chore(deps): bump turbohtml to 1.15.3 (#14662)

turbohtml 1.10.0 -> 1.15.3. Includes sanitizer hardening (GHSA-9x48-74fj-x342, GHSA-wh2c-9vrv-w597, GHSA-pjrh-5m66-3wwf, URL schemes hidden behind character references in the bleach shim). Only the bleach clean shim and linkify are used, in the mail parser.
This commit is contained in:
Trenton H authored and GitHub committed 2026-11-02 16:15:36 -08:00
1 parent 2c82b06b93
commit cd58cffd89
2 files changed
+45 -42

No files matched your search

+1 -1
View File
@@ -76,7 +76,7 @@ dependencies = [
"tantivy~=0.26.0",
"tika-client[httpx]~=1.0",
"torch>=2.13,<2.15",
"turbohtml~=1.10.0",
"turbohtml~=1.15.3",
"watchfiles>=1.2",
"whitenoise~=6.11",
"whoosh-compat[tantivy]==0.3",