@allxsmith/bestax-bulma 5.16.6 → 5.16.8

package/README.md

@@ -7,7 +7,7 @@
 [![Coverage](https://img.shields.io/badge/coverage-99%25-brightgreen.svg)](https://github.com/allxsmith/bestax/blob/main/bulma-ui/jest.config.js)
 [![Bulma](https://img.shields.io/badge/Bulma-v1.0+-00d1b2.svg)](https://bulma.io)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Socket Badge](https://socket.dev/api/badge/npm/package/@allxsmith/bestax-bulma)](https://socket.dev/npm/package/@allxsmith/bestax-bulma/overview)
+[![Socket Badge](https://badge.socket.dev/npm/package/@allxsmith/bestax-bulma/latest)](https://socket.dev/npm/package/@allxsmith/bestax-bulma/overview)
 [![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/allxsmith/bestax/badge)](https://scorecard.dev/viewer/?uri=github.com/allxsmith/bestax)
 [![OpenSSF Best Practices](https://www.bestpractices.dev/projects/14361/badge)](https://www.bestpractices.dev/projects/14361)
 [![npm provenance](https://img.shields.io/badge/npm-provenance-3fb950.svg)](https://www.npmjs.com/package/@allxsmith/bestax-bulma#provenance)

package/dist/index.cjs

@@ -1385,7 +1385,22 @@ const Avatar = React.forwardRef(function Avatar(avatarProps, ref) {
     // Only forward link attributes when rendering an anchor or a custom (non-DOM)
     // component; a plain `as="div"` must not receive a stray `href`/`target`/`rel`.
     const isLinkLike = Tag === 'a' || typeof Tag !== 'string' || isCustomElement(Tag);
-    const linkProps = isLinkLike ? { href, target, rel } : {};
+    // Present-only, not `{ href, target, rel }`. An unconditional spread hands the
+    // target these keys whatever the caller passed, and a key existing is not free:
+    // a target that tests for one sees a link where there is none, and one that
+    // spreads its own `{...rest}` onward passes the nothing along. It is NOT about
+    // a destructuring default, which an explicit `undefined` triggers just as an
+    // absent key does. What stops a target that REQUIRES one from being rendered
+    // without it is the type (#665) — this is the smaller half, and the backstop for
+    // the callers a type does not reach: a plain-JavaScript one and a loose spread,
+    // the same pair `Button` and `Menu.Item` keep their own filters for.
+    const linkProps = isLinkLike
+        ? {
+            ...(href !== undefined && { href }),
+            ...(target !== undefined && { target }),
+            ...(rel !== undefined && { rel }),
+        }
+        : {};
     // alt coalesces with ?? (not ||) so an explicit alt="" survives as the
     // standard decorative marker instead of being overridden by name.
     const accessibleName = alt ?? name;