Bump dompurify from 3.4.11 to 3.4.12 - #3409
Merged
Merged
Conversation
dependabot
Bot
added
dependencies
|
JiuqingSong
approved these changes
Jul 24, 2026
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.11 to 3.4.12. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.4.11...3.4.12) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.4.12 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/dompurify-3.4.12
branch
from
July 24, 2026 22:37
759f668 to
4613ecd
Compare
JiuqingSong
added a commit
that referenced
this pull request
Jul 31, 2026
* Add auto markdown conversion source (#3392) * Add auto markdown conversion callback * Use auto markdown conversion source --------- Co-authored-by: Jiuqing Song <jisong@microsoft.com> * Fix applyChange tests to pass at all screen scales (#3391) generateDataURL sizes the output canvas by window.devicePixelRatio, but the expected newSrc images were captured at 100% scale, so the IHDR dimension assertions failed on hosts at other scales. Pin devicePixelRatio to 1 for these tests so canvas output is deterministic regardless of screen scale. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Update Content Model demo view with missing types, formats and properties (#3390) * Update Content Model demo view with missing types, formats and properties Add renderers and wiring for Content Model format parts and node properties that were missing from the debug/demo Content Model view: Aria, Role, LegacyTableBorder, BoxShadow, ImageState and Undeletable renderers, plus block Id, table/cell/list/link/image format coverage and image alt/title and entity isFakeEntity properties. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * support ContentModelData --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Enhance PasteTypeGetter to allow calling getDocumentSource for paste type (#3397) * Enhance PasteTypeGetter to allow calling getDocumentSource for paste type Expand the PasteTypeGetter signature to also receive the editor environment and the pasted content metadata (HTML attributes), so callers can invoke getDocumentSource inside the getter to detect the paste source and set the correct paste type. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Reset plugins test and add paste unit test asserting getter params are defined Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Fix retrieveHtmlInfo global CSS test to allow border-image initial or none Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Fix: keep image selection when selectionchange range is collapsed (#3396) Co-authored-by: Liang Meng <liangmeng@microsoft.com> Co-authored-by: Bryan Valverde U <bvalverde@microsoft.com> * Bump websocket-driver from 0.7.3 to 0.7.5 (#3402) Bumps [websocket-driver](https://github.com/faye/websocket-driver-node) from 0.7.3 to 0.7.5. - [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md) - [Commits](faye/websocket-driver-node@0.7.3...0.7.5) --- updated-dependencies: - dependency-name: websocket-driver dependency-version: 0.7.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix markdown list (#3405) Fix ordered-list numbering when converting markdown to the Content Model. createListFromMarkdown / createBlockGroupFromMarkdown now receive the current list context (lastList) from markdownProcessor, and when a new ordered list starts (no preceding list item), the leading marker number is parsed and applied as startNumberOverride on the list level. Previously a new ordered list that followed a paragraph did not restart its numbering from the markdown marker; now it does, while continuation items within the same list keep flowing without an override. * Do not scroll on paste images (#3400) Pasting large images can cause the editor to jump far into view, which forces the user to scroll back to where the cursor was. When images are pasted, the caret should not be scrolled into view. * [Table Borders] Pass experimental features to paste sanitizing context (#3401) Forward the editor's experimental features into createDomToModelContextForSanitizing so that the TransformTableBorderColors experimental feature is honored while sanitizing pasted content. Previously experimentalFeatures was hard-coded to an empty array in the sanitizing context, so table border color transformation never ran during paste. `mergePasteContent now passes all editor experimental features. * Bump brace-expansion from 1.1.11 to 1.1.16 (#3406) Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.11 to 1.1.16. - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.16) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.16 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jiuqing Song <jisong@microsoft.com> * [Image Edit] Skip DOM selection during image edit to prevent editor jump (#3404) * [Image Edit] Skip DOM selection during image edit to prevent editor jump Add a skipDOMSelection option to FormatContentModelOptions and honor it in formatContentModel so callers can avoid resetting the DOM selection after writing the DOM tree. ImageEditPlugin passes skipDOMSelection: true when entering edit mode, replacing the previous approach of pinning the shadow host width/height to the original image footprint. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 02ace9a1-26cc-4655-9ecc-a56c32a2bbf0 * fixes * fixes --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 02ace9a1-26cc-4655-9ecc-a56c32a2bbf0 * Revert "[Image Edit] Skip DOM selection during image edit to prevent editor j…" (#3413) This reverts commit 596cd1f. * Fix PowerPoint paste bug with list markers in table cells (#3398) * Fix PowerPoint paste bug with list markers in table cells Skip list-item processing for table elements and clear the list marker font size so it does not overflow the table cell. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Add unit tests and scope list marker font size removal to tables Only remove the list marker font size when the list is inside a table cell, and add unit tests covering table detection and marker font size. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Reset spanAbove when merging tables to avoid unexpected vertical merge on paste (#3399) When pasting cells that came from a horizontal split next to a vertically split cell, the pasted cells were being vertically merged. Reset spanAbove on all incoming source table cells during a table-into-table merge so pasted cells become standalone cells instead of continuations of a vertical merge. Repro: OS: Win 11 Monarch: 1.2026.226.200 Ring - Dogfood OWA: 20260227032 - New mail - Insert a table - Split a cell horizontally > Split another cell vertically in the same row - Input some content in the horizontal split cells - Copy the horizontal split cells and then paste - Observe Actual: The pasted cells were vertically merged. Expect: Pasting should not cause cells to merge. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 4f27a803-6207-4fd0-a540-4ab839bbe28a * Fix image selection footprint in image edit wrapper (#3414) The id and styles on image wrapper were causing it to persist on the editor after quit image editing, adding multiples div on the editor. * Fix image editing ribbon controls in demo (#3415) fix image ribbon controls * Bump immutable from 4.3.8 to 4.3.9 (#3411) Bumps [immutable](https://github.com/immutable-js/immutable-js) from 4.3.8 to 4.3.9. - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](immutable-js/immutable-js@v4.3.8...v4.3.9) --- updated-dependencies: - dependency-name: immutable dependency-version: 4.3.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jiuqing Song <jisong@microsoft.com> * Bump fast-uri from 3.1.2 to 3.1.4 (#3410) Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.2 to 3.1.4. - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.2...v3.1.4) --- updated-dependencies: - dependency-name: fast-uri dependency-version: 3.1.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jiuqing Song <jisong@microsoft.com> * Bump dompurify from 3.4.11 to 3.4.12 (#3409) Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.11 to 3.4.12. - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.4.11...3.4.12) --- updated-dependencies: - dependency-name: dompurify dependency-version: 3.4.12 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jiuqing Song <jisong@microsoft.com> * Skip DOM selection when starting image editing (#3417) When a user starts editing an image (rotate/resize handles), the editor no longer forces a DOM image selection on the edited image. The setDOMSelection function will reselect the image due the isEditingImage hidden property, causing the same image to be selected again as new image, then we should skip DOM Selection for this scenario. * [DragAndDrop] Support dropping internal content within the same editor (#3412) Adds support for dropping content within the same editor (internal drag-and-drop), gated behind the new HandleDropInternalContent experimental feature. * Fix image selection for context menu on Shift+F10 (#3418) When a range selection contains a single image, pressing Shift+F10 (the keyboard shortcut that opens the context menu) now promotes the selection to an image selection before the menu opens. This ensures the context menu operates on the image rather than the surrounding text range. Implemented in SelectionPlugin.ts by detecting Shift+F10 on a range selection and, when isSingleImageInSelection returns an image, calling setDOMSelection with an image selection. * Gate internal drop handling behind HandleDropInternalContent experiment (#3421) * Version bump main to 9.57.0 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: 9d5e0636-2f49-4e6e-95fa-ebb881260a6c --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Haowen Chen <haowchen@microsoft.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Bryan Valverde U <bvalverde@microsoft.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: Liang <jojo.spirit@outlook.com> Co-authored-by: Liang Meng <liangmeng@microsoft.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Julia Roldi <87443959+juliaroldi@users.noreply.github.com> Copilot-Session: 02ace9a1-26cc-4655-9ecc-a56c32a2bbf0 Copilot-Session: 4f27a803-6207-4fd0-a540-4ab839bbe28a Copilot-Session: 9d5e0636-2f49-4e6e-95fa-ebb881260a6c
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps dompurify from 3.4.11 to 3.4.12.
Release notes
Sourced from dompurify's releases.
Commits
a9ca1e5release: 3.4.12 (#1537)