Bump dompurify and @asyncapi/react-component in /src/Saunter.UI

[dependabot]

Bumps dompurify to 3.4.11 and updates ancestor dependency @asyncapi/react-component. These dependencies need to be updated together.

Updates dompurify from 2.5.6 to 3.4.11

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.11

• Fixed an issue with a leaky config for hooks via setConfig, thanks @​trace37labs
• Bumped vulnerable development dependencies to arrive at plain 0 with npm audit
• Updated the osv-scanner suppression list as no vulnerable dependencies are left for now
• Updated up the linting tool-chain and removed now-redundant lint directives
• Updated the documentation is several spots, README, wiki, etc.
• Bumped several dependencies where possible

DOMPurify 3.4.10

• Refactored codebase for clarity: extracted the public type declarations into types.ts
• Decomposed the three largest sanitizer functions into focused helpers
• Removed duplicated defaults and dead branches, consolidated SAFE_FOR_TEMPLATES scrubbing into single shared path
• Improved per-node performance by hoisting the mXSS probe regexes and testing textContent before innerHTML
• Added a deterministic micro-benchmark harness (npm run bench) with a --compare mode
• Reduced CI cost by running the full three-engine browser suite once per PR
• Refreshed the demos/ folder so every demo runs again, and added a SVG-via-<img> demo
• Documented the bench and test:happydom scripts in the README
• Completed the Attack Classes & Bypass History wiki page
• Bumped several dependencies where possible

DOMPurify 3.4.9

• Further improved the handling of Trusted Types config options, thanks @​offset
• Further improved the handling of IN_PLACE sanitization, thanks @​mozfreddyb
• Added more test coverage for IN_PLACE and Trusted Types related usage
• Bumped several dependencies where possible
• Updated README and wiki with more accurate documentation & attack samples

DOMPurify 3.4.8

• Cleaned up the repository root, renamed some and removed unneeded files
• Fixed an issue with handling of Trusted Types policies, thanks @​fulstadev
• Fixed the node iterator for better template scrubbing, thanks @​IamLeandrooooo
• Included formerly missing LICENSE-MPL in published npm package, thanks @​asamuzaK
• Bumped several dependencies where possible

DOMPurify 3.4.7

• Hardened the handling of Shadow Roots when using IN_PLACE, thanks @​GameZoneHacker
• Removed a problem leading to permanent hook pollution, thanks @​offset
• Refactored the test suite and expanded test coverage significantly

DOMPurify 3.4.6

• Fixed several issues with DOM Clobbering in IN_PLACE mode, thanks @​offset & @​Bankde
• Hardened the checks for cross-realm IN_PLACE and Shadow DOM sanitization, thanks @​offset & @​Bankde
• Added more test coverage for IN_PLACE and general DOM Clobbering attacks
• Bumped several dependencies where possible

DOMPurify 3.4.5

• Fixed a bypass caused by the new HTML element selectedcontent added in 3.4.4, thanks @​KabirAcharya

Note that this is a security release for an issue introduced in 3.4.4 and should be upgraded to immediately.

... (truncated)

Commits

• 0cae518 release: 3.4.11 (#1494)
• 6ee5716 release: 3.4.10 (#1478)
• 5210247 release: 3.4.9 (#1459)
• bcdd828 release: 3.4.8 (#1439)
• ca30f07 release: 3.4.7 (#1414)
• bb7739e release: 3.4.6 (#1394)
• 011b0c7 release: 3.4.5 (#1382)
• 5817ad9 release: 3.4.4 (#1374)
• 520edb0 release: 3.4.3 (#1352)
• 6f67fd3 Sync/3.4.2 (#1322)
• Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates @asyncapi/react-component from 1.2.11 to 3.1.3

Release notes

Sourced from @​asyncapi/react-component's releases.

v3.1.3

3.1.3 (2026-05-04)

Bug Fixes

• bump package node version to 22 (#1280) (952eab8)

v3.1.2

3.1.2 (2026-05-02)

Bug Fixes

• add node_auth for npm release fallback (#1277) (1b89a22)

v3.1.1

3.1.1 (2026-04-29)

Bug Fixes

• playground: update build script to use webpack for Next.js build (#1250) (5a51276)
• recursion detection to allow same resolved $ref in different branches (#1241) (f674a14)

v3.1.0

3.1.0 (2026-03-16)

Features

• split conditions and rules into separate tabs, refactor schema component (#1121) (6df48a2)

Bug Fixes

• playground: resolve dev server crash caused by Next.js 16 upgrade (#1215) (a2c2eb5)

v3.0.3

3.0.3 (2026-03-14)

Bug Fixes

• do not omit patternProperties when properties is undefined (#1203) (d3fd2b9)

v3.0.2

3.0.2 (2026-02-11)

Bug Fixes

• uRL handling to include query params (#1138) (374fb4e)

v3.0.1

3.0.1 (2026-02-01)

... (truncated)

Commits

• 952eab8 fix: bump package node version to 22 (#1280)
• 5455b8b chore(fix): use token fall back for npm publishing in wc (#1279)
• 1b89a22 fix: add node_auth for npm release fallback (#1277)
• f674a14 fix: recursion detection to allow same resolved $ref in different branches (#...
• bf7f01b docs: readd myself as owner in CODEOWNERS (#1274)
• ce98ec2 Remove @​fmvilas (#1264)
• 56ccc29 chore(deps): bump uuid and @​actions/core in /.github/workflows/scripts/kit (#...
• 02c1d08 chore(deps): bump @​actions/core from 1.6.0 to 1.9.1 in /.github/workflows/scr...
• 38fcd96 ci: update of files from global .github repo (#1269)
• 036436c chore(deps-dev): bump postcss from 8.4.38 to 8.5.10 (#1268)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​asyncapi/react-component since your current version.

[dependabot]

Superseded by #259.