Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump sanitize-html and @types/sanitize-html in /packages/backend #1403

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 10, 2025

Bumps sanitize-html and @types/sanitize-html. These dependencies needed to be updated together.
Updates sanitize-html from 2.13.0 to 2.14.0

Changelog

Sourced from sanitize-html's changelog.

2.14.0 (2024-12-18)

  • Fix adding text with transformTags in cases where it originally had no text child elements. Thanks to f0x.

2.13.1 (2024-10-03)

  • Fix to allow regex in allowedClasses wildcard whitelist. Thanks to anak-dev.
Commits
  • 1a11f7c eslint
  • 4ae37d9 Merge pull request #687 from apostrophecms/release-2.14.0
  • af62944 release 2.14.0
  • d50f36f Merge pull request #684 from f0x52/transform-new-text1
  • 19e9532 changelog entry
  • de2aefb add testcase for transforming text inside empty tags
  • 98b4900 still add text added by transformation when tag is discarded
  • 20878b9 Merge pull request #678 from apostrophecms/release-2.13.1
  • bf08233 release 2.13.1
  • 4d5c4cb Merge pull request #676 from apostrophecms/thanks-anak-dev
  • Additional commits viewable in compare view

Updates @types/sanitize-html from 2.11.0 to 2.13.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [sanitize-html](https://github.com/apostrophecms/sanitize-html) and [@types/sanitize-html](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sanitize-html). These dependencies needed to be updated together.

Updates `sanitize-html` from 2.13.0 to 2.14.0
- [Changelog](https://github.com/apostrophecms/sanitize-html/blob/main/CHANGELOG.md)
- [Commits](apostrophecms/sanitize-html@2.13.0...2.14.0)

Updates `@types/sanitize-html` from 2.11.0 to 2.13.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sanitize-html)

---
updated-dependencies:
- dependency-name: sanitize-html
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: "@types/sanitize-html"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 10, 2025
Copy link

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@eslint-community/[email protected] None 0 473 kB eslint-community-bot
npm/@eslint/[email protected] None 0 315 kB eslintbot
npm/@eslint/[email protected] None 0 64.6 kB eslintbot
npm/@eslint/[email protected] filesystem, unsafe +1 759 kB eslintbot
npm/@eslint/[email protected] None 0 14.9 kB eslintbot, openjsfoundation
npm/@eslint/[email protected] None 0 57 kB eslintbot
npm/@eslint/[email protected] None +1 137 kB eslintbot
npm/@humanfs/[email protected] None 0 72.7 kB nzakas
npm/@humanfs/[email protected] None +1 89.5 kB nzakas
npm/@humanwhocodes/[email protected] unsafe 0 21.2 kB nzakas
npm/@humanwhocodes/[email protected] None 0 64.9 kB nzakas
npm/@jridgewell/[email protected] None 0 55.2 kB jridgewell
npm/@jridgewell/[email protected] None 0 232 kB jridgewell
npm/@jridgewell/[email protected] None 0 164 kB jridgewell
npm/@trysound/[email protected] None 0 48.8 kB trysound
npm/@types/[email protected] None 0 25.8 kB types
npm/@types/[email protected] None 0 31.7 kB types
npm/@types/[email protected] 🔁 npm/@types/[email protected] None 0 8.14 kB types
npm/@typescript-eslint/[email protected] None 0 2.85 MB bradzacher, jameshenry
npm/@typescript-eslint/[email protected] None 0 19 kB bradzacher, jameshenry
npm/@typescript-eslint/[email protected] None 0 624 kB jameshenry
npm/@typescript-eslint/[email protected] None 0 126 kB bradzacher, jameshenry
npm/@typescript-eslint/[email protected] None 0 175 kB bradzacher, jameshenry
npm/@typescript-eslint/[email protected] Transitive: environment +1 1.03 MB bradzacher, jameshenry
npm/@typescript-eslint/[email protected] None 0 283 kB bradzacher, jameshenry
npm/@typescript-eslint/[email protected] None 0 19.4 kB bradzacher, jameshenry
npm/[email protected] None 0 24.4 kB rreverser
npm/[email protected] None 0 547 kB marijn
npm/[email protected] None 0 1.33 kB feedic
npm/[email protected] None 0 11.1 kB juliangruber
npm/[email protected] None 0 6.33 kB sindresorhus
npm/[email protected] 🔁 npm/[email protected] None +1 68.8 kB boutell

🚮 Removed packages: npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

@nexryai nexryai merged commit fc1ed75 into nightly Feb 10, 2025
18 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/packages/backend/nightly/multi-dd07106036 branch February 10, 2025 03:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant