Skip to content

[release-1.9] chore(deps): bump to dompurify to >3.4.8 - #5186

Merged
openshift-merge-bot[bot] merged 1 commit into
redhat-developer:release-1.9from
albarbaro:monaco-patch/release-1.9
Jul 28, 2026
Merged

[release-1.9] chore(deps): bump to dompurify to >3.4.8#5186
openshift-merge-bot[bot] merged 1 commit into
redhat-developer:release-1.9from
albarbaro:monaco-patch/release-1.9

Conversation

@albarbaro

Copy link
Copy Markdown
Member

Description

Addresses CVE-2026-49978

  • Bumps up dompurify with yarn up -R dompurify in both root and dynamic-plugins
  • Updates resolution for monaco-editor v0.5.6
  • Patches monaco-editor to remediate a breaking change in the imports

Which issue(s) does this PR fix

PR acceptance criteria

Please make sure that the following steps are complete:

  • GitHub Actions are completed and successful
  • Unit Tests are updated and passing
  • E2E Tests are updated and passing
  • Documentation is updated if necessary (requirement for new features)
  • Add a screenshot if the change is UX/UI related

How to test changes / Special notes to the reviewer

@sonarqubecloud

Copy link
Copy Markdown

@github-actions

Copy link
Copy Markdown
Contributor

Image was built and published successfully. It is available at:

@JessicaJHee JessicaJHee left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

Verified CVE is patched and the patch applies correctly to resolve build issue

@JessicaJHee

Copy link
Copy Markdown
Member

/test e2e-ocp-helm

@openshift-merge-bot
openshift-merge-bot Bot merged commit f0271ba into redhat-developer:release-1.9 Jul 28, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants