Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 20, 2024

Bumps dompurify and @types/dompurify. These dependencies needed to be updated together.
Updates dompurify from 3.1.6 to 3.2.1

Release notes

Sourced from dompurify's releases.

DOMPurify 3.2.1

DOMPurify 3.2.0

DOMPurify 3.1.7

  • Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @​masatokinugawa
  • Fixed several smaller typos in documentation and test & build files, thanks @​christianhg
  • Added better support for Angular compiler, thanks @​jeroen1602
  • Added several new attributes to HTML and SVG allow-list, thanks @​Gigabyte5671 and @​Rotzbua
  • Removed the foreignObject element from the list of HTML entry-points, thanks @​masatokinugawa
  • Bumped several dependencies to be more up to date
Commits
  • 7f154b3 Merge pull request #1030 from cure53/main
  • 83ce1cc chore: Preparing 3.2.1 release
  • 8e1c70a Merge pull request #1028 from MiniDigger/optional-dompurify-argument-type
  • 071771c fix: mark createDOMPurify param as optional
  • f93acff Merge pull request #1025 from asamuzaK/opt
  • 3a5d9cb Move @​types/trusted-types to optionalDependencies
  • 983b436 Merge pull request #1021 from asamuzaK/type
  • 0d54293 Merge pull request #1022 from ghiscoding/main
  • 7ea9c61 Merge pull request #1024 from reduckted/fix/minify
  • 6fea7af Merge pull request #1023 from reduckted/fix/export-order
  • Additional commits viewable in compare view

Updates @types/dompurify from 3.0.5 to 3.2.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from a team as a code owner November 20, 2024 20:43
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 20, 2024
@dependabot dependabot bot requested a review from KianNH November 20, 2024 20:43
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/multi-e3bbeb6c09 branch 2 times, most recently from 44a8fa0 to 766cb05 Compare November 21, 2024 14:29
Bumps [dompurify](https://github.com/cure53/DOMPurify) and [@types/dompurify](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dompurify). These dependencies needed to be updated together.

Updates `dompurify` from 3.1.6 to 3.2.1
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.1.6...3.2.1)

Updates `@types/dompurify` from 3.0.5 to 3.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dompurify)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: "@types/dompurify"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/multi-e3bbeb6c09 branch from 766cb05 to f785a31 Compare November 21, 2024 14:30
@KianNH KianNH enabled auto-merge (squash) November 21, 2024 14:57
@KianNH KianNH merged commit 9fcbcc2 into production Nov 21, 2024
5 of 6 checks passed
@KianNH KianNH deleted the dependabot/npm_and_yarn/multi-e3bbeb6c09 branch November 21, 2024 14:57
@workers-devprod workers-devprod added the contribution [Holopin] Recognizes a docs contribution, big or small label Nov 21, 2024
@holopin-bot
Copy link

holopin-bot bot commented Nov 21, 2024

Congratulations @dependabot[bot], the maintainer of this repository has issued you a holobyte! Here it is: https://holopin.io/holobyte/cm3rfsudd02760cjpnqkmhthl

This badge can only be claimed by you, so make sure that your GitHub account is linked to your Holopin account. You can manage those preferences here: https://holopin.io/account.
Or if you're new to Holopin, you can simply sign up with GitHub, which will do the trick!

harshil1712 pushed a commit that referenced this pull request Dec 3, 2024
Bumps [dompurify](https://github.com/cure53/DOMPurify) and [@types/dompurify](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dompurify). These dependencies needed to be updated together.

Updates `dompurify` from 3.1.6 to 3.2.1
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.1.6...3.2.1)

Updates `@types/dompurify` from 3.0.5 to 3.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dompurify)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: "@types/dompurify"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

contribution [Holopin] Recognizes a docs contribution, big or small dependencies Pull requests that update a dependency file size/s

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants