@aurodesignsystem-dev/auro-formkit 0.0.0-pr1608.0 → 0.0.0-pr1608.1

package/components/checkbox/demo/accessibility.md

@@ -8,12 +8,13 @@ For keyboard interaction details, see the <auro-hyperlink href="keyboard-behavio
 
 <auro-header level="2" id="ariaRolesAndAttributes">ARIA Roles and Attributes</auro-header>
 <auro-header level="3" id="checkboxGroup">Checkbox Group</auro-header>
-The `<auro-checkbox-group>` element uses a `<fieldset>` with a `<legend>` internally, providing native grouping semantics:
+The `<auro-checkbox-group>` element uses a `<fieldset>` with a `<legend>` internally, providing native grouping semantics. These attributes are applied to that shadow-DOM `<fieldset>`, **not** to the `<auro-checkbox-group>` host element:
 
 | Attribute | Value | Description |
 |---|---|---|
-| `role` | `group` (implicit via `fieldset`) | Groups related checkboxes together. |
-| `aria-invalid` | `true` / `false` | Reflects whether the group is currently in an invalid state. |
+| `role` | `group` (implicit via `fieldset`) | Groups related checkboxes together. There is no ARIA `checkboxgroup` role, so the `<fieldset>`'s implicit `group` role is used as-is. |
+| `aria-invalid` | `true` | Present only while the group is in an invalid state. The attribute is **omitted entirely** when the group is valid — it is never set to `false`. |
+| `aria-describedby` | id reference | Points at the `id` of the group's help-text/error element, so assistive technology can associate the message with the group on demand rather than relying only on the one-time live-region announcement. |
 
 <auro-header level="3" id="checkboxElement">Checkbox</auro-header>
 Each `<auro-checkbox>` renders a native `<input type="checkbox">` inside its shadow DOM:
@@ -23,12 +24,22 @@ Each `<auro-checkbox>` renders a native `<input type="checkbox">` inside its sha
 | `type` | `checkbox` | Native checkbox input type. |
 | `aria-checked` | `true` / `false` | Reflects the checked state of the checkbox. |
 | `aria-disabled` | `true` / `false` | Indicates whether the checkbox is disabled. |
+| `aria-invalid` | `true` | Mirrored onto each checkbox from the group while the group is invalid, and removed when it becomes valid. Omitted rather than set to `false`. |
+
+<auro-header level="4" id="invalidStatePlacement">Why the invalid state appears twice</auro-header>
+While the group is invalid, `aria-invalid` is set on both the `<fieldset>` and every individual `<auro-checkbox>`. This is intentional: some assistive-technology and browser combinations announce a container's invalid state only when focus first enters the group, so mirroring the state onto each checkbox keeps it conveyed as focus moves through the options.
+
+The `checkbox` role is in `aria-invalid`'s supported-role list in every ARIA version, so the per-checkbox placement is unambiguous. The group-level placement is worth one note: `aria-invalid` is a global attribute in ARIA 1.1, applicable to any role including `group`, but ARIA 1.2 deprecates that global use in favor of a supported-role list that does not include `group`. Keeping it on the `<fieldset>` is a deliberate choice — it is not a *prohibited* attribute for `group`, current axe-core resolves it as global and reports no violation, and it gives the group a real invalid signal that would otherwise be lost. This is covered by an automated axe assertion in the component's test suite so that a future change in tooling surfaces here rather than in a consumer's audit.
+
+<auro-header level="4" id="attributePlacementNote">Attribute placement</auro-header>
+`aria-invalid` is applied to the internal `<fieldset>`, not to the `<auro-checkbox-group>` host element. Do not write CSS selectors or test assertions against `auro-checkbox-group[aria-invalid]`; query the internal fieldset or read the `validity` property instead.
 
