Update dependency dompurify to ^3.2.4

This MR contains the following updates:

Package	Type	Update	Change
dompurify	dependencies	patch	^3.2.3 -> ^3.2.4

MR created with the help of gitlab-org/frontend/renovate-gitlab-bot

---

Release Notes

cure53/DOMPurify (dompurify)

v3.2.4: DOMPurify 3.2.4

Compare Source

• Fixed a conditional and config dependent mXSS-style bypass reported by @​nsysean
• Added a new feature to allow specific hook removal, thanks @​davecardwell
• Added purify.js and purify.min.js to exports, thanks @​Aetherinox
• Added better logic in case no window object is president, thanks @​yehuya
• Updated some dependencies called out by dependabot
• Updated license files etc to show the correct year

---

Configuration

Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.

Renovate Comment

What are the next steps?

If you have been assigned as a reviewer to this Merge Request, please review this Merge Request with the same scrutiny as any community contribution:

1. Ensure that the dependencies updated meet our standards:

   • Security: Dependencies do not contain malicious code
   • Performance: Dependencies do not bloat the application code or prolong CI times unnecessarily
   • Stability: Pipelines are passing

2. Review the changes introduced by the version upgrade. Consider using https://my.diffend.io to compare the two versions in case the updated dependency is either a Ruby Gem or a Node.js package, for example to compare pg_query 2.1.0 and 2.1.4.

3. Check if bundle install works locally, in the context of GDK.

4. If tests are passing and you've reviewed the updated dependencies, execute pipelines in the context of the main project

   This MR is created from a fork, therefore not all jobs (e.g. Danger) might have been executed. Instead of hitting MWPS right away, you might want to wait until the pipeline you've just triggered finished.

   Note: This might not be available in projects, in that case merging right away is an option

5. Assign the current milestone to the MR

6. Merge away!

Troubleshooting

We have assembled some FAQs to help reviewers of these kind of merge requests.

Improve this message – The JSON comment below is for automation purposes.

{"labels":["maintenance::dependency","type::maintenance","automation:bot-authored","frontend"],"assignees":["gitlab-dependency-update-bot"],"reviewers":["aturinske","andrei.zubov","afontaine","ankit.panchal","anna_vovchenko","apennells","arfedoro","blabuschagne","bsandlin","dpisek","dmishunov","djadmin","ealcantara","ekigbo","f_caplette","himkp","xanf","janis","jannik_lehmann","jerasmus","jivanvl","justin_ho","kpalchyk","kushalpandya","leipert","lorenzvanherwaarden","wortschi","mfluharty","mgandres","ntepluhina","ohoral","pgascouvaillancourt","pburdette","iamphill","psjakubowska","rcrespo3","svedova","sdejonge","sheldonled","psimyn","slashmanov","tbulva","tristan.read","vitallium","zcuddy"]}

mentioned in issue #365044

added automation:bot-authored frontend maintenancedependency typemaintenance labels

requested review from @pburdette and @janis

assigned to @gitlab-dependency-update-bot

added 1 commit

• 4af9f422 - Update dependency dompurify to ^3.2.4

Compare with previous version

Small update, also after taking this screenshot I realized we have the release notes in the MR (that's awesome).

LGTM

changed milestone to %17.9

approved this merge request

added pipeline:mr-approved label

enabled automatic add to merge train when checks pass

added pipelinetier-3 pipeline:run-e2e-omnibus-once labels

	1 Message
	CHANGELOG missing: If this merge request needs a changelog entry, add the Changelog trailer to the commit message you want to add to the changelog. If this merge request doesn't need a CHANGELOG entry, feel free to ignore this message.

Reviewer roulette

Category	Reviewer	Maintainer
frontend	@thutterer (UTC+1)	@dpisek (UTC+1)

Please refer to documentation page for guidance on how you can benefit from the Reviewer Roulette, or use the GitLab Review Workload Dashboard to find other available reviewers.

If needed, you can retry the danger-review job that generated this comment.

Generated by Danger

Bundle size analysis [beta]

This compares changes in bundle size for entry points between the commits 0d377611 and 4af9f422

Special assets

Entrypoint / Name	Size before	Size after	Diff	Diff in percent
average	4.43 MB	4.43 MB	-	0.0 %
mainChunk	3.29 MB	3.29 MB	-	0.0 %

---

Note: We do not have exact data for 0d377611. So we have used data from: 712e232d.
The target commit was too new, so we used the latest commit from master we have info on.
It might help to rerun the bundle-size-review job
This might mean that you have a few false positives in this report. If something unrelated to your code changes is reported, you can check this comparison in order to see if they caused this change.

Please look at the full report for more details

---

Read more about how this report works.

Generated by Danger

added this merge request to the merge train at position 2

removed this merge request from the merge train because the pipeline did not succeed. Learn more.

Merge request already approved.

Adding automation:bot-no-updates in order to prevent renovate from updating the MR.

If you want the MR to be updated again, please remove the label and check the "rebase checkbox" in the description.

added automation:bot-no-updates label

E2E Test Result Summary

allure-report-publisher generated test report!

e2e-test-on-cng: test report for 4af9f422

expand test summary

+------------------------------------------------------------------+
|                          suites summary                          |
+-------------+--------+--------+---------+-------+-------+--------+
|             | passed | failed | skipped | flaky | total | result |
+-------------+--------+--------+---------+-------+-------+--------+
| Package     | 29     | 0      | 15      | 0     | 44    | ✅     |
| Manage      | 1      | 0      | 9       | 0     | 10    | ✅     |
| Monitor     | 8      | 0      | 12      | 0     | 20    | ✅     |
| Secure      | 2      | 0      | 5       | 0     | 7     | ✅     |
| Data Stores | 33     | 0      | 10      | 0     | 43    | ✅     |
| ModelOps    | 0      | 0      | 1       | 0     | 1     | ➖     |
| Fulfillment | 2      | 0      | 7       | 0     | 9     | ✅     |
| Create      | 143    | 0      | 19      | 0     | 162   | ✅     |
| Govern      | 84     | 0      | 10      | 0     | 94    | ✅     |
| Plan        | 86     | 0      | 8       | 0     | 94    | ✅     |
| Verify      | 53     | 0      | 19      | 0     | 72    | ✅     |
| Configure   | 0      | 0      | 3       | 0     | 3     | ➖     |
| Release     | 5      | 0      | 1       | 0     | 6     | ✅     |
| Growth      | 0      | 0      | 2       | 0     | 2     | ➖     |
| Ai-powered  | 0      | 0      | 2       | 0     | 2     | ➖     |
| Analytics   | 2      | 0      | 0       | 0     | 2     | ✅     |
+-------------+--------+--------+---------+-------+-------+--------+
| Total       | 448    | 0      | 123     | 0     | 571   | ✅     |
+-------------+--------+--------+---------+-------+-------+--------+

e2e-test-on-gdk: test report for 4af9f422

expand test summary

+------------------------------------------------------------------+
|                          suites summary                          |
+-------------+--------+--------+---------+-------+-------+--------+
|             | passed | failed | skipped | flaky | total | result |
+-------------+--------+--------+---------+-------+-------+--------+
| Release     | 5      | 0      | 1       | 0     | 6     | ✅     |
| Package     | 24     | 0      | 14      | 0     | 38    | ✅     |
| Data Stores | 33     | 0      | 10      | 0     | 43    | ✅     |
| Verify      | 52     | 0      | 20      | 1     | 72    | ✅     |
| Govern      | 79     | 0      | 13      | 0     | 92    | ✅     |
| Plan        | 82     | 0      | 8       | 0     | 90    | ✅     |
| Manage      | 1      | 0      | 9       | 0     | 10    | ✅     |
| Create      | 138    | 0      | 20      | 0     | 158   | ✅     |
| Analytics   | 2      | 0      | 0       | 0     | 2     | ✅     |
| Secure      | 4      | 0      | 3       | 0     | 7     | ✅     |
| Monitor     | 8      | 0      | 12      | 0     | 20    | ✅     |
| Fulfillment | 2      | 0      | 7       | 0     | 9     | ✅     |
| Configure   | 0      | 0      | 3       | 0     | 3     | ➖     |
| Ai-powered  | 0      | 0      | 2       | 0     | 2     | ➖     |
| Growth      | 0      | 0      | 2       | 0     | 2     | ➖     |
| ModelOps    | 0      | 0      | 1       | 0     | 1     | ➖     |
+-------------+--------+--------+---------+-------+-------+--------+
| Total       | 430    | 0      | 125     | 1     | 555   | ✅     |
+-------------+--------+--------+---------+-------+-------+--------+

e2e-test-on-omnibus: test report for 4af9f422

expand test summary

+---------------------------------------------------------------------+
|                           suites summary                            |
+----------------+--------+--------+---------+-------+-------+--------+
|                | passed | failed | skipped | flaky | total | result |
+----------------+--------+--------+---------+-------+-------+--------+
| Govern         | 347    | 0      | 40      | 0     | 387   | ✅     |
| Secure         | 20     | 0      | 9       | 0     | 29    | ✅     |
| Create         | 573    | 0      | 77      | 0     | 650   | ✅     |
| Verify         | 212    | 0      | 76      | 0     | 288   | ✅     |
| Package        | 102    | 0      | 56      | 0     | 158   | ✅     |
| Fulfillment    | 10     | 0      | 28      | 0     | 38    | ✅     |
| Data Stores    | 145    | 0      | 41      | 0     | 186   | ✅     |
| Ai-powered     | 1      | 0      | 8       | 0     | 9     | ✅     |
| Plan           | 329    | 0      | 32      | 0     | 361   | ✅     |
| Manage         | 32     | 0      | 44      | 0     | 76    | ✅     |
| Systems        | 6      | 0      | 1       | 0     | 7     | ✅     |
| Monitor        | 36     | 0      | 49      | 0     | 85    | ✅     |
| Release        | 20     | 0      | 4       | 0     | 24    | ✅     |
| Analytics      | 9      | 0      | 0       | 0     | 9     | ✅     |
| Configure      | 1      | 0      | 12      | 0     | 13    | ✅     |
| ModelOps       | 0      | 0      | 4       | 0     | 4     | ➖     |
| GitLab Metrics | 2      | 0      | 1       | 0     | 3     | ✅     |
| Growth         | 0      | 0      | 8       | 0     | 8     | ➖     |
+----------------+--------+--------+---------+-------+-------+--------+
| Total          | 1845   | 0      | 490     | 0     | 2335  | ✅     |
+----------------+--------+--------+---------+-------+-------+--------+

removed pipeline:run-e2e-omnibus-once label

removed review request for @janis

enabled automatic add to merge train when checks pass

cancelled automatic add to merge train

added this merge request to the merge train at position 3

merged

mentioned in commit 46965dde

added workflowstaging-canary label

added workflowcanary label and removed workflowstaging-canary label

added workflowstaging label and removed workflowcanary label

added workflowproduction label and removed workflowstaging label

added workflowpost-deploy-db-staging label and removed workflowproduction label

added workflowpost-deploy-db-production label and removed workflowpost-deploy-db-staging label

added releasedcandidate label

added releasedpublished label and removed releasedcandidate label