From 2a01fdb76f8dd0e67da9f6a4f9804c241bae859f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 4 Mar 2026 23:19:32 +0000
Subject: [PATCH] chore(deps): bump dompurify and @types/dompurify

Bumps [dompurify](https://github.com/cure53/DOMPurify) and [@types/dompurify](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/dompurify). These dependencies needed to be updated together.

Updates `dompurify` from 3.2.6 to 3.3.1
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.2.6...3.3.1)

Updates `@types/dompurify` from 3.0.5 to 3.2.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/dompurify)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.3.1
  dependency-type: direct:production
- dependency-name: "@types/dompurify"
  dependency-version: 3.2.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .../package-lock.json                         | 37 ++++++-------------
 .../package.json                              |  4 +-
 2 files changed, 14 insertions(+), 27 deletions(-)

diff --git a/samples/react-application-news-ticker/package-lock.json b/samples/react-application-news-ticker/package-lock.json
index 1648794e5..18b2d1df0 100644
--- a/samples/react-application-news-ticker/package-lock.json
+++ b/samples/react-application-news-ticker/package-lock.json
@@ -17,8 +17,8 @@
         "@microsoft/sp-dialog": "1.21.1",
         "@microsoft/sp-http": "1.21.1",
         "@microsoft/sp-webpart-base": "1.21.1",
-        "@types/dompurify": "^3.0.5",
-        "dompurify": "^3.2.6",
+        "@types/dompurify": "^3.2.0",
+        "dompurify": "^3.3.1",
         "react": "17.0.1",
         "react-dom": "17.0.1",
         "tslib": "2.8.0"
@@ -16929,12 +16929,13 @@
       }
     },
     "node_modules/@types/dompurify": {
-      "version": "3.0.5",
-      "resolved": "https://registry.npmjs.org/@types/dompurify/-/dompurify-3.0.5.tgz",
-      "integrity": "sha512-1Wg0g3BtQF7sSb27fJQAKck1HECM6zV1EB66j8JH9i3LCjYabJa0FSdiSgsD5K/RbrsR0SiraKacLB+T8ZVYAg==",
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/@types/dompurify/-/dompurify-3.2.0.tgz",
+      "integrity": "sha512-Fgg31wv9QbLDA0SpTOXO3MaxySc4DKGLi8sna4/Utjo4r3ZRPdCt4UQee8BWr+Q5z21yifghREPJGYaEOEIACg==",
+      "deprecated": "This is a stub types definition. dompurify provides its own type definitions, so you do not need this installed.",
       "license": "MIT",
       "dependencies": {
-        "@types/trusted-types": "*"
+        "dompurify": "*"
       }
     },
     "node_modules/@types/eslint": {
@@ -17606,7 +17607,8 @@
       "version": "2.0.7",
       "resolved": "https://registry.npmjs.org/@types/trusted-types/-/trusted-types-2.0.7.tgz",
       "integrity": "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==",
-      "license": "MIT"
+      "license": "MIT",
+      "optional": true
     },
     "node_modules/@types/undertaker": {
       "version": "1.2.11",
@@ -22998,9 +23000,9 @@
       }
     },
     "node_modules/dompurify": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.2.6.tgz",
-      "integrity": "sha512-/2GogDQlohXPZe6D6NOgQvXLPSYBqIWMnZ8zzOhn09REE4eyAzb+Hed3jhoM9OkuaJ8P6ZGTTVWQKAi8ieIzfQ==",
+      "version": "3.3.1",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.1.tgz",
+      "integrity": "sha512-qkdCKzLNtrgPFP1Vo+98FRzJnBRGe4ffyCea9IwHB1fyxPOeNTHpLKYGd4Uk9xvNoH0ZoOjwZxNptyMwqrId1Q==",
       "license": "(MPL-2.0 OR Apache-2.0)",
       "optionalDependencies": {
         "@types/trusted-types": "^2.0.7"
@@ -32516,21 +32518,6 @@
         "node": ">=10"
       }
     },
-    "node_modules/postcss-loader/node_modules/typescript": {
-      "version": "5.6.3",
-      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.6.3.tgz",
-      "integrity": "sha512-hjcS1mhfuyi4WW8IWtjP7brDrG2cuDZukyrYrSauoXGNgx0S7zceP07adYkJycEr56BOUTNPzbInooiN3fn1qw==",
-      "dev": true,
-      "optional": true,
-      "peer": true,
-      "bin": {
-        "tsc": "bin/tsc",
-        "tsserver": "bin/tsserver"
-      },
-      "engines": {
-        "node": ">=14.17"
-      }
-    },
     "node_modules/postcss-modules": {
       "version": "1.5.0",
       "resolved": "https://registry.npmjs.org/postcss-modules/-/postcss-modules-1.5.0.tgz",
diff --git a/samples/react-application-news-ticker/package.json b/samples/react-application-news-ticker/package.json
index 1f97aefaf..e6dc6e870 100644
--- a/samples/react-application-news-ticker/package.json
+++ b/samples/react-application-news-ticker/package.json
@@ -19,8 +19,8 @@
     "@microsoft/sp-dialog": "1.21.1",
     "@microsoft/sp-http": "1.21.1",
     "@microsoft/sp-webpart-base": "1.21.1",
-    "@types/dompurify": "^3.0.5",
-    "dompurify": "^3.2.6",
+    "@types/dompurify": "^3.2.0",
+    "dompurify": "^3.3.1",
     "react": "17.0.1",
     "react-dom": "17.0.1",
     "tslib": "2.8.0"