Skip to content

Commit 2f996f8

Browse files
chore(deps): update dependency dompurify to v3.4.13 (#12549)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [dompurify](https://redirect.github.com/cure53/DOMPurify) | [`3.4.10` → `3.4.13`](https://renovatebot.com/diffs/npm/dompurify/3.4.10/3.4.13) | ![age](https://developer.mend.io/api/mc/badges/age/npm/dompurify/3.4.13?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/dompurify/3.4.10/3.4.13?slim=true) | --- ### Release Notes <details> <summary>cure53/DOMPurify (dompurify)</summary> ### [`v3.4.13`](https://redirect.github.com/cure53/DOMPurify/releases/tag/3.4.13): DOMPurify 3.4.13 [Compare Source](https://redirect.github.com/cure53/DOMPurify/compare/3.4.12...3.4.13) - Fixed an issue with hook removal during `IN_PLACE` sanitization, thanks [@&#8203;koyokr](https://redirect.github.com/koyokr) - Fixed an issue with hooks potentially bypassing the clone guard, thanks [@&#8203;AkshayjainG](https://redirect.github.com/AkshayjainG) - Fixed an issue with DOM clobbering via `ownerDocument` during `IN_PLACE`, thanks [@&#8203;AkshayjainG](https://redirect.github.com/AkshayjainG) - Bumped several dependencies where possible ### [`v3.4.12`](https://redirect.github.com/cure53/DOMPurify/releases/tag/3.4.12): DOMPurify 3.4.12 [Compare Source](https://redirect.github.com/cure53/DOMPurify/compare/3.4.11...3.4.12) - Fixed an issue where a hook would not get called for custom elements, thanks [@&#8203;Rikuxx0](https://redirect.github.com/Rikuxx0) - Hardened the handling of hooks removing elements, [@&#8203;mkrause-bee360](https://redirect.github.com/mkrause-bee360) - Added support for a few new SVG attributes, thanks [@&#8203;cbn-falias](https://redirect.github.com/cbn-falias) & [@&#8203;Develop-KIM](https://redirect.github.com/Develop-KIM) - Hardened the handling of declarative partial updates - Updated the documentation is several spots, README, wiki, etc. - Bumped several dependencies where possible ### [`v3.4.11`](https://redirect.github.com/cure53/DOMPurify/releases/tag/3.4.11): DOMPurify 3.4.11 [Compare Source](https://redirect.github.com/cure53/DOMPurify/compare/3.4.10...3.4.11) - Fixed an issue with a leaky config for hooks via `setConfig`, thanks [@&#8203;trace37labs](https://redirect.github.com/trace37labs) - Bumped vulnerable development dependencies to arrive at plain 0 with `npm audit` - Updated the `osv-scanner` suppression list as no vulnerable dependencies are left for now - Updated up the linting tool-chain and removed now-redundant lint directives - Updated the documentation is several spots, README, wiki, etc. - Bumped several dependencies where possible </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - Only on Sunday and Saturday (`* * * * 0,6`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Never, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/carbon-design-system/carbon-for-ibm-dotcom). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMzEuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEyLjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
1 parent 947175f commit 2f996f8

4 files changed

Lines changed: 6 additions & 6 deletions

File tree

-349 KB
Binary file not shown.
374 KB
Binary file not shown.

packages/web-components/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -185,7 +185,7 @@
185185
"cypress-wait-until": "^1.7.2",
186186
"del": "^6.0.0",
187187
"doctoc": "^2.0.0",
188-
"dompurify": "3.4.10",
188+
"dompurify": "3.4.13",
189189
"enzyme": "^3.11.0",
190190
"file-loader": "^6.2.0",
191191
"fs-extra": "^10.0.0",

yarn.lock

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3651,7 +3651,7 @@ __metadata:
36513651
cypress-wait-until: "npm:^1.7.2"
36523652
del: "npm:^6.0.0"
36533653
doctoc: "npm:^2.0.0"
3654-
dompurify: "npm:3.4.10"
3654+
dompurify: "npm:3.4.13"
36553655
enzyme: "npm:^3.11.0"
36563656
file-loader: "npm:^6.2.0"
36573657
fs-extra: "npm:^10.0.0"
@@ -15088,15 +15088,15 @@ __metadata:
1508815088
languageName: node
1508915089
linkType: hard
1509015090

15091-
"dompurify@npm:3.4.10":
15092-
version: 3.4.10
15093-
resolution: "dompurify@npm:3.4.10"
15091+
"dompurify@npm:3.4.13":
15092+
version: 3.4.13
15093+
resolution: "dompurify@npm:3.4.13"
1509415094
dependencies:
1509515095
"@types/trusted-types": "npm:^2.0.7"
1509615096
dependenciesMeta:
1509715097
"@types/trusted-types":
1509815098
optional: true
15099-
checksum: 10/e051c70e7a0729d8cc04d40d7863dc8977495140857e81dc668fb548b7a43c7f80cfc973e3c9c0a6cd18b8eaa94ea7de9603daa02d38c8b15a9b32cc25a6f440
15099+
checksum: 10/0db0a309a868a38aca042f606b37446977c35ee4501850a8c1bf2781337d79871daf1f4344bbf5b545f2a8c62e4d4e192c8fd6f1ff49ecec7c865c55a0aefee3
1510015100
languageName: node
1510115101
linkType: hard
1510215102

0 commit comments

Comments
 (0)