Skip to content

chore(deps): update dompurify requirement from ^3.4.1 to ^3.4.2 in /superset-frontend/packages/superset-ui-core#39808

Merged
rusackas merged 3 commits into
masterfrom
dependabot/npm_and_yarn/superset-frontend/packages/superset-ui-core/dompurify-tw-3.4.2
May 18, 2026
Merged

chore(deps): update dompurify requirement from ^3.4.1 to ^3.4.2 in /superset-frontend/packages/superset-ui-core#39808
rusackas merged 3 commits into
masterfrom
dependabot/npm_and_yarn/superset-frontend/packages/superset-ui-core/dompurify-tw-3.4.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Updates the requirements on dompurify to permit the latest version.

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.2

  • Fixed an issue with URI validation on attributes allowed via ADD_ATTR callback, thanks @​nelstrom
  • Fixed an issue with source maps referring to non-existing files, thanks @​cmdcolin
  • Updated existing workflows, fuzzer, release signing, etc., added more tests
  • Bumped several dependencies where possible
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added dependabot npm Dependabot - npm related PRs labels May 1, 2026
@bito-code-review
Copy link
Copy Markdown
Contributor

bito-code-review Bot commented May 1, 2026

Bito Automatic Review Skipped - Files Excluded

Bito didn't auto-review this change because all changed files are in the exclusion list for automatic reviews. No action is needed if you didn't intend for the agent to review it. Otherwise, to manually trigger a review, type /review in a comment and save.
You can change the excluded files settings here, or contact your Bito workspace admin at evan@preset.io.

@codecov
Copy link
Copy Markdown

codecov Bot commented May 1, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 64.16%. Comparing base (b09ef7a) to head (a44ed42).

Additional details and impacted files
@@            Coverage Diff             @@
##           master   #39808      +/-   ##
==========================================
- Coverage   64.16%   64.16%   -0.01%     
==========================================
  Files        2591     2591              
  Lines      138162   138162              
  Branches    32048    32048              
==========================================
- Hits        88648    88647       -1     
- Misses      47985    47986       +1     
  Partials     1529     1529              
Flag Coverage Δ
javascript 67.01% <ø> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@rusackas rusackas force-pushed the dependabot/npm_and_yarn/superset-frontend/packages/superset-ui-core/dompurify-tw-3.4.2 branch from 42a8103 to a92644b Compare May 6, 2026 05:09
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 14, 2026

A newer version of dompurify exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

dependabot Bot and others added 2 commits May 17, 2026 11:24
Updates the requirements on [dompurify](https://github.com/cure53/DOMPurify) to permit the latest version.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.1...3.4.2)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@rusackas rusackas force-pushed the dependabot/npm_and_yarn/superset-frontend/packages/superset-ui-core/dompurify-tw-3.4.2 branch from dfa2843 to e7e2aaa Compare May 17, 2026 18:24
@rusackas rusackas merged commit 02a8196 into master May 18, 2026
72 checks passed
@rusackas rusackas deleted the dependabot/npm_and_yarn/superset-frontend/packages/superset-ui-core/dompurify-tw-3.4.2 branch May 18, 2026 03:16
kasiazjc pushed a commit that referenced this pull request May 26, 2026
…uperset-frontend/packages/superset-ui-core (#39808)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude <claude@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants