From 61e8aeb2d8195b9eec0aa69f2b9a0079a767c8d8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 13 Mar 2026 22:07:09 +0700
Subject: [PATCH] chore(deps): bump dompurify from 3.3.2 to 3.3.3 in
 /superset-frontend (#38592)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Đỗ Trọng Hải <41283691+hainenber@users.noreply.github.com>
(cherry picked from commit f4a57a13bc9a36cdc46326c42c5b618fa9f2db0d)
---
 superset-frontend/package-lock.json           | 22 +++++++++++++++++--
 .../packages/superset-ui-core/package.json    |  2 +-
 .../legacy-preset-chart-nvd3/package.json     |  2 +-
 3 files changed, 22 insertions(+), 4 deletions(-)

diff --git a/superset-frontend/package-lock.json b/superset-frontend/package-lock.json
index 4c6849e1520..fbde621e990 100644
--- a/superset-frontend/package-lock.json
+++ b/superset-frontend/package-lock.json
@@ -61198,7 +61198,7 @@
         "d3-time": "^3.1.0",
         "d3-time-format": "^4.1.0",
         "dayjs": "^1.11.13",
-        "dompurify": "^3.3.2",
+        "dompurify": "^3.3.3",
         "fetch-retry": "^6.0.0",
         "handlebars": "^4.7.8",
         "jed": "^1.1.1",
@@ -61319,6 +61319,15 @@
         "d3-color": "1 - 2"
       }
     },
+    "packages/superset-ui-core/node_modules/dompurify": {
+      "version": "3.3.3",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.3.tgz",
+      "integrity": "sha512-Oj6pzI2+RqBfFG+qOaOLbFXLQ90ARpcGG6UePL82bJLtdsa6CYJD7nmiU8MW9nQNOtCHV3lZ/Bzq1X0QYbBZCA==",
+      "license": "(MPL-2.0 OR Apache-2.0)",
+      "optionalDependencies": {
+        "@types/trusted-types": "^2.0.7"
+      }
+    },
     "packages/superset-ui-core/node_modules/d3-scale/node_modules/d3-time": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/d3-time/-/d3-time-2.1.1.tgz",
@@ -62587,7 +62596,7 @@
         "d3": "^3.5.17",
         "d3-tip": "^0.9.1",
         "dayjs": "^1.11.13",
-        "dompurify": "^3.3.2",
+        "dompurify": "^3.3.3",
         "fast-safe-stringify": "^2.1.1",
         "lodash": "^4.17.23",
         "nvd3-fork": "^2.0.5",
@@ -62600,6 +62609,15 @@
         "react": "^17.0.2"
       }
     },
+    "plugins/legacy-preset-chart-nvd3/node_modules/dompurify": {
+      "version": "3.3.3",
+      "resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.3.3.tgz",
+      "integrity": "sha512-Oj6pzI2+RqBfFG+qOaOLbFXLQ90ARpcGG6UePL82bJLtdsa6CYJD7nmiU8MW9nQNOtCHV3lZ/Bzq1X0QYbBZCA==",
+      "license": "(MPL-2.0 OR Apache-2.0)",
+      "optionalDependencies": {
+        "@types/trusted-types": "^2.0.7"
+      }
+    },
     "plugins/plugin-chart-ag-grid-table": {
       "name": "@superset-ui/plugin-chart-ag-grid-table",
       "version": "0.20.3",
diff --git a/superset-frontend/packages/superset-ui-core/package.json b/superset-frontend/packages/superset-ui-core/package.json
index 54b60d69011..65fee25e854 100644
--- a/superset-frontend/packages/superset-ui-core/package.json
+++ b/superset-frontend/packages/superset-ui-core/package.json
@@ -42,7 +42,7 @@
     "d3-scale": "^4.0.2",
     "d3-time": "^3.1.0",
     "d3-time-format": "^4.1.0",
-    "dompurify": "^3.3.2",
+    "dompurify": "^3.3.3",
     "fetch-retry": "^6.0.0",
     "handlebars": "^4.7.8",
     "jed": "^1.1.1",
diff --git a/superset-frontend/plugins/legacy-preset-chart-nvd3/package.json b/superset-frontend/plugins/legacy-preset-chart-nvd3/package.json
index f19abb5d882..2c6c8f7fc68 100644
--- a/superset-frontend/plugins/legacy-preset-chart-nvd3/package.json
+++ b/superset-frontend/plugins/legacy-preset-chart-nvd3/package.json
@@ -35,7 +35,7 @@
     "lodash": "^4.17.23",
     "dayjs": "^1.11.13",
     "nvd3-fork": "^2.0.5",
-    "dompurify": "^3.3.2",
+    "dompurify": "^3.3.3",
     "prop-types": "^15.8.1",
     "urijs": "^1.19.11"
   },