From 8a404b999bdc33369c0a4098670ca23d4d9e3f91 Mon Sep 17 00:00:00 2001
From: Fons van der Plas <fonsvdplas@gmail.com>
Date: Thu, 30 Jan 2025 11:30:57 +0100
Subject: [PATCH] update lodash, dompurify, iframe-resizer,
 julia-actions/setup-julia (#3138)

---
 .github/workflows/IntegrationTest.yml | 2 +-
 frontend/editor.html                  | 6 +++---
 frontend/imports/DOMPurify.js         | 2 +-
 frontend/index.html                   | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/IntegrationTest.yml b/.github/workflows/IntegrationTest.yml
index e05c872313..7694c9c0f8 100644
--- a/.github/workflows/IntegrationTest.yml
+++ b/.github/workflows/IntegrationTest.yml
@@ -43,7 +43,7 @@ jobs:
 
         steps:
             - uses: actions/checkout@v4
-            - uses: julia-actions/setup-julia@v1
+            - uses: julia-actions/setup-julia@v2
               with:
                   version: ${{ matrix.julia-version }}
                   arch: x64
diff --git a/frontend/editor.html b/frontend/editor.html
index f67b47bd99..888b0607b8 100644
--- a/frontend/editor.html
+++ b/frontend/editor.html
@@ -23,9 +23,9 @@
         )
     </script>
 
-    <script src="https://cdn.jsdelivr.net/npm/lodash@4.17.20/lodash.min.js" defer></script>
+    <script src="https://cdn.jsdelivr.net/npm/lodash@4.17.21/lodash.min.js" defer></script>
     <script src="https://cdn.jsdelivr.net/npm/@observablehq/stdlib@3.3.1/dist/stdlib.js" defer></script>
-    <script src="https://cdn.jsdelivr.net/npm/iframe-resizer@4.2.11/js/iframeResizer.min.js" defer></script>
+    <script src="https://cdn.jsdelivr.net/npm/iframe-resizer@4.3.11/js/iframeResizer.min.js" defer></script>
     <script src="https://cdn.jsdelivr.net/npm/ansi_up@5.1.0/ansi_up.min.js" defer></script>
 
     <link rel="pluto-external-source" id="vmsg-wasm" href="https://unpkg.com/vmsg@0.4.0/vmsg.wasm">
@@ -35,7 +35,7 @@
     <link rel="pluto-external-source" id="open_icon" href="https://cdn.jsdelivr.net/gh/ionic-team/ionicons@5.5.1/src/svg/open-outline.svg">
 
     <!-- This doesn't do anything unless activated, and it makes sure parcel bundles this -->
-    <script id="iframe-resizer-content-window-script" src="https://cdn.jsdelivr.net/npm/iframe-resizer@4.2.11/js/iframeResizer.contentWindow.min.js" crossorigin="anonymous" defer></script>
+    <script id="iframe-resizer-content-window-script" src="https://cdn.jsdelivr.net/npm/iframe-resizer@4.3.11/js/iframeResizer.contentWindow.min.js" crossorigin="anonymous" defer></script>
 
     <link rel="stylesheet" href="./editor.css" type="text/css" />
     <link rel="stylesheet" href="./hide-ui.css" type="text/css" media="all" data-pluto-file="hide-ui" />
diff --git a/frontend/imports/DOMPurify.js b/frontend/imports/DOMPurify.js
index f49c6bfe36..56b010ca51 100644
--- a/frontend/imports/DOMPurify.js
+++ b/frontend/imports/DOMPurify.js
@@ -1,4 +1,4 @@
 // @ts-ignore
-import purify from "https://esm.sh/dompurify@3.0.3?pin=v122"
+import purify from "https://esm.sh/dompurify@3.2.3?pin=v135"
 
 export default purify
diff --git a/frontend/index.html b/frontend/index.html
index 42538fbb3d..0653cb71e4 100644
--- a/frontend/index.html
+++ b/frontend/index.html
@@ -21,7 +21,7 @@
     <link rel="pluto-logo-big" href="./img/logo.svg" />
     <link rel="pluto-logo-small" href="./img/favicon_unsaturated.svg" />
 
-    <script src="https://cdn.jsdelivr.net/npm/lodash@4.17.20/lodash.min.js" defer></script>
+    <script src="https://cdn.jsdelivr.net/npm/lodash@4.17.21/lodash.min.js" defer></script>
     <script src="https://cdn.jsdelivr.net/npm/@observablehq/stdlib@3.3.1/dist/stdlib.js" defer></script>