search

kamilkisiela / graphql-hive

GraphQL Hive is a schema registry and observability
https://the-guild.dev/graphql/hive
MIT License
392 stars 83 forks source link

fix(deps): update dependency dompurify to v3.1.3 #4737

Closed renovate[bot] closed 3 weeks ago

renovate[bot] commented 3 weeks ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
dompurify 3.1.2 -> 3.1.3 age adoption passing confidence

Release Notes

cure53/DOMPurify (dompurify) ### [`v3.1.3`](https://togithub.com/cure53/DOMPurify/releases/tag/3.1.3): DOMPurify 3.1.3 [Compare Source](https://togithub.com/cure53/DOMPurify/compare/3.1.2...3.1.3) - Fixed several mXSS variations found by and thanks to [@​kevin-mizu](https://togithub.com/kevin-mizu) & [@​Ry0taK](https://togithub.com/Ry0taK) - Added better and more verbose handling of `nodeType` check management, thanks [@​ssi02014](https://togithub.com/ssi02014) - Added better configurability for comment scrubbing default behavior - Added better hardening against Prototype Pollution attacks, thanks [@​kevin-mizu](https://togithub.com/kevin-mizu) - Fixed some smaller issues in README and other documentation

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by Mend Renovate. View repository job log here.

changeset-bot[bot] commented 3 weeks ago

⚠️ No Changeset found

Latest commit: b833534726fdad654427e67eeeb9d4e51b363543

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

github-actions[bot] commented 3 weeks ago
### 📚 Storybook Deployment The latest changes are available as preview in: [https://6cd989e0.hive-storybook.pages.dev](https://6cd989e0.hive-storybook.pages.dev)
github-actions[bot] commented 3 weeks ago

🐋 This PR was built and pushed to the following Docker images (tag: b833534726fdad654427e67eeeb9d4e51b363543):

Docker Bake metadata ```json { "app": { "buildx.build.ref": "builder-091bbe13-cd78-4ef5-8269-cbfe85c76c51/builder-091bbe13-cd78-4ef5-8269-cbfe85c76c510/2p1htry2yuyufbmps2e3m9s9v", "containerimage.descriptor": { "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", "digest": "sha256:5b7fb441b2bea2c399b7e7d78b6b5e8ae9200f606cee0a4404446a0f2fa5ef31", "size": 685 }, "containerimage.digest": "sha256:5b7fb441b2bea2c399b7e7d78b6b5e8ae9200f606cee0a4404446a0f2fa5ef31", "image.name": "ghcr.io/kamilkisiela/graphql-hive/app:b833534726fdad654427e67eeeb9d4e51b363543,ghcr.io/kamilkisiela/graphql-hive/app:renovate_dompurify_3.x" }, "composition-federation-2": { "buildx.build.ref": "builder-091bbe13-cd78-4ef5-8269-cbfe85c76c51/builder-091bbe13-cd78-4ef5-8269-cbfe85c76c510/ck07nmpnoltr0wlgzryoe0nm0", "containerimage.descriptor": { "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", "digest": "sha256:8eee4d358aa8dfe395ceeaaa9205a4476ee2be0df3b1822a8da317ec119e0902", "size": 685 }, "containerimage.digest": "sha256:8eee4d358aa8dfe395ceeaaa9205a4476ee2be0df3b1822a8da317ec119e0902", "image.name": "ghcr.io/kamilkisiela/graphql-hive/composition-federation-2:b833534726fdad654427e67eeeb9d4e51b363543,ghcr.io/kamilkisiela/graphql-hive/composition-federation-2:renovate_dompurify_3.x" }, "emails": { "buildx.build.ref": "builder-091bbe13-cd78-4ef5-8269-cbfe85c76c51/builder-091bbe13-cd78-4ef5-8269-cbfe85c76c510/vc0yx6bz7rzjomsuck2nl85t3", "containerimage.descriptor": { "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", "digest": "sha256:1d3c74a0a2726f6a427ba673b17e26ed39f37661f04787e07e8cd4e274912570", "size": 685 }, "containerimage.digest": "sha256:1d3c74a0a2726f6a427ba673b17e26ed39f37661f04787e07e8cd4e274912570", "image.name": "ghcr.io/kamilkisiela/graphql-hive/emails:b833534726fdad654427e67eeeb9d4e51b363543,ghcr.io/kamilkisiela/graphql-hive/emails:renovate_dompurify_3.x" }, "policy": { "buildx.build.ref": "builder-091bbe13-cd78-4ef5-8269-cbfe85c76c51/builder-091bbe13-cd78-4ef5-8269-cbfe85c76c510/ncmjjswz5kx7m4ccl2on6kl2k", "containerimage.descriptor": { "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", "digest": "sha256:552a9ac5ca252d0c65bc59c7dddaf94c90d4821078304941354dfa1c3aef80bf", "size": 685 }, "containerimage.digest": "sha256:552a9ac5ca252d0c65bc59c7dddaf94c90d4821078304941354dfa1c3aef80bf", "image.name": "ghcr.io/kamilkisiela/graphql-hive/policy:b833534726fdad654427e67eeeb9d4e51b363543,ghcr.io/kamilkisiela/graphql-hive/policy:renovate_dompurify_3.x" }, "rate-limit": { "buildx.build.ref": "builder-091bbe13-cd78-4ef5-8269-cbfe85c76c51/builder-091bbe13-cd78-4ef5-8269-cbfe85c76c510/ye0dvaigyg3ka1tqozc3dng9b", "containerimage.descriptor": { "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", "digest": "sha256:bce86fab67a8d515eac3d5813e8c7ffaa06d394badd8fcb953aa0b8c20057ee2", "size": 685 }, "containerimage.digest": "sha256:bce86fab67a8d515eac3d5813e8c7ffaa06d394badd8fcb953aa0b8c20057ee2", "image.name": "ghcr.io/kamilkisiela/graphql-hive/rate-limit:b833534726fdad654427e67eeeb9d4e51b363543,ghcr.io/kamilkisiela/graphql-hive/rate-limit:renovate_dompurify_3.x" }, "schema": { "buildx.build.ref": "builder-091bbe13-cd78-4ef5-8269-cbfe85c76c51/builder-091bbe13-cd78-4ef5-8269-cbfe85c76c510/jz6j22d1mse40cbpcw9hr54vg", "containerimage.descriptor": { "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", "digest": "sha256:d7a0c9ed262a7ed822c9ef6a669644a6f8bc3f4ea59731ee436819aa29407e17", "size": 685 }, "containerimage.digest": "sha256:d7a0c9ed262a7ed822c9ef6a669644a6f8bc3f4ea59731ee436819aa29407e17", "image.name": "ghcr.io/kamilkisiela/graphql-hive/schema:b833534726fdad654427e67eeeb9d4e51b363543,ghcr.io/kamilkisiela/graphql-hive/schema:renovate_dompurify_3.x" }, "server": { "buildx.build.ref": "builder-091bbe13-cd78-4ef5-8269-cbfe85c76c51/builder-091bbe13-cd78-4ef5-8269-cbfe85c76c510/jaftzvbpqq81quebwaap3vl2o", "containerimage.descriptor": { "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", "digest": "sha256:2766559675ceffaad217b8820428a1d3bacc81033d5d3a1b152b536feb304cdc", "size": 685 }, "containerimage.digest": "sha256:2766559675ceffaad217b8820428a1d3bacc81033d5d3a1b152b536feb304cdc", "image.name": "ghcr.io/kamilkisiela/graphql-hive/server:b833534726fdad654427e67eeeb9d4e51b363543,ghcr.io/kamilkisiela/graphql-hive/server:renovate_dompurify_3.x" }, "storage": { "buildx.build.ref": "builder-091bbe13-cd78-4ef5-8269-cbfe85c76c51/builder-091bbe13-cd78-4ef5-8269-cbfe85c76c510/ptrq9xsd9asou45k6sgy12j34", "containerimage.descriptor": { "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", "digest": "sha256:fd17ddc016094902a63456ff1b72e9f7798081028d14711b6558a4ee8ddbfd76", "size": 685 }, "containerimage.digest": "sha256:fd17ddc016094902a63456ff1b72e9f7798081028d14711b6558a4ee8ddbfd76", "image.name": "ghcr.io/kamilkisiela/graphql-hive/storage:b833534726fdad654427e67eeeb9d4e51b363543,ghcr.io/kamilkisiela/graphql-hive/storage:renovate_dompurify_3.x" }, "stripe-billing": { "buildx.build.ref": "builder-091bbe13-cd78-4ef5-8269-cbfe85c76c51/builder-091bbe13-cd78-4ef5-8269-cbfe85c76c510/mg6muumjctkyxb0na1kz6vh0d", "containerimage.descriptor": { "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", "digest": "sha256:12295d9cdb1477a6905e5041e46207acfe33f86c1e7317421bff024fe889b082", "size": 685 }, "containerimage.digest": "sha256:12295d9cdb1477a6905e5041e46207acfe33f86c1e7317421bff024fe889b082", "image.name": "ghcr.io/kamilkisiela/graphql-hive/stripe-billing:b833534726fdad654427e67eeeb9d4e51b363543,ghcr.io/kamilkisiela/graphql-hive/stripe-billing:renovate_dompurify_3.x" }, "tokens": { "buildx.build.ref": "builder-091bbe13-cd78-4ef5-8269-cbfe85c76c51/builder-091bbe13-cd78-4ef5-8269-cbfe85c76c510/pmi8thhcyb6uaeaomiz4sf3pc", "containerimage.descriptor": { "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", "digest": "sha256:1ec0d56bbc18c3eb28318cda90309cacca242e830593c47e460da3a0410c411c", "size": 685 }, "containerimage.digest": "sha256:1ec0d56bbc18c3eb28318cda90309cacca242e830593c47e460da3a0410c411c", "image.name": "ghcr.io/kamilkisiela/graphql-hive/tokens:b833534726fdad654427e67eeeb9d4e51b363543,ghcr.io/kamilkisiela/graphql-hive/tokens:renovate_dompurify_3.x" }, "usage": { "buildx.build.ref": "builder-091bbe13-cd78-4ef5-8269-cbfe85c76c51/builder-091bbe13-cd78-4ef5-8269-cbfe85c76c510/lnj8l3m6iquj8emvz8rdiwui8", "containerimage.descriptor": { "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", "digest": "sha256:631efc060509868021a46753f7a723a01b9a0e7d362751deecf37a807d5acb67", "size": 685 }, "containerimage.digest": "sha256:631efc060509868021a46753f7a723a01b9a0e7d362751deecf37a807d5acb67", "image.name": "ghcr.io/kamilkisiela/graphql-hive/usage:b833534726fdad654427e67eeeb9d4e51b363543,ghcr.io/kamilkisiela/graphql-hive/usage:renovate_dompurify_3.x" }, "usage-estimator": { "buildx.build.ref": "builder-091bbe13-cd78-4ef5-8269-cbfe85c76c51/builder-091bbe13-cd78-4ef5-8269-cbfe85c76c510/x0ph13dmqcpwavhrzb33qqzc3", "containerimage.descriptor": { "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", "digest": "sha256:bdb97ec0bebf79cf5cc69d1dcc77f146437cf3ae7ce0837c6d4bf75f5580d4d0", "size": 685 }, "containerimage.digest": "sha256:bdb97ec0bebf79cf5cc69d1dcc77f146437cf3ae7ce0837c6d4bf75f5580d4d0", "image.name": "ghcr.io/kamilkisiela/graphql-hive/usage-estimator:b833534726fdad654427e67eeeb9d4e51b363543,ghcr.io/kamilkisiela/graphql-hive/usage-estimator:renovate_dompurify_3.x" }, "usage-ingestor": { "buildx.build.ref": "builder-091bbe13-cd78-4ef5-8269-cbfe85c76c51/builder-091bbe13-cd78-4ef5-8269-cbfe85c76c510/bovksiac1kiput7bvjb7s4gov", "containerimage.descriptor": { "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", "digest": "sha256:52d4e26db9926f1381890a424637cbf909e04cc5c824ada66417e0df1c75390d", "size": 685 }, "containerimage.digest": "sha256:52d4e26db9926f1381890a424637cbf909e04cc5c824ada66417e0df1c75390d", "image.name": "ghcr.io/kamilkisiela/graphql-hive/usage-ingestor:b833534726fdad654427e67eeeb9d4e51b363543,ghcr.io/kamilkisiela/graphql-hive/usage-ingestor:renovate_dompurify_3.x" }, "webhooks": { "buildx.build.ref": "builder-091bbe13-cd78-4ef5-8269-cbfe85c76c51/builder-091bbe13-cd78-4ef5-8269-cbfe85c76c510/pta1hjenvu9x27qfkp3tlhhuk", "containerimage.descriptor": { "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json", "digest": "sha256:26806b957a13f151f679a87de672402217f1e1282e5492a33836ee125575359b", "size": 685 }, "containerimage.digest": "sha256:26806b957a13f151f679a87de672402217f1e1282e5492a33836ee125575359b", "image.name": "ghcr.io/kamilkisiela/graphql-hive/webhooks:b833534726fdad654427e67eeeb9d4e51b363543,ghcr.io/kamilkisiela/graphql-hive/webhooks:renovate_dompurify_3.x" } } ```