Skip to content

build(deps): bump isomorphic-dompurify from 3.22.0 to 4.3.0 - #508

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/isomorphic-dompurify-4.3.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/isomorphic-dompurify-4.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps isomorphic-dompurify from 3.22.0 to 4.3.0.

Release notes

Sourced from isomorphic-dompurify's releases.

4.3.0: Updated dependencies

  • jsdom 30.0.1 -> 30.1.0
  • vitest 5.0.0 -> 5.0.1 (dev)
  • @​biomejs/biome 2.5.12 -> 2.5.14 (dev)
  • lefthook 2.1.12 -> 2.1.14 (dev)
  • pnpm 12.3.4 -> 12.4.2 (tooling)

Note: jsdom 30.1.0 improves resource consumption - clearWindow() now returns the heap fully to baseline (previously ~1.7 MB residual per clear cycle).

4.2.0: Updated dependencies

  • dompurify 3.4.14 -> 3.4.15
  • vitest 4.1.11 -> 5.0.0 (dev)
  • @​biomejs/biome 2.5.11 -> 2.5.12 (dev)
  • pnpm/action-setup 6.0.10 -> 6.1.0 (CI)

4.1.0: Align Requirements table with the 4.x Node.js floor

  • README Requirements table: the raised Node.js floor is now listed under >=4.0.0 (was >=3.20.0)
  • lefthook 2.1.10 -> 2.1.12 (dev)

4.0.0: Semver correction for the Node.js floor bump

This is a major version bump with no functional code changes relative to 3.23.0.

v3.20.0 raised the minimum Node.js version (inherited from jsdom 30) - a breaking change that should have been a major release. 4.0.0 corrects that: the same code as 3.23.0, now on a proper major so ^3.x consumers are not silently upgraded onto a build that dropped their Node.js version.

  • Node.js requirement: ^22.22.2 || ^24.15.0 || >=26.0.0 (Node 20 no longer supported)
  • Versions 3.20.0-3.23.0 are deprecated on npm - use 4.x, or pin 3.19.0 for Node < 22.22.2 (also available via the node20 dist-tag)
  • @​biomejs/biome 2.5.10 -> 2.5.11 (dev)

3.23.0: Updated dependencies

  • dompurify 3.4.13 -> 3.4.14
  • vitest 4.1.10 -> 4.1.11
  • @​biomejs/biome 2.5.7 -> 2.5.10
  • @​types/jsdom 28.0.3 -> 30.0.0
  • pnpm 11.20.0 -> 11.23.0
Commits
  • fa4709c chore: release 4.3.0
  • a09f7ff chore(deps): bump pnpm to 12.4.2 and biome schema to 2.5.14
  • 4b955a0 chore(deps): bump jsdom from 30.0.1 to 30.1.0
  • a72fc36 chore(deps-dev): bump @​biomejs/biome from 2.5.13 to 2.5.14
  • 139c593 chore(deps-dev): bump vitest from 5.0.0 to 5.0.1
  • 6b2d4fb chore(deps-dev): bump @​biomejs/biome from 2.5.12 to 2.5.13
  • 45eed24 chore(deps-dev): bump lefthook from 2.1.12 to 2.1.14
  • a8a319f chore: Updated deps. Prepared for the release.
  • 02b0888 chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0
  • e4c04a8 chore(deps): bump dompurify from 3.4.14 to 3.4.15
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [isomorphic-dompurify](https://github.com/kkomelin/isomorphic-dompurify) from 3.22.0 to 4.3.0.
- [Release notes](https://github.com/kkomelin/isomorphic-dompurify/releases)
- [Commits](kkomelin/isomorphic-dompurify@3.22.0...4.3.0)

---
updated-dependencies:
- dependency-name: isomorphic-dompurify
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 1, 2026

This branch is waiting to be deployed

1 waiting deployment
sandbox — 3c43737a Waiting Oct 1, 2026 by dependabot[bot] via build-and-upload #188
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants