From 3327e56bbb346b400d1f38a4f2f298503e7c8de1 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 30 Mar 2026 16:26:53 +0000
Subject: [PATCH] fix: shell/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-15789759
- https://snyk.io/vuln/SNYK-JS-DOMPURIFY-15810938
- https://snyk.io/vuln/SNYK-JS-PATHTOREGEXP-15789761
---
 shell/package.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/shell/package.json b/shell/package.json
index 03bf4a395b0..56aa05ef4db 100644
--- a/shell/package.json
+++ b/shell/package.json
@@ -78,7 +78,7 @@
     "dayjs": "1.11.18",
     "defu": "6.1.4",
     "diff2html": "3.4.24",
-    "dompurify": "3.2.5",
+    "dompurify": "3.3.2",
     "element-matches": "^0.1.2",
     "entities": "4.5.0",
     "eslint-config-standard": "16.0.3",
@@ -89,9 +89,9 @@
     "eslint-plugin-jest": "24.4.0",
     "eslint-plugin-n": "15.2.0",
     "eslint-plugin-vue": "9.32.0",
-    "eslint": "7.32.0",
+    "eslint": "9.0.0",
     "event-target-shim": "5.0.1",
-    "express": "4.17.1",
+    "express": "4.22.0",
     "file-saver": "2.0.2",
     "floating-vue": "5.2.2",
     "focus-trap": "7.6.5",