From 8f0938f6ffd8a2f89d91e2084ed26952ba242f8a Mon Sep 17 00:00:00 2001 From: "warp-agent-staging[bot]" <240773466+warp-agent-staging[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 13:09:07 +0000 Subject: [PATCH] fix: update dompurify to resolve GHSA-cg2g-xh64-v4q7 Co-Authored-By: Oz --- package-lock.json | 6 +++--- package.json | 3 ++- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 02a7fe97e..2b1c9c2d0 100644 --- a/package-lock.json +++ b/package-lock.json @@ -6555,9 +6555,9 @@ } }, "node_modules/dompurify": { - "version": "3.4.16", - "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.16.tgz", - "integrity": "sha512-sqo+pNp3qRhCIpbgRi1y8Tgk27Bo2Ry7w0dC1NBeNTdZChWjz9Xb/KOoZbRP/R6pQZ80Qw8YhXw13hWWBbMRnQ==", + "version": "3.4.17", + "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.17.tgz", + "integrity": "sha512-B/pSlYVHQ58kqISD/yDjuJ1yfzI34m1gF4lAod2bwSRhiN4K5Cl3H8Af7hqB2PmTL911tdEudnnXn5FnhRoz0w==", "license": "(MPL-2.0 OR Apache-2.0)", "optionalDependencies": { "@types/trusted-types": "^2.0.7" diff --git a/package.json b/package.json index e6a8c2735..acb1f2e02 100644 --- a/package.json +++ b/package.json @@ -58,7 +58,8 @@ }, "overrides": { "mermaid": { - "katex": "0.18.2" + "katex": "0.18.2", + "dompurify": "3.4.17" }, "brace-expansion": ">=5.0.12", "js-yaml": "^4.3.2",