From 89172cdbda9c9dd0e059babb4f1bb6eb3dc4906f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 16 Apr 2025 15:46:57 +0200 Subject: [PATCH] chore(deps): bump dompurify from 3.1.5 to 3.2.5 in /ui (#25601) Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.1.5 to 3.2.5. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/3.1.5...3.2.5) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.2.5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- ui/package.json | 2 +- ui/yarn.lock | 15 +++++++++++---- 2 files changed, 12 insertions(+), 5 deletions(-) diff --git a/ui/package.json b/ui/package.json index e092d6ea4..6a658c85b 100644 --- a/ui/package.json +++ b/ui/package.json @@ -170,7 +170,7 @@ "@percy/ember": "^4.2.0", "curved-arrows": "^0.1.0", "d3": "^7.3.0", - "dompurify": "^3.1.3", + "dompurify": "^3.2.5", "lru_map": "^0.4.1", "marked": "^12.0.2", "no-case": "^3.0.4", diff --git a/ui/yarn.lock b/ui/yarn.lock index 9cf4bc737..3d997370f 100644 --- a/ui/yarn.lock +++ b/ui/yarn.lock @@ -3120,6 +3120,11 @@ resolved "https://registry.yarnpkg.com/@types/symlink-or-copy/-/symlink-or-copy-1.2.2.tgz#51b1c00b516a5774ada5d611e65eb123f988ef8d" integrity sha512-MQ1AnmTLOncwEf9IVU+B2e4Hchrku5N67NkgcAHW0p3sdzPe0FNMANxEm6OJUzPniEQGkeT3OROLlCwZJLWFZA== +"@types/trusted-types@^2.0.7": + version "2.0.7" + resolved "https://registry.yarnpkg.com/@types/trusted-types/-/trusted-types-2.0.7.tgz#baccb07a970b91707df3a3e8ba6896c57ead2d11" + integrity sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw== + "@types/yauzl@^2.9.1": version "2.10.3" resolved "https://registry.yarnpkg.com/@types/yauzl/-/yauzl-2.10.3.tgz#e9b2808b4f109504a03cda958259876f61017999" @@ -6442,10 +6447,12 @@ domexception@^2.0.1: dependencies: webidl-conversions "^5.0.0" -dompurify@^3.1.3: - version "3.1.5" - resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-3.1.5.tgz#2c6a113fc728682a0f55684b1388c58ddb79dc38" - integrity sha512-lwG+n5h8QNpxtyrJW/gJWckL+1/DQiYMX8f7t8Z2AZTPw1esVrqjI63i7Zc2Gz0aKzLVMYC1V1PL/ky+aY/NgA== +dompurify@^3.2.5: + version "3.2.5" + resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-3.2.5.tgz#11b108656a5fb72b24d916df17a1421663d7129c" + integrity sha512-mLPd29uoRe9HpvwP2TxClGQBzGXeEC/we/q+bFlmPPmj2p2Ugl3r6ATu/UU1v77DXNcehiBg9zsr1dREyA/dJQ== + optionalDependencies: + "@types/trusted-types" "^2.0.7" dot-case@^3.0.4: version "3.0.4"