chore(deps): bump the patch group across 2 directories with 5 updates by dependabot[bot] · Pull Request #1122 · google/budoux

dependabot · 2026-02-02T13:30:55Z

Bumps the patch group with 1 update in the /demo directory: dompurify.
Bumps the patch group with 4 updates in the /javascript directory: commander, @eslint/js, eslint and playwright.

Updates dompurify from 3.3.0 to 3.3.1

Release notes

Sourced from dompurify's releases.

DOMPurify 3.3.1

Updated ADD_FORBID_CONTENTS setting to extend default list, thanks @MariusRumpf

Updated the ESM import syntax to be more correct, thanks @binhpv

Commits

6fc446a Merge pull request #1175 from cure53/main
3b3bf91 Merge branch 'main' of github.com:cure53/DOMPurify
9863f41 chore: Preparing 3.3.1 release
b4e0295 chore: Preparing 3.3.0 release
077746b build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#1170)
4de68bb build(deps): bump actions/checkout from 5 to 6 (#1171)
4c76b6f Use correct ESM import syntax (#1173)
27e8496 Merge pull request #1168 from MariusRumpf/add-forbid-contents
a920096 Add ADD_FORBID_CONTENTS setting to extend default list
ac64660 Merge pull request #1163 from cure53/dependabot/github_actions/actions/setup-...
Additional commits viewable in compare view

Updates commander from 14.0.2 to 14.0.3

Release notes

Sourced from commander's releases.

v14.0.3

Added

Release Policy document (#2462)

Changes

old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)

clarify typing for deprecated callback parameter to .outputHelp() (#2427)

simple readability improvements to README (#2465)

Changelog

Sourced from commander's changelog.

[14.0.3] (2026-01-31)

Added

Release Policy document (#2462)

Changes

old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)

clarify typing for deprecated callback parameter to .outputHelp() (#2427)

simple readability improvements to README (#2465)

Commits

8247364 14.0.3
e281fe3 Update docs for 14.0.3 (#2474)
7357dda Separate out a more detailed release policy document (#2462)
b6e2e3a Bump eslint from 9.39.1 to 9.39.2 (#2470)
d6f63a7 Bump ts-jest from 29.4.5 to 29.4.6 (#2467)
2a9768a Bump prettier from 3.6.2 to 3.7.4 (#2466)
9211918 docs(README): Tweak formatting, punctuation for clarity (#2465)
4208a96 Bump typescript-eslint from 8.46.2 to 8.48.0 (#2458)
03308ce Bump eslint-plugin-jest from 29.0.1 to 29.2.1 (#2457)
4d2db1f Bump globals from 16.4.0 to 16.5.0 (#2456)
Additional commits viewable in compare view

Updates @eslint/js from 9.39.1 to 9.39.2

Release notes

Sourced from @eslint/js's releases.

v9.39.2

Bug Fixes

5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)

c43ce24 chore: package.json update for @eslint/js release (Jenkins)

4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)

Commits

c43ce24 chore: package.json update for @eslint/js release
See full diff in compare view

Updates eslint from 9.39.1 to 9.39.2

Release notes

Sourced from eslint's releases.

v9.39.2

Bug Fixes

5705833 fix: warn when eslint-env configuration comments are found (#20381) (sethamus)

Build Related

506f154 build: add .scss files entry to knip (#20391) (Milos Djermanovic)

Chores

7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394) (Francesco Trotta)

c43ce24 chore: package.json update for @eslint/js release (Jenkins)

4c9858e ci: add v9.x-dev branch (#20382) (Milos Djermanovic)

Commits

9278324 9.39.2
542266a Build: changelog update for 9.39.2
7ca0af7 chore: upgrade to @eslint/js@9.39.2 (#20394)
c43ce24 chore: package.json update for @eslint/js release
5705833 fix: warn when eslint-env configuration comments are found (#20381)
506f154 build: add .scss files entry to knip (#20391)
4c9858e ci: add v9.x-dev branch (#20382)
See full diff in compare view

Updates playwright from 1.58.0 to 1.58.1

Release notes

Sourced from playwright's releases.

v1.58.1

Highlights

#39036 fix(msedge): fix local network permissions #39037 chore: update cft download location #38995 chore(webkit): disable frame sessions on fronzen builds

Browser Versions

Chromium 145.0.7632.6

Mozilla Firefox 146.0.1

WebKit 26.0

Commits

97bc385 cherry-pick(#38995): chore(webkit): disable frame sessions on fronzen builds
ad625fe chore: mark v1.58.1 (#39055)
f07234d cherry-pick(#39036): fix(msedge): fix local network permissions (#39053)
ab8136c cherry-pick(#39037): chore: update cft download location (#39052)
aa6ffeb cherry-pick(#39014): docs: add 1.58 release notes for Java, Python, and C#
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patch group with 1 update in the /demo directory: [dompurify](https://github.com/cure53/DOMPurify). Bumps the patch group with 4 updates in the /javascript directory: [commander](https://github.com/tj/commander.js), [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js), [eslint](https://github.com/eslint/eslint) and [playwright](https://github.com/microsoft/playwright). Updates `dompurify` from 3.3.0 to 3.3.1 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.3.0...3.3.1) Updates `commander` from 14.0.2 to 14.0.3 - [Release notes](https://github.com/tj/commander.js/releases) - [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md) - [Commits](tj/commander.js@v14.0.2...v14.0.3) Updates `@eslint/js` from 9.39.1 to 9.39.2 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v9.39.2/packages/js) Updates `eslint` from 9.39.1 to 9.39.2 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.1...v9.39.2) Updates `playwright` from 1.58.0 to 1.58.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.58.0...v1.58.1) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: commander dependency-version: 14.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch - dependency-name: "@eslint/js" dependency-version: 9.39.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: eslint dependency-version: 9.39.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch - dependency-name: playwright dependency-version: 1.58.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 2, 2026

tushuhei approved these changes Feb 3, 2026

View reviewed changes

tushuhei merged commit 04e1a0f into main Feb 3, 2026
56 checks passed

dependabot bot deleted the dependabot/npm_and_yarn/demo/patch-0f3f8f0e0e branch February 3, 2026 05:55

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the patch group across 2 directories with 5 updates#1122

chore(deps): bump the patch group across 2 directories with 5 updates#1122
tushuhei merged 1 commit intomainfrom
dependabot/npm_and_yarn/demo/patch-0f3f8f0e0e

dependabot bot commented on behalf of github Feb 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Feb 2, 2026

DOMPurify 3.3.1

v14.0.3

Added

Changes

[14.0.3] (2026-01-31)

Added

Changes

v9.39.2

Bug Fixes

Build Related

Chores

v9.39.2

Bug Fixes

Build Related

Chores

v1.58.1

Highlights

Browser Versions

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant