Skip to content

fix(deps): update dependency dompurify to ^3.4.14 (stable1.0) - #2934

Merged
github-actions[bot] merged 1 commit into
stable1.0from
renovate/stable1.0-dompurify-3.x
Aug 29, 2026
Merged

fix(deps): update dependency dompurify to ^3.4.14 (stable1.0)#2934
github-actions[bot] merged 1 commit into
stable1.0from
renovate/stable1.0-dompurify-3.x

Conversation

@renovate

@renovate renovate Bot commented Aug 29, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
dompurify ^3.4.13^3.4.14 age confidence

Release Notes

cure53/DOMPurify (dompurify)

v3.4.14: DOMPurify 3.4.14

Compare Source

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate Bot added the 3. to review Waiting for reviews label Aug 29, 2026
@renovate
renovate Bot requested a review from enjeck as a code owner August 29, 2026 09:57
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Aug 29, 2026
@renovate
renovate Bot requested a review from blizzz as a code owner August 29, 2026 09:57
@renovate renovate Bot added dependencies Pull requests that update a dependency file 3. to review Waiting for reviews labels Aug 29, 2026
@github-actions
github-actions Bot enabled auto-merge August 29, 2026 09:57
@github-actions
github-actions Bot merged commit 9c0a8cc into stable1.0 Aug 29, 2026
53 checks passed
@github-actions
github-actions Bot deleted the renovate/stable1.0-dompurify-3.x branch August 29, 2026 10:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant