Skip to content

Bump com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer from 20261031.1 to 20261103.2 - #113

Merged
breuerlukas merged 1 commit into
mainfrom
dependabot/gradle/com.googlecode.owasp-java-html-sanitizer-owasp-java-html-sanitizer-20261103.2
Nov 7, 2026
Merged

breuerlukas merged 1 commit into
mainfrom
dependabot/gradle/com.googlecode.owasp-java-html-sanitizer-owasp-java-html-sanitizer-20261103.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor

Bumps com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer from 20261031.1 to 20261103.2.

Release notes

Sourced from com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer's releases.

Release 20261103.2

Changelog

  • df36dc1 Release version 20261103.2 (GitHub Actions)
  • e2b175b Take the review: allow var() and shape() in presentation attributes (Jim Manico)
  • 02de2ca Take the review: vet presentation URLs as style does, allowlist tokens (Jim Manico)
  • 0d0ce85 Guard url() in SVG presentation attributes (GHSA-76cc-622x-jwm4) (Jim Manico)
  • f4d58ee Record GHSA-x759-2xw8-gp4m (Jim Manico)
  • 83d446d Prepare for next development version (GitHub Actions)

Contributors

We'd like to thank the following people for their contributions:

  • Jim Manico

Release 20261103.1

Changelog

  • e921807 Release version 20261103.1 (GitHub Actions)
  • 3978c96 Take the review: mark UrlListAttributePolicy as TCB (Jim Manico)
  • 20c092f Take the review: keep URL lists that hold no URL (Jim Manico)
  • 96d6011 Guard imagesrcset and ping as URL attributes (GHSA-x759-2xw8-gp4m) (Jim Manico)
  • 1bbe13e Prepare for next development version (GitHub Actions)
  • d2c681a Record GHSA-ppfr-7xq6-p6c2 (Jim Manico)

Contributors

We'd like to thank the following people for their contributions:

  • Jim Manico

Release 20261102.2

Changelog

  • 9a54168 Release version 20261102.2 (GitHub Actions)
  • f418f49 Take the review: test repeated allows and by, document CSS targets (Jim Manico)
  • 7de668d Take the review: animate only unconstrained global attributes (Jim Manico)
  • c3bc84e Keep SVG animations off guarded attributes (Jim Manico)
  • 033e431 Prepare for next development version (GitHub Actions)
  • 6a95f50 Record GHSA-643j-x48g-g86p (Jim Manico)

Contributors

We'd like to thank the following people for their contributions:

  • Jim Manico

Release 20261102.1

Changelog

  • d16844f Release version 20261102.1 (GitHub Actions)
  • 02510e4 Credit the reporters of GHSA-643j-x48g-g86p (Jim Manico)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer](https://github.com/OWASP/java-html-sanitizer) from 20261031.1 to 20261103.2.
- [Release notes](https://github.com/OWASP/java-html-sanitizer/releases)
- [Commits](OWASP/java-html-sanitizer@release-20261031.1...release-20261103.2)

---
updated-dependencies:
- dependency-name: com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer
  dependency-version: '20261103.2'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 6, 2026
@breuerlukas
breuerlukas merged commit f16b263 into main Nov 7, 2026
1 check passed
@dependabot
dependabot Bot deleted the dependabot/gradle/com.googlecode.owasp-java-html-sanitizer-owasp-java-html-sanitizer-20261103.2 branch November 7, 2026 07:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant