From 941a7b1fd8caa01f0de7e20e297c5e87e06c7ef4 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 20 Feb 2025 08:12:24 +0000
Subject: [PATCH] fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8720086
- https://snyk.io/vuln/SNYK-JS-DOMPURIFY-8722251
---
 package.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/package.json b/package.json
index d6190e4e2..d20a3bcef 100644
--- a/package.json
+++ b/package.json
@@ -23,7 +23,7 @@
     "zombie": "^5.0.7"
   },
   "dependencies": {
-    "activitystrea.ms": "^2.1.3",
+    "activitystrea.ms": "^3.1.0",
     "bcryptjs": "^2.4.3",
     "body-parser": "^1.15.2",
     "bunyan": "^1.8.12",
@@ -36,7 +36,7 @@
     "databank": "^1.0.1",
     "dateformat": "^4.0.0",
     "dialback-client": "0.2.x",
-    "dompurify": "^2.3.1",
+    "dompurify": "^3.2.4",
     "emailjs": "^2.0.0",
     "express": "^4.16.0",
     "express-session": "^1.14.1",