From d38b026d002454fb2eb23343f1feb2dda2cd277d Mon Sep 17 00:00:00 2001
From: nextcloud-command <nextcloud-command@users.noreply.github.com>
Date: Sun, 3 May 2026 04:13:56 +0000
Subject: [PATCH] fix(deps): Fix npm audit

Signed-off-by: GitHub <noreply@github.com>
---
 package-lock.json | 35 ++++++++++-------------------------
 1 file changed, 10 insertions(+), 25 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index f2b639a7c..3f96c5036 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3671,14 +3671,14 @@
 			}
 		},
 		"node_modules/@nextcloud/vue": {
-			"version": "8.37.0",
-			"resolved": "https://registry.npmjs.org/@nextcloud/vue/-/vue-8.37.0.tgz",
-			"integrity": "sha512-RbK0cc5MKCxFRgTc2Do4xTiI/AwF3ngAi9uphF0A9kwrvXqDxkLNx3Lb+VNA2bfYTmXPyNXIw4IxAcV+1tZbZQ==",
+			"version": "8.38.0",
+			"resolved": "https://registry.npmjs.org/@nextcloud/vue/-/vue-8.38.0.tgz",
+			"integrity": "sha512-8wfTXUhks8e5KVtmyc66bH8+IeVMSGyV0PZmZQD/ctQwuWdH53c8vA1V4voHJ8cPHrN2pXq6WF8++4/RoW1eMw==",
 			"license": "AGPL-3.0-or-later",
 			"dependencies": {
 				"@floating-ui/dom": "^1.7.6",
 				"@linusborg/vue-simple-portal": "^0.1.5",
-				"@nextcloud/auth": "^2.5.3",
+				"@nextcloud/auth": "^2.6.0",
 				"@nextcloud/axios": "^2.5.2",
 				"@nextcloud/browser-storage": "^0.5.0",
 				"@nextcloud/capabilities": "^1.2.1",
@@ -3694,13 +3694,14 @@
 				"blurhash": "^2.0.5",
 				"clone": "^2.1.2",
 				"debounce": "^2.2.0",
-				"dompurify": "^3.3.3",
+				"dompurify": "^3.4.1",
 				"emoji-mart-vue-fast": "^15.0.5",
 				"escape-html": "^1.0.3",
 				"floating-vue": "^1.0.0-beta.19",
 				"focus-trap": "^7.8.0",
 				"linkify-string": "^4.3.2",
 				"md5": "^2.3.0",
+				"mdast-util-to-string": "^4.0.0",
 				"p-queue": "^8.1.1",
 				"rehype-external-links": "^3.0.0",
 				"rehype-highlight": "^7.0.2",
@@ -3708,7 +3709,6 @@
 				"remark-breaks": "^4.0.0",
 				"remark-parse": "^11.0.0",
 				"remark-rehype": "^11.0.0",
-				"remark-stringify": "^11.0.0",
 				"remark-unlink-protocols": "^1.0.0",
 				"splitpanes": "^2.4.1",
 				"string-length": "^5.0.1",
@@ -3717,7 +3717,7 @@
 				"tributejs": "^5.1.3",
 				"unified": "^11.0.1",
 				"unist-builder": "^4.0.0",
-				"unist-util-visit": "^5.1.0",
+				"unist-util-visit-parents": "^6.0.2",
 				"vue": "^2.7.16",
 				"vue-color": "^2.8.1",
 				"vue-frag": "^1.4.3",
@@ -8657,9 +8657,9 @@
 			}
 		},
 		"node_modules/dompurify": {
-			"version": "3.4.0",
-			"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.0.tgz",
-			"integrity": "sha512-nolgK9JcaUXMSmW+j1yaSvaEaoXYHwWyGJlkoCTghc97KgGDDSnpoU/PlEnw63Ah+TGKFOyY+X5LnxaWbCSfXg==",
+			"version": "3.4.2",
+			"resolved": "https://registry.npmjs.org/dompurify/-/dompurify-3.4.2.tgz",
+			"integrity": "sha512-lHeS9SA/IKeIFFyYciHBr2n0v1VMPlSj843HdLOwjb2OxNwdq9Xykxqhk+FE42MzAdHvInbAolSE4mhahPpjXA==",
 			"license": "(MPL-2.0 OR Apache-2.0)",
 			"optionalDependencies": {
 				"@types/trusted-types": "^2.0.7"
@@ -15544,21 +15544,6 @@
 				"url": "https://opencollective.com/unified"
 			}
 		},
-		"node_modules/remark-stringify": {
-			"version": "11.0.0",
-			"resolved": "https://registry.npmjs.org/remark-stringify/-/remark-stringify-11.0.0.tgz",
-			"integrity": "sha512-1OSmLd3awB/t8qdoEOMazZkNsfVTeY4fTsgzcQFdXNq8ToTN4ZGwrMnlda4K6smTFKD+GRV6O48i6Z4iKgPPpw==",
-			"license": "MIT",
-			"dependencies": {
-				"@types/mdast": "^4.0.0",
-				"mdast-util-to-markdown": "^2.0.0",
-				"unified": "^11.0.0"
-			},
-			"funding": {
-				"type": "opencollective",
-				"url": "https://opencollective.com/unified"
-			}
-		},
 		"node_modules/remark-unlink-protocols": {
 			"version": "1.0.0",
 			"resolved": "https://registry.npmjs.org/remark-unlink-protocols/-/remark-unlink-protocols-1.0.0.tgz",