 <auro-header level="2" id="screenReaderAnnouncements">Screen Reader Announcements</auro-header>
 - **Focus** — When focus moves to a checkbox, the screen reader announces the checkbox label, its checked/unchecked state, and role ("checkbox").
 - **State change** — Toggling the checkbox announces the new state ("checked" or "unchecked").
 - **Group context** — The legend text provides group context when navigating between groups.
-- **Error** — When validation fails, the error message is announced to screen reader users.
+- **Error** — When validation fails, the error message is announced immediately via the help text's `role="alert"` live region, and stays discoverable afterward through the group's `aria-describedby` association.
+- **Invalid state** — While the group is invalid, entering it or moving between its checkboxes conveys the invalid state.
 
 <auro-header level="2" id="accessibleLabels">Accessible Labels</auro-header>
 - The `legend` slot content provides the accessible group label via the native `<legend>` element.

package/components/checkbox/demo/customize.min.js

@@ -1300,7 +1300,7 @@ class AuroHelpText extends i$2 {
   }
 }
 
-var formkitVersion = '202609021913';
+var formkitVersion = '202609022217';
 
 // Copyright (c) 2026 Alaska Airlines. All rights reserved. Licensed under the Apache-2.0 license
 // See LICENSE in the project root for license information.
@@ -1633,6 +1633,29 @@ class AuroCheckboxGroup extends i$2 {
     this.handlePreselectedItems();
 
     this.validate();
+    this.syncCheckboxValidity();
+  }
+
+  /**
+   * Method for mirroring the group's invalid state onto each checkbox.
+   * `validity` is the authoritative invalid state, and it has to be re-applied from
+   * `handleItems()` as well, because a slot change can happen without `validity` itself
+   * changing — a checkbox slotted into an already-invalid group would otherwise be missed.
+   * @private
+   * @returns {void}
+   */
+  syncCheckboxValidity() {
+    const invalid = Boolean(this.validity && this.validity !== 'valid');
+
+    this.checkboxes.forEach((el) => {
+      if (invalid) {
+        el.setAttribute('error', true);
+        el.setAttribute('aria-invalid', 'true');
+      } else {
+        el.removeAttribute('error');
+        el.removeAttribute('aria-invalid');
+      }
+    });
   }
 
   /**
@@ -1664,15 +1687,7 @@ class AuroCheckboxGroup extends i$2 {
     }
 
     if (changedProperties.has('validity')) {
-      this.checkboxes.forEach((el) => {
-        if (this.validity && this.validity !== 'valid') {
-          el.setAttribute('error', true);
-          el.setAttribute('aria-invalid', 'true');
-        } else {
-          el.removeAttribute('error');
-          el.removeAttribute('aria-invalid');
-        }
-      });
+      this.syncCheckboxValidity();
     }
 
     if (changedProperties.has('required')) {

package/components/checkbox/demo/getting-started.min.js

@@ -1300,7 +1300,7 @@ class AuroHelpText extends i$2 {
   }
 }
 
-var formkitVersion = '202609021913';
+var formkitVersion = '202609022217';
 
 // Copyright (c) 2026 Alaska Airlines. All rights reserved. Licensed under the Apache-2.0 license
 // See LICENSE in the project root for license information.
@@ -1633,6 +1633,29 @@ class AuroCheckboxGroup extends i$2 {
     this.handlePreselectedItems();
 
     this.validate();
+    this.syncCheckboxValidity();
+  }
+
+  /**
+   * Method for mirroring the group's invalid state onto each checkbox.
+   * `validity` is the authoritative invalid state, and it has to be re-applied from
+   * `handleItems()` as well, because a slot change can happen without `validity` itself
+   * changing — a checkbox slotted into an already-invalid group would otherwise be missed.
+   * @private
+   * @returns {void}
+   */
+  syncCheckboxValidity() {
+    const invalid = Boolean(this.validity && this.validity !== 'valid');
+
+    this.checkboxes.forEach((el) => {
+      if (invalid) {
+        el.setAttribute('error', true);
+        el.setAttribute('aria-invalid', 'true');
+      } else {
+        el.removeAttribute('error');
+        el.removeAttribute('aria-invalid');
+      }
+    });
   }
 
   /**
@@ -1664,15 +1687,7 @@ class AuroCheckboxGroup extends i$2 {
     }
 
     if (changedProperties.has('validity')) {
-      this.checkboxes.forEach((el) => {
-        if (this.validity && this.validity !== 'valid') {
-          el.setAttribute('error', true);
-          el.setAttribute('aria-invalid', 'true');
-        } else {
-          el.removeAttribute('error');
-          el.removeAttribute('aria-invalid');
-        }
-      });
+      this.syncCheckboxValidity();
     }
 
     if (changedProperties.has('required')) {

package/components/checkbox/demo/index.min.js

@@ -1300,7 +1300,7 @@ class AuroHelpText extends i$2 {
   }
 }
 
-var formkitVersion = '202609021913';
+var formkitVersion = '202609022217';
 
 // Copyright (c) 2026 Alaska Airlines. All rights reserved. Licensed under the Apache-2.0 license
 // See LICENSE in the project root for license information.
@@ -1633,6 +1633,29 @@ class AuroCheckboxGroup extends i$2 {
     this.handlePreselectedItems();
 
     this.validate();
+    this.syncCheckboxValidity();
+  }
+
+  /**
+   * Method for mirroring the group's invalid state onto each checkbox.
+   * `validity` is the authoritative invalid state, and it has to be re-applied from
+   * `handleItems()` as well, because a slot change can happen without `validity` itself
+   * changing — a checkbox slotted into an already-invalid group would otherwise be missed.
+   * @private
+   * @returns {void}
+   */
+  syncCheckboxValidity() {
+    const invalid = Boolean(this.validity && this.validity !== 'valid');
+
+    this.checkboxes.forEach((el) => {
+      if (invalid) {
+        el.setAttribute('error', true);
+        el.setAttribute('aria-invalid', 'true');
+      } else {
+        el.removeAttribute('error');
+        el.removeAttribute('aria-invalid');
+      }
+    });
   }
 
   /**
@@ -1664,15 +1687,7 @@ class AuroCheckboxGroup extends i$2 {
     }
 
     if (changedProperties.has('validity')) {
-      this.checkboxes.forEach((el) => {
-        if (this.validity && this.validity !== 'valid') {
-          el.setAttribute('error', true);
-          el.setAttribute('aria-invalid', 'true');
-        } else {
-          el.removeAttribute('error');
-          el.removeAttribute('aria-invalid');
-        }
-      });
+      this.syncCheckboxValidity();
     }
 
     if (changedProperties.has('required')) {

package/components/checkbox/dist/auro-checkbox-group.d.ts

@@ -168,6 +168,15 @@ export class AuroCheckboxGroup extends LitElement {
      */
     private handleItems;
     checkboxes: Element[] | undefined;
+    /**
+     * Method for mirroring the group's invalid state onto each checkbox.
+     * `validity` is the authoritative invalid state, and it has to be re-applied from
+     * `handleItems()` as well, because a slot change can happen without `validity` itself
+     * changing — a checkbox slotted into an already-invalid group would otherwise be missed.
+     * @private
+     * @returns {void}
+     */
+    private syncCheckboxValidity;
     /**
      * Resets component to initial state.
      * @returns {void}

package/components/checkbox/dist/index.js

@@ -1253,7 +1253,7 @@ class AuroHelpText extends LitElement {
   }
 }
 
-var formkitVersion = '202609021913';
+var formkitVersion = '202609022217';
 
 // Copyright (c) 2026 Alaska Airlines. All rights reserved. Licensed under the Apache-2.0 license
 // See LICENSE in the project root for license information.
@@ -1586,6 +1586,29 @@ class AuroCheckboxGroup extends LitElement {
     this.handlePreselectedItems();
 
     this.validate();
+    this.syncCheckboxValidity();
+  }
+
+  /**
+   * Method for mirroring the group's invalid state onto each checkbox.
+   * `validity` is the authoritative invalid state, and it has to be re-applied from
+   * `handleItems()` as well, because a slot change can happen without `validity` itself
+   * changing — a checkbox slotted into an already-invalid group would otherwise be missed.
+   * @private
+   * @returns {void}
+   */
+  syncCheckboxValidity() {
+    const invalid = Boolean(this.validity && this.validity !== 'valid');
+
+    this.checkboxes.forEach((el) => {
+      if (invalid) {
+        el.setAttribute('error', true);
+        el.setAttribute('aria-invalid', 'true');
+      } else {
+        el.removeAttribute('error');
+        el.removeAttribute('aria-invalid');
+      }
+    });
   }
 
   /**
@@ -1617,15 +1640,7 @@ class AuroCheckboxGroup extends LitElement {
     }
 
     if (changedProperties.has('validity')) {
-      this.checkboxes.forEach((el) => {
-        if (this.validity && this.validity !== 'valid') {
-          el.setAttribute('error', true);
-          el.setAttribute('aria-invalid', 'true');
-        } else {
-          el.removeAttribute('error');
-          el.removeAttribute('aria-invalid');
-        }
-      });
+      this.syncCheckboxValidity();
     }
 
     if (changedProperties.has('required')) {

package/components/checkbox/dist/registered.js

@@ -1253,7 +1253,7 @@ class AuroHelpText extends LitElement {
   }
 }
 
-var formkitVersion = '202609021913';
+var formkitVersion = '202609022217';
 
 // Copyright (c) 2026 Alaska Airlines. All rights reserved. Licensed under the Apache-2.0 license
 // See LICENSE in the project root for license information.
@@ -1586,6 +1586,29 @@ class AuroCheckboxGroup extends LitElement {
     this.handlePreselectedItems();
 
     this.validate();
+    this.syncCheckboxValidity();
+  }
+
+  /**
+   * Method for mirroring the group's invalid state onto each checkbox.
+   * `validity` is the authoritative invalid state, and it has to be re-applied from
+   * `handleItems()` as well, because a slot change can happen without `validity` itself
+   * changing — a checkbox slotted into an already-invalid group would otherwise be missed.
+   * @private
+   * @returns {void}
+   */
+  syncCheckboxValidity() {
+    const invalid = Boolean(this.validity && this.validity !== 'valid');
+
+    this.checkboxes.forEach((el) => {
+      if (invalid) {
+        el.setAttribute('error', true);
+        el.setAttribute('aria-invalid', 'true');
+      } else {
+        el.removeAttribute('error');
+        el.removeAttribute('aria-invalid');
+      }
+    });
   }
 
   /**
@@ -1617,15 +1640,7 @@ class AuroCheckboxGroup extends LitElement {
     }
 
     if (changedProperties.has('validity')) {
-      this.checkboxes.forEach((el) => {
-        if (this.validity && this.validity !== 'valid') {
-          el.setAttribute('error', true);
-          el.setAttribute('aria-invalid', 'true');
-        } else {
-          el.removeAttribute('error');
-          el.removeAttribute('aria-invalid');
-        }
-      });
+      this.syncCheckboxValidity();
     }
 
     if (changedProperties.has('required')) {

package/components/combobox/demo/customize.min.js

@@ -3003,6 +3003,48 @@ const computePosition = (reference, floating, options) => {
   });
 };
 
+/**
+ * Generates a v4 UUID with a three-tier fallback for insecure contexts.
+ *
+ * Tier 1 (secure contexts): crypto.randomUUID() — native, fully random.
+ * Tier 2 (insecure contexts): crypto.getRandomValues() — available on all
+ *   modern browsers regardless of secure-context status.
+ * Tier 3 (last resort, no crypto API): new Date().getTime() — lower entropy,
+ *   but sufficient for element IDs where collision risk is negligible.
+ *
+ * See: https://w3c.github.io/webcrypto/#dom-crypto-randomuuid (secure-context restriction)
+ */
+function generateUUID() {
+  let uuid;
+
+  if (
+    typeof crypto !== "undefined" &&
+    typeof crypto.randomUUID === "function"
+  ) {
+    uuid = crypto.randomUUID();
+  } else if (
+    typeof crypto !== "undefined" &&
+    typeof crypto.getRandomValues === "function"
+  ) {
+    const bytes = new Uint8Array(16);
+    crypto.getRandomValues(bytes);
+    bytes[6] = (bytes[6] & 0x0f) | 0x40;
+    bytes[8] = (bytes[8] & 0x3f) | 0x80;
+    const hex = Array.from(bytes).map((b) => b.toString(16).padStart(2, "0"));
+    uuid = `${hex.slice(0, 4).join("")}-${hex.slice(4, 6).join("")}-${hex.slice(6, 8).join("")}-${hex.slice(8, 10).join("")}-${hex.slice(10).join("")}`;
+  } else {
+    let d = new Date().getTime();
+    uuid = "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (c) => {
+      const r = (d % 16) | 0;
+      d = (d - r) / 16 || new Date().getTime();
+      return (c === "x" ? r : (r & 0x3) | 0x8).toString(16);
+    });
+  }
+
+  // CSS selectors require IDs starting with a letter; replace a leading digit with 'a'.
+  return /^[0-9]/.test(uuid) ? `a${uuid.slice(1)}` : uuid;
+}
+
 /* eslint-disable line-comment-position, no-inline-comments */
 
 
@@ -4021,7 +4063,7 @@ class AuroFloatingUI {
 
     this.id = element.getAttribute("id");
     if (!this.id) {
-      this.id = window.crypto.randomUUID();
+      this.id = generateUUID();
       element.setAttribute("id", this.id);
     }
 
@@ -5066,7 +5108,7 @@ let AuroHelpText$2 = class AuroHelpText extends i$3 {
   }
 };
 
-var formkitVersion$2 = '202609021913';
+var formkitVersion$2 = '202609022217';
 
 /**
  * AuroElement is the shared base class for layout-aware Auro form components.
@@ -18935,7 +18977,7 @@ let AuroHelpText$1 = class AuroHelpText extends i$3 {
   }
 };
 
-var formkitVersion$1 = '202609021913';
+var formkitVersion$1 = '202609022217';
 
 // Copyright (c) 2025 Alaska Airlines. All right reserved. Licensed under the Apache-2.0 license
 // See LICENSE in the project root for license information.
@@ -20127,7 +20169,7 @@ class AuroBibtemplate extends i$3 {
   }
 }
 
-var formkitVersion = '202609021913';
+var formkitVersion = '202609022217';
 
 var styleCss$3 = i$6`.util_displayInline{display:inline}.util_displayInlineBlock{display:inline-block}.util_displayBlock{display:block}.util_displayFlex{display:flex}.util_displayHidden{display:none}.util_displayHiddenVisually{position:absolute;overflow:hidden;clip:rect(1px, 1px, 1px, 1px);width:1px;height:1px;padding:0;border:0}:host{display:block;text-align:left}:host [auro-dropdown]{--ds-auro-dropdown-trigger-background-color: transparent}:host #inputInBib::part(wrapper){box-shadow:none}:host #inputInBib::part(accent-left){display:none}:host([layout*=classic]) [auro-input]{width:100%}:host([layout*=classic]) [auro-input]::part(helpText){display:none}:host([layout*=classic]) #slotHolder{display:none}`;
 

package/components/combobox/demo/getting-started.min.js

@@ -3003,6 +3003,48 @@ const computePosition = (reference, floating, options) => {
   });
 };
 
+/**
+ * Generates a v4 UUID with a three-tier fallback for insecure contexts.
+ *
+ * Tier 1 (secure contexts): crypto.randomUUID() — native, fully random.
+ * Tier 2 (insecure contexts): crypto.getRandomValues() — available on all
+ *   modern browsers regardless of secure-context status.
+ * Tier 3 (last resort, no crypto API): new Date().getTime() — lower entropy,
+ *   but sufficient for element IDs where collision risk is negligible.
+ *
+ * See: https://w3c.github.io/webcrypto/#dom-crypto-randomuuid (secure-context restriction)
+ */
+function generateUUID() {
+  let uuid;
+
+  if (
+    typeof crypto !== "undefined" &&
+    typeof crypto.randomUUID === "function"
+  ) {
+    uuid = crypto.randomUUID();
+  } else if (
+    typeof crypto !== "undefined" &&
+    typeof crypto.getRandomValues === "function"
+  ) {
+    const bytes = new Uint8Array(16);
+    crypto.getRandomValues(bytes);
+    bytes[6] = (bytes[6] & 0x0f) | 0x40;
+    bytes[8] = (bytes[8] & 0x3f) | 0x80;
+    const hex = Array.from(bytes).map((b) => b.toString(16).padStart(2, "0"));
+    uuid = `${hex.slice(0, 4).join("")}-${hex.slice(4, 6).join("")}-${hex.slice(6, 8).join("")}-${hex.slice(8, 10).join("")}-${hex.slice(10).join("")}`;
+  } else {
+    let d = new Date().getTime();
+    uuid = "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (c) => {
+      const r = (d % 16) | 0;
+      d = (d - r) / 16 || new Date().getTime();
+      return (c === "x" ? r : (r & 0x3) | 0x8).toString(16);
+    });
+  }
+
+  // CSS selectors require IDs starting with a letter; replace a leading digit with 'a'.
+  return /^[0-9]/.test(uuid) ? `a${uuid.slice(1)}` : uuid;
+}
+
 /* eslint-disable line-comment-position, no-inline-comments */
 
 
@@ -4021,7 +4063,7 @@ class AuroFloatingUI {
 
     this.id = element.getAttribute("id");
     if (!this.id) {
-      this.id = window.crypto.randomUUID();
+      this.id = generateUUID();
       element.setAttribute("id", this.id);
     }
 
@@ -5066,7 +5108,7 @@ let AuroHelpText$2 = class AuroHelpText extends i$3 {
   }
 };
 
-var formkitVersion$2 = '202609021913';
+var formkitVersion$2 = '202609022217';
 
 /**
  * AuroElement is the shared base class for layout-aware Auro form components.
@@ -18935,7 +18977,7 @@ let AuroHelpText$1 = class AuroHelpText extends i$3 {
   }
 };
 
-var formkitVersion$1 = '202609021913';
+var formkitVersion$1 = '202609022217';
 
 // Copyright (c) 2025 Alaska Airlines. All right reserved. Licensed under the Apache-2.0 license
 // See LICENSE in the project root for license information.
@@ -20127,7 +20169,7 @@ class AuroBibtemplate extends i$3 {
   }
 }
 
-var formkitVersion = '202609021913';
+var formkitVersion = '202609022217';
 
 var styleCss$3 = i$6`.util_displayInline{display:inline}.util_displayInlineBlock{display:inline-block}.util_displayBlock{display:block}.util_displayFlex{display:flex}.util_displayHidden{display:none}.util_displayHiddenVisually{position:absolute;overflow:hidden;clip:rect(1px, 1px, 1px, 1px);width:1px;height:1px;padding:0;border:0}:host{display:block;text-align:left}:host [auro-dropdown]{--ds-auro-dropdown-trigger-background-color: transparent}:host #inputInBib::part(wrapper){box-shadow:none}:host #inputInBib::part(accent-left){display:none}:host([layout*=classic]) [auro-input]{width:100%}:host([layout*=classic]) [auro-input]::part(helpText){display:none}:host([layout*=classic]) #slotHolder{display:none}`;
 

package/components/combobox/demo/index.min.js

@@ -3018,6 +3018,48 @@ const computePosition = (reference, floating, options) => {
   });
 };
 
+/**
+ * Generates a v4 UUID with a three-tier fallback for insecure contexts.
+ *
+ * Tier 1 (secure contexts): crypto.randomUUID() — native, fully random.
+ * Tier 2 (insecure contexts): crypto.getRandomValues() — available on all
+ *   modern browsers regardless of secure-context status.
+ * Tier 3 (last resort, no crypto API): new Date().getTime() — lower entropy,
+ *   but sufficient for element IDs where collision risk is negligible.
+ *
+ * See: https://w3c.github.io/webcrypto/#dom-crypto-randomuuid (secure-context restriction)
+ */
+function generateUUID() {
+  let uuid;
+
+  if (
+    typeof crypto !== "undefined" &&
+    typeof crypto.randomUUID === "function"
+  ) {
+    uuid = crypto.randomUUID();
+  } else if (
+    typeof crypto !== "undefined" &&
+    typeof crypto.getRandomValues === "function"
+  ) {
+    const bytes = new Uint8Array(16);
+    crypto.getRandomValues(bytes);
+    bytes[6] = (bytes[6] & 0x0f) | 0x40;
+    bytes[8] = (bytes[8] & 0x3f) | 0x80;
+    const hex = Array.from(bytes).map((b) => b.toString(16).padStart(2, "0"));
+    uuid = `${hex.slice(0, 4).join("")}-${hex.slice(4, 6).join("")}-${hex.slice(6, 8).join("")}-${hex.slice(8, 10).join("")}-${hex.slice(10).join("")}`;
+  } else {
+    let d = new Date().getTime();
+    uuid = "xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g, (c) => {
+      const r = (d % 16) | 0;
+      d = (d - r) / 16 || new Date().getTime();
+      return (c === "x" ? r : (r & 0x3) | 0x8).toString(16);
+    });
+  }
+
+  // CSS selectors require IDs starting with a letter; replace a leading digit with 'a'.
+  return /^[0-9]/.test(uuid) ? `a${uuid.slice(1)}` : uuid;
+}
+
 /* eslint-disable line-comment-position, no-inline-comments */
 
 
@@ -4036,7 +4078,7 @@ class AuroFloatingUI {
 
     this.id = element.getAttribute("id");
     if (!this.id) {
-      this.id = window.crypto.randomUUID();
+      this.id = generateUUID();
       element.setAttribute("id", this.id);
     }
 
@@ -5081,7 +5123,7 @@ let AuroHelpText$2 = class AuroHelpText extends i$3 {
   }
 };
 
-var formkitVersion$2 = '202609021913';
+var formkitVersion$2 = '202609022217';
 
 /**
  * AuroElement is the shared base class for layout-aware Auro form components.
@@ -18950,7 +18992,7 @@ let AuroHelpText$1 = class AuroHelpText extends i$3 {
   }
 };
 
-var formkitVersion$1 = '202609021913';
+var formkitVersion$1 = '202609022217';
 
 // Copyright (c) 2025 Alaska Airlines. All right reserved. Licensed under the Apache-2.0 license
 // See LICENSE in the project root for license information.
@@ -20142,7 +20184,7 @@ class AuroBibtemplate extends i$3 {
   }
 }
 
-var formkitVersion = '202609021913';
+var formkitVersion = '202609022217';
 
 var styleCss$3 = i$6`.util_displayInline{display:inline}.util_displayInlineBlock{display:inline-block}.util_displayBlock{display:block}.util_displayFlex{display:flex}.util_displayHidden{display:none}.util_displayHiddenVisually{position:absolute;overflow:hidden;clip:rect(1px, 1px, 1px, 1px);width:1px;height:1px;padding:0;border:0}:host{display:block;text-align:left}:host [auro-dropdown]{--ds-auro-dropdown-trigger-background-color: transparent}:host #inputInBib::part(wrapper){box-shadow:none}:host #inputInBib::part(accent-left){display:none}:host([layout*=classic]) [auro-input]{width:100%}:host([layout*=classic]) [auro-input]::part(helpText){display:none}:host([layout*=classic]) #slotHolder{display:none}`;