dependabot[bot] opened a new pull request, #1645: URL: https://github.com/apache/camel-karavan/pull/1645
Bumps [dompurify](https://github.com/cure53/DOMPurify) and [monaco-editor](https://github.com/microsoft/monaco-editor). These dependencies needed to be updated together. Updates `dompurify` from 3.4.8 to 3.4.15 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cure53/DOMPurify/releases";>dompurify's releases</a>.</em></p> <blockquote> <h2>DOMPurify 3.4.15</h2> <ul> <li>Added better clobbering hardening when XML content is involved, thanks <a href="https://github.com/gnyselcuk";><code>@gnyselcuk</code></a></li> <li>Added several smaller hardening and edge-case improvements, thanks <a href="https://github.com/leechristensen";><code>@leechristensen</code></a></li> <li>Bumped several dependencies where possible</li> </ul> <h2>DOMPurify 3.4.14</h2> <ul> <li>Fixed an issue with possible bypasses when risky tags are allow-listed, thanks <a href="https://github.com/AlirezaRouhbakhsh";><code>@AlirezaRouhbakhsh</code></a></li> <li>Fixed a couple of edge cases with mixed document contexts, thanks <a href="https://github.com/fishjojo1";><code>@fishjojo1</code></a></li> <li>Added the SVG <code>pointer-events</code> and <code>vector-effect</code> presentation attributes to the allow-list, thanks <a href="https://github.com/Jaybhade";><code>@Jaybhade</code></a></li> <li>Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation</li> <li>Updated the documentation in several spots, README, wiki, etc., thanks <a href="https://github.com/Akokonunes";><code>@Akokonunes</code></a></li> <li>Updated several development dependencies and CI workflow actions</li> </ul> <h2>DOMPurify 3.4.13</h2> <ul> <li>Fixed an issue with hook removal during <code>IN_PLACE</code> sanitization, thanks <a href="https://github.com/koyokr";><code>@koyokr</code></a></li> <li>Fixed an issue with hooks potentially bypassing the clone guard, thanks <a href="https://github.com/AkshayjainG";><code>@AkshayjainG</code></a></li> <li>Fixed an issue with DOM clobbering via <code>ownerDocument</code> during <code>IN_PLACE</code>, thanks <a href="https://github.com/AkshayjainG";><code>@AkshayjainG</code></a></li> <li>Bumped several dependencies where possible</li> </ul> <h2>DOMPurify 3.4.12</h2> <ul> <li>Fixed an issue where a hook would not get called for custom elements, thanks <a href="https://github.com/Rikuxx0";><code>@Rikuxx0</code></a></li> <li>Hardened the handling of hooks removing elements, <a href="https://github.com/mkrause-bee360";><code>@mkrause-bee360</code></a></li> <li>Added support for a few new SVG attributes, thanks <a href="https://github.com/cbn-falias";><code>@cbn-falias</code></a> & <a href="https://github.com/Develop-KIM";><code>@Develop-KIM</code></a></li> <li>Hardened the handling of declarative partial updates</li> <li>Updated the documentation is several spots, README, wiki, etc.</li> <li>Bumped several dependencies where possible</li> </ul> <h2>DOMPurify 3.4.11</h2> <ul> <li>Fixed an issue with a leaky config for hooks via <code>setConfig</code>, thanks <a href="https://github.com/trace37labs";><code>@trace37labs</code></a></li> <li>Bumped vulnerable development dependencies to arrive at plain 0 with <code>npm audit</code></li> <li>Updated the <code>osv-scanner</code> suppression list as no vulnerable dependencies are left for now</li> <li>Updated up the linting tool-chain and removed now-redundant lint directives</li> <li>Updated the documentation is several spots, README, wiki, etc.</li> <li>Bumped several dependencies where possible</li> </ul> <h2>DOMPurify 3.4.10</h2> <ul> <li>Refactored codebase for clarity: extracted the public type declarations into <code>types.ts</code></li> <li>Decomposed the three largest sanitizer functions into focused helpers</li> <li>Removed duplicated defaults and dead branches, consolidated <code>SAFE_FOR_TEMPLATES</code> scrubbing into single shared path</li> <li>Improved per-node performance by hoisting the mXSS probe regexes and testing <code>textContent</code> before <code>innerHTML</code></li> <li>Added a deterministic micro-benchmark harness (<code>npm run bench</code>) with a <code>--compare</code> mode</li> <li>Reduced CI cost by running the full three-engine browser suite once per PR</li> <li>Refreshed the <code>demos/</code> folder so every demo runs again, and added a SVG-via-<code><img></code> demo</li> <li>Documented the bench and <code>test:happydom</code> scripts in the README</li> <li>Completed the Attack Classes & Bypass History wiki page</li> <li>Bumped several dependencies where possible</li> </ul> <h2>DOMPurify 3.4.9</h2> <ul> <li>Further improved the handling of Trusted Types config options, thanks <a href="https://github.com/offset";><code>@offset</code></a></li> <li>Further improved the handling of <code>IN_PLACE</code> sanitization, thanks <a href="https://github.com/mozfreddyb";><code>@mozfreddyb</code></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cure53/DOMPurify/commit/1d7460c4f8a27be825c11b1c9d346d79db32c1e5";><code>1d7460c</code></a> release: 3.4.15 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1609";>#1609</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/4e6fe24173f1a85eafacd95e3c82966e29d34d49";><code>4e6fe24</code></a> release: 3.4.14 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1587";>#1587</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/3067f774676975de12306effd6db6ad7a9a8c17f";><code>3067f77</code></a> release: 3.4.13 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1562";>#1562</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/a9ca1e537422319a557a9a2aa61f003b23b4a197";><code>a9ca1e5</code></a> release: 3.4.12 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1537";>#1537</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/0cae5187403132f96a6d357649e4b15633fc210a";><code>0cae518</code></a> release: 3.4.11 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1494";>#1494</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/6ee5716f8336989753611beeca364957c0eb0c3e";><code>6ee5716</code></a> release: 3.4.10 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1478";>#1478</a>)</li> <li><a href="https://github.com/cure53/DOMPurify/commit/52102472d46035857c52df19e44285f8a1e102fc";><code>5210247</code></a> release: 3.4.9 (<a href="https://redirect.github.com/cure53/DOMPurify/issues/1459";>#1459</a>)</li> <li>See full diff in <a href="https://github.com/cure53/DOMPurify/compare/3.4.8...3.4.15";>compare view</a></li> </ul> </details> <br /> Updates `monaco-editor` from 0.56.0 to 0.57.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/microsoft/monaco-editor/releases";>monaco-editor's releases</a>.</em></p> <blockquote> <h2>v0.57.0</h2> <h2>Changes:</h2> <ul> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5487";>#5487</a>: Prepare Monaco Editor 0.57.0 release</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5415";>#5415</a>: Bump uuid and webpack-dev-server in /website</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5476";>#5476</a>: Bump baseline-browser-mapping from 2.9.19 to 2.11.21 in /website</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5474";>#5474</a>: Bump svgo from 2.8.3 to 2.8.4 in /samples/browser-esm-parcel</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5479";>#5479</a>: Bump actions/deploy-pages from 5.0.0 to 5.0.1 in the github-actions group</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5468";>#5468</a>: Bump browserslist from 4.28.1 to 4.28.8 in /website</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5475";>#5475</a>: Bump js-yaml from 4.3.1 to 4.3.2</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5470";>#5470</a>: Bump fast-uri from 3.1.2 to 3.1.7 in /webpack-plugin</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5469";>#5469</a>: Bump nanoid from 3.3.11 to 3.3.18 in /webpack-plugin</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5467";>#5467</a>: Bump fast-uri from 3.1.5 to 3.1.7 in /samples/browser-esm-webpack-typescript-react</li> </ul> <!-- raw HTML omitted --> <ul> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5466";>#5466</a>: Bump fast-uri from 3.1.2 to 3.1.7 in /samples</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5465";>#5465</a>: Bump fast-uri from 3.1.4 to 3.1.7 in /website</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5463";>#5463</a>: Bump postcss-selector-parser from 7.1.0 to 7.1.5 in /website</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5416";>#5416</a>: Bump <code>@babel/core</code> from 7.17.8 to 7.29.7 in /samples/browser-esm-vite-react</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5438";>#5438</a>: Bump electron from 39.8.5 to 39.8.10 in /samples</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5460";>#5460</a>: Bump the github-actions group with 7 updates</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5456";>#5456</a>: Pin GitHub Actions to full-length commit SHAs</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5450";>#5450</a>: Bump postcss from 8.5.12 to 8.5.26</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5449";>#5449</a>: Bump js-yaml from 4.2.0 to 4.3.1</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5439";>#5439</a>: Bump postcss from 8.5.13 to 8.5.26 in /samples</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5441";>#5441</a>: Bump postcss from 8.5.15 to 8.5.26 in /samples/browser-esm-vite-react</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5432";>#5432</a>: Bump undici from 7.28.0 to 7.29.0</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5440";>#5440</a>: Bump brace-expansion in /website</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5436";>#5436</a>: Bump fast-uri from 3.1.4 to 3.1.5 in /samples/browser-esm-webpack-typescript-react</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5437";>#5437</a>: Bump fast-uri from 3.1.2 to 3.1.5</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5413";>#5413</a>: Bump svgo from 2.8.2 to 2.8.3 in /samples/browser-esm-parcel</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5419";>#5419</a>: Bump launch-editor from 2.12.0 to 2.14.1 in /website</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5414";>#5414</a>: Bump fast-uri from 3.1.2 to 3.1.4 in /samples/browser-esm-webpack-typescript-react</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5417";>#5417</a>: Bump minimatch from 3.1.2 to 3.1.5 in /webpack-plugin</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5420";>#5420</a>: Bump ws from 8.18.0 to 8.21.1 in /samples</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5418";>#5418</a>: Bump http-proxy-middleware from 2.0.9 to 2.0.10 in /samples</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5412";>#5412</a>: Bump fast-uri from 3.1.2 to 3.1.4 in /website</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5411";>#5411</a>: Bump shell-quote from 1.8.4 to 1.10.0 in /website</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5409";>#5409</a>: Bump webpack-dev-server from 5.2.5 to 5.2.6 in /samples</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5410";>#5410</a>: Bump postcss from 8.5.14 to 8.5.23 in /website</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5407";>#5407</a>: Bump immutable from 5.1.5 to 5.1.9 in /website</li> <li><a href="https://redirect.github.com/microsoft/monaco-editor/issues/5401";>#5401</a>: Bump brace-expansion from 1.1.11 to 1.1.16 in /samples</li> </ul> <p>This list of changes was <a href="https://dev.azure.com/monacotools/Monaco/_build/results?buildId=476973&view=logs";>auto generated</a>.<!-- raw HTML omitted --></p> <h2>v0.57.0-rc.2</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md";>monaco-editor's changelog</a>.</em></p> <blockquote> <h2>[0.57.0]</h2> <h3>New Features and APIs</h3> <ul> <li>Adds <code>editor.wordWrapIndicator</code> to display an indicator at the wrapping column of soft-wrapped lines.</li> <li>Adds <code>editor.fullwidthCharacterWidth</code>, with <code>font</code> and <code>twoCells</code> modes for rendering full-width characters.</li> <li>Adds <code>languages.score</code> to score a language selector against a URI and language.</li> <li>Exports the <code>editor.DiffEditorViewMode</code> type.</li> <li>Adds <code>isForAnotherDocument</code> to the inline completion <code>languages.LifetimeSummary</code> type.</li> </ul> <h3>Updates</h3> <ul> <li>Updates the editor core to VS Code commit <code>6a598d4a13031703d483d103c1d934a36ad27971</code>, validated in <code>0.57.0-rc.2</code>.</li> <li>Updates bundled DOMPurify from 3.4.8 to 3.4.15.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/monaco-editor/commit/d61824269f1377111d34306e4a47172327777083";><code>d618242</code></a> Merge pull request <a href="https://redirect.github.com/microsoft/monaco-editor/issues/5487";>#5487</a> from microsoft/hediet/b/release-0.57.0</li> <li><a href="https://github.com/microsoft/monaco-editor/commit/ef061ff4c13d5ec2e8d97cd88f48b67b1b759e43";><code>ef061ff</code></a> Prepare Monaco Editor 0.57.0 release</li> <li><a href="https://github.com/microsoft/monaco-editor/commit/8e9b0f7f965b6f18ab3f12a50ccffc08be995aa3";><code>8e9b0f7</code></a> Keep editor release version stable across task retries</li> <li><a href="https://github.com/microsoft/monaco-editor/commit/3f313041ad472b35fba570365fc486014aedb38b";><code>3f31304</code></a> Prepare VS Code native headers before installing dependencies</li> <li><a href="https://github.com/microsoft/monaco-editor/commit/ebd1312a3f4c933a74f529fda48c64f10eaa0782";><code>ebd1312</code></a> Use authenticated Foundry Local installer for core builds</li> <li><a href="https://github.com/microsoft/monaco-editor/commit/176408bb4d05f809c5d5c3b0681a4ad1594a6a87";><code>176408b</code></a> Align release build Node version with VS Code 1.139</li> <li><a href="https://github.com/microsoft/monaco-editor/commit/97d81ca38d0575265ab789b8ba8fafed99402c4f";><code>97d81ca</code></a> Bump uuid and webpack-dev-server in /website (<a href="https://redirect.github.com/microsoft/monaco-editor/issues/5415";>#5415</a>)</li> <li><a href="https://github.com/microsoft/monaco-editor/commit/f7c7f4c8df46e8328f246026d9e3b97c6024919b";><code>f7c7f4c</code></a> Bump baseline-browser-mapping from 2.9.19 to 2.11.21 in /website (<a href="https://redirect.github.com/microsoft/monaco-editor/issues/5476";>#5476</a>)</li> <li><a href="https://github.com/microsoft/monaco-editor/commit/36f4fe6795c3e90932d5bd34c7fedebe9e14bc28";><code>36f4fe6</code></a> Bump svgo from 2.8.3 to 2.8.4 in /samples/browser-esm-parcel (<a href="https://redirect.github.com/microsoft/monaco-editor/issues/5474";>#5474</a>)</li> <li><a href="https://github.com/microsoft/monaco-editor/commit/f24cd7f70007e647cebcb7b038488d0e23f5b8b9";><code>f24cd7f</code></a> Bump actions/deploy-pages in the github-actions group (<a href="https://redirect.github.com/microsoft/monaco-editor/issues/5479";>#5479</a>)</li> <li>Additional commits viewable in <a href="https://github.com/microsoft/monaco-editor/compare/v0.56.0...v0.57.0";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/camel-karavan/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
