From 423775a25b33e4c9becfffc02f092f191726266a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 18 Oct 2026 16:17:22 +0000
Subject: [PATCH] chore(deps): bump dompurify from 3.3.1 to 3.4.17

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.3.1 to 3.4.17.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.3.1...3.4.17)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json            | 12 ++++++------
 packages/utils/package.json  |  2 +-
 packages/yasgui/package.json |  2 +-
 packages/yasr/package.json   |  2 +-
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 7c27ae7e..071f77a8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -4157,9 +4157,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.3.1",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.1.tgz",
-      "integrity": "sha512-qkdCKzLNtrgPFP1Vo+98FRzJnBRGe4ffyCea9IwHB1fyxPOeNTHpLKYGd4Uk9xvNoH0ZoOjwZxNptyMwqrId1Q==",
+      "version": "3.4.17",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.17.tgz",
+      "integrity": "sha512-B/pSlYVHQ58kqISD/yDjuJ1yfzI34m1gF4lAod2bwSRhiN4K5Cl3H8Af7hqB2PmTL911tdEudnnXn5FnhRoz0w==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
@@ -9055,7 +9055,7 @@
       "version": "4.6.1",
       "license": "MIT",
       "dependencies": {
-        "dompurify": "^3.2.4",
+        "dompurify": "^3.4.17",
         "store": "^2.0.12"
       },
       "devDependencies": {
@@ -9091,7 +9091,7 @@
         "autosuggest-highlight": "^3.1.1",
         "blueimp-md5": "^2.12.0",
         "choices.js": "^9.0.1",
-        "dompurify": "^3.2.4",
+        "dompurify": "^3.4.17",
         "es6-object-assign": "^1.1.0",
         "jsuri": "^1.3.1",
         "lodash-es": "^4.17.15",
@@ -9185,7 +9185,7 @@
         "column-resizer": "^1.4.0",
         "datatables.net": "^2.0.5",
         "datatables.net-dt": "^2.0.5",
-        "dompurify": "^3.2.4",
+        "dompurify": "^3.4.17",
         "jquery": "^3.7.1",
         "lodash-es": "^4.17.15",
         "n3": "^1.3.5",
diff --git a/packages/utils/package.json b/packages/utils/package.json
index 6d4ed237..6c5691fc 100644
--- a/packages/utils/package.json
+++ b/packages/utils/package.json
@@ -27,7 +27,7 @@
     "directory": "packages/utils"
   },
   "dependencies": {
-    "dompurify": "^3.2.4",
+    "dompurify": "^3.4.17",
     "store": "^2.0.12"
   },
   "devDependencies": {
diff --git a/packages/yasgui/package.json b/packages/yasgui/package.json
index 41bbd3e3..2b110a8e 100644
--- a/packages/yasgui/package.json
+++ b/packages/yasgui/package.json
@@ -42,7 +42,7 @@
     "autosuggest-highlight": "^3.1.1",
     "blueimp-md5": "^2.12.0",
     "choices.js": "^9.0.1",
-    "dompurify": "^3.2.4",
+    "dompurify": "^3.4.17",
     "es6-object-assign": "^1.1.0",
     "jsuri": "^1.3.1",
     "lodash-es": "^4.17.15",
diff --git a/packages/yasr/package.json b/packages/yasr/package.json
index fa93dddf..64e952b9 100644
--- a/packages/yasr/package.json
+++ b/packages/yasr/package.json
@@ -55,7 +55,7 @@
     "column-resizer": "^1.4.0",
     "datatables.net": "^2.0.5",
     "datatables.net-dt": "^2.0.5",
-    "dompurify": "^3.2.4",
+    "dompurify": "^3.4.17",
     "jquery": "^3.7.1",
     "lodash-es": "^4.17.15",
     "n3": "^1.3.5",