Merge pull request #5914 from aloisklink/fix/5904-ban-dompurify-3.1.7

fix: ban version v3.1.7 of DOMPurify

.changeset/witty-rabbits-hunt.md

@@ -0,0 +1,5 @@
+---
+'mermaid': patch
+---
+
+Ban DOMPurify v3.1.7 as a dependency

packages/mermaid/package.json

@@ -77,7 +77,7 @@
     "d3-sankey": "^0.12.3",
     "dagre-d3-es": "7.0.10",
     "dayjs": "^1.11.10",
-    "dompurify": "^3.0.11",
+    "dompurify": "^3.0.11 <3.1.7",
     "katex": "^0.16.9",
     "khroma": "^2.1.0",
     "lodash-es": "^4.17.21",

pnpm-lock.yaml

@@ -237,7 +237,7 @@ importers:
         specifier: ^1.11.10
         version: 1.11.13
       dompurify:
-        specifier: ^3.0.11
+        specifier: ^3.0.11 <3.1.7
         version: 3.1.6
       katex:
         specifier: ^0.16.9