From c640c28a94db7cc627a70eac09676a19c22b2fec Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 19 Jun 2026 07:39:13 +0000 Subject: [PATCH] chore(deps): bump dompurify from 3.4.0 to 3.4.11 Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.0 to 3.4.11. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/3.4.0...3.4.11) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.4.11 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- libs/a2a-core/package.json | 2 +- libs/designer-ui/package.json | 2 +- pnpm-lock.yaml | 42 +++++++++++++++++++---------------- 3 files changed, 25 insertions(+), 21 deletions(-) diff --git a/libs/a2a-core/package.json b/libs/a2a-core/package.json index 36c61150f22..ce351ff3d60 100644 --- a/libs/a2a-core/package.json +++ b/libs/a2a-core/package.json @@ -70,7 +70,7 @@ "dependencies": { "@fluentui/react-components": "^9.70.0", "@fluentui/react-icons": "^2.0.306", - "dompurify": "3.4.0", + "dompurify": "3.4.11", "eventemitter3": "^5.0.1", "idb": "^8.0.3", "immer": "^10.1.1", diff --git a/libs/designer-ui/package.json b/libs/designer-ui/package.json index 4b7d087caeb..a3d3d9d2f27 100644 --- a/libs/designer-ui/package.json +++ b/libs/designer-ui/package.json @@ -36,7 +36,7 @@ "@microsoft/logic-apps-shared": "workspace:*", "@react-hookz/web": "22.0.0", "@xyflow/react": "^12.3.5", - "dompurify": "3.4.0", + "dompurify": "3.4.11", "fuse.js": "6.6.2", "lexical": "^0.33.1", "prism-react-renderer": "2.3.1", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index d2730e67ab9..4b49b55299c 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -802,8 +802,8 @@ importers: specifier: ^2.0.306 version: 2.0.315(react@18.3.1) dompurify: - specifier: 3.4.0 - version: 3.4.0 + specifier: 3.4.11 + version: 3.4.11 eventemitter3: specifier: ^5.0.1 version: 5.0.1 @@ -1431,8 +1431,8 @@ importers: specifier: ^12.3.5 version: 12.3.5(@types/react@18.3.0)(immer@9.0.21)(react-dom@18.3.1(react@18.3.1))(react@18.3.1) dompurify: - specifier: 3.4.0 - version: 3.4.0 + specifier: 3.4.11 + version: 3.4.11 fuse.js: specifier: 6.6.2 version: 6.6.2 @@ -1708,7 +1708,7 @@ importers: version: 12.3.5(@types/react@18.3.0)(immer@9.0.21)(react-dom@18.3.1(react@18.3.1))(react@18.3.1) axios: specifier: 1.16.0 - version: 1.16.0(debug@4.4.3) + version: 1.16.0 react: specifier: 18.3.1 version: 18.3.1 @@ -2009,6 +2009,7 @@ packages: '@azure/ms-rest-azure-env@2.0.0': resolution: {integrity: sha512-dG76W7ElfLi+fbTjnZVGj+M9e0BIEJmRxU6fHaUQ12bZBe8EJKYb2GV50YWNaP2uJiVQ5+7nXEVj1VN1UQtaEw==} + deprecated: This package has been deprecated. new Azure Management SDK package from [Azure SDK for JavaScript](https://github.com/azure/azure-sdk-for-js) now have the cloud settings built-in, [for example](https://github.com/Azure/azure-sdk-for-js/blob/dc5f9743b05ea78f938eba31cbe704150889490c/sdk/sql/arm-sql/src/static-helpers/cloudSettingHelpers.ts). '@azure/msal-browser@3.26.1': resolution: {integrity: sha512-y78sr9g61aCAH9fcLO1um+oHFXc1/5Ap88RIsUSuzkm0BHzFnN+PXGaQeuM1h5Qf5dTnWNOd6JqkskkMPAhh7Q==} @@ -3149,6 +3150,9 @@ packages: resolution: {integrity: sha512-JiDShH45zKHWyGe4ZNVRrCjBz8Nh9TMmZG1kh4QTK8hCBTWBi8Da+i7s1fJw7/lYpM4ccepSNfqzZ/QvABBi5g==} engines: {node: '>=6.9.0'} + '@babel/runtime@8.0.0': + resolution: {integrity: sha512-sL6cvO2IfkSu/iU+zs2S/w01B7A8V7suXSIKEN4hPFFdZoiPGxrj5pAG0lCaqLWiEIrjKzdznIWuaLcxPR53qw==} + '@babel/template@7.27.2': resolution: {integrity: sha512-LPDZ85aEJyYSd18/DkjNh4/y1ntkE5KwUHWTiqgRxruuZL2F1yuHligVHLvcHY2vMHXttKFpJn6LwfI7cw7ODw==} engines: {node: '>=6.9.0'} @@ -8676,8 +8680,8 @@ packages: resolution: {integrity: sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==} engines: {node: '>= 4'} - dompurify@3.4.0: - resolution: {integrity: sha512-nolgK9JcaUXMSmW+j1yaSvaEaoXYHwWyGJlkoCTghc97KgGDDSnpoU/PlEnw63Ah+TGKFOyY+X5LnxaWbCSfXg==} + dompurify@3.4.11: + resolution: {integrity: sha512-zhlUV12GsaRzMsf9q5M254YhA4+VuF0fG+QFqu6aYpoGlKtz+w8//jBcGVYBgQkR5GHjUomejY84AV+/uPbWdw==} domutils@2.8.0: resolution: {integrity: sha512-w96Cjofp72M5IIhpjgobBimYEfoPjx1Vx0BSX9P30WBdZW2WIKU0T1Bd0kz2eNZ9ikjKgHbEyKx8BB6H1L3h3A==} @@ -16931,6 +16935,8 @@ snapshots: '@babel/runtime@7.29.2': {} + '@babel/runtime@8.0.0': {} + '@babel/template@7.27.2': dependencies: '@babel/code-frame': 7.27.1 @@ -21898,7 +21904,7 @@ snapshots: '@types/dompurify@3.2.0': dependencies: - dompurify: 3.4.0 + dompurify: 3.4.11 '@types/eslint-scope@3.7.7': dependencies: @@ -23197,9 +23203,9 @@ snapshots: transitivePeerDependencies: - debug - axios@1.16.0(debug@4.4.3): + axios@1.16.0: dependencies: - follow-redirects: 1.16.0(debug@4.4.3) + follow-redirects: 1.16.0 form-data: 4.0.5 proxy-from-env: 2.1.0 transitivePeerDependencies: @@ -24691,7 +24697,7 @@ snapshots: dom-helpers@5.2.1: dependencies: - '@babel/runtime': 7.29.2 + '@babel/runtime': 8.0.0 csstype: 3.2.3 dom-serializer@1.4.1: @@ -24718,7 +24724,7 @@ snapshots: dependencies: domelementtype: 2.3.0 - dompurify@3.4.0: + dompurify@3.4.11: optionalDependencies: '@types/trusted-types': 2.0.7 @@ -25747,9 +25753,7 @@ snapshots: optionalDependencies: debug: 4.4.3(supports-color@8.1.1) - follow-redirects@1.16.0(debug@4.4.3): - optionalDependencies: - debug: 4.4.3(supports-color@8.1.1) + follow-redirects@1.16.0: {} for-each@0.3.3: dependencies: @@ -26311,7 +26315,7 @@ snapshots: history@5.3.0: dependencies: - '@babel/runtime': 7.29.2 + '@babel/runtime': 8.0.0 hmac-drbg@1.0.1: dependencies: @@ -27815,7 +27819,7 @@ snapshots: d3-sankey: 0.12.3 dagre-d3-es: 7.0.11 dayjs: 1.11.13 - dompurify: 3.4.0 + dompurify: 3.4.11 katex: 0.16.22 khroma: 2.1.0 lodash-es: 4.17.21 @@ -29798,7 +29802,7 @@ snapshots: react-virtualized@9.22.5(react-dom@18.3.1(react@18.3.1))(react@18.3.1): dependencies: - '@babel/runtime': 7.29.2 + '@babel/runtime': 8.0.0 clsx: 1.2.1 dom-helpers: 5.2.1 loose-envify: 1.4.0 @@ -31941,7 +31945,7 @@ snapshots: vite-plugin-mkcert@1.17.8(vite@6.4.2(@types/node@20.12.7)(jiti@1.21.0)(less@4.2.0)(terser@5.30.2)(yaml@2.8.3)): dependencies: - axios: 1.16.0(debug@4.4.3) + axios: 1.15.0(debug@4.4.3) debug: 4.4.3(supports-color@8.1.1) picocolors: 1.1.1 vite: 6.4.2(@types/node@20.12.7)(jiti@1.21.0)(less@4.2.0)(terser@5.30.2)(yaml@2.8.3)