From 6b212579eb239cece106da39a06576276f90e213 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 4 Mar 2026 22:40:12 +0000 Subject: [PATCH] chore(deps-dev): bump dompurify from 3.2.6 to 3.3.1 Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.2.6 to 3.3.1. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/3.2.6...3.3.1) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.3.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] --- pnpm-lock.yaml | 14 +++++++++----- ui/package.json | 2 +- 2 files changed, 10 insertions(+), 6 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 817cd7933e5..ef8c7f20acf 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -122,8 +122,8 @@ importers: specifier: ^3.0.1 version: 3.0.1(d3-selection@3.0.0) dompurify: - specifier: ^3.2.5 - version: 3.2.6 + specifier: ^3.3.1 + version: 3.3.1 duration-js: specifier: ^4.0.0 version: 4.0.0 @@ -1577,6 +1577,9 @@ packages: '@sinonjs/text-encoding@0.7.3': resolution: {integrity: sha512-DE427ROAphMQzU4ENbliGYrBSYPXF+TtLg9S8vzeA+OF4ZKzoDdzfL8sxuMUGS/lgRhM6j1URSk9ghf7Xo1tyA==} + deprecated: |- + Deprecated: no longer maintained and no longer used by Sinon packages. See + https://github.com/sinonjs/nise/issues/243 for replacement details. '@socket.io/component-emitter@3.1.2': resolution: {integrity: sha512-9BCxFwvbGg/RsZK9tjXd8s4UcwR0MWeFQ1XEKIQVVvAGJyINdrqKMcTRyLoK8Rse1GjzLV9cwjWV1olXRWEXVA==} @@ -2374,6 +2377,7 @@ packages: basic-ftp@5.0.5: resolution: {integrity: sha512-4Bcg1P8xhUuqcii/S0Z9wiHIrQVPMermM1any+MX5GeGD7faD3/msQUDGLol9wOcz4/jbg/WJnGqoJF6LiBdtg==} engines: {node: '>=10.0.0'} + deprecated: Security vulnerability fixed in 5.2.0, please upgrade better-path-resolve@1.0.0: resolution: {integrity: sha512-pbnl5XzGBdrFU/wT4jqmJVPn2B6UHPBOhzMQkY/SPUPB6QtUXtmBHBIwCbXJol93mOpGMnQyP/+BB19q04xj7g==} @@ -3551,8 +3555,8 @@ packages: engines: {node: '>=8'} deprecated: Use your platform's native DOMException instead - dompurify@3.2.6: - resolution: {integrity: sha512-/2GogDQlohXPZe6D6NOgQvXLPSYBqIWMnZ8zzOhn09REE4eyAzb+Hed3jhoM9OkuaJ8P6ZGTTVWQKAi8ieIzfQ==} + dompurify@3.3.1: + resolution: {integrity: sha512-qkdCKzLNtrgPFP1Vo+98FRzJnBRGe4ffyCea9IwHB1fyxPOeNTHpLKYGd4Uk9xvNoH0ZoOjwZxNptyMwqrId1Q==} dot-case@3.0.4: resolution: {integrity: sha512-Kv5nKlh6yRrdrGvxeJ2e5y2eRUpkUosIW4A2AS38zwSz27zu7ufDwQPi5Jhs3XAlGNetl3bmnGhQsMtkKJnj3w==} @@ -12253,7 +12257,7 @@ snapshots: dependencies: webidl-conversions: 5.0.0 - dompurify@3.2.6: + dompurify@3.3.1: optionalDependencies: '@types/trusted-types': 2.0.7 diff --git a/ui/package.json b/ui/package.json index 2ecb3489b86..a4d73e100fe 100644 --- a/ui/package.json +++ b/ui/package.json @@ -73,7 +73,7 @@ "d3-shape": "^3.0.1", "d3-time-format": "^4.0.0", "d3-transition": "^3.0.1", - "dompurify": "^3.2.5", + "dompurify": "^3.3.1", "duration-js": "^4.0.0", "ember-a11y-testing": "^7.0.0", "ember-auto-import": "^2.4.0",