Skip to content

Actions: cure53/DOMPurify

Actions

Dependency Review

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
dependency-review.yml
388 workflow runs
388 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Fix mathML attributes Dependency Review #13: Pull request #1243 opened by DavidOliver
18s DavidOliver:patch-1
DavidOliver:patch-1
18s
fix: prevent ADD_ATTR/ADD_TAGS function leaking into subsequent array… Dependency Review #12: Pull request #1242 opened by 1Jesper1
22s 1Jesper1:fix/add-attr-tags-leakage
1Jesper1:fix/add-attr-tags-leakage
22s
fix: apply SAFE_FOR_TEMPLATES scrub in RETURN_DOM path Dependency Review #11: Pull request #1241 synchronize by bencalif
15s bencalif:fix/safe-for-templates-return-dom
bencalif:fix/safe-for-templates-return-dom
15s
build(deps-dev): bump jsdom from 28.1.0 to 29.0.2 Dependency Review #10: Pull request #1240 opened by dependabot Bot
1m 25s dependabot/npm_and_yarn/jsdom-29.0.2
dependabot/npm_and_yarn/jsdom-29.0.2
1m 25s
build(deps-dev): bump rollup-plugin-dts from 6.4.0 to 6.4.1 Dependency Review #9: Pull request #1239 opened by dependabot Bot
25s dependabot/npm_and_yarn/rollup-plugin-dts-6.4.1
dependabot/npm_and_yarn/rollup-plugin-dts-6.4.1
25s
build(deps-dev): bump cross-env from 7.0.3 to 10.1.0 Dependency Review #8: Pull request #1238 opened by dependabot Bot
1m 13s dependabot/npm_and_yarn/cross-env-10.1.0
dependabot/npm_and_yarn/cross-env-10.1.0
1m 13s
build(deps): bump actions/upload-artifact from 4.6.1 to 7.0.1 Dependency Review #7: Pull request #1237 opened by dependabot Bot
3m 37s dependabot/github_actions/actions/upload-artifact-7.0.1
dependabot/github_actions/actions/upload-artifact-7.0.1
3m 37s
build(deps-dev): bump @rollup/plugin-node-resolve from 15.3.1 to 16.0.3 Dependency Review #6: Pull request #1236 opened by dependabot Bot
21s dependabot/npm_and_yarn/rollup/plugin-node-resolve-16.0.3
dependabot/npm_and_yarn/rollup/plugin-node-resolve-16.0.3
21s
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.3 Dependency Review #5: Pull request #1235 opened by dependabot Bot
15s dependabot/github_actions/ossf/scorecard-action-2.4.3
dependabot/github_actions/ossf/scorecard-action-2.4.3
15s
build(deps): bump actions/checkout from 4.2.2 to 6.0.2 Dependency Review #4: Pull request #1234 opened by dependabot Bot
13s dependabot/github_actions/actions/checkout-6.0.2
dependabot/github_actions/actions/checkout-6.0.2
13s
build(deps-dev): bump @babel/preset-env from 7.29.0 to 7.29.2 Dependency Review #3: Pull request #1233 opened by dependabot Bot
15s dependabot/npm_and_yarn/babel/preset-env-7.29.2
dependabot/npm_and_yarn/babel/preset-env-7.29.2
15s
build(deps): bump github/codeql-action from 3.35.1 to 4.35.1 Dependency Review #2: Pull request #1232 opened by dependabot Bot
19s dependabot/github_actions/github/codeql-action-4.35.1
dependabot/github_actions/github/codeql-action-4.35.1
19s
[StepSecurity] Apply security best practices Dependency Review #1: Pull request #1231 opened by step-security-bot
25s step-security-bot:chore/GHA-111429-stepsecurity-remediation
step-security-bot:chore/GHA-111429-stepsecurity-remediation
25s
ProTip! You can narrow down the results and go further in time using created:<2026-04-11 or the other filters available.