From b5f9f7e86a8913810abb90cda4324e0c83a8930a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 16 Apr 2026 03:29:48 +0000
Subject: [PATCH] web: bump dompurify from 3.3.3 to 3.4.0 in /web

Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.3.3 to 3.4.0.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.3.3...3.4.0)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 web/package-lock.json | 8 ++++----
 web/package.json      | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/package-lock.json b/web/package-lock.json
index 3179f1bba69f..1a38b5e54a83 100644
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -69,7 +69,7 @@
                 "country-flag-icons": "^1.6.16",
                 "date-fns": "^4.1.0",
                 "deepmerge-ts": "^7.1.5",
-                "dompurify": "^3.3.3",
+                "dompurify": "^3.4.0",
                 "esbuild": "^0.28.0",
                 "eslint": "^9.39.3",
                 "eslint-plugin-lit": "^2.2.1",
@@ -8394,9 +8394,9 @@
             "peer": true
         },
         "node_modules/dompurify": {
-            "version": "3.3.3",
-            "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.3.tgz",
-            "integrity": "sha512-Oj6pzI2+RqBfFG+qOaOLbFXLQ90ARpcGG6UePL82bJLtdsa6CYJD7nmiU8MW9nQNOtCHV3lZ/Bzq1X0QYbBZCA==",
+            "version": "3.4.0",
+            "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.0.tgz",
+            "integrity": "sha512-nolgK9JcaUXMSmW+j1yaSvaEaoXYHwWyGJlkoCTghc97KgGDDSnpoU/PlEnw63Ah+TGKFOyY+X5LnxaWbCSfXg==",
             "license": "(MPL-2.0 OR Apache-2.0)",
             "optionalDependencies": {
                 "@types/trusted-types": "^2.0.7"
diff --git a/web/package.json b/web/package.json
index 80fe310f9b31..989e2bb970f6 100644
--- a/web/package.json
+++ b/web/package.json
@@ -145,7 +145,7 @@
         "country-flag-icons": "^1.6.16",
         "date-fns": "^4.1.0",
         "deepmerge-ts": "^7.1.5",
-        "dompurify": "^3.3.3",
+        "dompurify": "^3.4.0",
         "esbuild": "^0.28.0",
         "eslint": "^9.39.3",
         "eslint-plugin-lit": "^2.2.1",