Skip to content

chore(deps): bump isomorphic-dompurify from 2.35.0 to 3.9.0#2959

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/isomorphic-dompurify-3.9.0
Closed

chore(deps): bump isomorphic-dompurify from 2.35.0 to 3.9.0#2959
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/isomorphic-dompurify-3.9.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 15, 2026

Bumps isomorphic-dompurify from 2.35.0 to 3.9.0.

Release notes

Sourced from isomorphic-dompurify's releases.

3.9.0: Updated dompurify and others

What's Changed

  • Updated DOMPurify to 3.4.0
  • Updated dev dependencies (Biome, Vitest)

Full Changelog: kkomelin/isomorphic-dompurify@3.8.0...3.9.0

3.8.0: Updated dependencies

Dependency updates:

  • bump jsdom from 29.0.1 to 29.0.2
  • bump @​biomejs/biome from 2.4.8 to 2.4.10
  • bump vitest from 4.1.1 to 4.1.3
  • bump lefthook from 2.1.4 to 2.1.5

3.7.1

Bug Fix

  • Fixed missing browser type declarationsbrowser.d.ts and browser.d.mts were not included in the 3.7.0 published package due to a race condition in the build process. This caused TS7016: Could not find a declaration file for module 'isomorphic-dompurify' errors in tsgo and TypeScript 6 when resolving through the default (browser) exports condition. (#411)

Thanks to @​asterikx and @​ElPrudi for their help with the issue.

3.7.0: TypeScript 6 compatibility

TypeScript 6 compatibility fixes:

  • Add explicit type annotation for sanitize to satisfy TS6
  • Silence baseUrl deprecation warning from tsup dts build in TS6

Dependency updates:

  • bump typescript from 5.9.3 to 6.0.2
  • bump vitest from 4.1.0 to 4.1.1

3.6.0: Updated dependencies

Dependency updates:

  • bump jsdom from 29.0.0 to 29.0.1
  • bump @​types/jsdom from 28.0.0 to 28.0.1
  • bump @​biomejs/biome from 2.4.7 to 2.4.8

3.5.1

Fix outdated build artifacts published in 3.5.0.

3.5.0: Add factory function support

What's new

Features

  • The default export is now callable as a factory function, matching the dompurify API — DOMPurify(window) now returns a new DOMPurify instance bound to the given window (#405)

Bug fixes

  • Fixed isEqualNode returning false when comparing RETURN_DOM + FORCE_BODY output against nodes from a separate JSDOM context (#405)

Thanks to @​probablykasper for helping with this release.

... (truncated)

Commits
  • 8ca0afa chore: Incremented project version.
  • a544f3c chore: Upated deps.
  • d2daec3 chore(deps): bump dompurify from 3.3.3 to 3.4.0
  • 2d121b0 chore(deps-dev): bump @​biomejs/biome from 2.4.11 to 2.4.12
  • 5e36187 chore(deps-dev): bump @​biomejs/biome from 2.4.10 to 2.4.11
  • 06b4ce4 chore(deps-dev): bump vitest from 4.1.3 to 4.1.4
  • 40c0ced chore(release): bump version to 3.8.0 and update dep ranges
  • 1493745 chore(deps): bump jsdom from 29.0.1 to 29.0.2
  • 772dbc8 chore(deps-dev): bump vitest from 4.1.2 to 4.1.3
  • 5c426c9 chore(deps-dev): bump lefthook from 2.1.4 to 2.1.5
  • Additional commits viewable in compare view

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 15, 2026

Assignees

The following users could not be added as assignees: noopdog. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added dependencies [subject] External software packages that the system depends on javascript Pull requests that update javascript code labels Apr 15, 2026
Bumps [isomorphic-dompurify](https://github.com/kkomelin/isomorphic-dompurify) from 2.35.0 to 3.9.0.
- [Release notes](https://github.com/kkomelin/isomorphic-dompurify/releases)
- [Commits](kkomelin/isomorphic-dompurify@2.35.0...3.9.0)

---
updated-dependencies:
- dependency-name: isomorphic-dompurify
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/isomorphic-dompurify-3.9.0 branch from 6b32228 to f97806f Compare April 22, 2026 05:01
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 23, 2026

Superseded by #3008.

@dependabot dependabot Bot closed this Apr 23, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/isomorphic-dompurify-3.9.0 branch April 23, 2026 13:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies [subject] External software packages that the system depends on javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant