Skip to content

chore(deps): update dependency dompurify to v3.4.15 - #6732

Merged
thomhurst merged 1 commit into
mainfrom
renovate/dompurify-3.x
Sep 6, 2026
Merged

thomhurst merged 1 commit into
mainfrom
renovate/dompurify-3.x

Conversation

@thomhurst

@thomhurst thomhurst commented Sep 6, 2026

Copy link
Copy Markdown
Owner

This PR contains the following updates:

Package Type Update Change
dompurify resolutions patch 3.4.143.4.15

Release Notes

cure53/DOMPurify (dompurify)

v3.4.15: DOMPurify 3.4.15

Compare Source

  • Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
  • Added several smaller hardening and edge-case improvements, thanks @​leechristensen
  • Bumped several dependencies where possible

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@coderabbitai

coderabbitai Bot commented Sep 6, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: a9783e69-3ba5-4496-8f12-49e8be1b195d

📥 Commits

Reviewing files that changed from the base of the PR and between e5af44a and fada23f.

⛔ Files ignored due to path filters (1)
  • docs/yarn.lock is excluded by !**/yarn.lock, !**/*.lock
📒 Files selected for processing (1)
  • docs/package.json

Included review availability: Your plan provides up to 8 included reviews per hour; 5 remain after this review.


📝 Walkthrough

Walkthrough

The documentation package updates its dompurify resolution from 3.4.14 to 3.4.15.

Changes

Documentation dependency update

Layer / File(s) Summary
Update dompurify resolution
docs/package.json
The dompurify resolution changes from 3.4.14 to 3.4.15.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to fada2

Documentation builds will use dompurify 3.4.15, with the lockfile aligned to the declared resolution. No current merge-blocking risk is identified.

Poem

A rabbit checks the package tree
A safer version hops in free
The old pin rests, the new one gleams
The docs now follow fresher dreams
One small change completes the scene

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the dependency update from dompurify 3.4.14 to 3.4.15.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/dompurify-3.x

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@greptile-apps

greptile-apps Bot commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

This PR updates the documentation site’s DOMPurify resolution from 3.4.14 to 3.4.15.

  • Updates the direct resolution in docs/package.json.
  • Refreshes the corresponding Yarn lockfile version, tarball URL, and integrity hash.
  • Preserves the compatible Mermaid dependency selector and DOMPurify optional dependency.

Confidence Score: 5/5

The PR appears safe to merge because the patch dependency update is internally consistent across the manifest and lockfile.

No actionable failures were identified; the resolved version satisfies the existing transitive semver constraint and the lockfile retains the dependency metadata.

Important Files Changed

Filename Overview
docs/package.json Updates the DOMPurify resolution from 3.4.14 to 3.4.15.
docs/yarn.lock Consistently refreshes the coalesced DOMPurify lock entry for version 3.4.15.

Reviews (1): Last reviewed commit: "chore(deps): update dependency dompurify..." | Re-trigger Greptile

This was referenced Sep 21, 2026

This branch was previously deployed

1 inactive deployment
Pull Requests fada23fe Deployed Sep 6, 2026 by thomhurst via modularpipeline (ubuntu-latest) #19059
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file PATCH renovate-bot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants