From fadb531457ffeb07dc1fb6724feabff47fb1104b Mon Sep 17 00:00:00 2001 From: "Gabriel A. Devenyi" Date: Mon, 2 Nov 2026 19:37:50 -0500 Subject: [PATCH] fix(runtime-v1): bump vendored dompurify to 3.4.17 Resolves Dependabot alerts for GHSA-cg2g-xh64-v4q7, GHSA-mrv2-3pqr-j5jr, GHSA-c6gr-qvv4-5v3f, GHSA-p98j-92pf-mc4p, GHSA-6688-9rhm-gjv2 and GHSA-55q2-fjhq-7xh7 in the dompurify__3.x runtime library. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01W53iUSpZekM2didbKGCSSv --- pnpm-lock.yaml | 14 +++++++------- vendor/dompurify@3.x/package.json | 4 ++-- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index de66164c0..1dc100616 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -1621,8 +1621,8 @@ importers: vendor/dompurify@3.x: dependencies: dompurify: - specifier: 3.4.12 - version: 3.4.12 + specifier: 3.4.17 + version: 3.4.17 vendor/jquery-ui@1.x: dependencies: @@ -7054,12 +7054,12 @@ packages: resolution: {integrity: sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==} engines: {node: '>= 4'} - dompurify@3.4.12: - resolution: {integrity: sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==} - dompurify@3.4.15: resolution: {integrity: sha512-EUBjM+B+lkDE41iE82DDSCfkoPGfXx8IxFxPMjNzm/Uk4xDet77rTN9wqlxlVg71kK7XGuUMv6wUxJUwwv+Xyw==} + dompurify@3.4.17: + resolution: {integrity: sha512-B/pSlYVHQ58kqISD/yDjuJ1yfzI34m1gF4lAod2bwSRhiN4K5Cl3H8Af7hqB2PmTL911tdEudnnXn5FnhRoz0w==} + domutils@3.2.2: resolution: {integrity: sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw==} @@ -16947,11 +16947,11 @@ snapshots: dependencies: domelementtype: 2.3.0 - dompurify@3.4.12: + dompurify@3.4.15: optionalDependencies: '@types/trusted-types': 2.0.7 - dompurify@3.4.15: + dompurify@3.4.17: optionalDependencies: '@types/trusted-types': 2.0.7 diff --git a/vendor/dompurify@3.x/package.json b/vendor/dompurify@3.x/package.json index 785d44708..3618f115d 100644 --- a/vendor/dompurify@3.x/package.json +++ b/vendor/dompurify@3.x/package.json @@ -1,7 +1,7 @@ { "name": "dompurify__3.x", "type": "module", - "version": "3.4.12", + "version": "3.4.17", "license": "Apache-2.0", "exports": { ".": { @@ -11,6 +11,6 @@ "./package.json": "./package.json" }, "dependencies": { - "dompurify": "3.4.12" + "dompurify": "3.4.17" } }