Skip to content

Bump lightbox2 from 2.11.5 to 2.12.0#1129

Merged
bdukes merged 1 commit into
masterfrom
dependabot/npm_and_yarn/lightbox2-2.12.0
Mar 2, 2026
Merged

Bump lightbox2 from 2.11.5 to 2.12.0#1129
bdukes merged 1 commit into
masterfrom
dependabot/npm_and_yarn/lightbox2-2.12.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 2, 2026

Copy link
Copy Markdown
Contributor

Bumps lightbox2 from 2.11.5 to 2.12.0.

Release notes

Sourced from lightbox2's releases.

v2.12.0

What's Changed

Full Changelog: lokesh/lightbox2@v2.11.5...v2.12.0

Bug fixes

  • Fix resize handler memory leak — $.proxy reference mismatch caused listeners to accumulate on every open/close cycle
  • Fix .lb-prevLink/.lb-nextLink dead selectors in sizeContainer() → corrected to .lb-prev/.lb-next
  • Add preloader.onerror handler — broken images no longer leave the lightbox stuck in loading state
  • Fix SVG file type detection for URLs with query strings (image.svg?v=2) or fragments
  • Cancel pending image loads on rapid navigation — prevents race conditions causing layout glitches
  • Fix this/self inconsistency in contextmenu handler

Accessibility

  • Add role="dialog", aria-modal="true", aria-label="Image lightbox" to #lightbox
  • Implement focus trap — Tab is constrained to lightbox elements while open
  • Restore focus to the trigger element on close
  • Add aria-describedby linking the displayed image to its caption
  • Add aria-live="polite" to image counter so screen readers announce navigation
  • Remove empty href="" from nav buttons (already have role="button" + tabindex="0")

New public API

  • lightbox.open(images, startIndex) — open programmatically with a URL string or array of {link, title, alt} objects
  • lightbox.close() — close programmatically
  • lightbox.next() / lightbox.prev() — navigate programmatically
  • lightbox.destroy() — remove DOM elements and unbind all event listeners

New events

  • lightbox:open, lightbox:close, lightbox:change triggered on $(document) with album and index data

CSS

  • Switch overlay and lightbox from position: absolute to position: fixed — eliminates JS-based overlay sizing
  • Add 11 CSS custom properties for theming (colors, border radius, transition speeds) on :root
  • Remove stale -webkit-, -moz-, -o- vendor prefixes from transitions

Code quality

  • Replace void 0 with undefined, i = ++i with i++
  • Cache 7 additional jQuery element references in build() — eliminates repeated .find() calls
  • Fix selector injection in album grouping — use .filter() instead of string-concatenated selectors
  • Replace return false with event.preventDefault() on nav buttons
  • Use self consistently instead of mixing self/.bind()

Build tooling

  • Replace Bower with npm for jQuery dependency
  • Replace JSHint + JSCS with ESLint (flat config, v10)
  • Replace Grunt with npm scripts (npm run build, npm test)
  • Remove bower.json, Gruntfile.js, .jshintrc, .jscsrc
  • No global installs required — just npm install
Commits
  • fc01875 Merge pull request #773 from lokesh/dev
  • 7f37503 chore: bump version to 2.12.0
  • a1ef2b4 chore: update project structure by removing obsolete config files and adding ...
  • d990595 refactor: improve lightbox initialization and accessibility features
  • 2f82328 style: refactor lightbox CSS to use CSS variables for improved maintainabilit...
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [lightbox2](https://github.com/lokesh/lightbox2) from 2.11.5 to 2.12.0.
- [Release notes](https://github.com/lokesh/lightbox2/releases)
- [Commits](lokesh/lightbox2@v2.11.5...v2.12.0)

---
updated-dependencies:
- dependency-name: lightbox2
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 2, 2026
@bdukes bdukes merged commit 59f3c48 into master Mar 2, 2026
1 check passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/lightbox2-2.12.0 branch March 2, 2026 14:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Development

Successfully merging this pull request may close these issues.

1 participant