build(deps): bump dompurify from 3.4.11 to 3.4.12 - #7200
Conversation
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.11 to 3.4.12. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.4.11...3.4.12) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.4.12 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
|
@eatondustin1 - hey, can you have someone look at this? I've pressed 'Merge when ready' a lot and it won't ever finish. Here is the last one: https://app.circleci.com/pipelines/github/influxdata/ui/22297/workflows/125d0c0a-ce12-49f7-9861-e86afd0da57d/jobs/120770. |
@jdstrand I asked Beth in Slack to look into this by sometime next week, thanks for flagging! |
|
Heads up, hold off re-queuing this for now. The monitor-ci watchdog fix is merged but not live yet: the monitor-ci-tests job runs from a baked image (ui-pipeline:latest) that has to be manually republished, so queuing today would still hit the old 40-min/no-retry script and get dequeued. I've pinged the Cloud 2 team to sanity-check before I republish the image. will follow up here once it's actually live. |
|
A newer version of dompurify exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged. |
Bumps dompurify from 3.4.11 to 3.4.12.
Release notes
Sourced from dompurify's releases.
Commits
a9ca1e5release: 3.4.12 (#1537)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.