[Snyk] Upgrade dompurify from 3.3.0 to 3.3.1#222
Conversation
Snyk has created this PR to upgrade dompurify from 3.3.0 to 3.3.1. See this package in npm: dompurify See this project in Snyk: https://app.snyk.io/org/cognigy-gmbh/project/1bef01ee-7646-4865-9853-92aa704464b0?utm_source=github&utm_medium=referral&page=upgrade-pr
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
|
This is a patch version upgrade from Changes:
These changes are consistent with a patch release and are not expected to be breaking. The ESM syntax update is a correction and should not impact most users. Source: Release notes
|
There was a problem hiding this comment.
Pull request overview
Upgrades the dompurify npm dependency to a newer release as part of automated dependency maintenance.
Changes:
- Bumps
dompurifyversion range inpackage.jsonto^3.3.1.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "adaptivecards": "2.11.1", | ||
| "classnames": "^2.3.2", | ||
| "dompurify": "^3.0.11", | ||
| "dompurify": "^3.3.1", |
There was a problem hiding this comment.
The PR metadata/title says this upgrades dompurify from 3.3.0 to 3.3.1, but in package.json the version range is being changed from ^3.0.11 to ^3.3.1. This mismatch is confusing for reviewers/auditing. Consider aligning the PR description/title with the actual change (or adjusting the dependency change if the starting point is expected to be ^3.3.0).
Snyk has created this PR to upgrade dompurify from 3.3.0 to 3.3.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 1 version ahead of your current version.
The recommended version was released 2 months ago.
Release notes
Package name: dompurify
-
3.3.1 - 2025-12-08
- Updated
- Updated the ESM import syntax to be more correct, thanks @ binhpv
-
3.3.0 - 2025-10-13
- Added the SVG
- Added support for
- Fixed an issue with the
from dompurify GitHub release notesADD_FORBID_CONTENTSsetting to extend default list, thanks @ MariusRumpfmask-typeattribute to default allow-list, thanks @ prasadrajandranADD_ATTRandADD_TAGSto accept functions, thanks @ nelstromslotelement being in both SVG and HTML allow-list, thanks @ Wim-ValgaerenImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: