Also, make some `.gitignore` paths absolute.

Fixes gh-2075

Tests: Fix form-reset-mixin test module name, add to the tests HTML

Ref gh-2249

Build: Drop support for Node 10

Ref gh-2249

Docs: Fix the link to Mongoose

Ref gh-2249

Build: Remove unused build/themes

Ref gh-2249

All: Remove the deprecated `ui/core.js` file

Also, fix checkboxradio visual tests.

Ref gh-2249

All: Stop relying on jquery-patch.js internally, add tests

Avoid relying on jQuery patches. Instead:
* use `CSS.escape` instead of `jQuery.escapeSelector`
* use `.filter()` with a proper handler instead of `.even()`

Keep `jquery-patch.js` for backwards compatibility, though.

Also, add tests for jquery-patch.

Ref gh-2249

Sortable: Rename `storedStylesheet` to `_storedStylesheet`

This follows the naming strategy for other internal properties.

Ref gh-2249

All: Drop support for IE & some other browsers (but mostly IE)

Closes gh-2249

All: Drop support for jQueries different than the latest for each major

Also, remove the ability to run the test suite in jQuery <1.12.4 & <2.2.4.

Closes gh-2249

Core: Make back compat disabled by default

Closes gh-2250

Build: Bump actions/checkout from 4.1.2 to 4.1.4

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.2 to 4.1.4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/9bb56186c3b09b4f86b1c65136769dd318469633...0ad4b8fadaa221de15dcec353f45205ec38ea70b)

Closes gh-2247

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Build: Updating the main version to 1.14.0-pre

Build: Updating the main version to 1.13.4-pre.

Build: Update AUTHORS.txt

Docs: Update leftover HTTP Trac URLs to HTTPS

Build: Update download.jqueryui.com from 2.2.12 to 2.2.14

Docs: Change a few most common domains from HTTP to HTTPS

Also, update a few stale URLs to what they redirect now to.

Closes gh-2244

Update custom_render.html (#2242)

This fixes mixed content errors on the selectmenu demo page at jqueryui.com.

Closes gh-2242

Build: Update release dependencies

In particular, the `node-packager` update is required for the release process
to work on newer Node.js versions.

Closes gh-2239

Docs: remove a duplicated "be" in an accordion demo

Closes gh-2233

Signed-off-by: divdeploy <chenguangxue@outlook.com>

Tests: Skip a problematic keyboard test in IE with jQuery 3.6

jQuery 3.6 has issues with focus handling in IE which breaks this test.
The issues were fixed in jQuery 3.7, so we just accept them here.

Closes gh-2231

Tests: Increase robustness of a draggable `revert` test

One of the changes is increasing `revertDuration` from 200 to 300. For some
reason, when jQuery 3.1 is used in an iframe (which TestSwarm uses) the timings
are lower than expected and `setTimeout` too slow and the check for animation
happens too late.

Closes gh-2230

Tests: Workaround a jQuery 1.8 issue with one dialog test

The test "#8958: dialog can be opened while opening" had special behavior in
jQuery 1.8 and the patch from commit 7adb13ac7c30a7ba33f1db256952be77b9e7a310
broke those assumptions. Adjust the test so that it passes again.

Closes gh-2229

Build: Update jquery-3.x to point to 3.7.1 instead of 3.7.0

Closes gh-2228

Tests: align test runner with other repos

Close gh-2234

Build(deps): Bump actions/checkout from 4.1.1 to 4.1.2

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/b4ffde65f46336ab88eb53be808477a3936bae11...9bb56186c3b09b4f86b1c65136769dd318469633)

Closes gh-2224

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Build(deps-dev): Bump express from 4.19.1 to 4.19.2

Bumps [express](https://github.com/expressjs/express) from 4.19.1 to 4.19.2.
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](https://github.com/expressjs/express/compare/4.19.1...4.19.2)

Closes gh-2223

---
updated-dependencies:
- dependency-name: express
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Tests: replace grunt-contrib-qunit with jQuery test runner

- add filestash workflow

Close gh-2221

Tests: Fix tests with the Git Core build

jQuery PR jquery/jquery#5452 removed special handling of boolean attributes.
Thankfully, this only broke a single jQuery UI test.

Closes gh-2220

Build(deps): Bump actions/cache from 3 to 4

Bumps [actions/cache](https://github.com/actions/cache) from 3 to 4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3...v4)

Closes gh-2210

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

demos: Replace search.php with $.ajaxTransport() mock

Fixes jquery/jqueryui.com#203
Closes gh-2187

Build: Change Node tested versions from 10/16/18 to 10/18/20

Closes gh-2195

Build(deps): Bump actions/setup-node from 3 to 4

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v4)

Closes gh-2193

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Build(deps): Bump actions/checkout from 3 to 4

Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

Closes gh-2188

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Build: Add jQuery 3.7.0

Tests: Workaround IE issues in qunit-assert-domequal

In IE, `option` elements may have different initial `option` colors.
They may initially all be transparent, but later the selected
option gets a blue background with white text; we now ignore it.

The logic of `qunit-assert-domequal` was also fixed to use the same
method of fetching styles in all browsers; IE used to get a legacy
one meant for IE <9 due to a mistake in the performed check.

Tests: Make resizable tests a bit more forgiving

Tests: Workaround a dialog test issue by a proper cleanup

The `#favorite-animal` focus & blur handlers used to not be cleaned up after
the test automatically, leading to issues with some jQuery versions.

Tests: Fix selectmenu width tests in Firefox with jQuery 3.0 & 3.1

jQuery 3.0 & 3.1 used `getBoundingClientRect()` in its `width`/`height`
calculations and that causes minor differences in fractional width computations.
Allow a tiny delta in tests to fix those tests breaking in Firefox.

Ref jquery/jquery#3561
Closes gh-2159

Dialog: Fix IE tests about interactions with other dialogs

The workaround triggering a second delayed focus to a tabbable element was
applied in jQueries 3.4 & 3.5 to fix IE issues. It also needs to be applied
in jQuery 3.6 which this commit adds.

This will no longer be needed in jQuery 3.7 and jQuery 3.x-git tests are
already passing because of that.

Closes gh-2160

Selectmenu: Fix selecting options following hidden ones

Change a2b25ef6caae3e1a272214839b815a6387618124 made options with
the `hidden` attribute skipped when rendering. However, that makes
indexes misaligned with native options as hidden ones maintain their
index values. Instead, don't skip hidden options but add the `hidden`
attribute to the respective jQuery UI elements as well.

Fixes gh-2082
Closes gh-2144
Ref a2b25ef6caae3e1a272214839b815a6387618124

Build: Add jQuery 3.6.4, update Migrate to 3.4.1

Closes gh-2161

Build: Fork vendors to remove QUnit deprecated API usage

Changes:
* add `tests/lib/vendor/**/*` to `.eslintignore`
* move `qunit-composite` to `tests/lib` so that we can modify it
* move `qunit-assert-classes` to `tests/lib` so that we can modify it
* move `qunit-assert-close` to `tests/lib` so that we can modify it
* replace `assert.push` with `assert.pushResult`
* remove usage of `QUnit.extend`

Closes gh-2157

Build: Update dependencies, including QUnit 1 -> 2

Also, fix htmllint lang exclusion patterns.

Ref gh-2157

Build: Stop using ::set-output in GitHub Actions

The `set-output` workflow is deprecated in favor of using environment
variables, see:
https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

Tests: Make Puppeter really fire Chrome on macOS

Also, workaround issues with QUnit Chrome bridge: the Chrome bridge
from `grunt-contrib-qunit` is now getting injected into every single
iframe, including an empty one that has no intention of running QUnit
tests. Since that bridge requires QUnit, it fails with an error
in such cases. Workaround the issue by wrapping the bridge in
another function that bails early if QUnit is not defined.

Ref gh-2157

Build: Test on Node 10, 16 & 18; fix CI in Node <16

Ref gh-2157

Tests: Switch from QUnit.jsDump to QUnit.dump

`QUnit.jsDump` was renamed to `QUnit.dump` in QUnit 2.0.

Ref gh-2157

Tests: Fix tooltip tests by destroying tooltips

Some tests were not properly destroying tooltips which made tests
start to fail with the new QUnit.

Ref gh-2157

Demos:Tests: Avoid self-closing HTML tags

Self-closing tags are reported by newer versions of the htmllint
Grunt plugin. They also don't make sense in our HTML files
since they are not XHTML-compliant and they run in HTML mode
anyway.

Ref gh-2157

Tests: Test only valid values for Datepicker defaultDate, min/maxDate

The docs say that valid periods when using string value and
period pairs as relative dates are "y", "m", "w", and "d"
https://api.jqueryui.com/datepicker/

Closes gh-2143

Docs: Add a maintenance mode info to README

Closes gh-2150

Build: Add jQuery 3.6.1-3.6.3, update Migrate to 3.4.0

Demos: Optimize PNG files

Optimization done by calling:

    for i in `find -name '*.png'`; do optipng -o7 -zm9 $i; done

Closes gh-2132

Demos: Better wording for the purposefully broken tab

Fix both grammar and punctuation in one tabs demo.

Closes gh-2139

Build: Set minimum permission for GitHub Actions Token

Closes gh-2129

Signed-off-by: Ashish Kurmi <akurmi@stepsecurity.io>

Resizable: Fix resizing of elems with `box-sizing: border-box`

Fixes gh-1979
Closes gh-2012

Core: Fix dependencies in ui/core.js

The `jquery-patch` reference was included with the `.js` extension which is
not allowed in AMD.

Fixes gh-2107
Closes gh-2109

Docs: Add a security policy in SECURITY.md

This is needed so that people know how to report security issues.

Closes gh-2103

All: Update JS Foundation mentions to OpenJS Foundation

Closes gh-2104

Build: Updating the main version to 1.13.3-pre.

Checkboxradio: Don't re-evaluate text labels as HTML

If you generate a Checkboxradio from a checkbox/radio with a label that
contains encoded HTML, e.g. `&lt;em&gt;test&lt;/em&gt;` this will work fine
at first. If, however a refresh is triggered on that instance (explicitly or
e.g. by turning it into a `Controlgroup`), the previously escaped HTML will
now be evaluated.

If the label was created based on some user input, this could lead to
unexpected code execution even though the initial output was escaped.

Fixes gh-2101
Closes gh-2102

All: Remove deprecated .click() usage in demos/tests

Build: Update AUTHORS.txt

Datepicker: Capitalize some Indonesian words

Closes gh-2067

Selectmenu: Remove a call to the deprecated .focus() method

Replaces a call to the deprecated jQuery `.focus()` method
with `.trigger("focus")`.

Closes gh-2053

Build: Update AUTHORS.txt

Datepicker: Add missing localization for prevText and nextText

Fixes gh-2048
Closes gh-2050
Closes gh-2100

Datepicker: Remove symbols in localization

Follow-up to dfff5e7e999453f5d080c184bd4e3fdbfc93b83e

Fixes gh-2048
Closes gh-2050

Datepicker: Remove symbols in localization

Fixes gh-2048
Closes gh-2050
Ref gh-2067

Build(deps): Bump actions/checkout from 2 to 3

Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

Closes gh-2098

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Build(deps): Bump actions/cache from 2 to 3

Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2...v3)

Closes gh-2097

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Build(deps): Bump actions/setup-node from 1 to 3

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 1 to 3.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v1...v3)

Closes gh-2096

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Build: Add dependabot.yml config (GitHub Actions)

Closes gh-2093
Ref jquery/jquery#5057

Build: Update Grunt to resolve CVE-2022-1537

More details:
https://github.com/advisories/GHSA-rm36-94g8-835r

Fixes gh-2090
Closes gh-2091

Build: Include all the files published to the CDN in npm/Bower packages

Both unminified & minified versions of JS & CSS files are included, for all
themes, as well as images.

Fixes gh-2011
Closes gh-2059