From f97b717e2b6c75637c8b393292df5bd3179bdc90 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 11 Mar 2026 09:07:00 +0000
Subject: [PATCH 1/2] Bump dompurify from 3.2.7 to 3.3.3

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.2.7 to 3.3.3.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.2.7...3.3.3)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.3.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 11 +++++++----
 package.json      |  2 +-
 2 files changed, 8 insertions(+), 5 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index c79e5806da..763aa40ff4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -158,7 +158,7 @@
         "decimal.js": "10.4.3",
         "decompress": "4.2.1",
         "deepmerge-ts": "7.1.0",
-        "dompurify": "3.2.7",
+        "dompurify": "3.3.3",
         "dotenv": "16.4.5",
         "embla-carousel-react": "8.1.8",
         "fast-deep-equal": "3.1.3",
@@ -20753,6 +20753,9 @@
         "darwin"
       ]
     },
+    "node_modules/@rollup/rollup-linux-arm-gnueabihf": {
+      "optional": true
+    },
     "node_modules/@rollup/rollup-linux-arm-musleabihf": {
       "version": "4.24.0",
       "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.24.0.tgz",
@@ -34333,9 +34336,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.2.7",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.7.tgz",
-      "integrity": "sha512-WhL/YuveyGXJaerVlMYGWhvQswa7myDG17P7Vu65EWC05o8vfeNbvNf4d/BOvH99+ZW+LlQsc1GDKMa1vNK6dw==",
+      "version": "3.3.3",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.3.tgz",
+      "integrity": "sha512-Oj6pzI2+RqBfFG+qOaOLbFXLQ90ARpcGG6UePL82bJLtdsa6CYJD7nmiU8MW9nQNOtCHV3lZ/Bzq1X0QYbBZCA==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
diff --git a/package.json b/package.json
index 5ff9761a65..bef864db2e 100644
--- a/package.json
+++ b/package.json
@@ -181,7 +181,7 @@
     "decimal.js": "10.4.3",
     "decompress": "4.2.1",
     "deepmerge-ts": "7.1.0",
-    "dompurify": "3.2.7",
+    "dompurify": "3.3.3",
     "dotenv": "16.4.5",
     "embla-carousel-react": "8.1.8",
     "fast-deep-equal": "3.1.3",

From 20f4bab086a7789e0aab1fd95f77b6a0e78bf15c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 11 Mar 2026 09:09:38 +0000
Subject: [PATCH 2/2] Update THIRD_PARTY_LICENSES.txt

---
 THIRD_PARTY_LICENSES.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/THIRD_PARTY_LICENSES.txt b/THIRD_PARTY_LICENSES.txt
index ad9e7ae4b6..e3c583a748 100644
--- a/THIRD_PARTY_LICENSES.txt
+++ b/THIRD_PARTY_LICENSES.txt
@@ -24368,7 +24368,7 @@ permission of its copyright owner.
 
 The following npm package may be included in this product:
 
- - dompurify@3.2.7
+ - dompurify@3.3.3
 
 This package contains the following license: