build(deps): bump the npm-deps group with 5 updates

[dependabot]

Bumps the npm-deps group with 5 updates:

Package	From	To
dompurify	3.2.3	3.2.4
@types/chrome	0.0.299	0.0.300
openpgp	6.0.1	6.1.0
stylelint	16.14.0	16.14.1
typescript-eslint	8.21.0	8.22.0

Updates dompurify from 3.2.3 to 3.2.4

Release notes

Sourced from dompurify's releases.

DOMPurify 3.2.4

• Fixed a conditional and config dependent mXSS-style bypass reported by @​nsysean
• Added a new feature to allow specific hook removal, thanks @​davecardwell
• Added purify.js and purify.min.js to exports, thanks @​Aetherinox
• Added better logic in case no window object is president, thanks @​yehuya
• Updated some dependencies called out by dependabot
• Updated license files etc to show the correct year

Commits

• ec29e65 Merge pull request #1062 from cure53/main
• 1c1b183 chore: Preparing 3.2.4 release
• d18ffcb fix: Changed the template literal regex to avoid a config-dependent bypass
• 0d64d2b Merge pull request #1060 from yehuya/initializeTestImprovements
• 9ad7933 tests: DOMPurify custom window tests improvements
• 72760ca Merge pull request #1059 from yehuya/fixMissingWindowElement
• bc72d44 Fix tests
• 363a89d fix: handle undefined Element in DOMPurify initialization
• f41b45d Update LICENSE
• b25bf26 Update README.md
• Additional commits viewable in compare view

Updates @types/chrome from 0.0.299 to 0.0.300

Commits

• See full diff in compare view

Updates openpgp from 6.0.1 to 6.1.0

Release notes

Sourced from openpgp's releases.

v6.1.0

What's Changed

• Fix decryption support for non-standard, legacy AEAD-encrypted messages and keys that used experimentalGCM from OpenPGP.js v5 (openpgpjs/openpgpjs#1811)
• Throw on encryption using the non-standard experimentalGCM AEAD algorithm (The enums.aead.gcm ID standardized by RFC9580 should be used instead.)
• Improve internal tree-shaking and lazy load md5 (openpgpjs/openpgpjs#1812)
• Fix signing using keys without preferred hash algorithms (openpgpjs/openpgpjs#1820)

Full Changelog: openpgpjs/openpgpjs@v6.0.1...v6.1.0

Commits

• 96b13a4 6.1.0
• 432856f Fix signing using keys without preferred hash algorithms (#1820)
• b2bd8a0 Merge pull request #1812
• 6db98f1 Internal: improve tree-shaking in armor module
• 8e5da78 Internal: improve tree-shaking of web-stream-tools
• a5d894f Internal: avoid importing enums in legacy_cipher chunk
• a16160f Use noble-hashes for md5
• abe750c Lightweight build: lazy load md5 hashing module
• 2a8969b Internal: improve tree-shaking for crypto modules
• bf85dee Merge pull request #1811
• Additional commits viewable in compare view

Updates stylelint from 16.14.0 to 16.14.1

Release notes

Sourced from stylelint's releases.

16.14.1

• Fixed: incompatible cache file format (#8359) (@​romainmenke).

Changelog

Sourced from stylelint's changelog.

16.14.1 - 2025-01-27

It fixes a bug with caching.

• Fixed: incompatible cache file format (#8359) (@​romainmenke).

Commits

• 92eae1d 16.14.1
• 578a5ac Prepare 16.14.1 (#8360)
• 8c4fc4a Fix incompatible cache file format (#8359)
• c33ad7d Refactor at-rule regexes for clarity (#8350)
• See full diff in compare view

Updates typescript-eslint from 8.21.0 to 8.22.0

Release notes

Sourced from typescript-eslint's releases.

v8.22.0

8.22.0 (2025-01-27)

🚀 Features

• parser: add standalone isolatedDeclarations option (#10499)

🩹 Fixes

• eslint-plugin: [prefer-nullish-coalescing] doesn't report on ternary but on equivalent || (#10517)
• eslint-plugin: [no-duplicate-type-constituents] handle nested types (#10638)
• eslint-plugin: [no-shadow] don't report unnecessarily on valid ways of using module augmentation (#10616)
• eslint-plugin: [no-extraneous-class] handle accessor keyword (#10678)
• eslint-plugin: [prefer-readonly] autofixer doesn't add type to property that is mutated in the constructor (#10552)
• eslint-plugin: [no-unnecessary-template-expression] handle template literal type (#10612)
• type-utils: support matching intersection types in TypeOrValueSpecifier with a PackageSpecifier (#10667)

❤️ Thank You

• Josh Goldberg ✨
• mdm317
• Olivier Zalmanski @​OlivierZal
• Ronen Amiel
• YeonJuan @​yeonjuan

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.22.0 (2025-01-27)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

• 94e8098 chore(release): publish 8.22.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions