Skip to content

fix(deps): update dependency dompurify to ^3.4.14 - #1005

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dompurify-3.x
Open

fix(deps): update dependency dompurify to ^3.4.14#1005
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dompurify-3.x

Conversation

@renovate

@renovate renovate Bot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
dompurify ^3.4.12^3.4.14 age confidence

Release Notes

cure53/DOMPurify (dompurify)

v3.4.14: DOMPurify 3.4.14

Compare Source

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions

v3.4.13: DOMPurify 3.4.13

Compare Source

  • Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
  • Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
  • Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
  • Bumped several dependencies where possible

Configuration

📅 Schedule: (in timezone Europe/Paris)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Aug 6, 2026
@renovate
renovate Bot requested a review from pplancq as a code owner August 6, 2026 15:16
@renovate renovate Bot added the dependencies label Aug 6, 2026
@renovate
renovate Bot force-pushed the renovate/dompurify-3.x branch 3 times, most recently from 3f9e82f to 4eafe15 Compare August 14, 2026 20:28
@renovate
renovate Bot force-pushed the renovate/dompurify-3.x branch from 4eafe15 to 701cd05 Compare August 22, 2026 10:34
@renovate renovate Bot changed the title fix(deps): update dependency dompurify to ^3.4.13 fix(deps): update dependency dompurify to ^3.4.14 Aug 22, 2026
@renovate
renovate Bot force-pushed the renovate/dompurify-3.x branch from 701cd05 to 626e9a6 Compare August 26, 2026 11:52
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants