Skip to content

Bump dompurify from 3.4.16 to 3.4.17 - #7899

Merged
arikfr merged 1 commit into
masterfrom
dependabot/npm_and_yarn/dompurify-3.4.17
Nov 2, 2026
Merged

arikfr merged 1 commit into
masterfrom
dependabot/npm_and_yarn/dompurify-3.4.17

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

Bumps dompurify from 3.4.16 to 3.4.17.

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

  • Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @​manus-pi
  • Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @​uttej-badwane
  • Fixed the SMIL attributeName guard in XHTML mode, thanks @​Koukyosyumei
  • Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @​artiphishell
  • Added a purify-edge test runner as a compatibility check, thanks @​anzal1
  • Clarified the IN_PLACE documentation in the README about possible risks
  • Updated several dependencies
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dompurify-3.4.17 branch 2 times, most recently from 8f76204 to 9df3ee2 Compare November 1, 2026 00:44
@arikfr

arikfr commented Nov 2, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@arikfr
arikfr enabled auto-merge (squash) November 2, 2026 17:54
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.16 to 3.4.17.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.16...3.4.17)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dompurify-3.4.17 branch from 9df3ee2 to a8f9cba Compare November 2, 2026 17:55
@arikfr
arikfr merged commit ee2cfdc into master Nov 2, 2026
11 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dompurify-3.4.17 branch November 2, 2026 18:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant