[Snyk] Upgrade sass from 1.69.7 to 1.71.1

[Loonz206]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade sass from 1.69.7 to 1.71.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2024-02-21.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6147607	412/1000 Why? Proof of Concept exploit, CVSS 6.1	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: sass

• 1.71.1 - 2024-02-21
  

  To install Sass 1.71.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  Command-Line Interface

  • Ship the musl Linux release with the proper Dart executable.

  JavaScript API

  • Export the NodePackageImporter class in ESM mode.

  • Allow NodePackageImporter to locate a default directory even when the entrypoint is an ESM module.

  Dart API

  • Make passing a null argument to NodePackageImporter() a static error rather than just a runtime error.

  Embedded Sass

  • In the JS Embedded Host, properly install the musl Linux embedded compiler when running on musl Linux.

  See the full changelog for changes in earlier releases.

• 1.71.0 - 2024-02-16
  

  To install Sass 1.71.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  For more information about pkg: importers, see the announcement on the Sass blog.

  Command-Line Interface

  • Add a --pkg-importer flag to enable built-in pkg: importers. Currently this only supports the Node.js package resolution algorithm, via --pkg-importer=node. For example, @ use "pkg:bootstrap" will load node_modules/bootstrap/scss/bootstrap.scss.

  JavaScript API

  • Add a NodePackageImporter importer that can be passed to the importers option. This loads files using the pkg: URL scheme according to the Node.js package resolution algorithm. For example, @ use "pkg:bootstrap" will load node_modules/bootstrap/scss/bootstrap.scss. The constructor takes a single optional argument, which indicates the base directory to use when locating node_modules directories. It defaults to path.dirname(require.main.filename).

  Dart API

  • Add a NodePackageImporter importer that can be passed to the importers option. This loads files using the pkg: URL scheme according to the Node.js package resolution algorithm. For example, @ use "pkg:bootstrap" will load node_modules/bootstrap/scss/bootstrap.scss. The constructor takes a single argument, which indicates the base directory to use when locating node_modules directories.

  See the full changelog for changes in earlier releases.

• 1.70.0 - 2024-01-18
  

  To install Sass 1.70.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  JavaScript API

  • Add a sass.initCompiler() function that returns a sass.Compiler object which supports compile() and compileString() methods with the same API as the global Sass object. On the Node.js embedded host, each sass.Compiler object uses a single long-lived subprocess, making compiling multiple stylesheets much more efficient.

  • Add a sass.initAsyncCompiler() function that returns a sass.AsyncCompiler object which supports compileAsync() and compileStringAsync() methods with the same API as the global Sass object. On the Node.js embedded host, each sass.AsynCompiler object uses a single long-lived subprocess, making compiling multiple stylesheets much more efficient.

  Embedded Sass

  • Support the CompileRequest.silent field. This allows compilations with no logging to avoid unnecessary request/response cycles.

  • The Dart Sass embedded compiler now reports its name as "dart-sass" rather than "Dart Sass", to match the JS API's info field.

  See the full changelog for changes in earlier releases.

• 1.69.7 - 2024-01-02
  

  To install Sass 1.69.7, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  Embedded Sass

  • In the JS Embedded Host, properly install the x64 Dart Sass executable on ARM64 Windows.

  See the full changelog for changes in earlier releases.

from sass GitHub release notes

Commit messages

Package name: sass

• 1b4d703 Release 1.71.1 (#2182)
• 6d66c43 Properly handle `new NodePackageImporter()` with an ESM entrypoint (#2181)
• 85a932f Add missing ESM export of NodePackageImporter (#2177)
• 786dd63 Fix linux musl builds (#2175)
• 3e6721e Fix new static warnings with Dart 3.3 (#2173)
• 2cab33e Update the language revision in Homebrew on release (#2171)
• 84ededd Use musl support in cli_pkg (#2172)
• 00571ec Add a `--pkg-importer` flag (#2169)
• 84f31f0 Update pubspec/changelog for `pkg:` importers (#2168)
• 9ee5408 [Package Importer] Dart Implementation (#2130)
• 9423aa5 Use macos-14 runner instead of macos-latest-xlarge runner (#2167)
• bbf97b4 Remove the sass dependency from package.json (#2162)
• 076414d [Shared Resources] dart-sass implementation (#2134)
• 0d91c92 Support CompileRequest.silent of embedded protocol (#2160)
• b263a72 Use implementation name dart-sass for VersionResponse (#2156)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs