build(deps): bump dompurify from 3.4.11 to 3.4.14

[dependabot]

Bumps dompurify from 3.4.11 to 3.4.14.

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

• Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @​AlirezaRouhbakhsh
• Fixed a couple of edge cases with mixed document contexts, thanks @​fishjojo1
• Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @​Jaybhade
• Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
• Updated the documentation in several spots, README, wiki, etc., thanks @​Akokonunes
• Updated several development dependencies and CI workflow actions

DOMPurify 3.4.13

• Fixed an issue with hook removal during IN_PLACE sanitization, thanks @​koyokr
• Fixed an issue with hooks potentially bypassing the clone guard, thanks @​AkshayjainG
• Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @​AkshayjainG
• Bumped several dependencies where possible

DOMPurify 3.4.12

• Fixed an issue where a hook would not get called for custom elements, thanks @​Rikuxx0
• Hardened the handling of hooks removing elements, @​mkrause-bee360
• Added support for a few new SVG attributes, thanks @​cbn-falias & @​Develop-KIM
• Hardened the handling of declarative partial updates
• Updated the documentation is several spots, README, wiki, etc.
• Bumped several dependencies where possible

Commits

• 4e6fe24 release: 3.4.14 (#1587)
• 3067f77 release: 3.4.13 (#1562)
• a9ca1e5 release: 3.4.12 (#1537)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[github-actions]

🔦 Lighthouse Benchmark

Tested: http://localhost:8787 on 2026-09-02 22:49 UTC
Compared against main baseline from 2026-09-02

Scores (0–100, higher is better)

Page	Performance	Accessibility	Best Practices	SEO
Home	68	84	73	85
Get Started	64	83	73	100
Pricing	98	92	73	100
Enterprise	97	83	73	100
Cloud	91	80	73	100
About Us	98 🟢 +13	91	73	100
Docs Landing	85 🔻 -11	88	73	92
Contribute to Kestra (simple docs)	96	88	73	92
Flow (full featured docs)	93	90	73	92
Blog Index	75 🟢 +10	91	73	100
Blog Post (sample)	88	88	73	100
VS Page (sample)	97	88	73	100
Plugins Landing	91	81	73	92
Plugin Page (sample)	96	88	73	100
Plugin Debug Page (sample)	96	88	73	100
Plugin Debug Return Page (sample)	96	88	77	100
Blueprints Landing	80	91	73	100
Blueprint Audit Logs CSV Export	0	0	0	0

Core Web Vitals (lower is better)

Page	LCP	FCP	TBT	CLS	Speed Index
Home	1.33 s	0.66 s	700 ms 🟢	0.000	1.82 s 🟢
Get Started	1.76 s	0.63 s	952 ms	0.000	0.95 s
Pricing	1.05 s	0.60 s	43 ms	0.000	0.75 s
Enterprise	1.26 s	0.62 s	35 ms 🔻	0.012 🔻	0.71 s
Cloud	1.96 s	0.59 s	46 ms	0.001	0.87 s
About Us	1.03 s 🟢	0.63 s	32 ms	0.000	0.80 s
Docs Landing	2.16 s 🔻	0.54 s	164 ms 🔻	0.000	0.98 s
Contribute to Kestra (simple docs)	1.18 s	0.56 s	108 ms 🔻	0.000 🟢	0.78 s
Flow (full featured docs)	1.04 s	0.59 s	178 ms 🔻	0.002	1.07 s
Blog Index	8.35 s	0.51 s	57 ms 🔻	0.000	0.86 s 🟢
Blog Post (sample)	2.30 s 🔻	0.57 s	34 ms 🔻	0.000	0.80 s
VS Page (sample)	1.10 s	0.62 s	38 ms	0.064	0.75 s
Plugins Landing	1.25 s	0.65 s	49 ms	0.000	2.50 s
Plugin Page (sample)	0.96 s	0.62 s	34 ms	0.000	1.76 s
Plugin Debug Page (sample)	0.93 s	0.60 s	38 ms 🟢	0.000	1.81 s
Plugin Debug Return Page (sample)	0.80 s	0.54 s	69 ms	0.000	1.95 s
Blueprints Landing	2.32 s	0.82 s	100 ms 🔻	0.005	2.89 s
Blueprint Audit Logs CSV Export	0.00 s	0.00 s	0 ms	0.000	0.00 s

Legend

🟢 improved  ·  🔻 regressed  ·  (blank) no significant change
Score threshold: ±10 pts  ·  Metric threshold: ±30% of baseline

View full Lighthouse HTML report for a page

Full per-page Lighthouse Results (LHR) are attached as the lhr-reports artifact on this run. Download and unzip it, then open https://googlechrome.github.io/lighthouse/viewer/ and drop the <page>-lhr.json file into the page to see every audit, opportunity, and diagnostic.