chore(deps): update dependency dompurify to v3.4.0 [security] (#2780)

2026-09-02 21:04:08 +03:00 · 2026-04-16 19:16:16 +02:00
parent f89fbfc2d0
commit efaed083bd
2 changed files with 177 additions and 7 deletions
@@ -15,7 +15,7 @@
  },
  "dependencies": {
    "@vue/shared": "catalog:runtime",
-    "dompurify": "3.3.3",
+    "dompurify": "3.4.0",
    "marked": "18.0.0"
  },
  "devDependencies": {
@@ -304,8 +304,8 @@ importers:
        specifier: catalog:runtime
        version: 3.5.31
      dompurify:
-        specifier: 3.3.3
-        version: 3.3.3
+        specifier: 3.4.0
+        version: 3.4.0
      marked:
        specifier: 18.0.0
        version: 18.0.0
@@ -383,7 +383,7 @@ importers:
    dependencies:
      '@jellyfin-vue/tauri-runtime':
        specifier: workspace:*
-        version: link:../../packages/tauri-runtime
+        version: file:packages/tauri-runtime
    devDependencies:
      '@tauri-apps/cli':
        specifier: 2.10.1
@@ -818,6 +818,21 @@ packages:
  '@iconify/utils@3.1.0':
    resolution: {integrity: sha512-Zlzem1ZXhI1iHeeERabLNzBHdOa4VhQbqAcOQaMKuTuyZCpwKbC2R4Dd0Zo3g9EAc+Y4fiarO8HIHRAth7+skw==, tarball: https://registry.npmjs.org/@iconify/utils/-/utils-3.1.0.tgz}

+  '@jellyfin-vue/frontend@file:packages/frontend':
+    resolution: {directory: packages/frontend, type: directory}
+
+  '@jellyfin-vue/i18n@file:packages/i18n':
+    resolution: {directory: packages/i18n, type: directory}
+
+  '@jellyfin-vue/shared@file:packages/shared':
+    resolution: {directory: packages/shared, type: directory}
+
+  '@jellyfin-vue/tauri-runtime@file:packages/tauri-runtime':
+    resolution: {directory: packages/tauri-runtime, type: directory}
+
+  '@jellyfin-vue/ui-toolkit@file:packages/ui-toolkit':
+    resolution: {directory: packages/ui-toolkit, type: directory}
+
  '@jellyfin/sdk@0.13.0':
    resolution: {integrity: sha512-oiBAOXH6s+dKdReSsYgNktBDzbxtg4JVWhEzIxZSxKcWMdSKmBtK41MhXRO7IWAC40DguKUm3nU/Z493qPAlWA==, tarball: https://registry.npmjs.org/@jellyfin/sdk/-/sdk-0.13.0.tgz}
    peerDependencies:
@@ -2076,8 +2091,8 @@ packages:
  dom-accessibility-api@0.6.3:
    resolution: {integrity: sha512-7ZgogeTnjuHbo+ct10G9Ffp0mif17idi0IyWNVA/wcwcm7NPOD/WEHVP3n7n3MhXqxoIYm8d6MuZohYWIZ4T3w==, tarball: https://registry.npmjs.org/dom-accessibility-api/-/dom-accessibility-api-0.6.3.tgz}

-  dompurify@3.3.3:
-    resolution: {integrity: sha512-Oj6pzI2+RqBfFG+qOaOLbFXLQ90ARpcGG6UePL82bJLtdsa6CYJD7nmiU8MW9nQNOtCHV3lZ/Bzq1X0QYbBZCA==, tarball: https://registry.npmjs.org/dompurify/-/dompurify-3.3.3.tgz}
+  dompurify@3.4.0:
+    resolution: {integrity: sha512-nolgK9JcaUXMSmW+j1yaSvaEaoXYHwWyGJlkoCTghc97KgGDDSnpoU/PlEnw63Ah+TGKFOyY+X5LnxaWbCSfXg==, tarball: https://registry.npmjs.org/dompurify/-/dompurify-3.4.0.tgz}

  dunder-proto@1.0.1:
    resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==, tarball: https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz}
@@ -3996,6 +4011,92 @@ snapshots:
      '@iconify/types': 2.0.0
      mlly: 1.8.2

+  '@jellyfin-vue/frontend@file:packages/frontend':
+    dependencies:
+      '@fontsource-variable/figtree': 5.2.10
+      '@iconify/json': 2.2.458
+      '@jellyfin-vue/i18n': file:packages/i18n(vue@3.5.31)
+      '@jellyfin-vue/shared': file:packages/shared
+      '@jellyfin-vue/ui-toolkit': file:packages/ui-toolkit(i18next@26.0.3)(vue@3.5.31)
+      '@jellyfin/sdk': 0.13.0(axios@1.15.0)
+      '@vueuse/core': 14.2.1(vue@3.5.31)
+      assjs: 0.1.5
+      audiomotion-analyzer: 4.5.4
+      axios: 1.15.0
+      blurhash: 2.0.5
+      comlink: 4.4.2
+      date-fns: 4.1.0
+      defu: 6.1.5
+      destr: 2.0.5
+      dexie: 4.4.2
+      fast-equals: 6.0.0
+      hls.js: 1.6.15
+      i18next: 26.0.3(typescript@6.0.2)
+      i18next-vue: 5.4.0(i18next@26.0.3)(vue@3.5.31)
+      libpgs: 0.8.1
+      sortablejs: 1.15.7
+      swiper: 12.1.3
+      uuid: 13.0.0
+      vue: 3.5.31
+      vue-router: 5.0.4(vue@3.5.31)
+      vuetify: 3.11.3(vue@3.5.31)
+    transitivePeerDependencies:
+      - '@pinia/colada'
+      - '@vue/compiler-sfc'
+      - debug
+      - pinia
+      - typescript
+      - vite-plugin-vuetify
+      - webpack-plugin-vuetify
+
+  '@jellyfin-vue/i18n@file:packages/i18n(vue@3.5.31)':
+    dependencies:
+      '@vue/shared': 3.5.31
+      date-fns: 4.1.0
+      i18next: 26.0.3(typescript@6.0.2)
+      vuetify: 3.11.3(vue@3.5.31)
+    transitivePeerDependencies:
+      - typescript
+      - vite-plugin-vuetify
+      - vue
+      - webpack-plugin-vuetify
+
+  '@jellyfin-vue/shared@file:packages/shared':
+    dependencies:
+      '@vue/shared': 3.5.31
+      dompurify: 3.4.0
+      marked: 18.0.0
+
+  '@jellyfin-vue/tauri-runtime@file:packages/tauri-runtime':
+    dependencies:
+      '@jellyfin-vue/frontend': file:packages/frontend
+      '@tauri-apps/api': 2.10.1
+    transitivePeerDependencies:
+      - '@pinia/colada'
+      - '@vue/compiler-sfc'
+      - debug
+      - pinia
+      - typescript
+      - vite-plugin-vuetify
+      - webpack-plugin-vuetify
+
+  '@jellyfin-vue/ui-toolkit@file:packages/ui-toolkit(i18next@26.0.3)(vue@3.5.31)':
+    dependencies:
+      '@jellyfin-vue/i18n': file:packages/i18n(vue@3.5.31)
+      '@jellyfin-vue/shared': file:packages/shared
+      '@skirtle/vue-vnode-utils': 0.2.0(vue@3.5.31)
+      '@vueuse/core': 14.2.1(vue@3.5.31)
+      color: 5.0.3
+      comlink: 4.4.2
+      i18next-vue: 5.4.0(i18next@26.0.3)(vue@3.5.31)
+      vuetify: 3.11.3(vue@3.5.31)
+    transitivePeerDependencies:
+      - i18next
+      - typescript
+      - vite-plugin-vuetify
+      - vue
+      - webpack-plugin-vuetify
+
  '@jellyfin/sdk@0.13.0(axios@1.15.0)':
    dependencies:
      axios: 1.15.0
@@ -4176,6 +4277,10 @@ snapshots:
    dependencies:
      vue: 3.5.31(typescript@6.0.2)

+  '@skirtle/vue-vnode-utils@0.2.0(vue@3.5.31)':
+    dependencies:
+      vue: 3.5.31
+
  '@standard-schema/spec@1.1.0': {}

  '@storybook/addon-a11y@10.3.3(storybook@10.3.3(@testing-library/dom@10.4.1)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))':
@@ -4756,6 +4861,16 @@ snapshots:
    optionalDependencies:
      vue: 3.5.31(typescript@6.0.2)

