fix(deps): update dependency isomorphic-dompurify to v4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
isomorphic-dompurify	2.36.0 → 4.1.0

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code EMISSINGTARGET
npm error Missing target in lock file: "packages/scratch-svg-renderer" is referenced by "node_modules/@scratch/scratch-svg-renderer" but does not exist.
npm error To fix:
npm error 1. rm package-lock.json
npm error 2. npm install
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-09-04T09_45_31_113Z-debug-0.log

[github-actions]

Test Results

    7 files   -  3  1 156 suites   - 13   14m 58s ⏱️ +31s
3 003 tests  - 67  2 995 ✅  - 67   8 💤 ±0  0 ❌ ±0 
6 675 runs   - 69  6 636 ✅  - 69  39 💤 ±0  0 ❌ ±0 

Results for commit 3171c1e. ± Comparison against base commit cdd2a10.

This pull request removes 67 tests.

 LoggingHelper constructor ‑  LoggingHelper constructor
 ScratchStorage constructor ‑  ScratchStorage constructor
 addHelper ‑  addHelper
 addWebStore ‑  addWebStore
 constructor ‑  constructor
 get failure returns response.status ‑  get failure returns response.status
 get success returns Uint8Array.body(response.arrayBuffer()) ‑  get success returns Uint8Array.body(response.arrayBuffer())
 get with 404 response returns null data ‑  get with 404 response returns null data
 get with metadata ‑  get with metadata
 get without metadata ‑  get without metadata
…

♻️ This comment has been updated with latest results.