Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

chore(deps): bump dompurify from 3.4.14 to 3.4.16

Closed
Number: #19
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 3
Created: October 03, 2026 at 08:19 AM UTC
(11 days ago)
Updated: October 03, 2026 at 08:51 AM UTC
(11 days ago)
Closed: October 03, 2026 at 08:51 AM UTC
(11 days ago)
Time to Close: 32 minutes
Labels:
dependencies javascript
Description:

Bumps dompurify from 3.4.14 to 3.4.16.

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.16

  • Fixed a problem with IN_PLACE node removal when working with hooks, thanks @​manus-pi
  • Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @​h-t-m
  • Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @​ssi02014
  • Migrated from rollup to rolldown because performance, thanks @​ssi02014
  • Bumped several dependencies where possible

DOMPurify 3.4.15

  • Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
  • Added several smaller hardening and edge-case improvements, thanks @​leechristensen
  • Bumped several dependencies where possible
Commits

Package Dependencies
Package:
dompurify
Ecosystem:
npm
Version Change:
3.4.14 → 3.4.16
Update Type:
Patch
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 16659423
UUID: 5687881401
Node ID: PR_kwDORdEAms8AAAABGaPcfg
Host: GitHub
Repository: hasnaintypes/highchart-mcp-server