+  '@vue-macros/common@3.1.2(vue@3.5.31)':
+    dependencies:
+      '@vue/compiler-sfc': 3.5.32
+      ast-kit: 2.2.0
+      local-pkg: 1.1.2
+      magic-string-ast: 1.0.3
+      unplugin-utils: 0.3.1
+    optionalDependencies:
+      vue: 3.5.31
+
  '@vue/babel-helper-vue-transform-on@1.5.0': {}

  '@vue/babel-plugin-jsx@1.5.0(@babel/core@7.29.0)':
@@ -4914,6 +5029,12 @@ snapshots:
      '@vue/shared': 3.5.31
      vue: 3.5.31(typescript@6.0.2)

+  '@vue/server-renderer@3.5.31(vue@3.5.31)':
+    dependencies:
+      '@vue/compiler-ssr': 3.5.31
+      '@vue/shared': 3.5.31
+      vue: 3.5.31
+
  '@vue/shared@3.5.31': {}

  '@vue/shared@3.5.32': {}
@@ -4925,12 +5046,23 @@ snapshots:
      '@vueuse/shared': 14.2.1(vue@3.5.31(typescript@6.0.2))
      vue: 3.5.31(typescript@6.0.2)

+  '@vueuse/core@14.2.1(vue@3.5.31)':
+    dependencies:
+      '@types/web-bluetooth': 0.0.21
+      '@vueuse/metadata': 14.2.1
+      '@vueuse/shared': 14.2.1(vue@3.5.31)
+      vue: 3.5.31
+
  '@vueuse/metadata@14.2.1': {}

  '@vueuse/shared@14.2.1(vue@3.5.31(typescript@6.0.2))':
    dependencies:
      vue: 3.5.31(typescript@6.0.2)

+  '@vueuse/shared@14.2.1(vue@3.5.31)':
+    dependencies:
+      vue: 3.5.31
+
  acorn-jsx@5.3.2(acorn@8.16.0):
    dependencies:
      acorn: 8.16.0
@@ -5205,7 +5337,7 @@ snapshots:

  dom-accessibility-api@0.6.3: {}

-  dompurify@3.3.3:
+  dompurify@3.4.0:
    optionalDependencies:
      '@types/trusted-types': 2.0.7

@@ -5658,6 +5790,11 @@ snapshots:
      i18next: 26.0.3(typescript@6.0.2)
      vue: 3.5.31(typescript@6.0.2)

+  i18next-vue@5.4.0(i18next@26.0.3)(vue@3.5.31):
+    dependencies:
+      i18next: 26.0.3(typescript@6.0.2)
+      vue: 3.5.31
+
  i18next@26.0.3(typescript@6.0.2):
    dependencies:
      '@babel/runtime': 7.29.2
@@ -6677,12 +6814,41 @@ snapshots:
    optionalDependencies:
      '@vue/compiler-sfc': 3.5.32

+  vue-router@5.0.4(vue@3.5.31):
+    dependencies:
+      '@babel/generator': 7.29.1
+      '@vue-macros/common': 3.1.2(vue@3.5.31)
+      '@vue/devtools-api': 8.1.1
+      ast-walker-scope: 0.8.3
+      chokidar: 5.0.0
+      json5: 2.2.3
+      local-pkg: 1.1.2
+      magic-string: 0.30.21
+      mlly: 1.8.2
+      muggle-string: 0.4.1
+      pathe: 2.0.3
+      picomatch: 4.0.4
+      scule: 1.3.0
+      tinyglobby: 0.2.15
+      unplugin: 3.0.0
+      unplugin-utils: 0.3.1
+      vue: 3.5.31
+      yaml: 2.8.3
+
  vue-tsc@3.2.6(typescript@6.0.2):
    dependencies:
      '@volar/typescript': 2.4.28
      '@vue/language-core': 3.2.6
      typescript: 6.0.2

+  vue@3.5.31:
+    dependencies:
+      '@vue/compiler-dom': 3.5.31
+      '@vue/compiler-sfc': 3.5.31
+      '@vue/runtime-dom': 3.5.31
+      '@vue/server-renderer': 3.5.31(vue@3.5.31)
+      '@vue/shared': 3.5.31
+
  vue@3.5.31(typescript@6.0.2):
    dependencies:
      '@vue/compiler-dom': 3.5.31
@@ -6699,6 +6865,10 @@ snapshots:
    optionalDependencies:
      typescript: 6.0.2

+  vuetify@3.11.3(vue@3.5.31):
+    dependencies:
+      vue: 3.5.31
+
  webpack-virtual-modules@0.6.2: {}

  which@2.0.2: