new release (v3.2.0) (#217)

after merging this PR:
#213

workflows are passing with main branch:
https://github.com/github/accessibility-scorecard/actions/runs/25873353511

Author: abdulahmad307

.github/actions/auth/package-lock.json

@@ -13,11 +13,11 @@
   "license": "MIT",
   "type": "module",
   "dependencies": {
-    "@actions/core": "^3.0.0",
-    "playwright": "^1.59.1"
+    "@actions/core": "^3.0.1",
+    "playwright": "^1.60.0"
   },
   "devDependencies": {
-    "@types/node": "^25.6.0",
+    "@types/node": "^25.7.0",
     "typescript": "^6.0.3"
   }
 }

.github/actions/auth/package.json

@@ -13,12 +13,12 @@
   "license": "MIT",
   "type": "module",
   "dependencies": {
-    "@actions/core": "^3.0.0",
+    "@actions/core": "^3.0.1",
     "@octokit/core": "^7.0.6",
     "@octokit/plugin-throttling": "^11.0.3"
   },
   "devDependencies": {
-    "@types/node": "^25.6.0",
+    "@types/node": "^25.7.0",
     "typescript": "^6.0.3"
   }
 }

.github/actions/file/package-lock.json

@@ -4,8 +4,11 @@ description: 'Finds potential accessibility gaps.'
 inputs:
   urls:
     description: 'Newline-delimited list of URLs to check for accessibility issues'
-    required: true
+    required: false
     multiline: true
+  url_configs:
+    description: "Stringified JSON array of URL config objects, each with a 'url' field and an optional 'excludeSelectors' field (array of CSS selectors to exclude from the Axe scan for that URL). When provided, takes precedence over the 'urls' input."
+    required: false
   auth_context:
     description: "Stringified JSON object containing 'username', 'password', 'cookies', and/or 'localStorage' from an authenticated session"
     required: false

.github/actions/file/package.json

@@ -13,13 +13,13 @@
   "license": "MIT",
   "type": "module",
   "dependencies": {
-    "@actions/core": "^3.0.0",
-    "@axe-core/playwright": "^4.11.2",
+    "@actions/core": "^3.0.1",
+    "@axe-core/playwright": "^4.11.3",
     "esbuild": "^0.28.0",
-    "playwright": "^1.59.1"
+    "playwright": "^1.60.0"
   },
   "devDependencies": {
-    "@types/node": "^25.6.0",
+    "@types/node": "^25.7.0",
     "typescript": "^6.0.3"
   }
 }

.github/actions/find/action.yml

@@ -1,4 +1,4 @@
-import type {ColorSchemePreference, Finding, ReducedMotionPreference} from './types.d.js'
+import type {ColorSchemePreference, Finding, ReducedMotionPreference, UrlConfig} from './types.d.js'
 import {AxeBuilder} from '@axe-core/playwright'
 import playwright from 'playwright'
 import {AuthContext} from './AuthContext.js'
@@ -8,12 +8,13 @@ import {getScansContext} from './scansContextProvider.js'
 import * as core from '@actions/core'
 
 export async function findForUrl(
-  url: string,
+  urlConfig: UrlConfig,
   authContext?: AuthContext,
   includeScreenshots: boolean = false,
   reducedMotion?: ReducedMotionPreference,
   colorScheme?: ColorSchemePreference,
 ): Promise<Finding[]> {
+  const {url, excludeSelectors} = urlConfig
   const browser = await playwright.chromium.launch({
     headless: true,
     executablePath: process.env.CI ? '/usr/bin/google-chrome' : undefined,
@@ -56,7 +57,7 @@ export async function findForUrl(
     }
 
     if (scansContext.shouldPerformAxeScan) {
-      await runAxeScan({page, addFinding})
+      await runAxeScan({page, addFinding, excludeSelectors})
     }
   } catch (e) {
     core.error(`Error during accessibility scan: ${e}`)
@@ -69,13 +70,18 @@ export async function findForUrl(
 async function runAxeScan({
   page,
   addFinding,
+  excludeSelectors,
 }: {
   page: playwright.Page
   addFinding: (findingData: Finding, options?: {includeScreenshots?: boolean}) => Promise<void>
+  excludeSelectors?: string[]
 }) {
   const url = page.url()
   core.info(`Scanning ${url}`)
-  const rawFindings = await new AxeBuilder({page}).analyze()
+  const axeBuilder = new AxeBuilder({page})
+  excludeSelectors?.forEach(selector => axeBuilder.exclude(selector))
+
+  const rawFindings = await axeBuilder.analyze()
 
   if (rawFindings) {
     for (const violation of rawFindings.violations) {