From fa6b460e95990f18d23abdd8718b9a2556d2d3db Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 24 Jul 2026 08:04:35 +0000
Subject: [PATCH] chore(deps): bump dompurify from 3.2.6 to 3.4.12 in
 /sites/platform

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.2.6 to 3.4.12.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.2.6...3.4.12)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.12
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 sites/platform/package-lock.json               | 16 ++++++++--------
 sites/platform/static/scripts/xss/package.json |  2 +-
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/sites/platform/package-lock.json b/sites/platform/package-lock.json
index 053a60f9dd..62bfa2a614 100644
--- a/sites/platform/package-lock.json
+++ b/sites/platform/package-lock.json
@@ -6322,9 +6322,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.6.tgz",
-      "integrity": "sha512-/2GogDQlohXPZe6D6NOgQvXLPSYBqIWMnZ8zzOhn09REE4eyAzb+Hed3jhoM9OkuaJ8P6ZGTTVWQKAi8ieIzfQ==",
+      "version": "3.4.12",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz",
+      "integrity": "sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
       }
@@ -16999,7 +16999,7 @@
       "dependencies": {
         "axios": "^1.18.0",
         "buffer": "^6.0.3",
-        "dompurify": "^3.0.0",
+        "dompurify": "^3.4.12",
         "path-browserify": "^1.0.1",
         "platformsh-config": "^2.4.1",
         "process": "^0.11.10",
@@ -21589,7 +21589,7 @@
         "babel-loader": "^9.1.2",
         "buffer": "^6.0.3",
         "css-loader": "^6.7.3",
-        "dompurify": "^3.0.0",
+        "dompurify": "3.4.12",
         "eslint": "^8.34.0",
         "eslint-config-airbnb": "^19.0.4",
         "eslint-import-resolver-webpack": "^0.13.2",
@@ -21655,9 +21655,9 @@
       }
     },
     "dompurify": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.6.tgz",
-      "integrity": "sha512-/2GogDQlohXPZe6D6NOgQvXLPSYBqIWMnZ8zzOhn09REE4eyAzb+Hed3jhoM9OkuaJ8P6ZGTTVWQKAi8ieIzfQ==",
+      "version": "3.4.12",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz",
+      "integrity": "sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==",
       "requires": {
         "@types/trusted-types": "^2.0.7"
       }
diff --git a/sites/platform/static/scripts/xss/package.json b/sites/platform/static/scripts/xss/package.json
index 60216d36fc..a110c10b33 100644
--- a/sites/platform/static/scripts/xss/package.json
+++ b/sites/platform/static/scripts/xss/package.json
@@ -32,7 +32,7 @@
   "dependencies": {
     "axios": "^1.18.0",
     "buffer": "^6.0.3",
-    "dompurify": "^3.0.0",
+    "dompurify": "^3.4.12",
     "path-browserify": "^1.0.1",
     "platformsh-config": "^2.4.1",
     "process": "^0.11.10",