Bump com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer from 20260922.1 to 20260924.2

[dependabot]

Bumps com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer from 20260922.1 to 20260924.2.

Release notes

Sourced from com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer's releases.

Release 20260924.2

Changelog

• 2e944e7 Release version 20260924.2 (GitHub Actions)
• b203767 Add the change log entry for 20260924.2 (Jim Manico)
• 9b3233d Make the denial-of-service invariant promise what can be kept (Jim Manico)
• dfe357e Take the review: size the churn test for an ordinary heap (Jim Manico)
• 4c910d3 Take the review: keep the walk's guard, drop the dead growth cap (Jim Manico)
• f95efad Take the review: say the depth scan's over-count can drop valid CSS (Jim Manico)
• de57cff Take the review: count open brackets in three ints, not 126 (Jim Manico)
• cf9567f Take the review: make the depth scan's marking plain to read (Jim Manico)
• 33e8d34 Prepare for next development version (GitHub Actions)
• afac176 Record GHSA-x6fc-6qh4-g3wr (Jim Manico)

Contributors

We'd like to thank the following people for their contributions:

• Jim Manico

Release 20260924.1

Changelog

• 4fd25f3 Release version 20260924.1 (GitHub Actions)
• 1231831 Take the review: mark function depths in a plain array, not a BitSet (Jim Manico)
• 82e9b10 Add the denial-of-service invariant to AGENTS.md (Jim Manico)
• d0b06bd Drop an unmatched CSS close bracket in constant time (Jim Manico)
• 8a55b77 Drop CSS declarations that nest functions deeper than sixteen (Jim Manico)
• a310fe4 Harden release and build verification (Jim Manico)
• 3b122bb Record GHSA-6rfr-g8xv-xrp3 (Jim Manico)
• 393d86d Prepare for next development version (GitHub Actions)

Contributors

We'd like to thank the following people for their contributions:

• Jim Manico

Commits

• 2e944e7 Release version 20260924.2
• 78de192 Merge pull request #512 from OWASP/release-notes-20260924-2
• b203767 Add the change log entry for 20260924.2
• 05895ea Merge pull request #511 from OWASP/agents-dos-wording
• 9b3233d Make the denial-of-service invariant promise what can be kept
• 05ca527 Merge pull request #510 from OWASP/css-scan-cleanups
• dfe357e Take the review: size the churn test for an ordinary heap
• 4c910d3 Take the review: keep the walk's guard, drop the dead growth cap
• f95efad Take the review: say the depth scan's over-count can drop valid CSS
• de57cff Take the review: count open brackets in three ints, not 126
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)