Bump deps and remove remark and strip-markdown

[compulim]

Fixes #3360. Fixes #3615.

Changelog Entry

Fixed

• Fixes #3360 and #3615. Use channelData['webchat:fallback-text'] field for screen reader text, before stripping Markdown from activity.text field, by @compulim, in PR #3917

Changed

• Bumped all dependencies to the latest versions and sample bumps, by @compulim in PR #3831, PR #3846, and PR #3917
  • Production dependencies
    • [email protected]
    • [email protected]

Description

Bump dependencies with npm audit, and a few more:

• [email protected]
• [email protected]

We removed remark and strip-markdown. They are used to extract screen reader text from activity:

• Yesterday, we stripped Markdown syntax from activity.text field using remark and strip-markdown packages
• Tomorrow
  • If activity.channelData['webchat:fallback-text'] field is available, we will use it as-is
  • Otherwise, we will strip Markdown from activity.text field with best effort
    1. Render text using useRenderMarkdown hook into HTML string
    2. Use new DOMParser().parseFromString() to parse HTML string as HTMLDocument
    3. Walk the HTMLDocument and concatenates all text nodes

Please refer to ACCESSIBILITY.md for details.

Design

Considerations on removing remark

Previously, we use remark to implement the "extract screen reader text from Markdown" feature. But the feature itself is causing a few issues: #3360 and #3615.

Although remark@10 has vulnerability in their dependencies and they fixed it in remark@12, they no longer support IE11.

We have a newer logic for stripping Markdown syntax. It will work with HTML tags with best effort. However, bot developers are strongly recommended to provide speak field for precise narration. See ACCESSIBILITY.md for details.

Specific Changes

• Bumped dependencies with npm audit and more:
  • [email protected]
  • [email protected]
• Removed remark and strip-markdown to extract screen reader text from text field
  • Instead, we will extract screen reader text from channelData['webchat:fallback-text'] field, fallback to remove Markdown syntax from text field with best effort
  • Strip Markdown logic will use new DOMParser().parseFromString() and walk the HTMLDocument manually

• I have added tests and executed them locally
• I have updated CHANGELOG.md
• I have updated documentation

Review Checklist

This section is for contributors to review your work.

• Accessibility reviewed (tab order, content readability, alt text, color contrast)
• Browser and platform compatibilities reviewed
• CSS styles reviewed (minimal rules, no z-index)
• Documents reviewed (docs, samples, live demo)
• Internationalization reviewed (strings, unit formatting)
• package.json and package-lock.json reviewed
• Security reviewed (no data URIs, check for nonce leak)
• Tests reviewed (coverage, legitimacy)

[corinagum]

Pending some comments. 'Outdated' status doesn't necessarily mean the comment is obsolete; could you look through them too?

[compulim]

Ready for next pass.

[corinagum]

LGTM!