From 3b1b39f822a0b75d74d3fb22ca4ac8c1cf86666b Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 16 Apr 2026 22:59:40 +0100
Subject: [PATCH] Update dependency sanitize-html to v2.17.3 [SECURITY]
 (#33180)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
 apps/web/package.json |  2 +-
 pnpm-lock.yaml        | 18 +++++++++---------
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/apps/web/package.json b/apps/web/package.json
index d724f50fd4..63cbb7d742 100644
--- a/apps/web/package.json
+++ b/apps/web/package.json
@@ -101,7 +101,7 @@
         "react-transition-group": "^4.4.1",
         "rfc4648": "^1.4.0",
         "sanitize-filename": "^1.6.3",
-        "sanitize-html": "2.17.2",
+        "sanitize-html": "2.17.3",
         "tar-js": "^0.3.0",
         "ua-parser-js": "1.0.40",
         "uuid": "^13.0.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4f9f199841..661f27c438 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -457,7 +457,7 @@ importers:
         version: 1.0.3
       matrix-js-sdk:
         specifier: github:matrix-org/matrix-js-sdk#develop
-        version: https://codeload.github.com/matrix-org/matrix-js-sdk/tar.gz/3879111850603f676b875ee202409059298446ef
+        version: https://codeload.github.com/matrix-org/matrix-js-sdk/tar.gz/ca5655bced1cbb215ac1c18e179384a069d98b0a
       matrix-widget-api:
         specifier: ^1.17.0
         version: 1.17.0
@@ -516,8 +516,8 @@ importers:
         specifier: ^1.6.3
         version: 1.6.3
       sanitize-html:
-        specifier: 2.17.2
-        version: 2.17.2
+        specifier: 2.17.3
+        version: 2.17.3
       tar-js:
         specifier: ^0.3.0
         version: 0.3.0
@@ -9911,8 +9911,8 @@ packages:
   matrix-events-sdk@0.0.1:
     resolution: {integrity: sha512-1QEOsXO+bhyCroIe2/A5OwaxHvBm7EsSQ46DEDn8RBIfQwN5HWBpFvyWWR4QY0KHPPnnJdI99wgRiAl7Ad5qaA==}
 
-  matrix-js-sdk@https://codeload.github.com/matrix-org/matrix-js-sdk/tar.gz/3879111850603f676b875ee202409059298446ef:
-    resolution: {tarball: https://codeload.github.com/matrix-org/matrix-js-sdk/tar.gz/3879111850603f676b875ee202409059298446ef}
+  matrix-js-sdk@https://codeload.github.com/matrix-org/matrix-js-sdk/tar.gz/ca5655bced1cbb215ac1c18e179384a069d98b0a:
+    resolution: {tarball: https://codeload.github.com/matrix-org/matrix-js-sdk/tar.gz/ca5655bced1cbb215ac1c18e179384a069d98b0a}
     version: 41.3.0
     engines: {node: '>=22.0.0'}
 
@@ -11747,8 +11747,8 @@ packages:
   sanitize-filename@1.6.3:
     resolution: {integrity: sha512-y/52Mcy7aw3gRm7IrcGDFx/bCk4AhRh2eI9luHOQM86nZsqwiRkkq2GekHXBBD+SmPidc8i2PqtYZl+pWJ8Oeg==}
 
-  sanitize-html@2.17.2:
-    resolution: {integrity: sha512-EnffJUl46VE9uvZ0XeWzObHLurClLlT12gsOk1cHyP2Ol1P0BnBnsXmShlBmWVJM+dKieQI68R0tsPY5m/B+Jg==}
+  sanitize-html@2.17.3:
+    resolution: {integrity: sha512-Kn4srCAo2+wZyvCNKCSyB2g8RQ8IkX/gQs2uqoSRNu5t9I2qvUyAVvRDiFUVAiX3N3PNuwStY0eNr+ooBHVWEg==}
 
   sax@1.6.0:
     resolution: {integrity: sha512-6R3J5M4AcbtLUdZmRv2SygeVaM7IhrLXu9BmnOGmmACak8fiUtOsYNWUS4uK7upbmHIBbLBeFeI//477BKLBzA==}
@@ -23616,7 +23616,7 @@ snapshots:
 
   matrix-events-sdk@0.0.1: {}
 
-  matrix-js-sdk@https://codeload.github.com/matrix-org/matrix-js-sdk/tar.gz/3879111850603f676b875ee202409059298446ef:
+  matrix-js-sdk@https://codeload.github.com/matrix-org/matrix-js-sdk/tar.gz/ca5655bced1cbb215ac1c18e179384a069d98b0a:
     dependencies:
       '@babel/runtime': 7.29.2
       '@matrix-org/matrix-sdk-crypto-wasm': 18.0.0
@@ -25786,7 +25786,7 @@ snapshots:
     dependencies:
       truncate-utf8-bytes: 1.0.2
 
-  sanitize-html@2.17.2:
+  sanitize-html@2.17.3:
     dependencies:
       deepmerge: 4.3.1
       escape-string-regexp: 4.0.0