This is an automated email from the ASF dual-hosted git repository.
github-bot pushed a commit to branch
dependabot/npm_and_yarn/ui/frontend/dompurify-3.3.2
in repository https://gitbox.apache.org/repos/asf/hamilton.git
commit 9067b860f3b79619e63f6074198d1c8a29302276
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Fri Mar 6 06:24:55 2026 +0000
Bump dompurify from 3.3.1 to 3.3.2 in /ui/frontend
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.3.1 to 3.3.2.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.3.1...3.3.2)
---
updated-dependencies:
- dependency-name: dompurify
dependency-version: 3.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected]>
---
ui/frontend/package-lock.json | 9 ++++++---
1 file changed, 6 insertions(+), 3 deletions(-)
diff --git a/ui/frontend/package-lock.json b/ui/frontend/package-lock.json
index 86c3705b..341b1eca 100644
--- a/ui/frontend/package-lock.json
+++ b/ui/frontend/package-lock.json
@@ -4801,10 +4801,13 @@
}
},
"node_modules/dompurify": {
- "version": "3.3.1",
- "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.1.tgz",
- "integrity":
"sha512-qkdCKzLNtrgPFP1Vo+98FRzJnBRGe4ffyCea9IwHB1fyxPOeNTHpLKYGd4Uk9xvNoH0ZoOjwZxNptyMwqrId1Q==",
+ "version": "3.3.2",
+ "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.2.tgz",
+ "integrity":
"sha512-6obghkliLdmKa56xdbLOpUZ43pAR6xFy1uOrxBaIDjT+yaRuuybLjGS9eVBoSR/UPU5fq3OXClEHLJNGvbxKpQ==",
"license": "(MPL-2.0 OR Apache-2.0)",
+ "engines": {
+ "node": ">=20"
+ },
"optionalDependencies": {
"@types/trusted-types": "^2.0.7"
}