[Snyk] Upgrade sass from 1.55.0 to 1.70.0

[itskarelleh]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade sass from 1.55.0 to 1.70.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 42 versions ahead of your current version.
• The recommended version was released 23 days ago, on 2024-01-18.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	432/1000 Why? Proof of Concept exploit, CVSS 6.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: sass

• 1.70.0 - 2024-01-18
  

  To install Sass 1.70.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  JavaScript API

  • Add a sass.initCompiler() function that returns a sass.Compiler object which supports compile() and compileString() methods with the same API as the global Sass object. On the Node.js embedded host, each sass.Compiler object uses a single long-lived subprocess, making compiling multiple stylesheets much more efficient.

  • Add a sass.initAsyncCompiler() function that returns a sass.AsyncCompiler object which supports compileAsync() and compileStringAsync() methods with the same API as the global Sass object. On the Node.js embedded host, each sass.AsynCompiler object uses a single long-lived subprocess, making compiling multiple stylesheets much more efficient.

  Embedded Sass

  • Support the CompileRequest.silent field. This allows compilations with no logging to avoid unnecessary request/response cycles.

  • The Dart Sass embedded compiler now reports its name as "dart-sass" rather than "Dart Sass", to match the JS API's info field.

  See the full changelog for changes in earlier releases.

• 1.69.7 - 2024-01-02
  

  To install Sass 1.69.7, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  Embedded Sass

  • In the JS Embedded Host, properly install the x64 Dart Sass executable on ARM64 Windows.

  See the full changelog for changes in earlier releases.

• 1.69.6 - 2023-12-28
  

  To install Sass 1.69.6, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  • Produce better output for numbers with complex units in meta.inspect() and debugging messages.

  • Escape U+007F DELETE when serializing strings.

  • When generating CSS error messages to display in-browser, escape all code points that aren't in the US-ASCII region. Previously only code points U+0100 LATIN CAPITAL LETTER A WITH MACRON were escaped.

  • Provide official releases for musl LibC and for Android.

  • Don't crash when running meta.apply() in asynchronous mode.

  JS API

  • Fix a bug where certain exceptions could produce SourceSpans that didn't follow the documented SourceSpan API.

  See the full changelog for changes in earlier releases.

• 1.69.5 - 2023-10-26
  

  To install Sass 1.69.5, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  JS API

  • Compatibility with Node.js 21.0.0.

  See the full changelog for changes in earlier releases.

• 1.69.4 - 2023-10-17
  

  To install Sass 1.69.4, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  • No user-visible changes.

  See the full changelog for changes in earlier releases.

• 1.69.3 - 2023-10-12
• 1.69.2 - 2023-10-10
• 1.69.1 - 2023-10-09
• 1.69.0 - 2023-10-05
• 1.68.0 - 2023-09-21
• 1.67.0 - 2023-09-14
• 1.66.1 - 2023-08-18
• 1.66.0 - 2023-08-17
• 1.65.1 - 2023-08-09
• 1.65.0 - 2023-08-09
• 1.64.2 - 2023-07-31
• 1.64.1 - 2023-07-22
• 1.64.0 - 2023-07-20
• 1.63.6 - 2023-06-21
• 1.63.5 - 2023-06-21
• 1.63.4 - 2023-06-14
• 1.63.3 - 2023-06-09
• 1.63.2 - 2023-06-08
• 1.63.1 - 2023-06-08
• 1.63.0 - 2023-06-07
• 1.62.1 - 2023-04-25
• 1.62.0 - 2023-04-11
• 1.61.0 - 2023-04-06
• 1.60.0 - 2023-03-23
• 1.59.3 - 2023-03-14
• 1.59.2 - 2023-03-11
• 1.59.1 - 2023-03-10
• 1.59.0 - 2023-03-10
• 1.58.3 - 2023-02-18
• 1.58.2 - 2023-02-17
• 1.58.1 - 2023-02-14
• 1.58.0 - 2023-02-01
• 1.57.1 - 2022-12-19
• 1.57.0 - 2022-12-17
• 1.56.2 - 2022-12-08
• 1.56.1 - 2022-11-09
• 1.56.0 - 2022-11-04
• 1.55.0 - 2022-09-21

from sass GitHub release notes

Commit messages

Package name: sass

• 076414d [Shared Resources] dart-sass implementation (#2134)
• 0d91c92 Support CompileRequest.silent of embedded protocol (#2160)
• b263a72 Use implementation name dart-sass for VersionResponse (#2156)
• 006baa5 Update the pubspec and changelog for Correct usage on win32-on-arm64 platforms to look for x64 native variant sass/embedded-host-node#266 (#2158)
• 6205eac Add wait time before update website (#2153)
• f3c7be5 Make meta.apply() an AsyncBuiltInCallable (#2152)
• 1fc740d Upload releases for musl-libc and android (#2149)
• 6f665c1 Escape unprintable 0x7F (delete control character) (#2144)
• f5dab76 Bump dartdoc from 7.0.2 to 8.0.2 (#2146)
• 4daf0b4 Escape non-US-ASCII characters in `SassException.toCssString()` (#2143)
• cd798bf Improve inspect() output for complex units (#2138)
• bd80c58 Make LazyFileSpans work in JavaScript (#2142)
• 13830a5 Fix new recommended lints (#2139)
• cd3b0cc Update link to Node.js releases page (#2131)
• dd56d28 Write implementation documentation (#2042)
• 54caf19 Remove dead code (#2129)
• 89dac15 Add compatibility with Node.js 21.0.0 (#2128)
• 69d0f07 Bump lints from 2.1.1 to 3.0.0 (#2126)
• ac25a70 Bump dartdoc from 6.3.0 to 7.0.0 (#2118)
• f40c1fc Cut a release (#2120)
• 44dceea Update pubspec and changelog for Fix exports for TypeScript types sass/embedded-host-node#257 (#2116)
• c62fe6a Fix crash in browser when running alongside NextJS (#2114)
• 887c511 Cut another release (#2111)
• 8e6a26c Cut a release (#2107)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
notes-app	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Feb 9, 2024 9:53pm