Skip to content

Bump dompurify from 3.4.15 to 3.4.16 in /website - #2051

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/website/dompurify-3.4.16
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/website/dompurify-3.4.16

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Bumps dompurify from 3.4.15 to 3.4.16.

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.16

  • Fixed a problem with IN_PLACE node removal when working with hooks, thanks @鈥媘anus-pi
  • Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @鈥媓-t-m
  • Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @鈥媠si02014
  • Migrated from rollup to rolldown because performance, thanks @鈥媠si02014
  • Bumped several dependencies where possible
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 9, 2026
@meta-cla meta-cla Bot added the CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. label Oct 9, 2026
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.15 to 3.4.16.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.15...3.4.16)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.16
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump dompurify from 3.4.12 to 3.4.16 in /website Bump dompurify from 3.4.15 to 3.4.16 in /website Oct 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/website/dompurify-3.4.16 branch from 8bbf7ad to 47b76c3 Compare October 12, 2026 07:16
@dependabot @github

dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #2100.

@dependabot dependabot Bot closed this Oct 23, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/website/dompurify-3.4.16 branch October 23, 2026 19:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code needs-meta-import

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants