[cyanzhong]

No description provided.

[Copilot]

🟢 Approval recommended

The changes are narrowly scoped, dependency updates are consistent, and focused regression coverage accompanies the sanitizer isolation with no blocking issues identified.

No open issues 🎉

What changed in this PR

Upgrades DOMPurify and js-yaml while preserving preview rendering and front-matter behavior.

Changes:

• Updates dependency versions and lockfile resolutions.
• Isolates HTML and table widget sanitizers from Mermaid’s shared-instance hooks.
• Adds regression coverage for sanitization, math rendering, and YAML parsing.

File	Description
yarn.lock	Updates and consolidates dependency resolutions.
tests/​mermaid.integration.test.ts	Checks widget sanitization remains unchanged after rendering Mermaid.
tests/​hiddenSyntax/​table.test.ts	Covers math markup preservation and safe table attributes.
tests/​hiddenSyntax/​html.test.ts	Covers safe attributes and HTML-only sanitization.
tests/​frontMatter.test.ts	Checks quoted values and body preservation after invalid metadata.
tests/​frontMatter.parse.test.ts	Extends YAML validation, tag, and alias coverage.
src/​hiddenSyntax/​components/​table.ts	Creates an independent table sanitizer instance.
src/​hiddenSyntax/​components/​html.ts	Creates an independent HTML sanitizer instance.
package.json	Bumps DOMPurify and js-yaml versions.

_{Review effort: Balanced}