From efae3fd97b028800c4a66d441d61dfc90bbe2dfa Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 16 Apr 2026 06:24:27 +0000
Subject: [PATCH] chore(deps): bump dompurify

Bumps the npm_and_yarn group with 1 update in the /core/http/react-ui directory: [dompurify](https://github.com/cure53/DOMPurify).


Updates `dompurify` from 3.3.2 to 3.4.0
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.3.2...3.4.0)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 core/http/react-ui/package-lock.json | 12 +++++-------
 core/http/react-ui/package.json      |  2 +-
 2 files changed, 6 insertions(+), 8 deletions(-)

diff --git a/core/http/react-ui/package-lock.json b/core/http/react-ui/package-lock.json
index 242ae9df6..1fe6bd04e 100644
--- a/core/http/react-ui/package-lock.json
+++ b/core/http/react-ui/package-lock.json
@@ -20,7 +20,7 @@
         "@lezer/highlight": "^1.2.1",
         "@modelcontextprotocol/ext-apps": "^1.2.2",
         "@modelcontextprotocol/sdk": "^1.25.1",
-        "dompurify": "^3.2.5",
+        "dompurify": "^3.4.0",
         "highlight.js": "^11.11.1",
         "marked": "^15.0.7",
         "react": "^19.1.0",
@@ -2013,12 +2013,10 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.3.2",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.2.tgz",
-      "integrity": "sha512-6obghkliLdmKa56xdbLOpUZ43pAR6xFy1uOrxBaIDjT+yaRuuybLjGS9eVBoSR/UPU5fq3OXClEHLJNGvbxKpQ==",
-      "engines": {
-        "node": ">=20"
-      },
+      "version": "3.4.0",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.0.tgz",
+      "integrity": "sha512-nolgK9JcaUXMSmW+j1yaSvaEaoXYHwWyGJlkoCTghc97KgGDDSnpoU/PlEnw63Ah+TGKFOyY+X5LnxaWbCSfXg==",
+      "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
       }
diff --git a/core/http/react-ui/package.json b/core/http/react-ui/package.json
index c8f29d3fe..6abb21c95 100644
--- a/core/http/react-ui/package.json
+++ b/core/http/react-ui/package.json
@@ -17,7 +17,7 @@
     "react-router-dom": "^7.6.1",
     "highlight.js": "^11.11.1",
     "marked": "^15.0.7",
-    "dompurify": "^3.2.5",
+    "dompurify": "^3.4.0",
     "@fortawesome/fontawesome-free": "^6.7.2",
     "@modelcontextprotocol/sdk": "^1.25.1",
     "@modelcontextprotocol/ext-apps": "^1.2.2",