chore(deps): update all non-major dependencies

[github-actions]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
dompurify (source)	3.4.9 -> 3.4.11

---

Release Notes

cure53/DOMPurify (dompurify)

3.4.9 -> 3.4.11

3.4.11

Compare Source

• Fixed an issue with a leaky config for hooks via setConfig, thanks trace37labs
• Bumped vulnerable development dependencies to arrive at plain 0 with npm audit
• Updated the osv-scanner suppression list as no vulnerable dependencies are left for now
• Updated up the linting tool-chain and removed now-redundant lint directives
• Updated the documentation is several spots, README, wiki, etc.
• Bumped several dependencies where possible

Released by cure53 on 6/17/2026

3.4.10

Compare Source

• Refactored codebase for clarity: extracted the public type declarations into types.ts
• Decomposed the three largest sanitizer functions into focused helpers
• Removed duplicated defaults and dead branches, consolidated SAFE_FOR_TEMPLATES scrubbing into single shared path
• Improved per-node performance by hoisting the mXSS probe regexes and testing textContent before innerHTML
• Added a deterministic micro-benchmark harness (npm run bench) with a --compare mode
• Reduced CI cost by running the full three-engine browser suite once per PR
• Refreshed the demos/ folder so every demo runs again, and added a SVG-via-<img> demo
• Documented the bench and test:happydom scripts in the README
• Completed the Attack Classes & Bypass History wiki page
• Bumped several dependencies where possible

Released by cure53 on 6/12/2026

---

📊 Package Statistics

• dompurify: 46,979,740 weekly downloads

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Buddy 🤖

[netlify]

❌ Deploy Preview for ts-validation failed. Why did it fail? →

Name	Link
🔨 Latest commit	6b28818
🔍 Latest deploy log	https://app.netlify.com/projects/ts-validation/deploys/6a32863504251000089c8399