From 94d321da43285f21fe0337984817e0f0bd58d880 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 20 Jun 2026 10:00:49 +0000
Subject: [PATCH] Bump dompurify from 2.0.17 to 3.4.11 in /viz-lib

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.0.17 to 3.4.11.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/2.0.17...3.4.11)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.11
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 viz-lib/package-lock.json | 24 +++++++++++++++---------
 viz-lib/package.json      |  2 +-
 2 files changed, 16 insertions(+), 10 deletions(-)

diff --git a/viz-lib/package-lock.json b/viz-lib/package-lock.json
index 1925cb1f3..e99973f61 100644
--- a/viz-lib/package-lock.json
+++ b/viz-lib/package-lock.json
@@ -18,7 +18,7 @@
         "d3": "^3.5.17",
         "d3-cloud": "^1.2.4",
         "debug": "^3.1.0",
-        "dompurify": "^2.0.7",
+        "dompurify": "^3.4.11",
         "font-awesome": "^4.7.0",
         "hoist-non-react-statics": "^3.3.0",
         "leaflet": "~1.3.1",
@@ -6089,7 +6089,7 @@
       "version": "2.0.7",
       "resolved": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz",
       "integrity": "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==",
-      "dev": true
+      "devOptional": true
     },
     "node_modules/@types/yargs": {
       "version": "13.0.8",
@@ -9374,9 +9374,12 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "2.0.17",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.0.17.tgz",
-      "integrity": "sha512-nNwwJfW55r8akD8MSFz6k75bzyT2y6JEa1O3JrZFBf+Y5R9JXXU4OsRl0B9hKoPgHTw2b7ER5yJ5Md97MMUJPg=="
+      "version": "3.4.11",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.11.tgz",
+      "integrity": "sha512-zhlUV12GsaRzMsf9q5M254YhA4+VuF0fG+QFqu6aYpoGlKtz+w8//jBcGVYBgQkR5GHjUomejY84AV+/uPbWdw==",
+      "optionalDependencies": {
+        "@types/trusted-types": "^2.0.7"
+      }
     },
     "node_modules/domutils": {
       "version": "1.5.1",
@@ -26004,7 +26007,7 @@
       "version": "2.0.7",
       "resolved": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz",
       "integrity": "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==",
-      "dev": true
+      "devOptional": true
     },
     "@types/yargs": {
       "version": "13.0.8",
@@ -28619,9 +28622,12 @@
       }
     },
     "dompurify": {
-      "version": "2.0.17",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-2.0.17.tgz",
-      "integrity": "sha512-nNwwJfW55r8akD8MSFz6k75bzyT2y6JEa1O3JrZFBf+Y5R9JXXU4OsRl0B9hKoPgHTw2b7ER5yJ5Md97MMUJPg=="
+      "version": "3.4.11",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.11.tgz",
+      "integrity": "sha512-zhlUV12GsaRzMsf9q5M254YhA4+VuF0fG+QFqu6aYpoGlKtz+w8//jBcGVYBgQkR5GHjUomejY84AV+/uPbWdw==",
+      "requires": {
+        "@types/trusted-types": "^2.0.7"
+      }
     },
     "domutils": {
       "version": "1.5.1",
diff --git a/viz-lib/package.json b/viz-lib/package.json
index 2d5a9d76a..0491c3b61 100644
--- a/viz-lib/package.json
+++ b/viz-lib/package.json
@@ -86,7 +86,7 @@
     "d3": "^3.5.17",
     "d3-cloud": "^1.2.4",
     "debug": "^3.1.0",
-    "dompurify": "^2.0.7",
+    "dompurify": "^3.4.11",
     "font-awesome": "^4.7.0",
     "hoist-non-react-statics": "^3.3.0",
     "leaflet": "~1.3.1",