chore(scim): merge main into feat/scim ahead of Phase 8

Brings in SAML hardening (PR #405 SP-initiated, PR #406 IdP-initiated + 2FA enforcement + single-use completion token, PR #407 replay rejection), a11y harness (PR #404 WCAG 2.2 AA + Accessible theme), scheduler/worker fixes, and crowdin sync.

Sets a fresh base for Phase 8 (Groups + member-PATCH + Okta E2E) so the final v0.24.0 squash to main lands clean.

Resolved conflict in app/[locale]/admin/users/columns.tsx by combining Phase 6 Plan 09's SCIM Provisioner badge + disabled-actions logic with PR #404's aria-label accessibility addition on the actions trigger.

Post-merge regen (pnpm generate) + verification: 475/475 unit tests pass across SCIM (Phases 5-7) + SAML PRs + auth-security. Phase 7's JIT-link adapter rewrite and session-callback isActive fresh-read remain green against the new SAML completion flow.

Author: therealbrad

docs/docs/features.md

@@ -174,6 +174,7 @@ TestPlanIt is a comprehensive test management platform designed to help teams pl
 - **Custom statuses** - Create statuses with custom icons and colors
 - **Templates** - Create templates for consistent test case structure
 - **User preferences** - Configure theme, locale, timezone, and date/time formats; preference selections are visible from the profile view as well as the editor
+- **Accessible theme** - Opt-in high-contrast theme tuned for WCAG 2.2 Level AA (stronger contrast, larger interactive targets, visible focus), selectable per user without affecting other themes
 - **Configurations** - Author OS / browser / environment configurations scoped to projects, with an admin UX overhaul covering bulk assign and search
 
 ### Security & Compliance

docs/docs/user-guide/user-menu.md

@@ -14,11 +14,24 @@ Once opened, the menu displays:
 1. **Your Name and Email**: Shown at the top for identification.
 2. **View Profile**: Navigates you directly to your **[User Profile](./user-profile.md)** page.
 3. **Theme**: Opens a sub-menu where you can select your preferred visual theme for the application.
-    - Options include Light, Dark, System (matches your operating system setting), Green, Orange, and Purple.
+    - Options include Light, Dark, System (matches your operating system setting), Green, Orange, Purple, and **Accessible**.
+    - **Accessible** is a high-contrast theme tuned for accessibility (WCAG 2.2 AA): it strengthens text and border contrast, enlarges small interactive targets, and adds a clearly visible keyboard focus ring. Choose it if you rely on these aids — see [Accessibility](#accessibility) below.
     - A checkmark indicates the currently active theme.
     - Selecting a new theme saves the preference to your profile and reloads the application to apply the change.
 4. **Language**: Opens a sub-menu to select the display language for the application interface.
     - Available languages are listed (e.g., English, Spanish).
     - A checkmark indicates the currently active language.
     - Selecting a new language saves the preference to your profile and reloads the application to apply the change.
 5. **Sign Out**: Logs you out of your current session and redirects you to the Sign In page.
+
+## Accessibility
+
+TestPlanIt includes an opt-in **Accessible** theme designed to meet the [WCAG 2.2](https://www.w3.org/TR/WCAG22/) Level AA presentation requirements. It is one of the regular theme choices in the **Theme** sub-menu (and on your [User Profile](./user-profile.md) preferences), so you can turn it on or off at any time without affecting other users.
+
+Compared to the default themes, the Accessible theme:
+
+- **Increases contrast** for body text, secondary ("muted") text, and UI borders so content meets the minimum contrast ratio.
+- **Enlarges small interactive targets** (such as compact icon buttons and toggles) to at least the recommended minimum size.
+- **Adds a high-contrast keyboard focus ring** so the currently focused control is always clearly visible.
+
+Your selection is saved to your profile and persists across sessions and devices. The other themes are left unchanged, so teammates who prefer them are unaffected.

docs/docs/user-guide/user-profile.md

@@ -63,7 +63,7 @@ When viewing your own profile, you can view and edit these preferences:
 
 #### Display Preferences
 
-- **Theme**: Choose from Light, Dark, System, Green, Orange, or Purple themes (with color indicators)
+- **Theme**: Choose from Light, Dark, System, Green, Orange, Purple, or **Accessible** themes (with color indicators). The Accessible theme is a high-contrast option tuned for [WCAG 2.2](https://www.w3.org/TR/WCAG22/) Level AA — see [Accessibility](./user-menu.md#accessibility)
 - **Locale**: Language preference (English, German, Spanish, French, Italian, Dutch, Polish, Portuguese, Turkish, Vietnamese, Russian, Chinese Simplified, Chinese Traditional, Japanese, Korean)
 - **Items Per Page**: Number of items to show in paginated tables (10, 25, 50, 100)
 

pnpm-lock.yaml

@@ -61,6 +61,12 @@ e2e/playwright-report/
 e2e/test-results/
 .env.e2e
 
+# Accessibility scan (e2e/a11y) — never commit results, seeded fixtures, or reports
+e2e/a11y/results/
+e2e/a11y/.a11y-fixtures.json
+e2e/a11y/playwright-report/
+e2e/a11y/test-results/
+
 # DB backups
 backups/
 

testplanit/.gitignore

@@ -1,3 +1,39 @@
+## [0.35.3](https://github.com/TestPlanIt/testplanit/compare/v0.35.2...v0.35.3) (2026-06-05)
+
+### Bug Fixes
+
+* **auth:** reject replayed SAML assertions ([#407](https://github.com/TestPlanIt/testplanit/issues/407)) ([ab75960](https://github.com/TestPlanIt/testplanit/commit/ab75960f654755b57e68f1110ed4d719e3c0c404)), closes [#406](https://github.com/TestPlanIt/testplanit/issues/406)
+
+## [0.35.2](https://github.com/TestPlanIt/testplanit/compare/v0.35.1...v0.35.2) (2026-06-05)
+
+### Enhancements
+
+* **auth:** support IdP-initiated SAML and harden the SSO completion flow ([#406](https://github.com/TestPlanIt/testplanit/issues/406)) ([7f3a653](https://github.com/TestPlanIt/testplanit/commit/7f3a653cca24427ad2dbfc58e896f8ecc6386eb7)), closes [#405](https://github.com/TestPlanIt/testplanit/issues/405)
+
+## [0.35.1](https://github.com/TestPlanIt/testplanit/compare/v0.35.0...v0.35.1) (2026-06-05)
+
+### Bug Fixes
+
+* **auth:** make SAML SP-initiated login work end-to-end ([#405](https://github.com/TestPlanIt/testplanit/issues/405)) ([e65517c](https://github.com/TestPlanIt/testplanit/commit/e65517c04b71637a1d6b4da82fe860bd79c53df9))
+
+## [0.35.0](https://github.com/TestPlanIt/testplanit/compare/v0.34.12...v0.35.0) (2026-06-05)
+
+### Features
+
+* **a11y:** WCAG 2.2 AA scan harness, Accessible theme, and name/role fixes ([#404](https://github.com/TestPlanIt/testplanit/issues/404)) ([ae18e3e](https://github.com/TestPlanIt/testplanit/commit/ae18e3e47700955d121254c26abe73086aaacfd2))
+
+## [0.34.12](https://github.com/TestPlanIt/testplanit/compare/v0.34.11...v0.34.12) (2026-06-05)
+
+### Bug Fixes
+
+* **scheduler:** skip legacy keyless entries in reconciliation ([#403](https://github.com/TestPlanIt/testplanit/issues/403)) ([0aef3aa](https://github.com/TestPlanIt/testplanit/commit/0aef3aa2c77df27ed88769e4f659e702ea60165b))
+
+## [0.34.11](https://github.com/TestPlanIt/testplanit/compare/v0.34.10...v0.34.11) (2026-06-05)
+
+### Enhancements
+
+* **workers:** BullMQ worker groups via configurable key prefix ([#402](https://github.com/TestPlanIt/testplanit/issues/402)) ([6e677c0](https://github.com/TestPlanIt/testplanit/commit/6e677c0c076a9d498f189960755c6c6b0b1be011))
+
 ## [0.34.10](https://github.com/TestPlanIt/testplanit/compare/v0.34.9...v0.34.10) (2026-06-04)
 
 ### Enhancements

testplanit/CHANGELOG.md

@@ -84,6 +84,7 @@ export function getColumns(
             variant="ghost"
             className="px-2 py-1 h-auto"
             data-testid="edit-config-button"
+            aria-label={t("actions.edit")}
             onClick={() => onEditConfig?.(row.original)}
           >
             <Edit className="h-4 w-4" />
@@ -92,6 +93,7 @@ export function getColumns(
             variant="destructive"
             className="px-2 py-1 h-auto"
             data-testid="delete-config"
+            aria-label={t("actions.delete")}
             onClick={() => onDeleteConfig?.(row.original)}
           >
             <Trash2 className="h-4 w-4" />

testplanit/app/[locale]/admin/app-config/columns.tsx

@@ -168,6 +168,7 @@ export function getColumns({
             size="icon"
             className="px-2 py-1 h-auto"
             onClick={() => onEdit(row.original)}
+            aria-label={tCommon("actions.edit")}
           >
             <Edit className="h-4 w-4" />
           </Button>
@@ -176,6 +177,7 @@ export function getColumns({
             size="icon"
             className="px-2 py-1 h-auto"
             onClick={() => onDelete(row.original)}
+            aria-label={tCommon("actions.delete")}
           >
             <Trash2 className="h-4 w-4" />
           </Button>

testplanit/app/[locale]/admin/code-repositories/columns.tsx

@@ -135,13 +135,15 @@ export const useColumns = (
               variant="ghost"
               className="px-2 py-1 h-auto"
               onClick={() => onEditCategory?.(row.original)}
+              aria-label={tCommon("actions.edit")}
             >
               <SquarePen className="h-5 w-5" />
             </Button>
             <Button
               variant="destructive"
               className="px-2 py-1 h-auto"
               onClick={() => onDeleteCategory?.(row.original)}
+              aria-label={tCommon("actions.delete")}
             >
               <Trash2 className="h-5 w-5" />
             </Button>

testplanit/app/[locale]/admin/configurations/categoryColumns.tsx

@@ -329,13 +329,15 @@ export const useColumns = (
               variant="ghost"
               className="px-2 py-1 h-auto"
               onClick={() => onEditConfiguration?.(row.original)}
+              aria-label={t("actions.edit")}
             >
               <SquarePen className="h-5 w-5" />
             </Button>
             <Button
               variant="destructive"
               className="px-2 py-1 h-auto"
               onClick={() => onDeleteConfiguration?.(row.original)}
+              aria-label={t("actions.delete")}
             >
               <Trash2 className="h-5 w-5" />
             </Button>