build(deps): bump the npm_and_yarn group across 2 directories with 3 updates

[dependabot]

Bumps the npm_and_yarn group with 3 updates in the / directory: dompurify, svgo and @vitest/browser.
Bumps the npm_and_yarn group with 1 update in the /apps/storybook directory: @vitest/browser.

Updates dompurify from 3.4.11 to 3.4.13

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.13

• Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
• Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
• Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
• Bumped several dependencies where possible

DOMPurify 3.4.12

• Fixed an issue where a hook would not get called for custom elements, thanks @​Rikuxx0
• Hardened the handling of hooks removing elements, @​mkrause-bee360
• Added support for a few new SVG attributes, thanks @​cbn-falias & @​Develop-KIM
• Hardened the handling of declarative partial updates
• Updated the documentation is several spots, README, wiki, etc.
• Bumped several dependencies where possible

Commits

• 3067f77 release: 3.4.13 (#1562)
• a9ca1e5 release: 3.4.12 (#1537)
• See full diff in compare view

Updates svgo from 3.3.3 to 3.3.4

Release notes

Sourced from svgo's releases.

v3.3.4

What's Changed

Security

• removeScriptElement, remove JavaScript URIs case-insensitively and make <script> handling namespace aware. By @​SethFalco

Support

SVGO v3 is not officially supported, please consider upgrading to SVGO v4 instead. We've backported this fix as there are security implications, but there is no commitment to do this for more complex changes in future.

Consider reading our Migration Guide from v3 to v4 which should ease the process.

Commits

• 72a2388 Merge commit from fork
• See full diff in compare view

Updates @vitest/browser from 3.2.6 to 3.2.7

Release notes

Sourced from @​vitest/browser's releases.

v3.2.7

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v3]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10679 (b795e)

    View changes on GitHub

Commits

• c0c203d chore: release v3.2.7 (#10719)
• b795e36 fix(browser): check fs access in builtin commands [backport to v3] (#10679)
• See full diff in compare view

Updates @vitest/browser from 3.2.6 to 3.2.7

Release notes

Sourced from @​vitest/browser's releases.

v3.2.7

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v3]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10679 (b795e)

    View changes on GitHub

Commits

• c0c203d chore: release v3.2.7 (#10719)
• b795e36 fix(browser): check fs access in builtin commands [backport to v3] (#10679)
• See full diff in compare view

Updates dompurify from 3.4.11 to 3.4.13

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.13

• Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
• Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
• Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
• Bumped several dependencies where possible

DOMPurify 3.4.12

• Fixed an issue where a hook would not get called for custom elements, thanks @​Rikuxx0
• Hardened the handling of hooks removing elements, @​mkrause-bee360
• Added support for a few new SVG attributes, thanks @​cbn-falias & @​Develop-KIM
• Hardened the handling of declarative partial updates
• Updated the documentation is several spots, README, wiki, etc.
• Bumped several dependencies where possible

Commits

• 3067f77 release: 3.4.13 (#1562)
• a9ca1e5 release: 3.4.12 (#1537)
• See full diff in compare view

Updates svgo from 3.3.3 to 3.3.4

Release notes

Sourced from svgo's releases.

v3.3.4

What's Changed

Security

• removeScriptElement, remove JavaScript URIs case-insensitively and make <script> handling namespace aware. By @​SethFalco

Support

SVGO v3 is not officially supported, please consider upgrading to SVGO v4 instead. We've backported this fix as there are security implications, but there is no commitment to do this for more complex changes in future.

Consider reading our Migration Guide from v3 to v4 which should ease the process.

Commits

• 72a2388 Merge commit from fork
• See full diff in compare view

Updates @vitest/browser from 3.2.6 to 3.2.7

Release notes

Sourced from @​vitest/browser's releases.

v3.2.7

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v3]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10679 (b795e)

    View changes on GitHub

Commits

• c0c203d chore: release v3.2.7 (#10719)
• b795e36 fix(browser): check fs access in builtin commands [backport to v3] (#10679)
• See full diff in compare view

Updates @vitest/browser from 3.2.6 to 3.2.7

Release notes

Sourced from @​vitest/browser's releases.

v3.2.7

   🐞 Bug Fixes

• browser: Check fs access in builtin commands [backport to v3]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10679 (b795e)

    View changes on GitHub

Commits

• c0c203d chore: release v3.2.7 (#10719)
• b795e36 fix(browser): check fs access in builtin commands [backport to v3] (#10679)
• See full diff in compare view

[github-actions]

PR Preview Action v1.8.1
🚀 View preview at https://flanksource.github.io/clicky-ui/storybook/pr-59/
Built to branch gh-pages at 2026-08-10 12:27 UTC. Preview will be ready when the GitHub Pages deployment is complete.

[github-actions]

Gavel summary

Source	Pass	Fail	Skip	Duration
./apps/kitchen-sink	5	0	0	1.4s
./apps/playground	89	0	0	290ms
./apps/storybook	646	0	0	1m27s
./e2e	4	0	0	2m16s
./packages/ui	2656	0	0	2m53s
lint: betterleaks	0	0	1	-
lint: tsc	1	0	0	303ms

Totals: 3401 passed · 0 failed · 1 skipped · 6m38s

View full results