Bump dompurify and mermaid in /docs

[dependabot]

Bumps dompurify to 3.2.3 and updates ancestor dependency mermaid. These dependencies need to be updated together.

Updates dompurify from 2.4.3 to 3.2.3

Release notes

Sourced from dompurify's releases.

DOMPurify 3.2.3

• Fixed two conditional sanitizer bypasses discovered by @​parrot409 and @​Slonser
• Updated the attribute clobbering checks to prevent future bypasses, thanks @​parrot409

DOMPurify 3.2.2

• Fixed a possible bypass in case a rather specific config for custom elements is set, thanks @​yaniv-git
• Fixed several minor issues with the type definitions, thanks again @​reduckted
• Fixed a minor issue with the types reference for trusted types, thanks @​reduckted
• Fixed a minor problem with the template detection regex on some systems, thanks @​svdb99

DOMPurify 3.2.1

• Fixed several minor issues with the type definitions, thanks @​reduckted @​ghiscoding @​asamuzaK @​MiniDigger
• Fixed an issue with non-minified dist files and order of imports, thanks @​reduckted

DOMPurify 3.2.0

• Added type declarations, thanks @​reduckted , @​philmayfield, @​aloisklink, @​ssi02014 and others
• Fixed a minor issue with the handling of hooks, thanks @​kevin-mizu

DOMPurify 3.1.7

• Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @​masatokinugawa
• Fixed several smaller typos in documentation and test & build files, thanks @​christianhg
• Added better support for Angular compiler, thanks @​jeroen1602
• Added several new attributes to HTML and SVG allow-list, thanks @​Gigabyte5671 and @​Rotzbua
• Removed the foreignObject element from the list of HTML entry-points, thanks @​masatokinugawa
• Bumped several dependencies to be more up to date

DOMPurify 3.1.6

• Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @​kevin-mizu
• Fixed an issue with element removal leading to uncaught errors through DOM Clobbering, thanks @​realansgar
• Fixed a minor problem with the bower file pointing to the wrong dist path
• Fixed several minor typos in docs, comments and comment blocks, thanks @​Rotzbua
• Updated several development dependencies

DOMPurify 3.1.5

• Fixed a minor issue with the dist paths in bower.js, thanks @​HakumenNC
• Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @​kakao-bishop-cho

DOMPurify 3.1.4

• Fixed an issue with the recently implemented isNaN checks, thanks @​tulach
• Added several new popover attributes to allow-list, thanks @​Gigabyte5671
• Fixed the tests and adjusted the test runner to cover all branches

DOMPurify 3.1.3

• Fixed several mXSS variations found by and thanks to @​kevin-mizu & @​Ry0taK
• Added better configurability for comment scrubbing default behavior
• Added better hardening against Prototype Pollution attacks, thanks @​kevin-mizu
• Added better handling and readability of the nodeType property, thanks @​ssi02014
• Fixed some smaller issues in README and other documentation

DOMPurify 3.1.2

... (truncated)

Commits

• f1106aa chore: Preparing 3.2.3 release
• 9c71e04 fix: Added clobbering check for sanitizeAttribute to prevent an error
• c183cd6 fix: Fixed a config-dependent bypass caused by skipped attribute checks, than...
• 6e76ece fix: Fixed a config-dependent bypass relating to data-attributes, thanks @​Slo...
• c3879a5 Merge pull request #1041 from CoryHrycko/patch-1
• 0e1c724 Update tags.ts
• 8513afd Update README.md
• b883b9e Update README.md
• 3b4b5e9 Merge pull request #1037 from svdb99/main
• b9e9087 Fix #1033
• Additional commits viewable in compare view

Updates mermaid from 9.4.3 to 11.4.1

Release notes

Sourced from mermaid's releases.

[email protected]

Patch Changes

• #6059 01b5079 Thanks @​knsv! - fix: Kanban diagrams will not render when adding a number as ticket id or assigned for a task

• #6038 1388662 Thanks @​knsv! - fix: Intersection calculations for tilted cylinder/DAS when using handdrawn look. Some random seeds could cause the calculations to break.

• #6079 fe3cffb Thanks @​aloisklink! - Bump dompurify to ^3.2.1. This removes the need for @types/dompurify.

[email protected]

Minor Changes

• #5999 742ad7c Thanks @​knsv! - Adding Kanban board, a new diagram type

• #5880 bdf145f Thanks @​yari-dewalt! - Class diagram changes:

  • Updates the class diagram to the new unified way of rendering.
  • Includes a new "classBox" shape to be used in diagrams
  • Other updates such as:
    • the option to hide the empty members box in class diagrams,
    • support for handDrawn look,
    • the introduction of the classDef statement into class diagrams,
    • support for styling the default class,
    • support lollipop interfaces.
  • Includes fixes / additions for #5562 #3139 and #4037

Patch Changes

• #5937 17b7831 Thanks @​saurabhg772244! - fix: Jagged edge fix for icon shape

• #5933 72d60d2 Thanks @​remcohaszing! - Add missing TypeScript dependencies

• #5937 17b7831 Thanks @​saurabhg772244! - fix: Icon color fix for colored icons.

• #6002 5fabd41 Thanks @​aloisklink! - fix: error mermaid.parse on an invalid shape, so that it matches the errors thrown by mermaid.render

[email protected]

Minor Changes

• #5825 9e3aa70 Thanks @​knsv, @​ashishjain0512, @​omkarht, @​saurabhg772244, @​aloisklink, @​sidharthv96 ! - New Flowchart Shapes (with new syntax)

Patch Changes

• #5849 6c5b7ce Thanks @​ReneLombard! - Fixed an issue when the mermaid classdiagram crashes when adding a . to the namespace. Forexample

  classDiagram
    namespace Company.Project.Module {
  

  Loading

... (truncated)

Commits

• 9868f3a Merge pull request #6084 from mermaid-js/changeset-release/master
• d8bf155 Version Packages
• 0b4f852 Merge pull request #6083 from mermaid-js/release/11.4.1
• 0dff4ca chore: broken link clean up. Enable flowchart elk tests
• cc29437 Merge pull request #6081 from mermaid-js/6080-fix
• dfaaf36 Merge pull request #6079 from aloisklink/chore/update-to-dompurify-3.2.1
• 3753831 Added cypress test
• c7ae08a #6080: Fix for issue with diamond intersections when using elk-layout
• 69973ea Merge branch 'develop' into 6080-fix
• d3b2c7e Revert "#6080: Fix for issue with diamond intersections when using elk-layout"
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[ack-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign a-hilaly for approval by writing /assign @a-hilaly in a comment. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment