Issues

• [Aikido][Critical] Content Security Policy (CSP) header not set on https://cauldron.dequelabs.com

  aikidosecurity:critical
  dequelabs/cauldron#2573 · Filter by author darrenanderson33 opened on Oct 20, 2026

• [Aikido][Critical] Using unsafe GitHub Actions trigger may allow privilege escalation via CI/CD (1 location)

  aikidosecurity:critical
  dequelabs/cauldron#2572 · Filter by author darrenanderson33 opened on Oct 20, 2026

• Bug: Escape closes the Combobox and the container around it

  bug
  dequelabs/cauldron#2567 · Filter by author rheisler-deque opened on Oct 13, 2026

• useFocusTrap: wrap, initial focus and recovery can target elements that are not Tab stops

  dequelabs/cauldron#2565 · Filter by author mateoviilla1 opened on Oct 13, 2026

• Bug: dark TopBar border color reads undefined --gray-70

  bug
  dequelabs/cauldron#2556 · Filter by author frankensteinke opened on Oct 1, 2026

• chore: upgrade Playwright off the 1.50.1 pin

  dequelabs/cauldron#2548 · Filter by author rheisler-deque opened on Sep 25, 2026
  1

• chore: upgrade Babel from 7 to 8

  dequelabs/cauldron#2534 · Filter by author rheisler-deque opened on Sep 18, 2026

• Listbox: make activeOption a properly controlled prop

  dequelabs/cauldron#2522 · Filter by author dbjorge opened on Sep 4, 2026

• Bug: AnchoredOverlay cannot constrain its height to the available space

  bug
  dequelabs/cauldron#2521 · Filter by author denysfedorov opened on Sep 2, 2026

• [a11y] Treeview "Custom onAction": additional checkboxes can't be selected, and first selection opens an unannounced dialog

  accessibility
  dequelabs/cauldron#2519 · Filter by author jennyh01 opened on Aug 31, 2026
  5

  

• [a11y] TreeView: focused row scrolls out of the viewport in virtualized examples

  accessibility
  dequelabs/cauldron#2518 · Filter by author jennyh01 opened on Aug 31, 2026
  3

  

• Toast: overflow-y: auto on .Toast__message-content shows a spurious scrollbar for any toast containing a Link

  dequelabs/cauldron#2468 · Filter by author frankensteinke opened on Jul 8, 2026

• chore(react): publish a tree-shakeable dual CJS/ESM build

  dequelabs/cauldron#2466 · Filter by author frankensteinke opened on Jul 7, 2026
  1

• TreeView: cascadeSelect/cascadeDeselect don't compose with controlled selection; disabled nodes aren't expandable

  enhancement
  dequelabs/cauldron#2453 · Filter by author mateoviilla1 opened on Jun 23, 2026

• react test suite leaks ~5-6 MB/file → OOM in CI under --coverage

  bugclaude-code-assistedmediumtech debt
  dequelabs/cauldron#2447 · Filter by author frankensteinke opened on Jun 22, 2026

• Drawer: missing role="dialog" and automatic accessible name

  dequelabs/cauldron#2428 · Filter by author rheisler-deque opened on Jun 4, 2026

• Code Connect: richer variant templating for icon-bearing components (Link, etc.)

  dequelabs/cauldron#2381 · Filter by author frankensteinke opened on May 13, 2026

• CI: auto-publish Figma Code Connect on merge to develop

  dequelabs/cauldron#2376 · Filter by author frankensteinke opened on May 13, 2026

• Connect Cauldron components to Figma

  dequelabs/cauldron#2373 · Filter by author frankensteinke opened on May 13, 2026
  4

• Toast: several tests have assertions that never run due to misuse of timers/promises setTimeout

  dequelabs/cauldron#2359 · Filter by author rheisler-deque opened on May 5, 2026

• Bug: useSharedRef leaves a stale element reference on the parent ref after unmount

  dequelabs/cauldron#2358 · Filter by author rheisler-deque opened on May 5, 2026
  

• chore(react): migrate library build from Rollup to Vite (lib mode)

  dequelabs/cauldron#2348 · Filter by author anastasialanz opened on Apr 29, 2026

• Bug: Toast does not restore focus when dismissed

  accessibilitybugWCAG 2.4.3
  dequelabs/cauldron#2345 · Filter by author rheisler-deque opened on Apr 28, 2026
  1

• Multiselect Combobox: no way to intercept or gate chip deselection

  dequelabs/cauldron#2338 · Filter by author davidg-dq opened on Apr 27, 2026

• Multiselect Combobox: chip row spacing issues when chips wrap to multiple lines

  dequelabs/cauldron#2337 · Filter by author davidg-dq opened on Apr 27, 2026