From 5e3b46ea7993f7935625bd2dce9b3b7dcf41e379 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 3 Apr 2026 06:38:01 +0000
Subject: [PATCH] chore(deps): bump dompurify from 2.5.8 to 3.3.2 in /deck

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 2.5.8 to 3.3.2.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/2.5.8...3.3.2)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.3.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 deck/packages/cloudrun/package.json   |  2 +-
 deck/packages/core/package.json       |  2 +-
 deck/packages/kubernetes/package.json |  2 +-
 deck/yarn.lock                        | 12 +++++++-----
 4 files changed, 10 insertions(+), 8 deletions(-)

diff --git a/deck/packages/cloudrun/package.json b/deck/packages/cloudrun/package.json
index 5cc4f980809..6ac358f9874 100644
--- a/deck/packages/cloudrun/package.json
+++ b/deck/packages/cloudrun/package.json
@@ -26,7 +26,7 @@
     "angular": "1.8.3",
     "angular-ui-bootstrap": "2.5.0",
     "brace": "0.11.1",
-    "dompurify": "^2.3.10",
+    "dompurify": "^3.3.2",
     "enzyme": "3.11.0",
     "formik": "1.5.1",
     "js-yaml": "3.13.1",
diff --git a/deck/packages/core/package.json b/deck/packages/core/package.json
index 7ff9aba5b54..d3f2aeffbb8 100644
--- a/deck/packages/core/package.json
+++ b/deck/packages/core/package.json
@@ -50,7 +50,7 @@
     "commonmark": "0.28.1",
     "date-fns": "2.21.1",
     "diff-match-patch": "1.0.4",
-    "dompurify": "^2.3.10",
+    "dompurify": "^3.3.2",
     "enzyme": "3.11.0",
     "formik": "1.5.1",
     "human-readable-ids": "1.0.4",
diff --git a/deck/packages/kubernetes/package.json b/deck/packages/kubernetes/package.json
index c9f2afc8de1..2afbbdc5d8a 100644
--- a/deck/packages/kubernetes/package.json
+++ b/deck/packages/kubernetes/package.json
@@ -26,7 +26,7 @@
     "angular": "1.6.10",
     "angular-ui-bootstrap": "2.5.0",
     "brace": "0.11.1",
-    "dompurify": "^2.3.10",
+    "dompurify": "^3.3.2",
     "enzyme": "3.11.0",
     "formik": "1.5.1",
     "js-yaml": "3.14.2",
diff --git a/deck/yarn.lock b/deck/yarn.lock
index fe9e6409bcb..88208d7ee9c 100644
--- a/deck/yarn.lock
+++ b/deck/yarn.lock
@@ -4408,7 +4408,7 @@
   resolved "https://registry.npmjs.org/@types/tether/-/tether-1.4.4.tgz"
   integrity sha512-6qhsFJVMuMqaQRVyQVi3zUBLfKYyryktL0ZP0Z3zegzeQ7WKm0PZNCdl3JsaitJbzqaoQ9qsFKMfaj5MiMfcSQ==
 
-"@types/trusted-types@*":
+"@types/trusted-types@*", "@types/trusted-types@^2.0.7":
   version "2.0.7"
   resolved "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz"
   integrity sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==
@@ -7600,10 +7600,12 @@ domhandler@^4.0.0, domhandler@^4.2.0, domhandler@^4.3.1:
   dependencies:
     domelementtype "^2.2.0"
 
-dompurify@^2.3.10:
-  version "2.5.8"
-  resolved "https://registry.npmjs.org/dompurify/-/dompurify-2.5.8.tgz"
-  integrity sha512-o1vSNgrmYMQObbSSvF/1brBYEQPHhV1+gsmrusO7/GXtp1T9rCS8cXFqVxK/9crT1jA6Ccv+5MTSjBNqr7Sovw==
+dompurify@^3.3.2:
+  version "3.3.2"
+  resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-3.3.2.tgz#58c515d0f8508b8749452a028aa589ad80b36325"
+  integrity sha512-6obghkliLdmKa56xdbLOpUZ43pAR6xFy1uOrxBaIDjT+yaRuuybLjGS9eVBoSR/UPU5fq3OXClEHLJNGvbxKpQ==
+  optionalDependencies:
+    "@types/trusted-types" "^2.0.7"
 
 domutils@1.5.1, domutils@^1.5.1:
   version "1.5.1"