Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency node-sass to v7 #221

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Apr 24, 2023

This PR contains the following updates:

Package Type Update Change
node-sass dependencies major ^4.13.1 -> ^7.0.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 8.6 CVE-2021-37701 #66
High 8.6 CVE-2021-37712 #68
High 8.6 CVE-2021-37713 #72
High 8.1 CVE-2021-32803 #63
High 8.1 CVE-2021-32804 #62
High 7.5 CVE-2021-33623 #57
High 7.5 CVE-2022-25758 #154
Medium 6.5 CVE-2018-20190 #36
Medium 6.5 CVE-2018-20821 #29
Medium 6.5 CVE-2019-6283 #30
Medium 6.5 CVE-2019-6284 #24
Medium 6.5 CVE-2019-6286 #27
Medium 5.6 CVE-2018-11694 #11
Medium 5.6 CVE-2018-19827 #40
Medium 5.3 CVE-2020-24025 #2

Release Notes

sass/node-sass (node-sass)

v7.0.2

Compare Source

This release has been unpublished

v7.0.1

Compare Source

Dependencies
  • Bump node-gyp from 7.1.2 to 8.4.1
  • Bump sass-graph from 2.2.5 to 4.0.0

Supported Environments

OS Architecture Node
Windows x86 & x64 12, 14, 16, 17
OSX x64 12, 14, 16, 17
Linux* x64 12, 14, 16, 17
Alpine Linux x64 12, 14, 16, 17
FreeBSD i386 amd64 12, 14

*Linux support refers to major distributions like Ubuntu, and Debian

v7.0.0

Compare Source

Breaking changes
Features
Dependencies
Community
Misc

Supported Environments

OS Architecture Node
Windows x86 & x64 12, 14, 16, 17
OSX x64 12, 14, 16, 17
Linux* x64 12, 14, 16, 17
Alpine Linux x64 12, 14, 16, 17
FreeBSD i386 amd64 12, 14

*Linux support refers to major distributions like Ubuntu, and Debian

v6.0.1

Compare Source

Dependencies
Misc

Supported Environments

OS Architecture Node
Windows x86 & x64 12, 14, 15, 16
OSX x64 12, 14, 15, 16
Linux* x64 12, 14, 15, 16
Alpine Linux x64 12, 14, 15, 16
FreeBSD i386 amd64 12, 14, 15

*Linux support refers to major distributions like Ubuntu, and Debian

v6.0.0

Compare Source

Breaking changes
Features
  • Add support for Node 16
Community

Supported Environments

OS Architecture Node
Windows x86 & x64 12, 14, 15, 16
OSX x64 12, 14, 15, 16
Linux* x64 12, 14, 15, 16
Alpine Linux x64 12, 14, 15, 16
FreeBSD i386 amd64 12, 14, 15

*Linux support refers to major distributions like Ubuntu, and Debian

v5.0.0

Compare Source

Breaking changes
Features
  • Add support for Node 15
  • New node-gyp version that supports building with Python 3
Community
Fixes

Supported Environments

OS Architecture Node
Windows x86 & x64 10, 12, 14, 15
OSX x64 10, 12, 14, 15
Linux* x64 10, 12, 14, 15
Alpine Linux x64 10, 12, 14, 15
FreeBSD i386 amd64 10, 12, 14, 15

*Linux support refers to major distributions like Ubuntu, and Debian

v4.14.1

Compare Source

Community
Fixes

Supported Environments

OS Architecture Node
Windows x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14
OSX x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14
Linux* x86 & x64 0.10, 0.12, 1, 2, 3, 4, 5, 6, 7, 8**, 9**, 10**^, 11**^, 12**^, 13**^, 14**^
Alpine Linux x64 6, 8, 10, 11, 12, 13, 14
FreeBSD i386 amd64 10, 12, 13

*Linux support refers to Ubuntu, Debian, and CentOS 5+
** Not available on CentOS 5
^ Only available on x64

v4.14.0

Compare Source

https://github.com/sass/node-sass/releases/tag/v4.14.0


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Apr 24, 2023
@mend-for-github-com mend-for-github-com bot changed the title Update dependency node-sass to v7 Update dependency node-sass to v7 - autoclosed Jun 16, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/node-sass-7.x branch June 16, 2023 12:14
@mend-for-github-com mend-for-github-com bot changed the title Update dependency node-sass to v7 - autoclosed Update dependency node-sass to v7 Jun 20, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/node-sass-7.x branch June 20, 2023 00:07
@mend-for-github-com mend-for-github-com bot reopened this Jun 20, 2023
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/node-sass-7.x branch from 38ad40e to df6c718 Compare June 20, 2023 00:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants