From 5dc50b55c8df1491cb6ce1052fc24f4334b559f0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 24 Jul 2026 03:40:10 +0000
Subject: [PATCH] Bump dompurify from 3.0.2 to 3.4.12

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.0.2 to 3.4.12.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.0.2...3.4.12)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.12
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 21 +++++++++++++--------
 package.json      |  2 +-
 2 files changed, 14 insertions(+), 9 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 04ad0fa91c40..4077febc6610 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -18,7 +18,7 @@
         "@use-gesture/react": "10.2.10",
         "@webcomponents/webcomponentsjs": "2.6.0",
         "date-fns": "2.27.0",
-        "dompurify": "3.0.2",
+        "dompurify": "3.4.12",
         "google-closure-library": "20230802.0.0",
         "intersection-observer": "0.12.0",
         "jss": "10.8.2",
@@ -6720,10 +6720,11 @@
       }
     },
     "node_modules/@types/trusted-types": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.2.tgz",
-      "integrity": "sha512-F5DIZ36YVLE+PN+Zwws4kJogq47hNgX3Nx6WyDJ3kcplxyke3XIzB8uK5n/Lpm1HBsbGzd6nmGehL8cPekP+Tg==",
-      "dev": true
+      "version": "2.0.7",
+      "resolved": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz",
+      "integrity": "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==",
+      "devOptional": true,
+      "license": "MIT"
     },
     "node_modules/@types/yargs": {
       "version": "15.0.13",
@@ -10242,9 +10243,13 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.0.2.tgz",
-      "integrity": "sha512-B8c6JdiEpxAKnd8Dm++QQxJL4lfuc757scZtcapj6qjTjrQzyq5iAyznLKVvK+77eYNiFblHBlt7MM0fOeqoKw=="
+      "version": "3.4.12",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz",
+      "integrity": "sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==",
+      "license": "(MPL-2.0 OR Apache-2.0)",
+      "optionalDependencies": {
+        "@types/trusted-types": "^2.0.7"
+      }
     },
     "node_modules/domutils": {
       "version": "2.7.0",
diff --git a/package.json b/package.json
index e08fb8451cb0..f573c7f3bcbf 100644
--- a/package.json
+++ b/package.json
@@ -23,7 +23,7 @@
     "@use-gesture/react": "10.2.10",
     "@webcomponents/webcomponentsjs": "2.6.0",
     "date-fns": "2.27.0",
-    "dompurify": "3.0.2",
+    "dompurify": "3.4.12",
     "google-closure-library": "20230802.0.0",
     "intersection-observer": "0.12.0",
     "jss": "10.8.2",