[Snyk] Upgrade sass from 1.53.0 to 1.58.3

[snyk-bot]

Snyk has created this PR to upgrade sass from 1.53.0 to 1.58.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 20 versions ahead of your current version.
• The recommended version was released a month ago, on 2023-02-18.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-JSON5-3182856	427/1000 Why? Proof of Concept exploit, CVSS 6.4	Proof of Concept
	Prototype Pollution SNYK-JS-JSON5-3182856	427/1000 Why? Proof of Concept exploit, CVSS 6.4	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: sass

• 1.58.3 - 2023-02-18
  

  To install Sass 1.58.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  • No user-visible changes.

  See the full changelog for changes in earlier releases.

• 1.58.2 - 2023-02-17
• 1.58.1 - 2023-02-14
• 1.58.0 - 2023-02-01
• 1.57.1 - 2022-12-19
• 1.57.0 - 2022-12-17
• 1.56.2 - 2022-12-08
• 1.56.1 - 2022-11-09
• 1.56.0 - 2022-11-04
• 1.55.0 - 2022-09-21
• 1.54.9 - 2022-09-07
• 1.54.8 - 2022-08-31
• 1.54.7 - 2022-08-31
• 1.54.6 - 2022-08-29
• 1.54.5 - 2022-08-19
• 1.54.4 - 2022-08-10
• 1.54.3 - 2022-08-04
• 1.54.2 - 2022-08-03
• 1.54.1 - 2022-08-02
• 1.54.0 - 2022-07-22
• 1.53.0 - 2022-06-22

from sass GitHub release notes

Commit messages

Package name: sass

• 620d8d3 Cut a release to include Fix npm release sass/embedded-host-node#206 (Add Release Schedule nodejs/nodejs.org#1890)
• c452388 Add timestamp to printed compile statement ( fa: quick fix for "missed space and comma in the main page headline" and HTML in releases page nodejs/nodejs.org#1876)
• 13cc7d2 Improve the suggested replacements for unary minus in /-as-division (zh-CN: Translation for the governance.md nodejs/nodejs.org#1888)
• c8b4cd0 Don't emit "deg" for hsl hues (Fixed typo nodejs/nodejs.org#1885)
• d2bc710 Update and lock sass_api version when releasing dart-sass-embedded (Add a link to the guides page nodejs/nodejs.org#1878)
• 5eb66fc Fixes typos (zh-CN: Add new link to doc's guides nodejs/nodejs.org#1879)
• 6310dfb Update synchronization tests to verify the entire file (Blog: v11.1.0 release post nodejs/nodejs.org#1880)
• 98fe9a4 Track dependencies through `meta.load-css()` with `--watch` (Fix style typo error for "releases.md" nodejs/nodejs.org#1877)
• 5a521b8 Add all CSS length units in known compatibilities (blog: v10.13.0 release post nodejs/nodejs.org#1868)
• 499965a Update CI Node versions to 18/16/14 (Improve Persian translation nodejs/nodejs.org#1871)
• 0006924 Fix escaped backslash crash (Node LTS ENOENT: no such file or directory 32 bits Lubuntu nodejs/nodejs.org#1870)
• 0248608 Return an error when using a custom property in a propset instead of crashing (fa: translate locale Persian "fa" (#1866) nodejs/nodejs.org#1874)
• b98fa4f Fix an edge case in superselector computation (fa: Create Nodejs Doc files in Persian nodejs/nodejs.org#1866)
• 14c1634 Don't crash when parsing `+.` (doc: Add the missing versions of Nodejs APIs' links nodejs/nodejs.org#1865)
• aceb1e8 Remove sourcemap comments from Sass sources (zh-cn: link to Node.js Foundation calendar nodejs/nodejs.org#1860)
• 441be80 Delete dead code (zh-CN: fix the wrong variable name nodejs/nodejs.org#1864)
• 5522c17 Run "dart pub upgrade" rather than "pub upgrade" (Sync Spanish docs index page with the English version nodejs/nodejs.org#1851)
• 4349769 Create dependabot.yml (Specify the correct layout for Current release for fr locale nodejs/nodejs.org#1849)
• 100f76f Implement string.split() (zh-CN: New translation for 'abi-stability.md' nodejs/nodejs.org#1839)
• 236b83f Delete dev dependency on Sass when releasing the embedded compiler (nodejs-en: Update Get Involved - Node.js text nodejs/nodejs.org#1850)
• 641d8e1 Be strict about whitespace in custom functions (Download: Fix 'current' page layouts nodejs/nodejs.org#1848)
• e87176a Add a factory method for creating host callable (Do we need a document-abandoned request for nodejs/iojs.org in GOVERNANCE.md？ nodejs/nodejs.org#1829)
• 790eb8a Update CHANGELOG for embedded-host-node fixes (guides: add ABI stability guide nodejs/nodejs.org#1828)
• f3293db JS API: Validate that importer result 'contents' is a `string` and improve ArgumentError output (Blog: v10.11.0 release post nodejs/nodejs.org#1816)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[changeset-bot]

⚠️ No Changeset found

Latest commit: f345ff1

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR