chore(deps): bump @wordpress/components from 36.1.0 to 38.0.0

[dependabot]

Bumps @wordpress/components from 36.1.0 to 38.0.0.

Changelog

Sourced from @​wordpress/components's changelog.

38.0.0 (2026-07-29)

Breaking Changes

• Components that compose Emotion style fragments with cx() should pass source-order-dependent fragments in a single css() call. Passing separate fragments can change override order after the following components stopped rendering styles through Emotion:
  • ToggleGroupControl (#80381)
  • Disabled (#80643)
  • ToolsPanel (#80445)
• Remove the private Theme component (#80691).

Enhancements

• GradientPicker: Add selectedSlug prop for slug-based selection and pass the selected preset's slug to onChange, so two presets sharing a gradient keep their identity (#80554).
• SandBox: Add allowPopups prop to opt into allow-popups in the iframe's sandbox attribute (#69617).
• Validated form controls: Only move focus to the invalid control for trusted invalid events (form submission, reportValidity()). Consumers can now dispatch a synthetic invalid event to reveal a control's error message without disturbing the user's place in the form (#80685).

Bug Fixes

• ToolsPanel: Migrate styles from Emotion to an SCSS Module and restore the header heading typography after the View migration. (#80445).
• Autocomplete: Expose the suggestions list to assistive technology with aria-controls and aria-haspopup, both required alongside aria-autocomplete="list" (#80403).
• Autocomplete: Omit aria-activedescendant while no suggestion is highlighted, instead of returning null for it (#80403).
• ContentEditableControl: Associate the label with the contentEditable field via aria-labelledby instead of an invalid label[for], which triggered Chrome console errors (#80344).
• SearchControl: Render suffix only if there is one. (#80356, #80406).
• ColorPicker: Keep the visual picker in native HSVA so gradient/controlled HSLA echoes no longer jitter the saturation pointer, and preserve the black-edge saturation coordinate without leaving white at a chromatic position (#80205).

TypeScript

• Update Jest type definitions to v30 (#80767).
• Autocomplete: __unstableUseAutocompleteProps now narrows its returned ARIA props and no longer asks for a contentRef it never used, so callers can spread its return value onto an element without a placeholder ref, normalizing, or casting (#80403).
• Improved performance of TypeScript types for internal polymorphic WordPressComponent component type (#80364).

Internal

• Update date-fns to 4.4.0 (#80763).
• Update memize to 2.1.1 (#80764).
• TextControl, ComboboxControl, FormTokenField, ContentEditableControl: Replace --wp-components-color-accent with --wp-admin-theme-color for focus ring color (#80595).
• ConfirmDialog: Migrate styles from Emotion to an SCSS Module (#80394).
• ExternalLink: Use the shared outset-ring__focus mixin for the focus ring (#80573).
• SearchControl: Migrate styles from Emotion to an SCSS Module (#80474).
• FormTokenField: Migrate styles from Emotion to an SCSS Module (#80472).
• InputControl, SelectControl, CustomSelectControl, ToggleGroupControl, and RangeControl: Remove obsolete internal __shouldNotWarnDeprecated36pxSize prop (#80323).
• InputControl, SelectControl, CustomSelectControl: Remove obsolete __unstable-large from the public size type. The value continues to work at runtime, and is equivalent to the default size. (#80081).
• ToggleGroupControl: Migrate styles from Emotion to SCSS Modules and use WPDS tokens for migrated visual values (#80381).
• Disabled: Migrate styles from Emotion to an SCSS Module (#80643).
• Update exports to use subpath patterns instead of deprecated trailing / folder mappings (#80270).

37.0.0 (2026-07-14)

Enhancements

... (truncated)

Commits

• 7e8b17a chore(release): publish
• 42ad080 Update changelog files
• edffa74 Merge changes published in the Gutenberg plugin "release/23.7" branch
• e9a74f9 chore(release): publish
• 2a0c375 Update changelog files
• e61c854 Merge changes published in the Gutenberg plugin "release/23.6" branch
• 1055a35 Update changelog files
• 8ca3e8e Merge changes published in the Gutenberg plugin "release/23.6" branch
• See full diff in compare view

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​wordpress/​components@​36.1.0 ⏵ 38.0.0	+17

View full report