chore(deps): require rhukster/dom-sanitizer as a tagged release (#41785)

Signed-off-by: Thomas Müller <1005065+DeepDiver1975@users.noreply.github.com>

Author: DeepDiver1975

changelog/unreleased/domsanitizer-tagged-version

@@ -0,0 +1,14 @@
+Change: Require rhukster/dom-sanitizer as a tagged release
+
+rhukster/dom-sanitizer was required as "dev-main", a branch pin. A branch pin
+resolves to whatever commit the branch happened to point at when the lock file
+was written, and it carries no version number. Vulnerability scanners match
+installed versions against advisory version ranges, so an unversioned dependency
+can never match any range: scanners silently reported nothing at all for this
+package, whatever commit was actually shipped.
+
+It is now required as "^1.0.10" and resolves to 1.0.14. The shipped code is
+equivalent -- the previously locked commit 02d08ec8 corresponds to tag 1.0.11 --
+so this is a packaging and auditability change, not a functional one.
+
+https://github.com/owncloud/core/pull/41785

composer.json

@@ -91,7 +91,7 @@
         "phpseclib/phpseclib": "^3.0",
         "pimple/pimple": "^3.6",
         "punic/punic": "^3.8",
-        "rhukster/dom-sanitizer": "dev-main",
+        "rhukster/dom-sanitizer": "^1.0.10",
         "sabre/dav": "^4.7",
         "sabre/http": "^5.1",
         "sabre/vobject": "^4.6",