From 8d998ed19e0153a9260e01ded375d3c360070c65 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 13 Oct 2026 13:08:18 +0000
Subject: [PATCH] fix(deps): update dependency sanitize-html to v2.17.7
 [security]

---
 package.json   |  2 +-
 pnpm-lock.yaml | 18 ++++++++++++++++--
 2 files changed, 17 insertions(+), 3 deletions(-)

diff --git a/package.json b/package.json
index a8bf94c9d..3f24a586c 100644
--- a/package.json
+++ b/package.json
@@ -111,7 +111,7 @@
     "pino": "10.3.0",
     "reflect-metadata": "0.2.2",
     "sanitize-filename": "1.6.3",
-    "sanitize-html": "2.17.4",
+    "sanitize-html": "2.17.7",
     "secure-json-parse": "2.7.0",
     "sharp": "0.33.5",
     "striptags": "3.2.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 04c0eb58a..17d1f5a54 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -201,8 +201,8 @@ importers:
         specifier: 1.6.3
         version: 1.6.3
       sanitize-html:
-        specifier: 2.17.4
-        version: 2.17.4
+        specifier: 2.17.7
+        version: 2.17.7
       secure-json-parse:
         specifier: 2.7.0
         version: 2.7.0
@@ -6006,6 +6006,10 @@ packages:
   sanitize-html@2.17.4:
     resolution: {integrity: sha512-2HW7v2ol/uAM7sX4hbD8Z59OGWmAPrvjL8E71UWlBcj6m+kcF6ilQBLny+cIgY214QJeJT5tQuxKKqX0SQqjGQ==}
 
+  sanitize-html@2.17.7:
+    resolution: {integrity: sha512-PGtEkc9cbnedU3s9TmzDbpsZ8w086g/0Q8k8/oIO1NLNU3i5k9yn835CrjJSajp1KMmkisbO1qPXxNKO3welAg==}
+    engines: {node: '>=22.12.0'}
+
   scheduler@0.23.2:
     resolution: {integrity: sha512-UOShsPwz7NrMUqhR6t0hWjFduvOzbtv7toDH1/hIrfRNIDBnnBWd0CwJTGvTpngVlmwGCdP9/Zl/tVrDqcuYzQ==}
 
@@ -13193,6 +13197,16 @@ snapshots:
       parse-srcset: 1.0.2
       postcss: 8.5.15
 
+  sanitize-html@2.17.7:
+    dependencies:
+      deepmerge: 4.3.1
+      escape-string-regexp: 4.0.0
+      htmlparser2: 12.0.0
+      is-plain-object: 5.0.0
+      launder: 1.7.1
+      parse-srcset: 1.0.2
+      postcss: 8.5.15
+
   scheduler@0.23.2:
     dependencies:
       loose-envify: 1.4.0