Skip to content

chore(deps): bump isomorphic-dompurify from 3.3.0 to 3.7.1#74

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/isomorphic-dompurify-3.7.1
Open

chore(deps): bump isomorphic-dompurify from 3.3.0 to 3.7.1#74
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/isomorphic-dompurify-3.7.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2026

Bumps isomorphic-dompurify from 3.3.0 to 3.7.1.

Release notes

Sourced from isomorphic-dompurify's releases.

3.7.1

Bug Fix

  • Fixed missing browser type declarationsbrowser.d.ts and browser.d.mts were not included in the 3.7.0 published package due to a race condition in the build process. This caused TS7016: Could not find a declaration file for module 'isomorphic-dompurify' errors in tsgo and TypeScript 6 when resolving through the default (browser) exports condition. (#411)

Thanks to @​asterikx and @​ElPrudi for their help with the issue.

3.7.0: TypeScript 6 compatibility

TypeScript 6 compatibility fixes:

  • Add explicit type annotation for sanitize to satisfy TS6
  • Silence baseUrl deprecation warning from tsup dts build in TS6

Dependency updates:

  • bump typescript from 5.9.3 to 6.0.2
  • bump vitest from 4.1.0 to 4.1.1

3.6.0: Updated dependencies

Dependency updates:

  • bump jsdom from 29.0.0 to 29.0.1
  • bump @​types/jsdom from 28.0.0 to 28.0.1
  • bump @​biomejs/biome from 2.4.7 to 2.4.8

3.5.1

Fix outdated build artifacts published in 3.5.0.

3.5.0: Add factory function support

What's new

Features

  • The default export is now callable as a factory function, matching the dompurify API — DOMPurify(window) now returns a new DOMPurify instance bound to the given window (#405)

Bug fixes

  • Fixed isEqualNode returning false when comparing RETURN_DOM + FORCE_BODY output against nodes from a separate JSDOM context (#405)

Thanks to @​probablykasper for helping with this release.

3.4.0: jsdom update, performance improvement and node 22 requirement update

What's Changed

  • Upgraded jsdom from 28 to 29, which fixes performance degradation in long-running processes; note that heap memory still grows over time without calling clearWindow()
  • Bumped minimum Node.js 22 requirement from 22.12.0 to 22.13.0 (LTS)
  • Added format script (biome format --write) and pre-commit hook
  • Updated dev dependencies (biome, vitest)
Commits
  • 11315f4 chore: Bumped project version.
  • 97770c7 fix: prevent race condition dropping browser type declarations
  • 8a06c60 chore: Incremented project version.
  • 51ebc9d fix: silence baseUrl deprecation warning from tsup dts build in TS6
  • b0fab7e chore: Updated deps.
  • 0e86f89 chore(deps-dev): bump typescript from 5.9.3 to 6.0.2
  • a028523 fix: add explicit type annotation for sanitize to satisfy TS6
  • cb38b24 chore(deps-dev): bump vitest from 4.1.0 to 4.1.1
  • 009574a chore: Updated deps. Incremented project version.
  • 21b362d chore(deps): bump jsdom from 29.0.0 to 29.0.1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [isomorphic-dompurify](https://github.com/kkomelin/isomorphic-dompurify) from 3.3.0 to 3.7.1.
- [Release notes](https://github.com/kkomelin/isomorphic-dompurify/releases)
- [Commits](kkomelin/isomorphic-dompurify@3.3.0...3.7.1)

---
updated-dependencies:
- dependency-name: isomorphic-dompurify
  dependency-version: 3.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants