Skip to content

chore(deps): bump dompurify and @asyncapi/html-template in /assets/create-glee-app/templates/tutorial #1780

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 26, 2025

Bumps dompurify and @asyncapi/html-template. These dependencies needed to be updated together.
Updates dompurify from 2.5.7 to 3.2.6

Release notes

Sourced from dompurify's releases.

DOMPurify 3.2.6

DOMPurify 3.2.5

  • Added a check to the mXSS detection regex to be more strict, thanks @​masatokinugawa
  • Added ESM type imports in source, removes patch function, thanks @​donmccurdy
  • Added script to verify various TypeScript configurations, thanks @​reduckted
  • Added more modern browsers to the Karma launchers list
  • Added Node 23.x to tested runtimes, removed Node 17.x
  • Fixed the generation of source maps, thanks @​reduckted
  • Fixed an unexpected behavior with ALLOWED_URI_REGEXP using the 'g' flag, thanks @​hhk-png
  • Fixed a few typos in the README file

DOMPurify 3.2.4

  • Fixed a conditional and config dependent mXSS-style bypass reported by @​nsysean
  • Added a new feature to allow specific hook removal, thanks @​davecardwell
  • Added purify.js and purify.min.js to exports, thanks @​Aetherinox
  • Added better logic in case no window object is president, thanks @​yehuya
  • Updated some dependencies called out by dependabot
  • Updated license files etc to show the correct year

DOMPurify 3.2.3

DOMPurify 3.2.2

  • Fixed a possible bypass in case a rather specific config for custom elements is set, thanks @​yaniv-git
  • Fixed several minor issues with the type definitions, thanks again @​reduckted
  • Fixed a minor issue with the types reference for trusted types, thanks @​reduckted
  • Fixed a minor problem with the template detection regex on some systems, thanks @​svdb99

DOMPurify 3.2.1

DOMPurify 3.2.0

DOMPurify 3.1.7

  • Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @​masatokinugawa
  • Fixed several smaller typos in documentation and test & build files, thanks @​christianhg
  • Added better support for Angular compiler, thanks @​jeroen1602
  • Added several new attributes to HTML and SVG allow-list, thanks @​Gigabyte5671 and @​Rotzbua

... (truncated)

Commits

Updates @asyncapi/html-template from 3.0.0 to 3.2.1

Release notes

Sourced from @​asyncapi/html-template's releases.

v3.2.1

3.2.1 (2025-04-09)

Bug Fixes

  • add a check to fix the generation failed in the parallel execution (#721) (7037bae)

v3.2.0

3.2.0 (2025-02-18)

Features

  • @asyncapi/react-componet upgraded to v2 together with react (#708) (beb50dd)

v3.1.0

3.1.0 (2024-11-04)

Features

  • render react app setup into dedicated js file (#686) (8a93359)
Commits
  • 7037bae fix: add a check to fix the generation failed in the parallel execution (#721)
  • 7188fbf chore(deps): bump tar-fs and puppeteer (#719)
  • 80ca969 ci: update of files from global .github repo (#716)
  • d32bab3 chore(deps): bump @​babel/helpers from 7.23.2 to 7.26.10 (#715)
  • f8dec3a ci: update of files from global .github repo (#714)
  • 82ac6ba ci: update of files from global .github repo (#712)
  • abdca17 docs: add neoandmatrix as a contributor for code (#711)
  • 1e760ed chore(release): v3.2.0 (#710)
  • beb50dd feat: @asyncapi/react-componet upgraded to v2 together with react (#708)
  • 1ea43b3 ci: update of files from global .github repo (#709)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [dompurify](https://github.com/cure53/DOMPurify) and [@asyncapi/html-template](https://github.com/asyncapi/html-template). These dependencies needed to be updated together.

Updates `dompurify` from 2.5.7 to 3.2.6
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@2.5.7...3.2.6)

Updates `@asyncapi/html-template` from 3.0.0 to 3.2.1
- [Release notes](https://github.com/asyncapi/html-template/releases)
- [Changelog](https://github.com/asyncapi/html-template/blob/master/.releaserc)
- [Commits](asyncapi/html-template@v3.0.0...v3.2.1)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.2.6
  dependency-type: indirect
- dependency-name: "@asyncapi/html-template"
  dependency-version: 3.2.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 26, 2025
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 26, 2025
@github-project-automation github-project-automation bot moved this to To Triage in CLI - Kanban May 26, 2025
Copy link

changeset-bot bot commented May 26, 2025

⚠️ No Changeset found

Latest commit: 5bd6d4b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Copy link

@Souvikns
Copy link
Member

/rtm

@asyncapi-bot asyncapi-bot merged commit 12f024f into master May 30, 2025
24 checks passed
@asyncapi-bot asyncapi-bot deleted the dependabot/npm_and_yarn/assets/create-glee-app/templates/tutorial/multi-c68a9899d6 branch May 30, 2025 18:19
@github-project-automation github-project-automation bot moved this from Backlog to Done in CLI - Kanban May 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
autoapproved autoupdate dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code ready-to-merge
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

3 participants