From 669aaafb2d0d034a7f82ea162c2e42bc6ac22686 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 9 Aug 2026 11:55:28 +0000 Subject: [PATCH] build(deps): bump dompurify from 3.4.7 to 3.4.13 Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.7 to 3.4.13. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](https://github.com/cure53/DOMPurify/compare/3.4.7...3.4.13) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.4.13 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- pnpm-lock.yaml | 121 ++++++++++++++++++++++++++++++++++++++++++------ ui/package.json | 2 +- 2 files changed, 108 insertions(+), 15 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index b49fca380d603..25fcd0edfffc4 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -1033,7 +1033,7 @@ importers: version: 21.1.0 openai: specifier: 6.39.1 - version: 6.39.1(ws@8.21.0)(zod@4.4.3) + version: 6.39.1(ws@8.21.3)(zod@4.4.3) typebox: specifier: 1.1.39 version: 1.1.39 @@ -1058,8 +1058,8 @@ importers: specifier: workspace:* version: link:../../packages/plugin-sdk openclaw: - specifier: 2026.5.28 - version: 2026.5.28 + specifier: 2026.6.5 + version: 2026.6.5 extensions/microsoft: dependencies: @@ -1899,8 +1899,8 @@ importers: specifier: workspace:* version: link:../packages/normalization-core dompurify: - specifier: 3.4.7 - version: 3.4.7 + specifier: 3.4.13 + version: 3.4.13 highlight.js: specifier: 11.11.1 version: 11.11.1 @@ -4740,6 +4740,7 @@ packages: crypto-js@4.2.0: resolution: {integrity: sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==} + deprecated: Active development of CryptoJS has been discontinued. This library is no longer maintained. css-select@5.2.2: resolution: {integrity: sha512-TizTzUddG/xYLA3NXodFM0fSbNizXjOKhqiQQwvhlspadZokn1KDy0NZFS0wuEubIYAV5/c1/lAr0TaaFXEXzw==} @@ -4849,8 +4850,8 @@ packages: resolution: {integrity: sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==} engines: {node: '>= 4'} - dompurify@3.4.7: - resolution: {integrity: sha512-2jBxDJY4RR06tQNy4w5FlFH7kfxsQZlufd0sbv+chfHCxeJwrFw2baUDsSwvBISD4K4RDbd0PTfy3uNXsR6siA==} + dompurify@3.4.13: + resolution: {integrity: sha512-2vmYIoqjze2d+kakP8S/nS5shfsl587kzwEjcGlTdiksUVgFHnFCsLYDVj/JNqJVOQZGSYBTmuycv0PodwmnMQ==} domutils@3.2.2: resolution: {integrity: sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw==} @@ -6097,6 +6098,11 @@ packages: engines: {node: '>=22.19.0'} hasBin: true + openclaw@2026.6.5: + resolution: {integrity: sha512-sRgF0TexfRcJX8Eg0lcL6Jj0YdZbSxUbbp8EbG+qo3v6TtVayE6tKPEs3oCKD7YfYe2C/8Qg26HUxTnycd44ZQ==} + engines: {node: '>=22.19.0'} + hasBin: true + opus-decoder@0.7.11: resolution: {integrity: sha512-+e+Jz3vGQLxRTBHs8YJQPRPc1Tr+/aC6coV/DlZylriA29BdHQAYXhvNRKtjftof17OFng0+P4wsFIqQu3a48A==} @@ -7203,6 +7209,18 @@ packages: utf-8-validate: optional: true + ws@8.21.3: + resolution: {integrity: sha512-201TZ/kPWxoPr/OKWjquZR1SWKXcvxdH+e1xrx89b3YbmzLMFCLfnaG1HFIgWzJOEWZ7MvpK++odZufgYR50Rw==} + engines: {node: '>=10.0.0'} + peerDependencies: + bufferutil: ^4.0.1 + utf-8-validate: '>=5.0.2' + peerDependenciesMeta: + bufferutil: + optional: true + utf-8-validate: + optional: true + wsl-utils@0.1.0: resolution: {integrity: sha512-h3Fbisa2nKGPxCpm89Hk33lBLsnaGBvctQopaBSOW/uIs6FTe1ATyAnKFJrzVs9vpGdsTe73WF3V4lIsk4Gacw==} engines: {node: '>=18'} @@ -7984,14 +8002,14 @@ snapshots: '@d-fischer/connection@10.0.1': dependencies: - '@d-fischer/isomorphic-ws': 7.0.2(ws@8.21.0) + '@d-fischer/isomorphic-ws': 7.0.2(ws@8.21.3) '@d-fischer/logger': 4.2.4 '@d-fischer/shared-utils': 3.6.4 '@d-fischer/typed-event-emitter': 3.3.3 '@types/node': 20.19.41 '@types/ws': 8.18.1 tslib: 2.8.1 - ws: 8.21.0 + ws: 8.21.3 transitivePeerDependencies: - bufferutil - utf-8-validate @@ -8002,9 +8020,9 @@ snapshots: '@d-fischer/escape-string-regexp@5.0.0': {} - '@d-fischer/isomorphic-ws@7.0.2(ws@8.21.0)': + '@d-fischer/isomorphic-ws@7.0.2(ws@8.21.3)': dependencies: - ws: 8.21.0 + ws: 8.21.3 '@d-fischer/logger@4.2.4': dependencies: @@ -9235,7 +9253,7 @@ snapshots: '@types/node': 25.9.1 '@types/ws': 8.18.1 eventemitter3: 5.0.4 - ws: 8.21.0 + ws: 8.21.3 transitivePeerDependencies: - bufferutil - debug @@ -9699,7 +9717,7 @@ snapshots: sirv: 3.0.2 tinyrainbow: 3.1.0 vitest: 4.1.7(@opentelemetry/api@1.9.1)(@types/node@25.9.1)(@vitest/browser-playwright@4.1.7)(@vitest/coverage-v8@4.1.7)(jsdom@29.1.1(@noble/hashes@2.0.1))(vite@8.0.14(@types/node@25.9.1)(esbuild@0.28.0)(jiti@2.7.0)(tsx@4.22.3)(yaml@2.9.0)) - ws: 8.21.0 + ws: 8.21.3 transitivePeerDependencies: - bufferutil - msw @@ -10302,7 +10320,7 @@ snapshots: dependencies: domelementtype: 2.3.0 - dompurify@3.4.7: + dompurify@3.4.13: optionalDependencies: '@types/trusted-types': 2.0.7 @@ -11845,6 +11863,11 @@ snapshots: ws: 8.21.0 zod: 4.4.3 + openai@6.39.1(ws@8.21.3)(zod@4.4.3): + optionalDependencies: + ws: 8.21.3 + zod: 4.4.3 + openclaw@2026.5.28: dependencies: '@agentclientprotocol/sdk': 0.22.1(zod@4.4.3) @@ -11916,6 +11939,74 @@ snapshots: - tree-sitter - utf-8-validate + openclaw@2026.6.5: + dependencies: + '@agentclientprotocol/sdk': 0.22.1(zod@4.4.3) + '@anthropic-ai/sdk': 0.100.1(zod@4.4.3) + '@clack/core': 1.3.1 + '@clack/prompts': 1.4.0 + '@earendil-works/pi-tui': 0.78.0 + '@google/genai': 2.7.0(@modelcontextprotocol/sdk@1.29.0(zod@4.4.3)) + '@grammyjs/runner': 2.0.3(grammy@1.43.0) + '@grammyjs/transformer-throttler': 1.2.1(grammy@1.43.0) + '@homebridge/ciao': 1.3.9 + '@lydell/node-pty': 1.2.0-beta.12 + '@mistralai/mistralai': 2.2.5 + '@modelcontextprotocol/sdk': 1.29.0(zod@4.4.3) + '@mozilla/readability': 0.6.0 + '@openclaw/fs-safe': 0.3.0 + '@openclaw/proxyline': 0.3.3(undici@8.3.0) + chalk: 5.6.2 + chokidar: 5.0.0 + clawpdf: 0.3.0 + commander: 14.0.3 + croner: 10.0.1 + cross-spawn: 7.0.6 + diff: 9.0.0 + dotenv: 17.4.2 + express: 5.2.1 + file-type: 22.0.1 + glob: 13.0.6 + grammy: 1.43.0 + highlight.js: 11.11.1 + hosted-git-info: 10.1.1 + ignore: 7.0.5 + jiti: 2.7.0 + json5: 2.2.3 + jszip: 3.10.1 + kysely: 0.29.2 + linkedom: 0.18.12 + minimatch: 10.2.5 + node-edge-tts: 1.2.10 + openai: 6.39.1(ws@8.21.0)(zod@4.4.3) + partial-json: 0.1.7 + playwright-core: 1.60.0 + proper-lockfile: 4.1.2 + qrcode: 1.5.4 + quickjs-wasi: 3.0.0 + rastermill: 0.3.1 + tar: 7.5.15 + tree-sitter-bash: 0.25.1 + tslog: 4.10.2 + typebox: 1.1.39 + typescript: 6.0.3 + undici: 8.3.0 + web-push: 3.6.7 + web-tree-sitter: 0.26.9 + ws: 8.21.0 + yaml: 2.9.0 + zod: 4.4.3 + optionalDependencies: + sqlite-vec: 0.1.9 + transitivePeerDependencies: + - '@cfworker/json-schema' + - bufferutil + - canvas + - encoding + - supports-color + - tree-sitter + - utf-8-validate + opus-decoder@0.7.11: dependencies: '@wasm-audio-decoders/common': 9.0.7 @@ -13066,6 +13157,8 @@ snapshots: ws@8.21.0: {} + ws@8.21.3: {} + wsl-utils@0.1.0: dependencies: is-wsl: 3.1.1 diff --git a/ui/package.json b/ui/package.json index adb68aef073cf..6e49b329bb273 100644 --- a/ui/package.json +++ b/ui/package.json @@ -13,7 +13,7 @@ "@noble/ed25519": "3.1.0", "@openclaw/media-core": "workspace:*", "@openclaw/normalization-core": "workspace:*", - "dompurify": "3.4.12", + "dompurify": "3.4.13", "highlight.js": "11.11.1", "json5": "2.2.3", "lit": "3.3.3",