Skip to content

[stable33] build(deps): bump dompurify from 3.4.13 to 3.4.14 in /build/frontend-legacy - #63603

Merged
github-actions[bot] merged 2 commits into
stable33from
dependabot/npm_and_yarn/build/frontend-legacy/stable33/dompurify-3.4.14
Aug 29, 2026
Merged

[stable33] build(deps): bump dompurify from 3.4.13 to 3.4.14 in /build/frontend-legacy#63603
github-actions[bot] merged 2 commits into
stable33from
dependabot/npm_and_yarn/build/frontend-legacy/stable33/dompurify-3.4.14

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps dompurify from 3.4.13 to 3.4.14.

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

  • Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
  • Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
  • Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
  • Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
  • Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
  • Updated several development dependencies and CI workflow actions
Commits

@dependabot
dependabot Bot requested review from a team as code owners August 25, 2026 14:30
@dependabot
dependabot Bot requested review from kristian-zendato, skjnldsv and susnux and removed request for a team August 25, 2026 14:30
@github-actions
github-actions Bot enabled auto-merge August 25, 2026 15:01
@github-actions github-actions Bot changed the title build(deps): bump dompurify from 3.4.13 to 3.4.14 in /build/frontend-legacy [stable33] build(deps): bump dompurify from 3.4.13 to 3.4.14 in /build/frontend-legacy Aug 25, 2026
@AndyScherzinger AndyScherzinger added this to the Nextcloud 33.0.9 milestone Aug 25, 2026
@AndyScherzinger

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.13 to 3.4.14.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.13...3.4.14)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title [stable33] build(deps): bump dompurify from 3.4.13 to 3.4.14 in /build/frontend-legacy build(deps): bump dompurify from 3.4.13 to 3.4.14 in /build/frontend-legacy Aug 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/build/frontend-legacy/stable33/dompurify-3.4.14 branch from f1e94af to d6e2acf Compare August 29, 2026 12:48
@AndyScherzinger

Copy link
Copy Markdown
Member

/compile

@github-actions github-actions Bot changed the title build(deps): bump dompurify from 3.4.13 to 3.4.14 in /build/frontend-legacy [stable33] build(deps): bump dompurify from 3.4.13 to 3.4.14 in /build/frontend-legacy Aug 29, 2026
Signed-off-by: nextcloud-command <nextcloud-command@users.noreply.github.com>
@github-actions
github-actions Bot merged commit 488bb3d into stable33 Aug 29, 2026
124 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/build/frontend-legacy/stable33/dompurify-3.4.14 branch August 29, 2026 13:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants