Skip to content

fix(studio): pin dompurify to 3.4.17 - #513

Closed
pbertsch wants to merge 1 commit into
mainfrom
fix/dompurify-3.4.17
Closed

pbertsch wants to merge 1 commit into
mainfrom
fix/dompurify-3.4.17

Conversation

@pbertsch

Copy link
Copy Markdown
Member

Summary

Test plan

  • npm ci (strict lockfile check)
  • npm run build, typecheck:device-view, test:device-view (116), test:probescript (11), check:probescript
  • npm audit --omit=dev reports 0 vulnerabilities
  • CI green on this PR (the Studio UI and Studio frontend jobs exercise the Monaco editor)

🤖 Generated with Claude Code

Monaco 0.57 pins dompurify 3.4.15, which has open advisories (Dependabot alerts #179 to #183, one critical). An override pins the frontend tree to 3.4.17. npm ci, the build, the device-view and ProbeScript checks pass, and npm audit --omit=dev reports no vulnerabilities.
@pbertsch
pbertsch requested a review from a team as a code owner October 27, 2026 02:09
@pbertsch

Copy link
Copy Markdown
Member Author

Superseded by #514, which merged the same dompurify 3.4.17 pin in the Studio frontend at 02:24 UTC. Closing this duplicate. The branch is kept.

@pbertsch pbertsch closed this Oct 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant