deps: bump the npm-patch group across 1 directory with 9 updates by dependabot[bot] · Pull Request #93 · zerox80/RustBlogCMS

dependabot · 2026-03-17T11:10:10Z

Bumps the npm-patch group with 9 updates in the / directory:

Package	From	To
dompurify	`3.3.1`	`3.3.3`
katex	`0.16.27`	`0.16.38`
react	`19.2.3`	`19.2.4`
@types/react	`19.2.7`	`19.2.14`
react-dom	`19.2.3`	`19.2.4`
react-i18next	`16.5.0`	`16.5.8`
@testing-library/react	`16.3.1`	`16.3.2`
autoprefixer	`10.4.23`	`10.4.27`
postcss	`8.5.6`	`8.5.8`

Updates dompurify from 3.3.1 to 3.3.3

Release notes

Sourced from dompurify's releases.

DOMPurify 3.3.3

Fixed an engine requirement for Node 20 which caused hiccups, thanks @Rotzbua

DOMPurify 3.3.2

Fixed a possible bypass caused by jsdom's faulty raw-text tag parsing, thanks multiple reporters

Fixed a prototype pollution issue when working with custom elements, thanks @christos-eth

Fixed a lenient config parsing in _isValidAttribute, thanks @christos-eth

Bumped and removed several dependencies, thanks @Rotzbua

Fixed the test suite after bumping dependencies, thanks @Rotzbua

Commits

8bcbf73 chore: Preparing 3.3.3 release
5faddd6 fix: engine requirement (#1210)
0f91e3a Update README.md
d5ff1a8 Merge branch 'main' of github.com:cure53/DOMPurify
c3efd48 fix: moved back from jsdom 28 to jsdom 20
988b888 fix: moved back from jsdom 28 to jsdom 20
2726c74 chore: Preparing 3.3.2 release
6202c7e build(deps): bump @tootallnate/once and jsdom (#1204)
302b51d fix: Expanded the regex ever so slightly to also cover script
cd85175 Merge branch 'main' of github.com:cure53/DOMPurify
Additional commits viewable in compare view

Updates katex from 0.16.27 to 0.16.38

Release notes

Sourced from katex's releases.

v0.16.38

0.16.38 (2026-03-08)

Bug Fixes

accent skew mixed with font specifiers (#4159) (aea3375), closes #4121

v0.16.37

0.16.37 (2026-03-06)

Bug Fixes

negative-width \hphantom and symmetric \smash (#4153) (d4799ca)

v0.16.36

0.16.36 (2026-03-06)

Bug Fixes

contrib esm bloat (#4157) (2bde1ad)

v0.16.35

0.16.35 (2026-03-05)

Bug Fixes

version number regression (#4155) (db26b73)

v0.16.34

0.16.34 (2026-03-05)

Bug Fixes

emoji with variation selector (#4151) (c2606e5)

v0.16.33

0.16.33 (2026-02-23)

Bug Fixes

scss: forward variables to fonts module (#4146) (9349a64)

v0.16.32

0.16.32 (2026-02-22)

... (truncated)

Changelog

Sourced from katex's changelog.

0.16.38 (2026-03-08)

Bug Fixes

accent skew mixed with font specifiers (#4159) (aea3375), closes #4121

0.16.37 (2026-03-06)

Bug Fixes

negative-width \hphantom and symmetric \smash (#4153) (d4799ca)

0.16.36 (2026-03-06)

Bug Fixes

contrib esm bloat (#4157) (2bde1ad)

0.16.35 (2026-03-05)

Bug Fixes

version number regression (#4155) (db26b73)

0.16.34 (2026-03-05)

Bug Fixes

emoji with variation selector (#4151) (c2606e5)

0.16.33 (2026-02-23)

Bug Fixes

scss: forward variables to fonts module (#4146) (9349a64)

0.16.32 (2026-02-22)

Bug Fixes

italic separation in \mathnormal (#4143) (71305a0)

0.16.31 (2026-02-22)

... (truncated)

Commits

eda872c chore(release): 0.16.38 [ci skip]
aea3375 fix: accent skew mixed with font specifiers (#4159)
8c2bf2e test: fail on missing screenshot (#4158)
4eee63b chore(release): 0.16.37 [ci skip]
d4799ca fix: negative-width \hphantom and symmetric \smash (#4153)
6ba48a4 chore: screenshotter support for Docker Desktop on Windows (#4154)
4128549 chore(release): 0.16.36 [ci skip]
2bde1ad fix: contrib esm bloat (#4157)
de31e7f chore(release): 0.16.35 [ci skip]
db26b73 fix: version number regression (#4155)
Additional commits viewable in compare view

Updates react from 19.2.3 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

Commits

90ab3f8 Version 19.2.4
See full diff in compare view

Updates @types/react from 19.2.7 to 19.2.14

Commits

See full diff in compare view

Updates react-dom from 19.2.3 to 19.2.4

Release notes

Sourced from react-dom's releases.

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

Commits

90ab3f8 Version 19.2.4
See full diff in compare view

Updates react-i18next from 16.5.0 to 16.5.8

Changelog

Sourced from react-i18next's changelog.

16.5.8

A selector function cannot be resolved without an i18n instance... returning empty string is safer than leaking the raw function reference. 1907

16.5.7

fix: <Trans> component with enableSelector: true does not support multiple selectors for fallbacks 1907

16.5.6

fix: prevent crash in useSSR when init() hasn't been called before useSSR — now logs a warning instead of throwing 1604

16.5.5

fix: prevent crash in useSSR, getInitialProps and Translation when no i18next instance is available (e.g. in monorepo setups with duplicate react-i18next copies) — now logs a clear warning instead of throwing 1604

16.5.4

fix: Overriding React component props not working 1902

16.5.3

fix: Trans named tags with underscore 1901

16.5.2

fix: Type errors when you've declared a resources type 1899 via 1900

16.5.1

fix: export nodesToString (runtime + TypeScript typings) to support i18next-cli (i18next/i18next-cli#155)

Commits

b00adfa 16.5.8
e367522 A selector function cannot be resolved without an i18n instance... returning ...
1cbd152 16.5.7
c257c2e fix: \<Trans> component with enableSelector: true does not support multipl...
a577b41 16.5.6
d5901b4 fix: prevent crash in useSSR when init() has not been called before useSSR
bd2fea9 16.5.5
8f80d49 fix: prevent crash in useSSR, getInitialProps and Translation when no i...
47bf99a readme
b97c2bb 16.5.4
Additional commits viewable in compare view

Updates @testing-library/react from 16.3.1 to 16.3.2

Release notes

Sourced from @testing-library/react's releases.

v16.3.2

16.3.2 (2026-01-19)

Bug Fixes

Update 'onCaughtError' type inference in 'RenderOptions' to work with React v19 (#1438) (f32bd1b)

Commits

f32bd1b fix: Update 'onCaughtError' type inference in 'RenderOptions' to work with Re...
See full diff in compare view

Updates @types/react from 19.2.7 to 19.2.14

Commits

See full diff in compare view

Updates autoprefixer from 10.4.23 to 10.4.27

Release notes

Sourced from autoprefixer's releases.

10.4.27

Removed development key from package.json.

10.4.26

Reduced package size.

10.4.25

Fixed broken gradients on CSS Custom Properties (by @serger777).

10.4.24

Made Autoprefixer a little faster (by @Cherry).

Changelog

Sourced from autoprefixer's changelog.

10.4.27

Removed development key from package.json.

10.4.26

Reduced package size.

10.4.25

Fixed broken gradients on CSS Custom Properties (by @serger777).

10.4.24

Made Autoprefixer a little faster (by @Cherry).

Commits

360f2d9 Release 10.4.27 version
ab5260c Update clean-publish
09e9dd1 Release 10.4.26 version
ec75540 Ignore local patches
59601b8 Update c8 and clean-publish
06ea988 Release 10.4.25 version
47d8a5b Update dependencies and fix Node.js 25
51c596e Add Node.js 25 and 24 to CI
5239823 Fix CSS variables in gradients (#1515) (#1544)
36692c2 Release 10.4.24 version
Additional commits viewable in compare view

Updates postcss from 8.5.6 to 8.5.8

Release notes

Sourced from postcss's releases.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

Changelog

Sourced from postcss's changelog.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

Commits

65de537 Release 8.5.8 version
b2c6d97 Run git hook register
0ae0a49 Update Processor#version
6ee9f14 Release 8.5.7 version
3fbc951 Fix uvu Node.js 25 support
52db53e Update dependencies
497daef Speed up source map annotation cleaning by moving from RegExp
41e739a Remove banner
1329142 chore: speed up space-only string check in lib/parser.js (#2064)
23beff9 Update dependencies
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-patch group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [dompurify](https://github.com/cure53/DOMPurify) | `3.3.1` | `3.3.3` | | [katex](https://github.com/KaTeX/KaTeX) | `0.16.27` | `0.16.38` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.3` | `19.2.4` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.7` | `19.2.14` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.3` | `19.2.4` | | [react-i18next](https://github.com/i18next/react-i18next) | `16.5.0` | `16.5.8` | | [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.1` | `16.3.2` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.23` | `10.4.27` | | [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.8` | Updates `dompurify` from 3.3.1 to 3.3.3 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.3.1...3.3.3) Updates `katex` from 0.16.27 to 0.16.38 - [Release notes](https://github.com/KaTeX/KaTeX/releases) - [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md) - [Commits](KaTeX/KaTeX@v0.16.27...v0.16.38) Updates `react` from 19.2.3 to 19.2.4 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react) Updates `@types/react` from 19.2.7 to 19.2.14 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.3 to 19.2.4 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react-dom) Updates `react-i18next` from 16.5.0 to 16.5.8 - [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md) - [Commits](i18next/react-i18next@v16.5.0...v16.5.8) Updates `@testing-library/react` from 16.3.1 to 16.3.2 - [Release notes](https://github.com/testing-library/react-testing-library/releases) - [Changelog](https://github.com/testing-library/react-testing-library/blob/main/CHANGELOG.md) - [Commits](testing-library/react-testing-library@v16.3.1...v16.3.2) Updates `@types/react` from 19.2.7 to 19.2.14 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `autoprefixer` from 10.4.23 to 10.4.27 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.4.23...10.4.27) Updates `postcss` from 8.5.6 to 8.5.8 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.6...8.5.8) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: katex dependency-version: 0.16.38 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: react dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: "@types/react" dependency-version: 19.2.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: react-dom dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: react-i18next dependency-version: 16.5.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: "@testing-library/react" dependency-version: 16.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: "@types/react" dependency-version: 19.2.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: autoprefixer dependency-version: 10.4.27 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch - dependency-name: postcss dependency-version: 8.5.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 17, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps: bump the npm-patch group across 1 directory with 9 updates#93

deps: bump the npm-patch group across 1 directory with 9 updates#93
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm-patch-e689a5c675

dependabot bot commented on behalf of github Mar 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 17, 2026

DOMPurify 3.3.3

DOMPurify 3.3.2

v0.16.38

0.16.38 (2026-03-08)

Bug Fixes

v0.16.37

0.16.37 (2026-03-06)

Bug Fixes

v0.16.36

0.16.36 (2026-03-06)

Bug Fixes

v0.16.35

0.16.35 (2026-03-05)

Bug Fixes

v0.16.34

0.16.34 (2026-03-05)

Bug Fixes

v0.16.33

0.16.33 (2026-02-23)

Bug Fixes

v0.16.32

0.16.32 (2026-02-22)

0.16.38 (2026-03-08)

Bug Fixes

0.16.37 (2026-03-06)

Bug Fixes

0.16.36 (2026-03-06)

Bug Fixes

0.16.35 (2026-03-05)

Bug Fixes

0.16.34 (2026-03-05)

Bug Fixes

0.16.33 (2026-02-23)

Bug Fixes

0.16.32 (2026-02-22)

Bug Fixes

0.16.31 (2026-02-22)

19.2.4 (January 26th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

16.5.8

16.5.7

16.5.6

16.5.5

16.5.4

16.5.3

16.5.2

16.5.1

v16.3.2

16.3.2 (2026-01-19)

Bug Fixes

10.4.27

10.4.26

10.4.25

10.4.24

10.4.27

10.4.26

10.4.25

10.4.24

8.5.8

8.5.7

8.5.8

8.5.7

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants