chore(deps): update dependency dompurify to v3.3.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dompurify	3.2.5 -> 3.3.0

---

Release Notes

cure53/DOMPurify (dompurify)

v3.3.0: DOMPurify 3.3.0

Compare Source

• Added the SVG mask-type attribute to default allow-list, thanks @​prasadrajandran
• Added support for ADD_ATTR and ADD_TAGS to accept functions, thanks @​nelstrom
• Fixed an issue with the slot element being in both SVG and HTML allow-list, thanks @​Wim-Valgaeren

v3.2.7: DOMPurify 3.2.7

Compare Source

• Added new attributes and elements to default allow-list, thanks @​elrion018
• Added tagName parameter to custom element attributeNameCheck, thanks @​nelstrom
• Added better check for animated href attributes, thanks @​llamakko
• Updated and improved the bundled types, thanks @​ssi02014
• Updated several tests to better align with new browser encoding behaviors
• Improved the handling of potentially risky content inside CDATA elements, thanks @​securityMB & @​terjanq
• Improved the regular expression for raw-text elements to cover textareas, thanks @​securityMB & @​terjanq

v3.2.6: DOMPurify 3.2.6

Compare Source

• Fixed several typos and removed clutter from our documentation, thanks @​Rotzbua
• Added matrix: as an allowed URI scheme, thanks @​kleinesfilmroellchen
• Added better config hardening against prototype pollution, thanks @​EffectRenan
• Added better handling of attribute removal, thanks @​michalnieruchalski-tiugo
• Added better configuration for aggressive mXSS scrubbing behavior, thanks @​BryanValverdeU
• Removed the script that caused the fake entry CVE-2025-48050

---

Configuration

📅 Schedule: Branch creation - Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for incomparable-wisp-8d6771 ready!

Name	Link
🔨 Latest commit	056237f
🔍 Latest deploy log	https://app.netlify.com/projects/incomparable-wisp-8d6771/deploys/6915e14c8042500009fb753c
😎 Deploy Preview	https://deploy-preview-12284--incomparable-wisp-8d6771.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[netlify]

✅ Deploy Preview for ibm-dotcom-web-components-react-wrap ready!

Name	Link
🔨 Latest commit	056237f
🔍 Latest deploy log	https://app.netlify.com/projects/ibm-dotcom-web-components-react-wrap/deploys/6915e14c8af7a800086de0e1
😎 Deploy Preview	https://deploy-preview-12284--ibm-dotcom-web-components-react-wrap.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[netlify]

✅ Deploy Preview for ibm-dotcom-web-components ready!

Name	Link
🔨 Latest commit	056237f
🔍 Latest deploy log	https://app.netlify.com/projects/ibm-dotcom-web-components/deploys/6915e14cf5acc2000852b203
😎 Deploy Preview	https://deploy-preview-12284--ibm-dotcom-web-components.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.