Upgrade: [dependabot] - bump nhsuk-frontend from 9.6.4 to 10.3.1

[dependabot]

Bumps nhsuk-frontend from 9.6.4 to 10.3.1.

Release notes

Sourced from nhsuk-frontend's releases.

v10.3.1

10.3.1 - 19 January 2026

Note: This release was created from the support/10.x branch.

🔧 Fixes

• #1777: Remove extra space when bodyClasses is set
• #1778: Fix link to file upload pluralisation rules documentation

v10.3.0

10.3.0 - 13 January 2026

Note: This release was created from the support/10.x branch.

🆕 New features

New file upload component

We've added a new file upload component which:

• makes the file inputs easier to use for drag and drop
• allows the text of the component to be translated
• fixes accessibility issues for users of Dragon, a speech recognition software

To use the fileUpload Nunjucks macro in your service:

{{ fileUpload({
  label: {
    text: "Upload your photo"
  }
  id: "file-upload",
  name: "photo"
}) }}

If you are not using Nunjucks macros, use the following HTML:

<div class="nhsuk-form-group nhsuk-file-upload" data-module="nhsuk-file-upload">
  <label class="nhsuk-label" for="file-upload">
    Upload your photo
  </label>
  <input class="nhsuk-file-upload__input" id="file-upload" name="photo" type="file">
</div>

If you're importing components individually in your JavaScript, which we recommend for better performance, you'll then need to import and initialise the new FileUpload component.

... (truncated)

Changelog

Sourced from nhsuk-frontend's changelog.

10.3.1 - 19 January 2026

Note: This release was created from the support/10.x branch.

🔧 Fixes

• #1777: Remove extra space when bodyClasses is set
• #1778: Fix link to file upload pluralisation rules documentation

10.3.0 - 13 January 2026

Note: This release was created from the support/10.x branch.

🆕 New features

New file upload component

We've added a new file upload component which:

• makes the file inputs easier to use for drag and drop
• allows the text of the component to be translated
• fixes accessibility issues for users of Dragon, a speech recognition software

To use the fileUpload Nunjucks macro in your service:

{{ fileUpload({
  label: {
    text: "Upload your photo"
  }
  id: "file-upload",
  name: "photo"
}) }}

If you are not using Nunjucks macros, use the following HTML:

<div class="nhsuk-form-group nhsuk-file-upload" data-module="nhsuk-file-upload">
  <label class="nhsuk-label" for="file-upload">
    Upload your photo
  </label>
  <input class="nhsuk-file-upload__input" id="file-upload" name="photo" type="file">
</div>

If you're importing components individually in your JavaScript, which we recommend for better performance, you'll then need to import and initialise the new FileUpload component.

import { createAll, FileUpload } from 'nhsuk-frontend'
</tr></table> 

... (truncated)

Commits

• b3c4f56 Update package version to v10.3.1
• 99406f4 Merge pull request #1778 from nhsuk/file-upload-i18n-link
• 9769f1b Merge pull request #1777 from nhsuk/template-classes
• 6102f42 Add changelog entry
• 96c8267 Fix link to pluralisation rules documentation
• ade98f1 Add changelog entry
• f09f770 Remove extra space when bodyClasses is set
• 416c28e Merge pull request #1768 from nhsuk/release-v10.3.0
• f6d63b2 Add versioned scripts and styles to npm package
• 670aca9 Update package version to v10.3.0
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for nhsuk-frontend since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

This PR is raised by Dependabot to update a dependency.

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[eps-autoapprove-dependabot]

I'm not approving this PR because it includes a major update of a dependency used in production