Skip to content

fix(deps): update dependency dompurify to v3.4.14 - #3589

Merged
kolaente merged 1 commit into
mainfrom
renovate/dompurify-3.x
Aug 24, 2026
Merged

fix(deps): update dependency dompurify to v3.4.14#3589
kolaente merged 1 commit into
mainfrom
renovate/dompurify-3.x

Conversation

@renovate

@renovate renovate Bot commented Aug 22, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
dompurify 3.4.133.4.14 age confidence

Release Notes

cure53/DOMPurify (dompurify)

v3.4.14: DOMPurify 3.4.14

Compare Source

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Aug 22, 2026
@github-actions github-actions Bot added the area/frontend Frontend-only code or UI work label Aug 22, 2026
@github-actions

Copy link
Copy Markdown

Preview Deployment

Preview deployments for this PR are available at:

URL Tag Commit
https://pr-3589.preview.vikunja.dev ghcr.io/go-vikunja/vikunja:pr-3589 latest
https://sha-79cb39c4f75c3d270039e209005cc96ecca29bd1.preview.vikunja.dev ghcr.io/go-vikunja/vikunja:sha-79cb39c4f75c3d270039e209005cc96ecca29bd1 79cb39c

The preview environment will start automatically on first visit. Subsequent pushes to this PR will update the pr-3589 image — the preview picks up the new version on restart. The per-commit URLs point to a specific version and will not change.

Run locally with Docker
docker pull ghcr.io/go-vikunja/vikunja:pr-3589
docker run -p 3456:3456 ghcr.io/go-vikunja/vikunja:pr-3589

Last updated for commit 79cb39c

@kolaente
kolaente merged commit a28e490 into main Aug 24, 2026
46 checks passed
@kolaente
kolaente deleted the renovate/dompurify-3.x branch August 24, 2026 18:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/frontend Frontend-only code or UI work dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant