Skip to content

Update dependency dompurify to v3.3.3#25701

Closed
renovate[bot] wants to merge 1 commit intomainfrom
renovate/dompurify-3.x
Closed

Update dependency dompurify to v3.3.3#25701
renovate[bot] wants to merge 1 commit intomainfrom
renovate/dompurify-3.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Dec 11, 2025

This PR contains the following updates:

Package Change Age Confidence
dompurify 3.3.03.3.3 age confidence
dompurify 3.3.13.3.3 age confidence

Release Notes

cure53/DOMPurify (dompurify)

v3.3.3: DOMPurify 3.3.3

Compare Source

  • Fixed an engine requirement for Node 20 which caused hiccups, thanks @​Rotzbua

v3.3.2: DOMPurify 3.3.2

Compare Source

  • Fixed a possible bypass caused by jsdom's faulty raw-text tag parsing, thanks multiple reporters
  • Fixed a prototype pollution issue when working with custom elements, thanks @​christos-eth
  • Fixed a lenient config parsing in _isValidAttribute, thanks @​christos-eth
  • Bumped and removed several dependencies, thanks @​Rotzbua
  • Fixed the test suite after bumping dependencies, thanks @​Rotzbua

v3.3.1: DOMPurify 3.3.1

Compare Source

  • Updated ADD_FORBID_CONTENTS setting to extend default list, thanks @​MariusRumpf
  • Updated the ESM import syntax to be more correct, thanks @​binhpv

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - Only on Sunday and Saturday ( * * * * 0,6 ), Between 12:00 AM and 12:59 PM, only on Monday ( * 0-12 * * 1 ) in timezone Etc/UTC.

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai bot commented Dec 11, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions github-actions bot added the dependencies Pull requests that update a dependency file label Dec 11, 2025
@codecov
Copy link
Copy Markdown

codecov bot commented Dec 11, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.19%. Comparing base (82378cd) to head (4092f49).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main   #25701      +/-   ##
==========================================
- Coverage   73.19%   73.19%   -0.01%     
==========================================
  Files        1531     1531              
  Lines      121805   121805              
  Branches    14696    14696              
==========================================
- Hits        89156    89152       -4     
- Misses      31634    31636       +2     
- Partials     1015     1017       +2     
Flag Coverage Δ
admin-tests 54.38% <ø> (-0.03%) ⬇️
e2e-tests 73.19% <ø> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate bot changed the title Update dependency dompurify to v3.3.1 Update dependency dompurify to v3.3.1 - autoclosed Mar 27, 2026
@renovate renovate bot closed this Mar 27, 2026
@renovate renovate bot deleted the renovate/dompurify-3.x branch March 27, 2026 02:05
@renovate renovate bot changed the title Update dependency dompurify to v3.3.1 - autoclosed Update dependency dompurify to v3.3.3 Mar 30, 2026
@renovate renovate bot reopened this Mar 30, 2026
@renovate renovate bot force-pushed the renovate/dompurify-3.x branch 13 times, most recently from 8762ad7 to b11ea25 Compare April 5, 2026 17:03
@renovate renovate bot force-pushed the renovate/dompurify-3.x branch from b11ea25 to 6fd5df3 Compare April 5, 2026 17:23
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Apr 5, 2026

@ErisDS
Copy link
Copy Markdown
Member

ErisDS commented Apr 5, 2026

Closing to reduce CI pressure. Renovate will recreate when there is capacity (branchConcurrentLimit=20).

@ErisDS ErisDS closed this Apr 5, 2026
@renovate
Copy link
Copy Markdown
Contributor Author

renovate bot commented Apr 5, 2026

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (3.3.3). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@ErisDS ErisDS mentioned this pull request Apr 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant