Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency sass-loader to v9 #7

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Oct 14, 2022

This PR contains the following updates:

Package Type Update Change
sass-loader devDependencies major ^8.0.2 -> ^9.0.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2022-37601
High High 7.5 CVE-2022-25883
High High 7.5 CVE-2022-37603

Release Notes

webpack-contrib/sass-loader (sass-loader)

v9.0.0

Compare Source

⚠ BREAKING CHANGES
  • minimum supported Nodejs version is 10.13
  • prefer sass (dart-sass) by default, it is strongly recommended to migrate on sass (dart-sass)
  • the prependData option was removed in favor the additionalData option, see docs
  • when the sourceMap is true, sassOptions.sourceMap, sassOptions.sourceMapContents, sassOptions.sourceMapEmbed, sassOptions.sourceMapRoot and sassOptions.omitSourceMapUrl will be ignored.
Features
  • pass the loader context to custom importers under the this.webpackLoaderContext property (#​853) (d487683)
  • supports for process.cwd() resolution logic by default (#​837) (0c8d3b3)
  • supports for SASS-PATH env variable resolution logic by default (#​836) (8376179)
  • supports for the sass property for the exports field from package.json (conditional exports, for more information read docs)
Bug Fixes
  • avoid different content on different os (#​832) (68dd278)
  • resolution logic when the includePaths option used was improved (#​827) (cbe5ad4)
  • resolution logic for file:// scheme was improved (17832fd)
  • resolution logic for absolute paths and server relative URLs was improved
  • source maps generation was improved
8.0.2 (2020-01-13)
Bug Fixes
8.0.1 (2020-01-10)
Bug Fixes

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Oct 14, 2022
@mend-for-github-com mend-for-github-com bot changed the title Update dependency sass-loader to v9 Update dependency sass-loader to v9 - autoclosed Mar 26, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/sass-loader-9.x branch March 26, 2023 15:46
@mend-for-github-com mend-for-github-com bot changed the title Update dependency sass-loader to v9 - autoclosed Update dependency sass-loader to v9 Mar 31, 2023
@mend-for-github-com mend-for-github-com bot reopened this Mar 31, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/sass-loader-9.x branch March 31, 2023 03:30
@mend-for-github-com mend-for-github-com bot changed the title Update dependency sass-loader to v9 Update dependency sass-loader to v9 - autoclosed Apr 12, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/sass-loader-9.x branch April 12, 2023 08:12
@mend-for-github-com mend-for-github-com bot changed the title Update dependency sass-loader to v9 - autoclosed Update dependency sass-loader to v9 Apr 13, 2023
@mend-for-github-com mend-for-github-com bot reopened this Apr 13, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/sass-loader-9.x branch April 13, 2023 11:54
@mend-for-github-com mend-for-github-com bot changed the title Update dependency sass-loader to v9 Update dependency sass-loader to v9 - autoclosed Jun 16, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/sass-loader-9.x branch June 16, 2023 14:27
@mend-for-github-com mend-for-github-com bot changed the title Update dependency sass-loader to v9 - autoclosed Update dependency sass-loader to v9 Jun 18, 2023
@mend-for-github-com mend-for-github-com bot reopened this Jun 18, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/sass-loader-9.x branch June 18, 2023 23:50
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/sass-loader-9.x branch from 9cbf037 to 3fad262 Compare June 18, 2023 23:50
@mend-for-github-com mend-for-github-com bot changed the title Update dependency sass-loader to v9 Update dependency sass-loader to v9 - autoclosed Apr 3, 2024
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/sass-loader-9.x branch April 3, 2024 06:34
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/sass-loader-9.x branch April 4, 2024 07:39
@mend-for-github-com mend-for-github-com bot changed the title Update dependency sass-loader to v9 - autoclosed Update dependency sass-loader to v9 Apr 4, 2024
@mend-for-github-com mend-for-github-com bot reopened this Apr 4, 2024
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/sass-loader-9.x branch 2 times, most recently from 3fad262 to 6adeb34 Compare April 4, 2024 07:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
0 participants