Skip to content

build(deps): bump dompurify from 3.4.16 to 3.4.17 in /builder-frontend in the npm_and_yarn group across 1 directory - #577

Merged
prestoncabe merged 1 commit into
mainfrom
dependabot/npm_and_yarn/builder-frontend/npm_and_yarn-81f61753d2
Oct 29, 2026
Merged

prestoncabe merged 1 commit into
mainfrom
dependabot/npm_and_yarn/builder-frontend/npm_and_yarn-81f61753d2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 1 update in the /builder-frontend directory: dompurify.

Updates dompurify from 3.4.16 to 3.4.17

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

  • Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @​manus-pi
  • Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @​uttej-badwane
  • Fixed the SMIL attributeName guard in XHTML mode, thanks @​Koukyosyumei
  • Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @​artiphishell
  • Added a purify-edge test runner as a compatibility check, thanks @​anzal1
  • Clarified the IN_PLACE documentation in the README about possible risks
  • Updated several dependencies
Commits

@dependabot
dependabot Bot requested a review from prestoncabe as a code owner October 23, 2026 01:00
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 23, 2026
@prestoncabe

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps the npm_and_yarn group with 1 update in the /builder-frontend directory: [dompurify](https://github.com/cure53/DOMPurify).


Updates `dompurify` from 3.4.16 to 3.4.17
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.16...3.4.17)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/builder-frontend/npm_and_yarn-81f61753d2 branch from d0bff67 to 42823cd Compare October 29, 2026 19:31
@prestoncabe
prestoncabe merged commit 208abe3 into main Oct 29, 2026
5 checks passed
@prestoncabe
prestoncabe deleted the dependabot/npm_and_yarn/builder-frontend/npm_and_yarn-81f61753d2 branch October 29, 2026 19:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant