I agree with @miragecraft — this slope doesn’t seem very slippery? I understand that it seems to cry out for generalization, but the need for :focus-visible-within is pressing in a more we-feel-it-every-day way than other possible functionality that generalized “within” selectors might unlock — and correct me if I’m wrong, but I’d guess that it doesn’t present the same performance challenges as a generalized within selector?

This may sound silly, but :focus-visible has been life-changing. We no longer have to dread the we’ll-just-ask-the-new-intern-to-disable-these-focus-rings-if-you’re-gonna-be-so-annoying-about-it workaround. But the matrix is incomplete — without :focus-visible-within, there’s still a subset of cases (which seem pretty random to non-developers) where we have to say “no” to the inaccessibility overlords. In the end, that “no” doesn’t always work even if you stand your ground.

To put it another way, the absence of :focus-visible-within, like :focus-visible before it, has consequences on the net accessibility of the web. The reasons for that are embarrassing, but it’s still what often happens. This seems more important than whether the selector is maximally DRY.

Bumps nodemailer from 2.6.0 to 6.4.16. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md">nodemailer's changelog</a>.</em></p> <blockquote> <h2>6.4.16 2020-11-12</h2> <ul> <li>Applied updated prettier formating rules</li> </ul> <h2>6.4.15 2020-11-06</h2> <ul> <li>Minor changes in header key casing</li> </ul> <h2>6.4.14 2020-10-14</h2> <ul> <li>Disabled postinstall script</li> </ul> <h2>6.4.13 2020-10-02</h2> <ul> <li>Fix normalizeHeaderKey method for single node messages</li> </ul> <h2>6.4.12 2020-09-30</h2> <ul> <li>Better handling of attachment filenames that include quote symbols</li> <li>Includes all information from the oath2 error response in the error message (Normal Gaussian) [1787f227]</li> </ul> <h2>6.4.11 2020-07-29</h2> <ul> <li>Fixed escape sequence handling in address parsing</li> </ul> <h2>6.4.10 2020-06-17</h2> <ul> <li>Fixed RFC822 output for MailComposer when using invalid content-type value. Mostly relevant if message attachments have stragne content-type values set.</li> </ul> <h2>6.4.7 2020-05-28</h2> <ul> <li>Always set charset=utf-8 for Content-Type headers</li> <li>Catch error whn using invalid crypto.sign input</li> </ul> <h2>6.4.6 2020-03-20</h2> <ul> <li>fix: <code>requeueAttempts=n</code> should requeue <code>n</code> times (Patrick Malouin) [a27ed2f7]</li> </ul> <h2>6.4.4 2020-03-01</h2> <ul> <li>Add <code>options.forceAuth</code> for SMTP (Patrick Malouin) [a27ed2f7]</li> </ul> <h2>6.4.3 2020-02-22</h2> <ul> <li>Added an option to specify max number of requeues when connection closes unexpectedly (Igor Sechyn) [8a927f5a]</li> </ul> <h2>6.4.2 2019-12-11</h2> <ul> <li>Fixed bug where array item was used with a potentially empty array</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodemailer/nodemailer/commit/ba31c64c910d884579875c52d57ac45acc47aa54"><code>ba31c64</code></a> v6.4.16</li> <li><a href="https://github.com/nodemailer/nodemailer/commit/7e7b2b23ed9a56ce60245bf1c7a444e5981a259b"><code>7e7b2b2</code></a> v6.4.15</li> <li><a href="https://github.com/nodemailer/nodemailer/commit/fca2041bdf33e4a6cb61929abb2503fa4e630219"><code>fca2041</code></a> Update CHANGELOG.md</li> <li><a href="https://github.com/nodemailer/nodemailer/commit/b4ccfa347a805d17c1d0fc5e719c2fb6cdc435e8"><code>b4ccfa3</code></a> Oups</li> <li><a href="https://github.com/nodemailer/nodemailer/commit/24b93bf75f946b138fcad663effababd4a328972"><code>24b93bf</code></a> Add ethereal.email to well-known/services.json</li> <li><a href="https://github.com/nodemailer/nodemailer/commit/0f132fa0e5b65b105bfebc9a123515bd0217a15a"><code>0f132fa</code></a> doc: make the code a little more accessible with some code comments.</li> <li><a href="https://github.com/nodemailer/nodemailer/commit/1815badec2ca1cf496a9fb728e0e941e8e16b65b"><code>1815bad</code></a> v6.4.14</li> <li><a href="https://github.com/nodemailer/nodemailer/commit/dd26ddd9857280897a4e54ef16f037dfe8c62151"><code>dd26ddd</code></a> v6.4.13</li> <li><a href="https://github.com/nodemailer/nodemailer/commit/455cfbe02658aeee6932ef845676c9de13dfb544"><code>455cfbe</code></a> v6.4.12</li> <li><a href="https://github.com/nodemailer/nodemailer/commit/1787f227b34e6cb3a124fa5204ae89364a7c9d6b"><code>1787f22</code></a> Includes all information from the oath2 error response in the error message (...</li> <li>Additional commits viewable in <a href="https://github.com/nodemailer/nodemailer/compare/v2.6.0...v6.4.16">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

Bumps chart.js from 2.9.3 to 2.9.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/chartjs/Chart.js/releases">chart.js's releases</a>.</em></p> <blockquote> <h2>v2.9.4</h2> <p>This is the last release of v2 and focused on fixing bugs identified in the v2.9.3 release.</p> <h1>Bugs Fixed</h1> <ul> <li><a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7404">#7404</a> - Preserve prototypes when cloning. Thanks <a href="https://github.com/iddings"><code>@​iddings</code></a></li> <li><a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7587">#7587</a> - Fix docs for external moment.js. Thanks <a href="https://github.com/mojoaxel"><code>@​mojoaxel</code></a></li> <li><a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7853">#7853</a> - Fix box recursion when dimensions are NaN. Thanks <a href="https://github.com/alessandroasm"><code>@​alessandroasm</code></a></li> <li><a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7883">#7883</a> - Fix call stack exception when computing label sizes. Thanks <a href="https://github.com/silentmatt"><code>@​silentmatt</code></a></li> <li><a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7918">#7918</a> - Prevent global prototype pollution via the merge helper</li> <li><a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7920">#7920</a> - Use Object.create(null) as <code>merge</code> target, to prevent prototype pollution</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/chartjs/Chart.js/commit/9bd4cf82fda9f50a5fb50b72843e06ab88124278"><code>9bd4cf8</code></a> Release v2.9.4</li> <li><a href="https://github.com/chartjs/Chart.js/commit/1d92605aa6c29add400c4c551413fc2306c15e8d"><code>1d92605</code></a> Use Object.create(null) as <code>merge</code> target (<a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7920">#7920</a>)</li> <li><a href="https://github.com/chartjs/Chart.js/commit/dff7140070c4e68731f17d577cca9fd82fe55498"><code>dff7140</code></a> When objects are merged together, the target prototype can be polluted. (<a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7918">#7918</a>)</li> <li><a href="https://github.com/chartjs/Chart.js/commit/d9191889255ceaad120c793906e1463fad382075"><code>d919188</code></a> Bump verison number to v2.9.4</li> <li><a href="https://github.com/chartjs/Chart.js/commit/42ed5895b28fcfd10d43e1ce7a54bfa7e060998b"><code>42ed589</code></a> Fix Maximum call stack size exception in computeLabelSizes (<a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7883">#7883</a>)</li> <li><a href="https://github.com/chartjs/Chart.js/commit/063b7dc075e87eeec6334808bcc90af165f7421e"><code>063b7dc</code></a> [2.9] FitBoxes recursion when dimensions are NaN (<a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7853">#7853</a>)</li> <li><a href="https://github.com/chartjs/Chart.js/commit/2493cb5a2f65ce5e5afc031eb067d3769f06a3e7"><code>2493cb5</code></a> Use node v12.18.2 on Travis CI (<a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7864">#7864</a>)</li> <li><a href="https://github.com/chartjs/Chart.js/commit/679ec4acc5b669ebf6b0f45c4b508dfce22cacea"><code>679ec4a</code></a> docs: fix rollup external moment (<a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7587">#7587</a>)</li> <li><a href="https://github.com/chartjs/Chart.js/commit/484f0d1e518963436d5013f61001558ef9788edf"><code>484f0d1</code></a> Preserve object prototypes when cloning (<a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7404">#7404</a>)</li> <li><a href="https://github.com/chartjs/Chart.js/commit/2df6986fbe466c1a4009014bf7ed3b91442f97ad"><code>2df6986</code></a> Look for any branch starting with release (<a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7087">#7087</a>) (<a href="https://github-redirect.dependabot.com/chartjs/Chart.js/issues/7089">#7089</a>)</li> <li>See full diff in <a href="https://github.com/chartjs/Chart.js/compare/v2.9.3...v2.9.4">compare view</a></li> </ul> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

