[dependabot]

Bumps dompurify to 3.4.17 and updates ancestor dependency @codingame/monaco-vscode-api. These dependencies need to be updated together.

Updates dompurify from 3.4.14 to 3.4.17

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

• Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @​manus-pi
• Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @​uttej-badwane
• Fixed the SMIL attributeName guard in XHTML mode, thanks @​Koukyosyumei
• Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @​artiphishell
• Added a purify-edge test runner as a compatibility check, thanks @​anzal1
• Clarified the IN_PLACE documentation in the README about possible risks
• Updated several dependencies

DOMPurify 3.4.16

• Fixed a problem with IN_PLACE node removal when working with hooks, thanks @​manus-pi
• Fixed a problem with IN_PLACE sanitization and raw-text roots, thanks @​h-t-m
• Fixed a problem with ESM default exports landing in CommonJS declarations, thanks @​ssi02014
• Migrated from rollup to rolldown because performance, thanks @​ssi02014
• Bumped several dependencies where possible

DOMPurify 3.4.15

• Added better clobbering hardening when XML content is involved, thanks @​gnyselcuk
• Added several smaller hardening and edge-case improvements, thanks @​leechristensen
• Bumped several dependencies where possible

Commits

• a77a3e7 release: 3.4.17 (#1672)
• b9b9d80 release: 3.4.16 (#1636)
• 1d7460c release: 3.4.15 (#1609)
• See full diff in compare view

Updates @codingame/monaco-vscode-api from 36.2.7 to 38.1.3

Release notes

Sourced from @​codingame/monaco-vscode-api's releases.

v38.1.3

38.1.3 (2026-10-29)

Bugfixes

• properly detect conflict error (010c84d)

v38.1.2

38.1.2 (2026-10-29)

Bugfixes

• always retry publishing (ceae0b8)

v38.1.1

38.1.1 (2026-10-29)

Libraries

• update dependencies & github actions (5b5b333)

v38.1.0

38.1.0 (2026-10-29)

New features

• split chat service override into 3 (53a2122)

Bugfixes

• demo: register default extension sooner (fcde5e7)
• demo: update vite patch (ff4f979)
• fix code review command (5c3d10d)
• register view parts sooner (b026b41)
• replace unsupported by empty implementation (2e05d79)

v38.0.7

38.0.7 (2026-10-28)

Libraries

• demo: update dependencies (452ea5b)

v38.0.6

38.0.6 (2026-10-28)

Bugfixes

• make sure root conventional-changelog-conventionalcommits is the 9.3.1 (7d19e5f)

... (truncated)

Commits

• 010c84d fix: properly detect conflict error
• ceae0b8 fix: always retry publishing
• 5b5b333 lib: update dependencies & github actions
• 53a2122 feat: split chat service override into 3
• 5c3d10d fix: fix code review command
• fcde5e7 fix(demo): register default extension sooner
• b026b41 fix: register view parts sooner
• 2e05d79 fix: replace unsupported by empty implementation
• ff4f979 fix(demo): update vite patch
• 452ea5b lib(demo): update dependencies
• Additional commits viewable in compare view