OpenHands

:wave: *OpenHands/OpenHands#17060* needs a human review: <https://github.com/OpenHands/OpenHands/pull/17060|fix(deps): patch DOMPurify sanitization bypass> by @lzhan011
This contributor's PR needs a human review, so OpenHands skipped the automatic AI review.

<@U0A7NGUHCGJ> Could you give a look at that PR? It seems that it is security related. Thanks

for these sort of npm dependency update PRs, i think dependabot PRs will do the job <https://github.com/OpenHands/OpenHands/security/dependabot/1019|github.com/OpenHands/OpenHands/…/1019>

should we tell contributors to avoid making PRs to bump dependencies purely?