From 3e1a158ee18c5728d23f51e4de05fbb23a9893d8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 5 Mar 2026 21:45:26 +0000 Subject: [PATCH] Chore(deps): Bump dompurify from 3.3.1 to 3.3.2 Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.3.1 to 3.3.2. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/3.3.1...3.3.2) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.3.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- package-lock.json | 11 +++++++---- package.json | 2 +- 2 files changed, 8 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index 4be3e7695b..105a6d98c2 100644 --- a/package-lock.json +++ b/package-lock.json @@ -26,7 +26,7 @@ "@nextcloud/vue": "^8.34.0", "blueimp-md5": "^2.19.0", "chroma-js": "^3.2.0", - "dompurify": "^3.2.5", + "dompurify": "^3.3.2", "lodash": "^4.17.23", "markdown-it": "^14.1.1", "markdown-it-link-attributes": "^4.0.1", @@ -10923,10 +10923,13 @@ } }, "node_modules/dompurify": { - "version": "3.3.1", - "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.1.tgz", - "integrity": "sha512-qkdCKzLNtrgPFP1Vo+98FRzJnBRGe4ffyCea9IwHB1fyxPOeNTHpLKYGd4Uk9xvNoH0ZoOjwZxNptyMwqrId1Q==", + "version": "3.3.2", + "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.2.tgz", + "integrity": "sha512-6obghkliLdmKa56xdbLOpUZ43pAR6xFy1uOrxBaIDjT+yaRuuybLjGS9eVBoSR/UPU5fq3OXClEHLJNGvbxKpQ==", "license": "(MPL-2.0 OR Apache-2.0)", + "engines": { + "node": ">=20" + }, "optionalDependencies": { "@types/trusted-types": "^2.0.7" } diff --git a/package.json b/package.json index fe722c26cd..9bbb6f0e97 100644 --- a/package.json +++ b/package.json @@ -47,7 +47,7 @@ "@nextcloud/vue": "^8.34.0", "blueimp-md5": "^2.19.0", "chroma-js": "^3.2.0", - "dompurify": "^3.2.5", + "dompurify": "^3.3.2", "lodash": "^4.17.23", "markdown-it": "^14.1.1", "markdown-it-link-attributes": "^4.0.1",