fix(deps): update dependency linkifyjs to v4.3.2 [security]

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Change	Age	Confidence
linkifyjs (source)	4.1.1 -> 4.3.2

GitHub Vulnerability Alerts

CVE-2025-8101

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Linkify (linkifyjs) allows XSS Targeting HTML Attributes and Manipulating User-Controlled Variables.This issue affects Linkify: from 4.3.1 before 4.3.2.

---

Release Notes

nfrasser/linkifyjs (linkifyjs)

v4.3.2

Compare Source

• Replace assign helper with Object.assign to avoid prototype pollution

v4.3.1

Compare Source

• Use correct simple-html-tokenizer version for linkify-html

v4.3.0

Compare Source

• HTML comments opened or closed with 3 dashes tokenized correctly
• Restore support for delimiter apostrophes in URLs
• Rename dist file .cjs.js and .es.js extensions to .cjs and .mjs, respectively

v4.2.0

Compare Source

• Correctly sanitize object replacement character by treating as whitespace
• Avoid detecting invalid URLs with numbers around boundaries
• Prevent delimiter apostrophes from being included in URLs
• Correctly interpret \r\n as newline character
• Correctly interpret emoji followed by # sign
• Fix support for domain names with multiple hyphens
• Fix parsing for magnet links

v4.1.4

Compare Source

• Add support for full width middle dot ・ in hashtag plugin
• Development updates for newest Node.js versions

v4.1.3

Compare Source

• Fix HTML entity & symbol double-encoding in linkify-html
• Support for full-width brackets, full-width less-than/greater-than signs and corner bracket as delimiters

v4.1.2

Compare Source

• Ensure linkify.find respects validate option

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codesandbox]

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

[snyk-io]

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

[github-actions]

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

[github-actions]

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

[github-actions]

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

[github-actions]

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (4.3.2). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.