From d1979ebb102902018c18beb63229451c36d1345d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 9 Aug 2026 22:50:04 +0000
Subject: [PATCH] build(deps): bump dompurify from 3.4.12 to 3.4.13

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.12 to 3.4.13.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.12...3.4.13)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.13
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package.json | 2 +-
 yarn.lock    | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package.json b/package.json
index e1486360..ecb86638 100644
--- a/package.json
+++ b/package.json
@@ -37,7 +37,7 @@
         "canvas": "^3.2.1",
         "chart.js": "^4.5.1",
         "d3": "^7.3.0",
-        "dompurify": "^3.4.0",
+        "dompurify": "^3.4.13",
         "echarts": "^6.0.0",
         "exceljs": "^4.4.0",
         "flint-chart": "^0.2.1",
diff --git a/yarn.lock b/yarn.lock
index b5650101..614709c7 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2980,10 +2980,10 @@ dom-helpers@^5.0.1:
     "@babel/runtime" "^7.8.7"
     csstype "^3.0.2"
 
-dompurify@*, dompurify@^3.4.0, dompurify@^3.4.2:
-  version "3.4.12"
-  resolved "https://registry.npmjs.org/dompurify/-/dompurify-3.4.12.tgz#6fa2265e9bbdce882c4ace4107626051b448ffa8"
-  integrity sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==
+dompurify@*, dompurify@^3.4.13, dompurify@^3.4.2:
+  version "3.4.13"
+  resolved "https://registry.yarnpkg.com/dompurify/-/dompurify-3.4.13.tgz#fc28949d59f92d62e28a3a764bcbeee35897a1be"
+  integrity sha512-2vmYIoqjze2d+kakP8S/nS5shfsl587kzwEjcGlTdiksUVgFHnFCsLYDVj/JNqJVOQZGSYBTmuycv0PodwmnMQ==
   optionalDependencies:
     "@types/trusted-types" "^2.0.7"