[Snyk] Upgrade sass from 1.49.9 to 1.50.1 #358
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade sass from 1.49.9 to 1.50.1. See this package in npm: https://www.npmjs.com/package/sass See this project in Snyk: https://app.snyk.io/org/simonsmoj/project/0ed78a30-8c4f-4949-87c3-404d8921ac5e?utm_source=github&utm_medium=referral&page=upgrade-pr
gregtyler
approved these changes
May 13, 2022
|
🎉 This PR is included in version 1.4.1 🎉 The release is available on: Your semantic-release bot 📦🚀 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade sass from 1.49.9 to 1.50.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-EJS-2803307
Why? Proof of Concept exploit, Recently disclosed, CVSS 8.1
SNYK-JS-UGLIFYJS-1727251
Why? Proof of Concept exploit, Recently disclosed, CVSS 8.1
SNYK-JS-JSBEAUTIFY-2311652
Why? Proof of Concept exploit, Recently disclosed, CVSS 8.1
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: sass
-
1.50.1 - 2022-04-19
-
-
-
1.50.0 - 2022-04-07
- Closing the standard input stream will now cause the
-
-
-
1.49.11 - 2022-04-01
- Add support for 64-bit ARM releases on Linux.
- The embedded compiler now correctly sets the
-
1.49.10 - 2022-03-30
-
-
-
-
-
1.49.9 - 2022-02-24
from sass GitHub release notesTo install Sass 1.50.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
Embedded Sass
The JS embedded host and the embedded compiler will now properly avoid resolving imports relative to the current working directory unless
'.'is passed as a load path.Fix a bug in the JS embedded host's implementation of the legacy JS API where imports that began with
/could crash on Windows.See the full changelog for changes in earlier releases.
To install Sass 1.50.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
@ extendnow treats:where()the same as:is().Command Line Interface
--watchcommand to stop running.Embedded Sass
Fix a bug where the JS embedded host crashed when invoking a legacy importer after resolving a relative filesystem import.
Improve error messages when returning non-
Objectvalues from legacy importers.See the full changelog for changes in earlier releases.
To install Sass 1.49.11, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
Embedded Sass
idfield for allOutboundMessages.See the full changelog for changes in earlier releases.
To install Sass 1.49.10, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
Quiet deps mode now silences compiler warnings in mixins and functions that are defined in dependencies even if they're invoked from application stylesheets.
In expanded mode, Sass will now emit colors using
rgb(),rbga(),hsl(), andhsla()function notation if they were defined using the corresponding notation. As per our browser support policy, this change was only done once 95% of browsers were confirmed to support this output format, and so is not considered a breaking change.Note that this output format is intended for human readability and not for interoperability with other tools. As always, Sass targets the CSS specification, and any tool that consumes Sass's output should parse all colors that are supported by the CSS spec.
Fix a bug in which a color written using the four- or eight-digit hex format could be emitted as a hex color rather than a format with higher browser compatibility.
Calculations are no longer simplified within supports declarations
See the full changelog for changes in earlier releases.
Commit messages
Package name: sass
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs