[WebReflection]

Bump DOMPurify to 3.4.16 to clear the open Dependabot alerts and fix the IN_PLACE hook-detachment XSS in GHSA-55q2-fjhq-7xh7.

That fix shipped in 3.4.13, but its follow-up GHSA-p98j-92pf-mc4p (afterSanitize* hooks that remove nodes leave event handlers armed on detached subtrees) affects 3.4.13–3.4.15 and is only patched in 3.4.16. That follow-up is what Dependabot still flags in packages/ui, packages/session-ui and packages/kilo-docs/pnpm-lock.yaml.

• Bun workspace: root catalog and overrides, plus the direct deps in ui and session-ui, now pin 3.4.16, so the transitive mermaid/posthog-js copies resolve to 3.4.16 as well
• kilo-docs: refreshed pnpm-lock.yaml so the transitive dompurify (via mermaid/posthog-js) resolves to 3.4.16, with no manifest changes

Our hooks don't remove nodes and we don't use IN_PLACE, so this is defense in depth rather than a known exploit.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​dompurify@​3.4.13 ⏵ 3.4.16	+1	+2

View full report

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

DOMPurify bump 3.4.13 → 3.4.16 is consistent across the Bun catalog, overrides, and direct deps (packages/ui, packages/session-ui), with bun.lock and packages/kilo-docs/pnpm-lock.yaml refreshed to the same resolved version/integrity. No remaining 3.4.13 references. Changeset present with correct package (kilo-code) and user-facing wording. No code paths changed, so no memory-leak or behavioral concerns.

Files Reviewed (6 files)

• .changeset/dompurify-3-4-16.md
• bun.lock
• package.json
• packages/kilo-docs/pnpm-lock.yaml
• packages/session-ui/package.json
• packages/ui/package.json

---

_{Reviewed by deepseek-v4.1-flash · Input: 44.6K · Output: 6.2K · Cached: 298.8K}

_{Review guidance: REVIEW.md from base branch main}