v0.82.0

What's Changed

• feat(sonarqube): wire test coverage into the Sonar scan by Lucas Ramos (@ls-ramos) in #273
• feat(csp): nonce the injected CSS and export the default tag allowlist (CGY-37011) by Dmitrii Ostasevich (@kwinto) in #282
• fix(a11y): VPAT audit findings — datepicker translations, adaptive card picker/select, gallery links (CGY-39786) by Sushmitha Sekar (@sushmi21) in #284

Accessibility changes

Rendered ARIA/DOM output changed in this release. Consumers (Webchat) should re-run their cypress-axe and screen-reader checks on the version bump.

Datepicker (CGY-39786, #284)

• New optional customTranslations.ariaLabels keys datePickerHour / datePickerMinute name the time fields (flatpickr's locale text remains the fallback). Webchat: add German values next to its other datepicker translations.

Gallery (CGY-39786, #284)

• A card whose subtitle (or below-image title) contains a link or other control renders its default_action link on the image area instead of wrapping the text, so the two are sibling tab stops rather than nested links. Gated in test/dom-compat.spec.tsx via INTENTIONALLY_DIVERGING_PRE_0_82.
• Gallery links and the downloadable image thumbnail get the two-colour focus ring (primary outline + contrast band).

Adaptive Cards (CGY-39786, #284)

• Compact Input.ChoiceSet: the placeholder is an ordinary selectable empty-value <option> (no longer disabled hidden), so screen readers announce positions consistently. Gated via INTENTIONALLY_DIVERGING_PRE_0_82.
• Date/time inputs: the native picker button is a 24×24 box on the icon with its own focus ring.

Content Security Policy (CGY-37011, #282)

• The library's own CSS, injected at runtime as a <style>, now carries the page's CSP nonce when the page provides <meta property="csp-nonce" content="…"> in <head>. Pages without that tag are unchanged.
• New export defaultAllowedHtmlTags (frozen): the default sanitizer tag allowlist, for consumers that need to derive a restricted customAllowedHtmlTags (which replaces the allowlist). The default allowlist and rendering are unchanged.

Full Changelog: v0.81.0...v0.82.0