From 3dd85e1fceeba5c54cbf544165cd61b942701470 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 29 Oct 2026 17:44:17 +0000
Subject: [PATCH] Bump the npm_and_yarn group across 1 directory with 2 updates

Bumps the npm_and_yarn group with 2 updates in the / directory: [dompurify](https://github.com/cure53/DOMPurify) and [qs](https://github.com/ljharb/qs).


Updates `dompurify` from 3.4.16 to 3.4.17
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.16...3.4.17)

Updates `qs` from 6.16.0 to 6.17.1
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.16.0...v6.17.1)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: direct:production
- dependency-name: qs
  dependency-version: 6.17.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 16 ++++++++--------
 package.json      |  4 ++--
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index dff6bd514b6..94b6d6f56fb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -55,7 +55,7 @@
         "cookies-js": "^1.2.2",
         "cropperjs": "^1.6.2",
         "cva": "^1.0.0-beta.3",
-        "dompurify": "^3.4.16",
+        "dompurify": "^3.4.17",
         "floating-vue": "^5.2.2",
         "fuzzysort": "^3.1.0",
         "highlight.js": "^11.7.0",
@@ -72,7 +72,7 @@
         "portal-vue": "^3.0.0",
         "pretty": "^2.0.0",
         "pusher-js": "^8.4.0-rc2",
-        "qs": "^6.15.2",
+        "qs": "^6.17.1",
         "read-time-estimate": "0.0.3",
         "reka-ui": "^2.10.5",
         "resize-observer-polyfill": "^1.5.1",
@@ -5242,9 +5242,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.4.16",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.16.tgz",
-      "integrity": "sha512-sqo+pNp3qRhCIpbgRi1y8Tgk27Bo2Ry7w0dC1NBeNTdZChWjz9Xb/KOoZbRP/R6pQZ80Qw8YhXw13hWWBbMRnQ==",
+      "version": "3.4.17",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.17.tgz",
+      "integrity": "sha512-B/pSlYVHQ58kqISD/yDjuJ1yfzI34m1gF4lAod2bwSRhiN4K5Cl3H8Af7hqB2PmTL911tdEudnnXn5FnhRoz0w==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
@@ -7762,9 +7762,9 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.16.0",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.0.tgz",
-      "integrity": "sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==",
+      "version": "6.17.1",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.17.1.tgz",
+      "integrity": "sha512-jd3COkaKVgGUW+ZHyEHCG9bH7RoaaiWuMgzsIBjUMVjLAaWGWpoUAVwljVvBHxRu/2qEHnadLGZrkutYUBPQJA==",
       "license": "BSD-3-Clause",
       "dependencies": {
         "es-define-property": "^1.0.1",
diff --git a/package.json b/package.json
index ef96283b076..c19ed3de09c 100644
--- a/package.json
+++ b/package.json
@@ -68,7 +68,7 @@
     "cookies-js": "^1.2.2",
     "cropperjs": "^1.6.2",
     "cva": "^1.0.0-beta.3",
-    "dompurify": "^3.4.16",
+    "dompurify": "^3.4.17",
     "floating-vue": "^5.2.2",
     "fuzzysort": "^3.1.0",
     "highlight.js": "^11.7.0",
@@ -85,7 +85,7 @@
     "portal-vue": "^3.0.0",
     "pretty": "^2.0.0",
     "pusher-js": "^8.4.0-rc2",
-    "qs": "^6.15.2",
+    "qs": "^6.17.1",
     "read-time-estimate": "0.0.3",
     "reka-ui": "^2.10.5",
     "resize-observer-polyfill": "^1.5.1",