Bump nhsuk-frontend from 10.2.2 to 10.3.0

[dependabot]

Bumps nhsuk-frontend from 10.2.2 to 10.3.0.

Release notes

Sourced from nhsuk-frontend's releases.

v10.3.0

10.3.0 - 13 January 2026

Note: This release was created from the support/10.x branch.

🆕 New features

New file upload component

We've added a new file upload component which:

• makes the file inputs easier to use for drag and drop
• allows the text of the component to be translated
• fixes accessibility issues for users of Dragon, a speech recognition software

To use the fileUpload Nunjucks macro in your service:

{{ fileUpload({
  label: {
    text: "Upload your photo"
  }
  id: "file-upload",
  name: "photo"
}) }}

If you are not using Nunjucks macros, use the following HTML:

<div class="nhsuk-form-group nhsuk-file-upload" data-module="nhsuk-file-upload">
  <label class="nhsuk-label" for="file-upload">
    Upload your photo
  </label>
  <input class="nhsuk-file-upload__input" id="file-upload" name="photo" type="file">
</div>

If you're importing components individually in your JavaScript, which we recommend for better performance, you'll then need to import and initialise the new FileUpload component.

import { createAll, FileUpload } from 'nhsuk-frontend'
createAll(FileUpload)

This change was introduced in [pull request #1556: Uplift GOV.UK Frontend file upload component](nhsuk/nhsuk-frontend#1556)

Interruption panel

... (truncated)

Changelog

Sourced from nhsuk-frontend's changelog.

10.3.0 - 13 January 2026

Note: This release was created from the support/10.x branch.

🆕 New features

New file upload component

We've added a new file upload component which:

• makes the file inputs easier to use for drag and drop
• allows the text of the component to be translated
• fixes accessibility issues for users of Dragon, a speech recognition software

To use the fileUpload Nunjucks macro in your service:

{{ fileUpload({
  label: {
    text: "Upload your photo"
  }
  id: "file-upload",
  name: "photo"
}) }}

If you are not using Nunjucks macros, use the following HTML:

<div class="nhsuk-form-group nhsuk-file-upload" data-module="nhsuk-file-upload">
  <label class="nhsuk-label" for="file-upload">
    Upload your photo
  </label>
  <input class="nhsuk-file-upload__input" id="file-upload" name="photo" type="file">
</div>

If you're importing components individually in your JavaScript, which we recommend for better performance, you'll then need to import and initialise the new FileUpload component.

import { createAll, FileUpload } from 'nhsuk-frontend'
createAll(FileUpload)

This change was introduced in [pull request #1556: Uplift GOV.UK Frontend file upload component](nhsuk/nhsuk-frontend#1556)

Interruption panel

We've added a new variant of the panel component with a solid blue background and white text. This can be used as an interruption card.

... (truncated)

Commits

• 416c28e Merge pull request #1768 from nhsuk/release-v10.3.0
• f6d63b2 Add versioned scripts and styles to npm package
• 670aca9 Update package version to v10.3.0
• 74e39d6 Merge pull request #1767 from nhsuk/card-actions-without-heading
• 7c2e0c9 Fix card action alignment without heading
• a1a0794 Merge pull request #1766 from nhsuk/nested-attribute-tests
• 864b928 Merge pull request #1763 from nhsuk/nested-param-names
• a103a2d Align attributes macro JSON escaping with Jinja2
• cf11a11 Nunjucks formatting
• 41ab7e3 Add changelog entry
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)