From 00163ed1791a2e07dbf6a6a9746faf7ce43c19c2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 9 Aug 2026 09:58:43 +0000
Subject: [PATCH 1/2] Bump dompurify from 3.4.12 to 3.4.13

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.12 to 3.4.13.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.12...3.4.13)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.13
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 8 ++++----
 package.json      | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 01a5f3fea5..eb4ed496d0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -156,7 +156,7 @@
         "dayjs": "1.11.21",
         "decimal.js": "10.6.0",
         "deepmerge-ts": "7.1.5",
-        "dompurify": "3.4.12",
+        "dompurify": "3.4.13",
         "dotenv": "16.6.1",
         "embla-carousel-react": "8.6.0",
         "fast-deep-equal": "3.1.3",
@@ -27671,9 +27671,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.4.12",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz",
-      "integrity": "sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==",
+      "version": "3.4.13",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.13.tgz",
+      "integrity": "sha512-2vmYIoqjze2d+kakP8S/nS5shfsl587kzwEjcGlTdiksUVgFHnFCsLYDVj/JNqJVOQZGSYBTmuycv0PodwmnMQ==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
diff --git a/package.json b/package.json
index a4b9e64b00..76b924a06d 100644
--- a/package.json
+++ b/package.json
@@ -180,7 +180,7 @@
     "dayjs": "1.11.21",
     "decimal.js": "10.6.0",
     "deepmerge-ts": "7.1.5",
-    "dompurify": "3.4.12",
+    "dompurify": "3.4.13",
     "dotenv": "16.6.1",
     "embla-carousel-react": "8.6.0",
     "fast-deep-equal": "3.1.3",

From a4e6e92a9b5cb8ba0704bd758dc02c3c0c83f8a1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 9 Aug 2026 10:01:04 +0000
Subject: [PATCH 2/2] Update THIRD_PARTY_LICENSES.txt

---
 THIRD_PARTY_LICENSES.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/THIRD_PARTY_LICENSES.txt b/THIRD_PARTY_LICENSES.txt
index f173f8985e..b46a8e72cb 100644
--- a/THIRD_PARTY_LICENSES.txt
+++ b/THIRD_PARTY_LICENSES.txt
@@ -30660,7 +30660,7 @@ SOFTWARE.
 
 The following npm package may be included in this product:
 
- - dompurify@3.4.12
+ - dompurify@3.4.13
 
 This package contains the following license: