Skip to content

build(deps): bump dompurify from 3.4.12 to 3.4.13 - #1324

Merged
cesar-richard merged 1 commit into
frigofrom
dependabot/npm_and_yarn/dompurify-3.4.13
Aug 13, 2026
Merged

build(deps): bump dompurify from 3.4.12 to 3.4.13#1324
cesar-richard merged 1 commit into
frigofrom
dependabot/npm_and_yarn/dompurify-3.4.13

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Contributor

Bumps dompurify from 3.4.11 to 3.4.13.

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.13

  • Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
  • Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
  • Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
  • Bumped several dependencies where possible

DOMPurify 3.4.12

  • Fixed an issue where a hook would not get called for custom elements, thanks @​Rikuxx0
  • Hardened the handling of hooks removing elements, @​mkrause-bee360
  • Added support for a few new SVG attributes, thanks @​cbn-falias & @​Develop-KIM
  • Hardened the handling of declarative partial updates
  • Updated the documentation is several spots, README, wiki, etc.
  • Bumped several dependencies where possible
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 9, 2026
@cesar-richard
cesar-richard changed the base branch from develop to frigo August 13, 2026 13:12
@cesar-richard cesar-richard self-assigned this Aug 13, 2026
@cesar-richard

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot
dependabot Bot changed the base branch from frigo to develop August 13, 2026 13:25
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dompurify-3.4.13 branch from 4918a10 to e0c21d2 Compare August 13, 2026 13:25
@cesar-richard
cesar-richard changed the base branch from develop to frigo August 13, 2026 13:28
@cesar-richard
cesar-richard force-pushed the dependabot/npm_and_yarn/dompurify-3.4.13 branch from e0c21d2 to 25666fd Compare August 13, 2026 13:38
@cesar-richard cesar-richard changed the title build(deps): bump dompurify from 3.4.11 to 3.4.13 build(deps): bump dompurify from 3.4.12 to 3.4.13 Aug 13, 2026
@sonarqubecloud

Copy link
Copy Markdown

@cesar-richard
cesar-richard merged commit f50cecc into frigo Aug 13, 2026
10 checks passed
@cesar-richard
cesar-richard deleted the dependabot/npm_and_yarn/dompurify-3.4.13 branch August 13, 2026 14:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant