Skip to content

Bump isomorphic-dompurify from 2.36.0 to 4.2.0 - #42

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/isomorphic-dompurify-4.2.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/isomorphic-dompurify-4.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps isomorphic-dompurify from 2.36.0 to 4.2.0.

Release notes

Sourced from isomorphic-dompurify's releases.

4.2.0: Updated dependencies

  • dompurify 3.4.14 -> 3.4.15
  • vitest 4.1.11 -> 5.0.0 (dev)
  • @​biomejs/biome 2.5.11 -> 2.5.12 (dev)
  • pnpm/action-setup 6.0.10 -> 6.1.0 (CI)

4.1.0: Align Requirements table with the 4.x Node.js floor

  • README Requirements table: the raised Node.js floor is now listed under >=4.0.0 (was >=3.20.0)
  • lefthook 2.1.10 -> 2.1.12 (dev)

4.0.0: Semver correction for the Node.js floor bump

This is a major version bump with no functional code changes relative to 3.23.0.

v3.20.0 raised the minimum Node.js version (inherited from jsdom 30) - a breaking change that should have been a major release. 4.0.0 corrects that: the same code as 3.23.0, now on a proper major so ^3.x consumers are not silently upgraded onto a build that dropped their Node.js version.

  • Node.js requirement: ^22.22.2 || ^24.15.0 || >=26.0.0 (Node 20 no longer supported)
  • Versions 3.20.0-3.23.0 are deprecated on npm - use 4.x, or pin 3.19.0 for Node < 22.22.2 (also available via the node20 dist-tag)
  • @​biomejs/biome 2.5.10 -> 2.5.11 (dev)

3.23.0: Updated dependencies

  • dompurify 3.4.13 -> 3.4.14
  • vitest 4.1.10 -> 4.1.11
  • @​biomejs/biome 2.5.7 -> 2.5.10
  • @​types/jsdom 28.0.3 -> 30.0.0
  • pnpm 11.20.0 -> 11.23.0

3.22.0: Updated dependencies

  • dompurify 3.4.12 -> 3.4.13
  • @​biomejs/biome 2.5.6 -> 2.5.7
  • pnpm 11.17.0 -> 11.20.0

3.21.0: Updated dependencies

  • jsdom 30.0.0 -> 30.0.1
  • @​biomejs/biome 2.5.5 -> 2.5.6

3.20.0: jsdom 30 and raised Node.js floor

  • jsdom 29.1.1 -> 30.0.0
  • Node.js requirement raised to ^22.22.2 || ^24.15.0 || >=26.0.0 (Node 20 is no longer supported)
  • @​biomejs/biome 2.5.4 -> 2.5.5
  • pnpm 11.13.1 -> 11.17.0
  • actions/setup-node 6 -> 7

3.19.0: Updated dependencies

  • dompurify 3.4.11 -> 3.4.12
  • @​biomejs/biome 2.5.0 -> 2.5.4
  • vitest 4.1.9 -> 4.1.10
  • lefthook 2.1.9 -> 2.1.10
  • pnpm 11.6.0 -> 11.13.1
  • actions/checkout 6 -> 7
  • pnpm/action-setup 6.0.8 -> 6.0.9

... (truncated)

Commits
  • a8a319f chore: Updated deps. Prepared for the release.
  • 02b0888 chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0
  • e4c04a8 chore(deps): bump dompurify from 3.4.14 to 3.4.15
  • 41934c0 chore(deps-dev): bump vitest from 4.1.11 to 5.0.0
  • 84ae734 chore(deps-dev): bump @​biomejs/biome from 2.5.11 to 2.5.12
  • e7b5f69 chore: release 4.1.0 (align README Requirements table with the 4.x Node.js fl...
  • c67da50 chore(deps-dev): bump lefthook from 2.1.10 to 2.1.12
  • 285264e chore: release 4.0.0 (correct semver for the Node.js floor bump)
  • 438d244 chore(deps-dev): bump @​biomejs/biome from 2.5.10 to 2.5.11
  • 7607c2f chore: bump pnpm to 11.23.0 and release 3.23.0
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 14, 2026
Bumps [isomorphic-dompurify](https://github.com/kkomelin/isomorphic-dompurify) from 2.36.0 to 4.2.0.
- [Release notes](https://github.com/kkomelin/isomorphic-dompurify/releases)
- [Commits](kkomelin/isomorphic-dompurify@2.36.0...4.2.0)

---
updated-dependencies:
- dependency-name: isomorphic-dompurify
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/isomorphic-dompurify-4.2.0 branch from 0ed2caf to 50f39e6 Compare September 14, 2026 19:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants