chore(deps): update dependency dompurify to v3.4.2

[thomhurst]

This PR contains the following updates:

Package	Type	Update	Change
dompurify	resolutions	patch	3.4.1 → 3.4.2

---

Release Notes

cure53/DOMPurify (dompurify)

v3.4.2: DOMPurify 3.4.2

Compare Source

• Fixed an issue with URI validation on attributes allowed via ADD_ATTR callback, thanks @​nelstrom
• Fixed an issue with source maps referring to non-existing files, thanks @​cmdcolin
• Updated existing workflows, fuzzer, release signing, etc., added more tests
• Bumped several dependencies where possible

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[claude]

Dependency Update Review: dompurify 3.4.1 → 3.4.2

This is a straightforward Renovate-generated patch update to dompurify in the docs/ site.

What changed:

• docs/package.json: version pin bumped from 3.4.1 → 3.4.2
• docs/yarn.lock: hash and resolved URL updated accordingly

Assessment: ✅ Safe to merge.

Why this is fine:

• Patch-level bump only — semver signals no breaking changes or new APIs.
• The 3.4.2 release notes describe two bug fixes (URI validation on ADD_ATTR callback attributes, and broken source map references), plus internal maintenance (workflows, fuzzer, deps). Neither fix affects TUnit's docs usage pattern.
• dompurify is a security-focused HTML sanitiser. Keeping it current is good hygiene, and this patch closes a minor URI-validation gap.
• Auto-merge is already enabled; the change is limited to the docs package tree and has no effect on the .NET test framework or any generated artefacts.

No concerns here.