Skip to content

deps: bump isomorphic-dompurify from 3.23.0 to 4.1.0 - #7327

Merged
bokelley merged 1 commit into
mainfrom
dependabot/npm_and_yarn/main/isomorphic-dompurify-4.1.0
Sep 7, 2026
Merged

deps: bump isomorphic-dompurify from 3.23.0 to 4.1.0#7327
bokelley merged 1 commit into
mainfrom
dependabot/npm_and_yarn/main/isomorphic-dompurify-4.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps isomorphic-dompurify from 3.23.0 to 4.1.0.

Release notes

Sourced from isomorphic-dompurify's releases.

4.1.0: Align Requirements table with the 4.x Node.js floor

  • README Requirements table: the raised Node.js floor is now listed under >=4.0.0 (was >=3.20.0)
  • lefthook 2.1.10 -> 2.1.12 (dev)

4.0.0: Semver correction for the Node.js floor bump

This is a major version bump with no functional code changes relative to 3.23.0.

v3.20.0 raised the minimum Node.js version (inherited from jsdom 30) - a breaking change that should have been a major release. 4.0.0 corrects that: the same code as 3.23.0, now on a proper major so ^3.x consumers are not silently upgraded onto a build that dropped their Node.js version.

  • Node.js requirement: ^22.22.2 || ^24.15.0 || >=26.0.0 (Node 20 no longer supported)
  • Versions 3.20.0-3.23.0 are deprecated on npm - use 4.x, or pin 3.19.0 for Node < 22.22.2 (also available via the node20 dist-tag)
  • @​biomejs/biome 2.5.10 -> 2.5.11 (dev)
Commits
  • e7b5f69 chore: release 4.1.0 (align README Requirements table with the 4.x Node.js fl...
  • c67da50 chore(deps-dev): bump lefthook from 2.1.10 to 2.1.12
  • 285264e chore: release 4.0.0 (correct semver for the Node.js floor bump)
  • 438d244 chore(deps-dev): bump @​biomejs/biome from 2.5.10 to 2.5.11
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 6, 2026
bokelley
bokelley approved these changes Sep 6, 2026
View reviewed changes

@bokelley bokelley left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed the isomorphic-dompurify 4.1 semver correction. The repository requires Node 24, satisfying the dependency floor; CI is green.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/isomorphic-dompurify-4.1.0 branch from b5a8c6e to f80235d Compare September 6, 2026 23:59
@dependabot @bokelley
deps: bump isomorphic-dompurify from 3.23.0 to 4.1.0
aa5bd49 
Bumps [isomorphic-dompurify](https://github.com/kkomelin/isomorphic-dompurify) from 3.23.0 to 4.1.0.
- [Release notes](https://github.com/kkomelin/isomorphic-dompurify/releases)
- [Commits](kkomelin/isomorphic-dompurify@3.23.0...4.1.0)

---
updated-dependencies:
- dependency-name: isomorphic-dompurify
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@bokelley
bokelley force-pushed the dependabot/npm_and_yarn/main/isomorphic-dompurify-4.1.0 branch from f80235d to aa5bd49 Compare September 7, 2026 00:10
@aao-secretariat

aao-secretariat Bot commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

Ladon does not review bot-authored PRs.

@bokelley
bokelley merged commit 494180a into main Sep 7, 2026
55 checks passed
@bokelley
bokelley deleted the dependabot/npm_and_yarn/main/isomorphic-dompurify-4.1.0 branch September 7, 2026 00:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bokelley bokelley bokelley approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bokelley