There are to many squirels. And it looks like ads

Bumps hosted-git-info from 2.7.1 to 2.8.9. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md">hosted-git-info's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9">2.8.9</a> (2021-04-07)</h2> <h3>Bug Fixes</h3> <ul> <li>backport regex fix from <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/76">#76</a> (<a href="https://github.com/npm/hosted-git-info/commit/29adfe5">29adfe5</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/84">#84</a></li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.7...v2.8.8">2.8.8</a> (2020-02-29)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61">#61</a> & <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/65">#65</a> addressing issues w/ url.URL implmentation which regressed node 6 support (<a href="https://github.com/npm/hosted-git-info/commit/5038b18">5038b18</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/66">#66</a></li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.6...v2.8.7">2.8.7</a> (2020-02-26)</h2> <h3>Bug Fixes</h3> <ul> <li>Do not attempt to use url.URL when unavailable (<a href="https://github.com/npm/hosted-git-info/commit/2d0bb66">2d0bb66</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61">#61</a> <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/62">#62</a></li> <li>Do not pass scp-style URLs to the WhatWG url.URL (<a href="https://github.com/npm/hosted-git-info/commit/f2cdfcf">f2cdfcf</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/60">#60</a></li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.5...v2.8.6">2.8.6</a> (2020-02-25)</h2> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.4...v2.8.5">2.8.5</a> (2019-10-07)</h2> <h3>Bug Fixes</h3> <ul> <li>updated pathmatch for gitlab (<a href="https://github.com/npm/hosted-git-info/commit/e8325b5">e8325b5</a>), closes <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/51">#51</a></li> <li>updated pathmatch for gitlab (<a href="https://github.com/npm/hosted-git-info/commit/ffe056f">ffe056f</a>)</li> </ul> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h2><a href="https://github.com/npm/hosted-git-info/compare/v2.8.3...v2.8.4">2.8.4</a> (2019-08-12)</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/hosted-git-info/commit/8d4b3697d79bcd89cdb36d1db165e3696c783a01"><code>8d4b369</code></a> chore(release): 2.8.9</li> <li><a href="https://github.com/npm/hosted-git-info/commit/29adfe5ef789784c861b2cdeb15051ec2ba651a7"><code>29adfe5</code></a> fix: backport regex fix from <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/76">#76</a></li> <li><a href="https://github.com/npm/hosted-git-info/commit/afeaefdd86ba9bb5044be3c1554a666d007cf19a"><code>afeaefd</code></a> chore(release): 2.8.8</li> <li><a href="https://github.com/npm/hosted-git-info/commit/5038b1891a61ca3cd7453acbf85d7011fe0086bb"><code>5038b18</code></a> fix: <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61">#61</a> & <a href="https://github-redirect.dependabot.com/npm/hosted-git-info/issues/65">#65</a> addressing issues w/ url.URL implmentation which regressed nod...</li> <li><a href="https://github.com/npm/hosted-git-info/commit/7440afa859162051c191e55d8ecfaf69a193b026"><code>7440afa</code></a> chore(release): 2.8.7</li> <li><a href="https://github.com/npm/hosted-git-info/commit/2d0bb6615ecb8f9ef1019bc0737aab7f6449641f"><code>2d0bb66</code></a> fix: Do not attempt to use url.URL when unavailable</li> <li><a href="https://github.com/npm/hosted-git-info/commit/f2cdfcf33ad2bd3bd1acdba0326281089f53c5b1"><code>f2cdfcf</code></a> fix: Do not pass scp-style URLs to the WhatWG url.URL</li> <li><a href="https://github.com/npm/hosted-git-info/commit/e1b83df5d9cb1f8bb220352e20565560548d2292"><code>e1b83df</code></a> chore(release): 2.8.6</li> <li><a href="https://github.com/npm/hosted-git-info/commit/ff259a6117c62df488e927820e30bec2f7ee453f"><code>ff259a6</code></a> Ensure passwords in hosted Git URLs are correctly escaped</li> <li><a href="https://github.com/npm/hosted-git-info/commit/624fd6f301dd5a1fd7ad1b333d6f8921a12ff98c"><code>624fd6f</code></a> chore(release): 2.8.5</li> <li>Additional commits viewable in <a href="https://github.com/npm/hosted-git-info/compare/v2.7.1...v2.8.9">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~nlf">nlf</a>, a new releaser for hosted-git-info since your current version.</p> </details> <br />

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>