Skip to content

Bump dompurify from 3.4.15 to 3.4.16 in /website - #2051

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/website/dompurify-3.4.16
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/website/dompurify-3.4.16

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Bumps dompurify from 3.4.15 to 3.4.16.

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.16

  • Fixed a problem with IN_PLACE node removal when working with hooks, thanks @鈥媘anus-pi
  • Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @鈥媓-t-m
  • Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @鈥媠si02014
  • Migrated from rollup to rolldown because performance, thanks @鈥媠si02014
  • Bumped several dependencies where possible
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 9, 2026
@meta-cla meta-cla Bot added the CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. label Oct 9, 2026
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.15 to 3.4.16.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.15...3.4.16)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.16
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump dompurify from 3.4.12 to 3.4.16 in /website Bump dompurify from 3.4.15 to 3.4.16 in /website Oct 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/website/dompurify-3.4.16 branch from 8bbf7ad to 47b76c3 Compare October 12, 2026 07:16

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code needs-meta-import

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants