chore(deps-dev): bump @wordpress/components from 38.0.0 to 39.0.0

[dependabot]

Bumps @wordpress/components from 38.0.0 to 39.0.0.

Changelog

Sourced from @​wordpress/components's changelog.

39.0.0 (2026-08-12)

Breaking Changes

• ValidatedTextControl: Remove from private APIs. Use ValidatedInputControl instead (#80680).
• Components that compose Emotion style fragments with cx() should pass source-order-dependent fragments in a single css() call. Passing separate fragments can change override order after the following components stopped rendering styles through Emotion:
  • ItemGroup (#80797)
  • Spinner (#80511)
• Remove the private DateCalendar, DateRangeCalendar and TZDate exports. The calendars now ship as the public Calendar and RangeCalendar components in @wordpress/ui; TZDate comes from @date-fns/tz (#81337).

Deprecations

• Animate: Deprecate the component, planned for removal in WordPress 7.4 (#80931).
• Surface: Deprecate the component, planned for removal in WordPress 7.4 (#80943).

Enhancements

• SandBox: Add allowForms prop to opt into allow-forms in the iframe's sandbox attribute (#76471).

Bug Fixes

• Modal: Prevent background page scrolling without relying on WordPress global styles when using the default bodyOpenClassName (#81164).
• Menu: Return focus to the root trigger after closing a legacy Modal opened from a menu item, while preserving the menu-to-Modal scroll-lock handoff (#81164).
• Button: Suppress the browser focus ring when keyboard-focused and pressed (#81113).

TypeScript

• Further improved WordPressComponent typecheck performance: intrinsic as values use a shared attribute bag instead of remapping props per HTML tag (#80705).
• ConfirmDialog: Type the size prop forwarded to Modal (#80705).
• ToggleGroupControl: Type the disabled prop (#80705).
• DropdownContentWrapper: Type the children prop (#80705).

Documentation

• ConfirmDialog: Opt into auto-generated README documentation from types and JSDoc (#80866).

Internal

• Remove ValidatedCheckboxControl from the private APIs; it now lives internally in @wordpress/dataviews, its only consumer (#81435).
• Remove ValidatedNumberControl from the private APIs; it now lives internally in @wordpress/dataviews, its only consumer (#81433).
• Remove ValidatedRadioControl from the private APIs; it now lives internally in @wordpress/dataviews, its only consumer (#81434).
• Remove ValidatedSelectControl from the private APIs; it now lives internally in @wordpress/dataviews, its only consumer (#81391).
• Move withIgnoreIMEEvents to @wordpress/keycodes, where it is now a public API, and remove it from this package's private APIs (#81343).
• Extract the private kebabCase utility to the new @wordpress/kebab-case package and remove it from the private APIs; all consumers now use the package directly (#81294).
• Remove normalizeTextString from the private APIs; the utility remains internal to this package (#81294).
• Remove obsolete dependency grouping comments as part of the repository-wide separator-free import migration. (#81248)
• Button: Expand the Storybook e2e VariantStates matrix with compact, small, and with-icon rows (#80793).
• Update react-day-picker to 9.14.0 (#80792).
• Update @ariakit/react to 0.4.35 and @ariakit/test to 0.7.2 (#80765).
• Update @floating-ui/react-dom to 2.1.9 (#80761).

... (truncated)

Commits

• 989764d chore(release): publish
• e18aa00 Update changelog files
• dbb73c9 Merge changes published in the Gutenberg plugin "release/23.8" branch
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Test in WordPress Playground

Test the plugin with the code from this branch:

ℹ️ The eXeLearning editor is fetched from the shared release and unpacked into the plugin when the playground boots, so the first load may take a few extra seconds. ELP upload, shortcode, Gutenberg block and preview work normally.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.87%. Comparing base (0a61240) to head (03ec55f).

Additional details and impacted files

@@            Coverage Diff            @@
##               main     #105   +/-   ##
=========================================
  Coverage     96.87%   96.87%           
  Complexity      864      864           
=========================================
  Files            39       39           
  Lines          4323     4323           
=========================================
  Hits           4188     4188           
  Misses          135      135           

Flag	Coverage Δ
javascript	95.70% <ø> (ø)
php	97.25% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.