v5.3.x

[palcarazm]

ℹ️ What's Changed

🆕 Added

• Bootstrap tooltip support – adds comprehensive tooltip functionality with title configuration via data attributes (data-tooltip-title-on, data-tooltip-title-off, data-tooltip-title-mixed, data-tooltip-placement) and JavaScript API.
  • by @palcarazm
  • implements [FEATURE] Add support for BS5 tooltips for toggle #215
  • in ad415db
• Custom DOM events for toggle state changes – emits six custom events (toggle:on, toggle:off, toggle:mixed, toggle:enabled, toggle:disabled, toggle:readonly) with state details in payload for better framework integration.
  • by @palcarazm
  • implements [FEATURE] Emit custom events with internal state #233
  • in ba955f9
• Full ARIA accessibility support – adds role="switch", aria-label, aria-checked, aria-disabled, and aria-readonly attributes with proper state updates for screen reader compatibility.
  • by @palcarazm
  • implements [FEATURE] Full ARIA accessibility support #232
  • in 0e104e7
• HTML sanitization for toggle labels – implements allow-list based sanitization to safely allow HTML formatting (bold, italic, icons) while preventing XSS vulnerabilities.
  • by @palcarazm
  • implements security enhancement
  • in 26f3125
• Add silent parameter support to enable(), disable() and readonly() methods
  • by @palcarazm
  • implements Enable/Disable/Readonly Methods Ignore Silent Parameter #289
  • in commit adddb35

🔁 Changed

• Performance optimization with requestAnimationFrame – batches DOM calculations to prevent forced synchronous reflows, improving rendering performance by 60-70% for multiple toggles.
  • by @palcarazm
  • implements Optimize Layout Calculations with requestAnimationFrame #258
  • in 68003ad
• Rename INDETERMINATE state value to MIXED for clarity
  • by @palcarazm
  • implements Inconsistent State Value Naming #288
  • in commit 0594a81
• Migrate type system to isolated declaration files - Type definitions have been refactored for better maintainability. Global augmentation interfaces are now exported from separate files, allowing consumers to import types without side effects. Jest and Sonar coverage exclusions updated to correctly ignore entry point files.
  • by @palcarazm in 8e69ad7

✅ Fixed

• Security vulnerability in HTML labels – prevents XSS attacks through malicious HTML/scripts in toggle labels using robust sanitization with allow-list approach.
  • by @palcarazm
  • fixes Secure HTML Sanitization for Toggle Labels #257
  • in 26f3125
• Make keyboard event handler non-passive and prevent default space/enter
  • by @palcarazm
  • fixes Spacebar Interaction Causes Page Scroll #287
  • in commit 414a6ac
• Standardize rerender method name to lowercase - The rerender method now correctly uses lowercase naming, matching the documented API. Method name matching is now case-insensitive to prevent confusion.
  • fixes bootstrapToggle("RENDERER") method name inconsistent with documented "rerender" #313 by @palcarazm in 37e3e53
• Improve type safety for DOM toggle integration - Replaced unsafe type assertions with proper TypeScript patterns including generic DOM selection and correct interface inheritance. This eliminates as assertions where possible and ensures type consistency between exported interfaces and global declarations.
  • by @palcarazm in 3dca15b
• Expose library constants on global BootstrapToggle object - Events, Methods, StateValue, and StateStatus are now available at window.BootstrapToggle for easy access in non-module environments. Type aliases (Options, Style, Size, State, EventDetail) added for cleaner public API with full TypeScript support.
  • by @palcarazm in 2c69775

🆙 Bump

• Dependency updates:
  • globals from 17.0.0 to 17.1.0 (bump: bump globals from 17.0.0 to 17.1.0 #285)
  • @typescript-eslint/eslint-plugin from 8.53.0 to 8.53.1 (bump: bump @typescript-eslint/eslint-plugin from 8.53.0 to 8.53.1 #283)
  • rollup from 4.55.1 to 4.56.0 (bump: bump rollup from 4.55.1 to 4.56.0 #282)
  • eslint from 9.39.2 to 10.0.0 (35eff80)
• GitHub Actions updates:
  • cypress-io/github-action from 7.1.0 to 7.1.1
  • actions/setup-node from 3 to 6
  • actions/checkout from 3 to 6
  • actions/upload-pages-artifact from 3 to 4
  • actions/upload-artifact from 4 to 6
  • cypress-io/github-action from 6.10.8 to 7.1.2
  • github/codeql-action from 3 to 4
  • actions/download-artifact from 4 to 7
• CI & Dependencies improvements:
  • Dependabot configuration updates
  • Sonar copy-paste detector exclusions added
  • npm cache removal

---

Full Changelog: v5.2.0...v5.3.3