chore(release): 4.10.1

Author: puikinsh

.github/CONTRIBUTING.md

@@ -16,12 +16,13 @@ Contributions are always **welcome and recommended**! Here is how for beginner's
     ```
     * Create a new branch from `master`
 3. Compile dist files (Development) :
-    * To compile the dist files you need Node.js 18 or higher/npm (node package manager)
-    * `npm install` (install npm deps)
-    * `npm run dev` (developer mode, autocompile with browsersync support for live demo)
+    * To compile the dist files you need Node.js 22.22.3+, 24.16.0+, or 26.3.0+ and npm 10+
+    * `npm ci` (install the locked dependency tree)
+    * `npm run dev` (developer mode, asset watchers and Astro live demo at http://localhost:3000)
     * Make your changes only in `./src` Folder OR `package.json` in any files which are necessary for contribution
     * Do not make changes in `./dist/**` Because it contains compiled files and do not include in PR (Pull Request)
-    * `npm run production` (compile css/js files and test all pages are perfectly working fine, before creating a pull request)
+    * `npm test` (unit tests), then `npm run build` and `npm run test-browser` / `npm run test-a11y` (install browsers with `npx playwright install chromium`)
+    * `npm run production` (lint, run unit tests, compile assets, and check gzip budgets before creating a pull request)
 4. Create a pull request to `master` branch
 
 ## Online one-click setup for contributing

.github/workflows/a11y.yml

@@ -16,14 +16,18 @@ permissions:
 jobs:
   axe:
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        color-scheme: [light, dark]
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: "${{ env.NODE }}"
           cache: npm
@@ -32,14 +36,12 @@ jobs:
         run: npm ci
 
       - name: Install Playwright Chromium
-        # Kept out of devDependencies so the other workflows' npm ci stays
-        # lean; --no-save leaves package.json and the lockfile untouched.
-        run: |
-          npm install --no-save playwright
-          npx playwright install --with-deps chromium
+        run: npx playwright install --with-deps chromium
 
       - name: Build distribution files
         run: npm run build
 
       - name: Run axe accessibility checks
         run: npm run test-a11y
+        env:
+          A11Y_COLOR_SCHEME: ${{ matrix.color-scheme }}

.github/workflows/bundlewatch.yml

@@ -20,12 +20,12 @@ jobs:
 
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: "${{ env.NODE }}"
           cache: npm

.github/workflows/codeql.yml

@@ -26,22 +26,22 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: "javascript"
           config-file: ./.github/codeql/codeql-config.yml
           queries: +security-and-quality
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@v4
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4
         with:
           category: "/language:javascript"

.github/workflows/docs.yml

@@ -20,12 +20,12 @@ jobs:
 
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: "${{ env.NODE }}"
           cache: npm

.github/workflows/lint.yml

@@ -20,12 +20,12 @@ jobs:
 
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: "${{ env.NODE }}"
           cache: npm

.github/workflows/release.yml

@@ -12,17 +12,19 @@ env:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Clone repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: Set env
         run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
 
       - name: Set up Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: "${{ env.NODE }}"
           cache: npm
@@ -39,7 +41,7 @@ jobs:
           args: "zip -qq -r admin-lte-${{env.RELEASE_VERSION}}.zip dist"
 
       - name: Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         if: startsWith(github.ref, 'refs/tags/')
         with:
           # Let GitHub auto-generate the release notes from PRs / commits

.github/workflows/tests.yml

@@ -0,0 +1,52 @@
+name: Tests
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  unit:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        node: [22, 24, 26]
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@v7
+        with:
+          node-version: ${{ matrix.node }}
+          cache: npm
+      - run: npm ci
+      - run: npm test
+      - run: npm run js-types
+
+  browser:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        browser: [chromium, firefox, webkit]
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@v7
+        with:
+          node-version: 22
+          cache: npm
+      - run: npm ci
+      - run: npx playwright install --with-deps ${{ matrix.browser }}
+      - run: npm run build
+      - run: npm run test-browser
+        env:
+          BROWSERS: ${{ matrix.browser }}

AGENTS.md

@@ -0,0 +1,42 @@
+# Repository Guidelines
+
+## Project Structure & Module Organization
+
+AdminLTE 4 is a Bootstrap 5 dashboard template with vanilla TypeScript components.
+
+- `src/ts/`: component behavior; `adminlte.ts` is the library entry point, and `util/` holds shared helpers.
+- `src/scss/`: Sass styles, component partials, mixins, and optional color themes.
+- `src/html/`: Astro demo/documentation pages and reusable Astro/MDX components.
+- `src/assets/`: source images and other static assets.
+- `src/config/`: Rollup, Astro, PostCSS, and asset-build configuration.
+- `tests/unit/`: unit tests and shared setup; `tests/a11y.mjs` checks built pages.
+- `dist/` and `src/html/public/`: generated output. Edit source files; exclude compiled `dist/` changes from contributor PRs.
+
+## Build, Test, and Development Commands
+
+Use Node.js 22.22.3+, 24.16.0+, or 26.3.0+ and npm 10+. Install with `npm ci`.
+
+- `npm start`: run asset watchers and the Astro dev server at `http://localhost:3000`.
+- `npm run build`: clean and rebuild CSS, JavaScript, declarations, assets, and demo/documentation HTML.
+- `npm run css` / `npm run js`: rebuild styles or JavaScript independently.
+- `npm run lint`: check ESLint, Stylelint, Astro, and lockfile rules.
+- `npm test`: run Vitest once; `npm run test-watch` enables watch mode.
+- `npm run production`: clean, lint, test, compile, and check local gzip budgets.
+
+## Coding Style & Naming Conventions
+
+Use two-space indentation, UTF-8, LF endings, and final newlines as defined in `.editorconfig`. Follow neighboring code and repository ESLint/Stylelint rules. Prettier is configured with single quotes, semicolons, and a 100-character line width; Astro has its own configuration.
+
+Use strict TypeScript, PascalCase component classes, camelCase methods, and kebab-case component filenames such as `card-widget.ts`. Prefix Sass partials with `_`, and follow existing Bootstrap-compatible selectors and `data-lte-*` attributes.
+
+## Testing Guidelines
+
+Add behavior and regression tests as `tests/unit/<component>.test.ts`. Vitest uses `happy-dom` and `tests/unit/setup.ts`; no numeric coverage threshold is configured. Cover DOM state, events, and cleanup where relevant.
+
+For UI changes, build first, then run `npm run test-a11y` and `npm run test-browser`. Install Chromium with `npx playwright install chromium`; set `BROWSERS=chromium,firefox,webkit` for all engines. Serious and critical axe violations fail the check. Review responsive layouts, dark mode, and RTL manually.
+
+## Commit & Pull Request Guidelines
+
+Follow the prevalent `type(scope): summary` commit format, for example `fix(header): prevent horizontal overflow`; common types include `feat`, `fix`, `docs`, and `chore`.
+
+Branch from and target `master`. Keep PRs focused, describe the behavior change, link relevant issues, and report validation commands/results. Include screenshots for visual changes. Follow `.github/CONTRIBUTING.md` and ensure third-party contributions are appropriately licensed.

CHANGELOG.md

@@ -5,6 +5,31 @@ All notable changes to AdminLTE will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.10.1] - 2026-10-08
+
+### Changed
+
+- Refresh build, lint, formatting, and testing dependencies to the latest compatible stable releases, including Astro 7.3.7, Rollup 4.64.2, Playwright 1.64.0, Vitest 5.0.3, Sass 1.105.1, and ESLint 10.12.0. Replace `npm-run-all` with the maintained `npm-run-all2` and declare the previously implicit `unist-util-visit` dependency.
+- Update pinned demo and integration libraries, including FullCalendar 7.1.1, Tabulator 6.6.1, OverlayScrollbars 2.16.0, jsVectorMap 1.7.0, and Tom Select 2.6.2. Migrate FullCalendar's stylesheet, Bootstrap theme, draggable, and event-colour APIs, and refresh existing CDN integrity hashes.
+- Building from source requires Node.js 22.22.3+, 24.16.0+, or 26.3.0+ and npm 10+, declared through `devEngines`; the published package retains its existing Node.js engine requirement. TypeScript remains on 6.0.3 because the latest Astro checker and TypeScript ESLint releases do not yet support TypeScript 7.
+
+### Fixed
+
+- Synchronize every fullscreen control, including when initializing a layout already in fullscreen, without changing public events or component APIs. Scope icon updates to fullscreen controls so they do not interfere with card-maximize buttons.
+- Prevent shared-header overflow at tablet widths, preserve local dates in calendar events, and tolerate an unavailable OverlayScrollbars CDN script.
+- Improve demo filter labels, grid semantics, product-link names, calendar accessible names, and light/dark contrast. Dark-mode outline buttons and documentation links now use theme-aware colour tokens; fixed palette swatches retain a white demonstration background.
+- Check Astro source pages explicitly, fix previously hidden palette typing errors, and repair the ESM Prettier configuration and Unicorn recommended preset.
+
+### Added
+
+- Playwright checks for every built HTML page, responsive light/dark layouts, RTL, and key plugin interactions, with Chromium, Firefox, and WebKit CI jobs.
+- Node.js 22/24/26 unit-test CI, light/dark accessibility CI, and fullscreen regression tests. Missing Playwright now fails accessibility checks rather than silently skipping them.
+- `npm run test-size` enforces all existing gzip budgets locally without an external reporting service; `npm run production` uses this check. Bundlewatch remains available for CI reporting.
+
+### Security
+
+- Refresh security overrides, including a patched PostCSS selector parser. Production dependencies audit clean. Development tooling still includes `braces@3.0.3`, affected by [GHSA-vfj7-8cjw-p6xm](https://github.com/advisories/GHSA-vfj7-8cjw-p6xm); no patched release is available. Its twenty propagated npm audit findings remain unresolved rather than downgrading the current toolchain.
+
 ## [4.10.0] - 2026-10-01
 
 ### Changed
@@ -992,4 +1017,4 @@ This release represents a complete modernization of the AdminLTE codebase, bring
 1. Run `npm install` to get latest dependencies
 2. Use `npm start` for development
 3. Use `npm run production` for production builds
-4. Review any custom ESLint configurations for compatibility 
+4. Review any custom ESLint configurations for compatibility