Skip to content

build(deps): bump enshrined/svg-sanitize from 1.1.0 to 1.1.1 - #3141

Merged
pirate-bot merged 1 commit into
developmentfrom
dependabot/composer/development/enshrined/svg-sanitize-1.1.1
Oct 28, 2026
Merged

pirate-bot merged 1 commit into
developmentfrom
dependabot/composer/development/enshrined/svg-sanitize-1.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor

Bumps enshrined/svg-sanitize from 1.1.0 to 1.1.1.

Release notes

Sourced from enshrined/svg-sanitize's releases.

1.1.1

This release fixes a bug that was new in 1.1.0. Everyone using 1.1.0 should upgrade.

It fixes this advisory:

Fixed

  • sanitize() no longer throws a ValueError on PHP 8, or raises a warning on PHP 7, when the input ends inside a tag that is never closed. A single < or a truncated upload was enough. It now returns false, as 1.0.0 did. This bug was new in 1.1.0.
  • The checks that run before parsing now fail closed too. If one of them ever throws, sanitize() returns false and reports the error in getXmlIssues().

Full changelog: darylldoyle/svg-sanitizer@1.1.0...1.1.1

Changelog

Sourced from enshrined/svg-sanitize's changelog.

[1.1.1] - 2026-10-20

This release fixes a bug that was new in 1.1.0. Everyone using 1.1.0 should upgrade.

It fixes this advisory:

Fixed

  • sanitize() no longer throws a ValueError on PHP 8, or raises a warning on PHP 7, when the input ends inside a tag that is never closed. A single < or a truncated upload was enough. It now returns false, as 1.0.0 did. This bug was new in 1.1.0.
  • The checks that run before parsing now fail closed too. If one of them ever throws, sanitize() returns false and reports the error in getXmlIssues().
Commits
  • 1976ff9 Merge commit from fork
  • 840b6c9 Release 1.1.1 in the changelog
  • cbd2a12 Run the checks before parsing inside sanitize()'s try block
  • 5292b84 Fix sanitize() throwing on input that ends inside a tag
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [enshrined/svg-sanitize](https://github.com/darylldoyle/svg-sanitizer) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/darylldoyle/svg-sanitizer/releases)
- [Changelog](https://github.com/darylldoyle/svg-sanitizer/blob/master/CHANGELOG.md)
- [Commits](darylldoyle/svg-sanitizer@1.1.0...1.1.1)

---
updated-dependencies:
- dependency-name: enshrined/svg-sanitize
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file php Pull requests that update Php code labels Oct 27, 2026
@pirate-bot

Copy link
Copy Markdown
Contributor

Bundle Size Diff

Package Old Size New Size Diff
Animations 178.33 KB 178.33 KB 0 B (0.00%)
Blocks 1.65 MB 1.65 MB 0 B (0.00%)
CSS 7.83 KB 7.83 KB 0 B (0.00%)
Dashboard 172.49 KB 172.49 KB 0 B (0.00%)
Onboarding 68.14 KB 68.14 KB 0 B (0.00%)
Export Import 4.73 KB 4.73 KB 0 B (0.00%)
Pro 439.85 KB 439.85 KB 0 B (0.00%)

@pirate-bot

Copy link
Copy Markdown
Contributor

Plugin build for 5c8ff4c is ready 🛎️!

@pirate-bot

Copy link
Copy Markdown
Contributor

E2E Tests

Playwright Test Status: See serial and parallel matrix jobs

Performance Results serverResponse: {"q25":412.95,"q50":439.21,"q75":450.31,"cnt":10}, firstPaint: {"q25":1669.58,"q50":1726.89,"q75":2057.98,"cnt":10}, domContentLoaded: {"q25":4269.16,"q50":4309.93,"q75":4351.59,"cnt":10}, loaded: {"q25":4272.93,"q50":4313.68,"q75":4355.55,"cnt":10}, firstContentfulPaint: {"q25":2862.59,"q50":3221.79,"q75":3271.33,"cnt":10}, firstBlock: {"q25":20040.98,"q50":20178.53,"q75":20318,"cnt":10}, type: {"q25":33.49,"q50":35.67,"q75":42.33,"cnt":10}, typeWithoutInspector: {"q25":30.99,"q50":35.9,"q75":37.19,"cnt":10}, typeWithTopToolbar: {"q25":45.23,"q50":54.23,"q75":60.09,"cnt":10}, typeContainer: {"q25":17.23,"q50":18.43,"q75":19.79,"cnt":10}, focus: {"q25":167.12,"q50":171.71,"q75":183.06,"cnt":10}, inserterOpen: {"q25":51.01,"q50":53.4,"q75":60.25,"cnt":10}, inserterSearch: {"q25":35.47,"q50":37.84,"q75":38.49,"cnt":10}, inserterHover: {"q25":5.87,"q50":6.08,"q75":6.55,"cnt":20}, loadPatterns: {"q25":2192.17,"q50":2215.56,"q75":2251.86,"cnt":10}, listViewOpen: {"q25":278.81,"q50":288.11,"q75":295.21,"cnt":10}

@pirate-bot
pirate-bot merged commit d81f28b into development Oct 28, 2026
13 checks passed
@pirate-bot
pirate-bot deleted the dependabot/composer/development/enshrined/svg-sanitize-1.1.1 branch October 28, 2026 06:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file php Pull requests that update Php code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant