Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade node-sass from 4.8.3 to 4.13.1 #1

Open
wants to merge 1 commit into
base: merchello-dev
Choose a base branch
from
Open

[Snyk] Upgrade node-sass from 4.8.3 to 4.13.1 #1

wants to merge 1 commit into from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade node-sass from 4.8.3 to 4.13.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 10 versions ahead of your current version.
  • The recommended version was released a month ago, on 2020-01-16.

The recommended version fixes:

Severity Issue Exploit Maturity
Prototype Override Protection Bypass
npm:qs:20170213		 No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-174125		 No Known Exploit
Prototype Pollution
SNYK-JS-LODASHMERGEWITH-174136		 No Known Exploit
Arbitrary File Overwrite
SNYK-JS-FSTREAM-174725		 No Known Exploit
Remote Memory Exposure
npm:request:20160119		 No Known Exploit
Timing Attack
npm:http-signature:20150122		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:mime:20170907		 No Known Exploit
Regular Expression Denial of Service (DoS)
npm:hawk:20160119		 No Known Exploit
Release notes
Package name: node-sass
  • 4.13.1 - 2020-01-16

    Community

    Supported Environments

    OS Architecture Node
    Windows x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13
    OSX x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13
    Linux* x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8**, 9**, 10**^, 11**^, 12**^, 13**^
    Alpine Linux x64 6, 8, 10, 11, 12, 13
    FreeBSD i386 amd64 6, 8, 10, 12, 13

    *Linux support refers to Ubuntu, Debian, and CentOS 5+
    ** Not available on CentOS 5
    ^ Only available on x64

  • 4.13.0 - 2019-10-24

    Features

    Community

    Dependencies

    Supported Environments

    OS Architecture Node
    Windows x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13
    OSX x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13
    Linux* x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8**, 9**, 10**^, 11**^, 12**^, 13**^
    Alpine Linux x64 6, 8, 10, 11, 12, 13
    FreeBSD i386 amd64 6, 8, 10, 12, 13

    *Linux support refers to Ubuntu, Debian, and CentOS 5+
    ** Not available on CentOS 5
    ^ Only available on x64

  • 4.12.0 - 2019-04-27

    Features

    Community

    Dependencies

    Supported Environments

    OS Architecture Node
    Windows x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12
    OSX x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12
    Linux* x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8**, 9**, 10**^, 11**^, 12**^
    Alpine Linux x64 6, 8, 10, 11, 12
    FreeBSD i386 amd64 8, 10, 12

    *Linux support refers to Ubuntu, Debian, and CentOS 5+
    ** Not available on CentOS 5
    ^ Only available on x64

  • 4.11.0 - 2018-11-15

    LibSass 3.5.5

    This released updates LibSass to 3.5.5. This update brings

    • Stability fixes
    • Removes noisey deprecation warning for @import'ing .css files
    • Support hex colors with alpha channels

    Features

    Fixes

    • Revert change that introduced a noisey deprecation warning (@xzyfer, #2362)

    Supported Environments

    OS Architecture Node
    Windows x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11
    OSX x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11
    Linux* x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8**, 9**, 10**^, 11**
    Alpine Linux x64 6, 8, 10, 11

    *Linux support refers to Ubuntu, Debian, and CentOS 5+
    ** Not available on CentOS 5
    ^ Only available on x64

  • 4.10.0 - 2018-11-04

    Features

    Supported Environments

    OS Architecture Node
    Windows x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11
    OSX x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11
    Linux* x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8**, 9**, 10**^, 11**
    Alpine Linux x64 4, 6, 7, 8, 9, 10, 11
    FreeBSD 10+ amd64 4, 6, 8, 9, 10
    FreeBSD 10+ i386 4, 6, 8, 9, 10

    *Linux support refers to Ubuntu, Debian, and CentOS 5+
    ** Not available on CentOS 5
    ^ Only available on x64

  • 4.9.4 - 2018-10-15
  • 4.9.3 - 2018-08-09
  • 4.9.2 - 2018-07-08
  • 4.9.1 - 2018-07-05
  • 4.9.0 - 2018-04-25
  • 4.8.3 - 2018-03-18
from node-sass GitHub release notes
Commit messages
Package name: node-sass

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[//]: # (snyk:metadata:{"dependencies":[{"name":"node-sass","from":"4.8.3","to":"4.13.1"}],"packageManager":"npm","type":"auto","projectUrl":"https://app.snyk.io/org/saurabharch/project/354105fd-73b8-4235-855a-056269d9c0c9?utm_source=github&utm_medium=upgrade-pr","projectPublicId":"354105fd-73b8-4235-855a-056269d9c0c9","env":"prod","prType":"upgrade","vulns":["npm:qs:20170213","SNYK-JS-TAR-174125","SNYK-JS-LODASHMERGEWITH-174136","SNYK-JS-FSTREAM-174725","npm:request:20160119","npm:http-signature:20150122","npm:mime:20170907","npm:hawk:20160119"],"issuesToFix":[{"issueId":"npm:qs:20170213","severity":"high","title":"Prototype Override Protection Bypass","exploitMaturity":"no-known-exploit"},{"issueId":"SNYK-JS-TAR-174125","severity":"high","title":"Arbitrary File Overwrite","exploitMaturity":"no-known-exploit"},{"issueId":"SNYK-JS-LODASHMERGEWITH-174136","severity":"high","title":"Prototype Pollution","exploitMaturity":"no-known-exploit"},{"issueId":"SNYK-JS-FSTREAM-174725","severity":"high","title":"Arbitrary File Overwrite","exploitMaturity":"no-known-exploit"},{"issueId":"npm:request:20160119","severity":"medium","title":"Remote Memory Exposure","exploitMaturity":"no-known-exploit"},{"issueId":"npm:http-signature:20150122","severity":"medium","title":"Timing Attack","exploitMaturity":"no-known-exploit"},{"issueId":"npm:mime:20170907","severity":"low","title":"Regular Expression Denial of Service (ReDoS)","exploitMaturity":"no-known-exploit"},{"issueId":"npm:hawk:20160119","severity":"low","title":"Regular Expression Denial of Service (DoS)","exploitMaturity":"no-known-exploit"}],"upgrade":["npm:qs:20170213","SNYK-JS-TAR-174125","SNYK-JS-LODASHMERGEWITH-174136","SNYK-JS-FSTREAM-174725","npm:request:20160119","npm:http-signature:20150122","npm:mime:20170907","npm:hawk:20160119"],"upgradeInfo":{"versionsDiff":10,"publishedDate":"2020-01-16T12:47:40.307Z"},"templateVariants":[],"hasFixes":true,"isMajorUpgrade":false,"isBreakingChange":false})

saurabharch pushed a commit that referenced this pull request May 27, 2022
@davorzlotrg
Merge pull request #1 from mausba/davorzlotrg-patch-1
f84a73d 
Bug fix when getting the tree by value
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
1 participant
@snyk-bot