From 7bfe61c21f8600ae23013db681c3fe157f21b7e5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 31 Oct 2024 14:59:15 +0000 Subject: [PATCH] Bump dompurify from 2.4.1 to 2.5.4 in /client Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.4.1 to 2.5.4. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/2.4.1...2.5.4) --- updated-dependencies: - dependency-name: dompurify dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- client/package.json | 2 +- client/yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/client/package.json b/client/package.json index 78aa467..c872f4f 100644 --- a/client/package.json +++ b/client/package.json @@ -39,7 +39,7 @@ }, "dependencies": { "@lottiefiles/svelte-lottie-player": "^0.1.4", - "dompurify": "^2.4.0", + "dompurify": "^2.5.4", "i18n-js": "^3.3.0", "isomorphic-fetch": "^3.0.0", "js-cookie": "^2.2.1", diff --git a/client/yarn.lock b/client/yarn.lock index d3b682e..79fbb48 100644 --- a/client/yarn.lock +++ b/client/yarn.lock @@ -2923,10 +2923,10 @@ domhandler@^4.0.0, domhandler@^4.2.0, domhandler@^4.3.1: dependencies: domelementtype "^2.2.0" -dompurify@^2.4.0: - version "2.4.1" - resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.4.1.tgz#f9cb1a275fde9af6f2d0a2644ef648dd6847b631" - integrity sha512-ewwFzHzrrneRjxzmK6oVz/rZn9VWspGFRDb4/rRtIsM1n36t9AKma/ye8syCpcw+XJ25kOK/hOG7t1j2I2yBqA== +dompurify@^2.5.4: + version "2.5.4" + resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-2.5.4.tgz#347e91070963b22db31c7c8d0ce9a0a2c3c08746" + integrity sha512-l5NNozANzaLPPe0XaAwvg3uZcHtDBnziX/HjsY1UcDj1MxTK8Dd0Kv096jyPK5HRzs/XM5IMj20dW8Fk+HnbUA== domutils@^2.5.2, domutils@^2.8.0: version "2.8.0"