From af843f3c57165a7c5b72da1c984dc376961320d0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 4 Mar 2026 22:47:10 +0000
Subject: [PATCH] Bump dompurify from 3.2.4 to 3.3.1

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.2.4 to 3.3.1.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.2.4...3.3.1)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.3.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json              | 19 ++++++-------------
 packages/frontend/package.json |  2 +-
 2 files changed, 7 insertions(+), 14 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 189a9ae1..1d7aa16c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -18695,9 +18695,10 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.4.tgz",
-      "integrity": "sha512-ysFSFEDVduQpyhzAob/kkuJjf5zWkZD8/A9ywSp1byueyuCfHamrCBa14/Oc2iiB0e51B+NpxSl5gmzn+Ms/mg==",
+      "version": "3.3.1",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.1.tgz",
+      "integrity": "sha512-qkdCKzLNtrgPFP1Vo+98FRzJnBRGe4ffyCea9IwHB1fyxPOeNTHpLKYGd4Uk9xvNoH0ZoOjwZxNptyMwqrId1Q==",
+      "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
       }
@@ -24792,14 +24793,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/isomorphic-dompurify/node_modules/dompurify": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.6.tgz",
-      "integrity": "sha512-/2GogDQlohXPZe6D6NOgQvXLPSYBqIWMnZ8zzOhn09REE4eyAzb+Hed3jhoM9OkuaJ8P6ZGTTVWQKAi8ieIzfQ==",
-      "optionalDependencies": {
-        "@types/trusted-types": "^2.0.7"
-      }
-    },
     "node_modules/isomorphic-dompurify/node_modules/html-encoding-sniffer": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-4.0.0.tgz",
@@ -47856,7 +47849,7 @@
         "binguru": "^1.0.0-alpha.18.0",
         "colorette": "^2.0.20",
         "default-composer": "^0.6.0",
-        "dompurify": "3.2.4",
+        "dompurify": "^3.3.1",
         "echarts": "^5.6.0",
         "fetch-retry": "^5.0.6",
         "file-saver": "^2.0.5",
@@ -49282,7 +49275,7 @@
         "@iconify/tools": "^4.1.1",
         "axios": "^1.8.2",
         "tinycolor2": "^1.6.0",
-        "undici": "^6.23.0"
+        "undici": "^6.21.1"
       },
       "bin": {
         "buildColors": "dist/buildColors.esm.js",
diff --git a/packages/frontend/package.json b/packages/frontend/package.json
index 86f93dd6..0d04f4e8 100644
--- a/packages/frontend/package.json
+++ b/packages/frontend/package.json
@@ -71,7 +71,7 @@
     "binguru": "^1.0.0-alpha.18.0",
     "colorette": "^2.0.20",
     "default-composer": "^0.6.0",
-    "dompurify": "3.2.4",
+    "dompurify": "3.3.1",
     "echarts": "^5.6.0",
     "fetch-retry": "^5.0.6",
     "file-saver": "^2.0.5",