Skip to content

[Snyk] Upgrade dompurify from 3.3.0 to 3.3.1#222

Open
graymalkin77 wants to merge 1 commit into
mainfrom
snyk-upgrade-001e82d2bb999b42dfc10948b0e007f1
Open

[Snyk] Upgrade dompurify from 3.3.0 to 3.3.1#222
graymalkin77 wants to merge 1 commit into
mainfrom
snyk-upgrade-001e82d2bb999b42dfc10948b0e007f1

Conversation

@graymalkin77
Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to upgrade dompurify from 3.3.0 to 3.3.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released 2 months ago.

Release notes
Package name: dompurify
  • 3.3.1 - 2025-12-08
    • Updated ADD_FORBID_CONTENTS setting to extend default list, thanks @ MariusRumpf
    • Updated the ESM import syntax to be more correct, thanks @ binhpv
  • 3.3.0 - 2025-10-13
    • Added the SVG mask-type attribute to default allow-list, thanks @ prasadrajandran
    • Added support for ADD_ATTR and ADD_TAGS to accept functions, thanks @ nelstrom
    • Fixed an issue with the slot element being in both SVG and HTML allow-list, thanks @ Wim-Valgaeren
from dompurify GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade dompurify from 3.3.0 to 3.3.1.

See this package in npm:
dompurify

See this project in Snyk:
https://app.snyk.io/org/cognigy-gmbh/project/1bef01ee-7646-4865-9853-92aa704464b0?utm_source=github&utm_medium=referral&page=upgrade-pr
Copilot AI review requested due to automatic review settings February 8, 2026 18:44
@graymalkin77
Copy link
Copy Markdown
Author

graymalkin77 commented Feb 8, 2026

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@graymalkin77
Copy link
Copy Markdown
Author

Merge Risk: Low

This is a patch version upgrade from 3.3.0 to 3.3.1. According to the changelog, this release contains minor updates and fixes.

Changes:

  • The ADD_FORBID_CONTENTS setting was updated to extend its default list of forbidden elements.
  • The ESM (ECMAScript Modules) import syntax was updated to be more correct.

These changes are consistent with a patch release and are not expected to be breaking. The ESM syntax update is a correction and should not impact most users.

Source: Release notes

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Upgrades the dompurify npm dependency to a newer release as part of automated dependency maintenance.

Changes:

  • Bumps dompurify version range in package.json to ^3.3.1.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread package.json
"adaptivecards": "2.11.1",
"classnames": "^2.3.2",
"dompurify": "^3.0.11",
"dompurify": "^3.3.1",
Copy link

Copilot AI Feb 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR metadata/title says this upgrades dompurify from 3.3.0 to 3.3.1, but in package.json the version range is being changed from ^3.0.11 to ^3.3.1. This mismatch is confusing for reviewers/auditing. Consider aligning the PR description/title with the actual change (or adjusting the dependency change if the starting point is expected to be ^3.3.0).

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants