Repository navigation
Inkkit 0.1.6
InkKit 0.1.6
Security update. No API or behavior changes.
- DOMPurify is updated from 3.4.16 to 3.4.17 for its security advisories: GHSA-cg2g-xh64-v4q7 (critical), GHSA-mrv2-3pqr-j5jr (high) and GHSA-c6gr-qvv4-5v3f (low). InkKit bundles DOMPurify into the package, so a host gets the fix only by adopting this release.
Compatibility review: 0.1.6 changes a bundled dependency without adding, removing or renaming API, so a patch version is appropriate. Existing calls need no migration.
Not changed: the low KaTeX advisory GHSA-238p-pmpm-9mq7. InkKit does not bundle KaTeX. It reaches the lockfile only through Mermaid, which InkKit pins at 12.1.0 and requires katex@^0.16.47. The fix is KaTeX 0.18.2, which needs Mermaid 12.2.0 and is a separate runtime dependency update.