From 93e2f227b0eb712aa3c1490b2d94f623863ae9ac Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 2 Sep 2026 02:58:58 +0000 Subject: [PATCH] Bump sanitize-html from 2.17.6 to 2.17.7 in /server Bumps [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) from 2.17.6 to 2.17.7. - [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md) - [Commits](https://github.com/apostrophecms/apostrophe/commits/HEAD/packages/sanitize-html) --- updated-dependencies: - dependency-name: sanitize-html dependency-version: 2.17.7 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- server/package.json | 2 +- server/pnpm-lock.yaml | 43 ++++++++++++++++++++++--------------------- 2 files changed, 23 insertions(+), 22 deletions(-) diff --git a/server/package.json b/server/package.json index c54d9896c..f9a40ee02 100644 --- a/server/package.json +++ b/server/package.json @@ -51,7 +51,7 @@ "parse-dms": "^0.0.5", "pg": "^8.22.0", "pg-hstore": "^2.3.4", - "sanitize-html": "^2.17.6", + "sanitize-html": "^2.17.7", "sequelize": "^6.37.8", "sharp": "^0.35.3", "timekeeper": "^2.3.1", diff --git a/server/pnpm-lock.yaml b/server/pnpm-lock.yaml index 596f20d7d..6724f52ce 100644 --- a/server/pnpm-lock.yaml +++ b/server/pnpm-lock.yaml @@ -105,8 +105,8 @@ importers: specifier: ^2.3.4 version: 2.3.4 sanitize-html: - specifier: ^2.17.6 - version: 2.17.6 + specifier: ^2.17.7 + version: 2.17.7 sequelize: specifier: ^6.37.8 version: 6.37.8(pg-hstore@2.3.4)(pg@8.22.0)(supports-color@8.1.1) @@ -1414,6 +1414,7 @@ packages: crypto-js@4.2.0: resolution: {integrity: sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==} + deprecated: Active development of CryptoJS has been discontinued. This library is no longer maintained. css-select@5.1.0: resolution: {integrity: sha512-nwoRF1rvRRnnCqqY7updORDsuqKzqYJ28+oSMaJMMgOauh3fvwHqMS7EZpIPqK8GL+g9mKxF1vP/ZjSeNjEVHg==} @@ -1429,8 +1430,8 @@ packages: date-fns@4.4.0: resolution: {integrity: sha512-+1UMbeh68lH1SegH83CGWwpb6OHHbpSgr3+s5Eww5M4CAgswBpoWS0AjTOfEJ33HiYKz1hdj/KTFprzXHmq/6w==} - dayjs@1.11.21: - resolution: {integrity: sha512-98IT+HOahAisibz/yjKbzuOBwYcjJ7BCLPzARyHiyEBmRz4fatF+KPJszEHXsGYjUG234aH/cOjW1wwTbKUZlA==} + dayjs@1.11.23: + resolution: {integrity: sha512-QDTCU0M0MxR3hQfnlDJfwekQiaanm1ubOD231u73WBckQ/fsamwRLiE2GBz6D3a/xF1NgfiDLJjXBa1hYOYTtQ==} debug@2.6.9: resolution: {integrity: sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==} @@ -1990,8 +1991,8 @@ packages: resolution: {integrity: sha512-Fd4gABb+ycGAmKou8eMftCupSir5lRxqf4aD/vd0cD2qc4HL07OjCeuHMr8Ro4CoMaeCKDB0/ECBOVWjTwUvPQ==} engines: {node: '>=8'} - is-plain-object@5.0.0: - resolution: {integrity: sha512-VRSzKkbMm5jMDoKLbltAkFQ5Qr7VDiTFGXxYFXXowVj387GeGNOCsOH6Msy00SGZ3Fp84b1Naa1psqgcCIEP5Q==} + is-plain-object@5.1.0: + resolution: {integrity: sha512-bUi/yjmtKYcRVUtWRGr0UA6xEFh2I6zWUwMrUXB3s7bmYCaZ8a+0ZsTRkrawh/mzlSD1Y0Ph8bp/U+TvBpWDNw==} engines: {node: '>=0.10.0'} is-promise@4.0.0: @@ -2403,8 +2404,8 @@ packages: resolution: {integrity: sha512-6rdyFg2kLrMh9Jee7/BMPuV9lEAd7lLW2YUpF9/YxR7njyoUwwQ0ZPh3TaIY50Sw6vlyD2HW3wGOkTS4P79xrQ==} engines: {node: '>= 10.16.0'} - nanoid@3.3.7: - resolution: {integrity: sha512-eSRppjcPIatRIMC1U6UngP8XFcz8MQWGQdt1MTBQ7NaAmvXDfvNxbvWV3x2y6CdEUciCSsDHDQZbhYaB8QEo2g==} + nanoid@3.3.18: + resolution: {integrity: sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==} engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} hasBin: true @@ -2616,8 +2617,8 @@ packages: resolution: {integrity: sha512-HRDzbaKjC+AOWVXxAU/x54COGeIv9eb+6CkDSQoNTt4XyWoIJvuPsXizxu/Fr23EiekbtZwmh1IcIG/l/a10GQ==} engines: {node: '>=8'} - postcss@8.4.47: - resolution: {integrity: sha512-56rxCq7G/XfB4EkXq9Egn5GCqugWvDFjafDOThIdMBsI15iqPqR5r15TfSr1YPYeEI19YeaXMCbY6u88Y76GLQ==} + postcss@8.5.26: + resolution: {integrity: sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==} engines: {node: ^10 || ^12 || >=14} postgres-array@2.0.0: @@ -2768,8 +2769,8 @@ packages: safer-buffer@2.1.2: resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==} - sanitize-html@2.17.6: - resolution: {integrity: sha512-M4bo9tfv1yfhQZZKkc6dL07ALrGJtfvNOuhX3hU9AVPR/uPQ+nKOJBqTYc7LfMQblTW04mtSWDJWEyLvygJsLA==} + sanitize-html@2.17.7: + resolution: {integrity: sha512-PGtEkc9cbnedU3s9TmzDbpsZ8w086g/0Q8k8/oIO1NLNU3i5k9yn835CrjJSajp1KMmkisbO1qPXxNKO3welAg==} engines: {node: '>=22.12.0'} semifies@1.0.0: @@ -4622,7 +4623,7 @@ snapshots: date-fns@4.4.0: {} - dayjs@1.11.21: {} + dayjs@1.11.23: {} debug@2.6.9(supports-color@8.1.1): dependencies: @@ -5207,7 +5208,7 @@ snapshots: is-path-inside@3.0.3: {} - is-plain-object@5.0.0: {} + is-plain-object@5.1.0: {} is-promise@4.0.0: {} @@ -5664,7 +5665,7 @@ snapshots: launder@1.7.1: dependencies: - dayjs: 1.11.21 + dayjs: 1.11.23 leven@3.1.0: {} @@ -5810,7 +5811,7 @@ snapshots: concat-stream: 2.0.0 type-is: 1.6.18 - nanoid@3.3.7: {} + nanoid@3.3.18: {} napi-postinstall@0.3.4: {} @@ -5989,9 +5990,9 @@ snapshots: dependencies: find-up: 4.1.0 - postcss@8.4.47: + postcss@8.5.26: dependencies: - nanoid: 3.3.7 + nanoid: 3.3.18 picocolors: 1.1.1 source-map-js: 1.2.1 @@ -6131,15 +6132,15 @@ snapshots: safer-buffer@2.1.2: {} - sanitize-html@2.17.6: + sanitize-html@2.17.7: dependencies: deepmerge: 4.3.1 escape-string-regexp: 4.0.0 htmlparser2: 12.0.0 - is-plain-object: 5.0.0 + is-plain-object: 5.1.0 launder: 1.7.1 parse-srcset: 1.0.2 - postcss: 8.4.47 + postcss: 8.5.26 semifies@1.0.0: {}