From 08e82501fd77774dc4727e8f4fed2976b56db93d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 11 Mar 2026 03:49:28 +0000
Subject: [PATCH 1/2] Bump dompurify from 3.2.7 to 3.3.2

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.2.7 to 3.3.2.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.2.7...3.3.2)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.3.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 14 ++++++++++----
 package.json      |  2 +-
 2 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index c79e5806da..d24dba72d4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -158,7 +158,7 @@
         "decimal.js": "10.4.3",
         "decompress": "4.2.1",
         "deepmerge-ts": "7.1.0",
-        "dompurify": "3.2.7",
+        "dompurify": "3.3.2",
         "dotenv": "16.4.5",
         "embla-carousel-react": "8.1.8",
         "fast-deep-equal": "3.1.3",
@@ -20753,6 +20753,9 @@
         "darwin"
       ]
     },
+    "node_modules/@rollup/rollup-linux-arm-gnueabihf": {
+      "optional": true
+    },
     "node_modules/@rollup/rollup-linux-arm-musleabihf": {
       "version": "4.24.0",
       "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.24.0.tgz",
@@ -34333,10 +34336,13 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.2.7",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.7.tgz",
-      "integrity": "sha512-WhL/YuveyGXJaerVlMYGWhvQswa7myDG17P7Vu65EWC05o8vfeNbvNf4d/BOvH99+ZW+LlQsc1GDKMa1vNK6dw==",
+      "version": "3.3.2",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.2.tgz",
+      "integrity": "sha512-6obghkliLdmKa56xdbLOpUZ43pAR6xFy1uOrxBaIDjT+yaRuuybLjGS9eVBoSR/UPU5fq3OXClEHLJNGvbxKpQ==",
       "license": "(MPL-2.0 OR Apache-2.0)",
+      "engines": {
+        "node": ">=20"
+      },
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
       }
diff --git a/package.json b/package.json
index 5ff9761a65..08e759ca9b 100644
--- a/package.json
+++ b/package.json
@@ -181,7 +181,7 @@
     "decimal.js": "10.4.3",
     "decompress": "4.2.1",
     "deepmerge-ts": "7.1.0",
-    "dompurify": "3.2.7",
+    "dompurify": "3.3.2",
     "dotenv": "16.4.5",
     "embla-carousel-react": "8.1.8",
     "fast-deep-equal": "3.1.3",

From c9f2149f0b77fedfe1c364856a1b0bcb39586701 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 11 Mar 2026 03:51:47 +0000
Subject: [PATCH 2/2] Update THIRD_PARTY_LICENSES.txt

---
 THIRD_PARTY_LICENSES.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/THIRD_PARTY_LICENSES.txt b/THIRD_PARTY_LICENSES.txt
index ad9e7ae4b6..c1a87b48c4 100644
--- a/THIRD_PARTY_LICENSES.txt
+++ b/THIRD_PARTY_LICENSES.txt
@@ -24368,7 +24368,7 @@ permission of its copyright owner.
 
 The following npm package may be included in this product:
 
- - dompurify@3.2.7
+ - dompurify@3.3.2
 
 This package contains the following license: