[Snyk] Upgrade sass from 1.25.0 to 1.63.6

[lidorg-dev]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade sass from 1.25.0 to 1.63.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 129 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2023-06-21.

Release notes

Package name: sass

• 1.63.6 - 2023-06-21
  

  To install Sass 1.63.6, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  JavaScript API

  • Fix import sass from 'sass' again after it was broken in the last release.

  Embedded Sass

  • Fix the exports declaration in package.json.

  See the full changelog for changes in earlier releases.

• 1.63.5 - 2023-06-21
  

  To install Sass 1.63.5, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  JavaScript API

  • Fix a bug where loading the package through both CJS require() and ESM import could crash on Node.js.

  Embedded Sass

  • Fix a deadlock when running at high concurrency on 32-bit systems.

  • Fix a race condition where the embedded compiler could deadlock or crash if a compilation ID was reused immediately after the compilation completed.

  See the full changelog for changes in earlier releases.

• 1.63.4 - 2023-06-14
  

  To install Sass 1.63.4, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  JavaScript API

  • Re-enable support for import sass from 'sass' when loading the package from an ESM module in Node.js. However, this syntax is now deprecated; ESM users should use import * as sass from 'sass' instead.

    On the browser and other ESM-only platforms, only import * as sass from 'sass' is supported.

  • Properly export the legacy API values TRUE, FALSE, NULL, and types from the ECMAScript module API.

  Embedded Sass

  • Fix a race condition where closing standard input while requests are in-flight could sometimes cause the process to hang rather than shutting down gracefully.

  • Properly include the root stylesheet's URL in the set of loaded URLs when it fails to parse.

  See the full changelog for changes in earlier releases.

• 1.63.3 - 2023-06-09
  

  To install Sass 1.63.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  JavaScript API

  • Fix loading Sass as an ECMAScript module on Node.js.

  See the full changelog for changes in earlier releases.

• 1.63.2 - 2023-06-08
  

  To install Sass 1.63.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  • No user-visible changes.

  See the full changelog for changes in earlier releases.

• 1.63.1 - 2023-06-08
  

  To install Sass 1.63.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  • No user-visible changes.

  See the full changelog for changes in earlier releases.

• 1.63.0 - 2023-06-07
• 1.62.1 - 2023-04-25
• 1.62.0 - 2023-04-11
• 1.61.0 - 2023-04-06
• 1.60.0 - 2023-03-23
• 1.59.3 - 2023-03-14
• 1.59.2 - 2023-03-11
• 1.59.1 - 2023-03-10
• 1.59.0 - 2023-03-10
• 1.58.3 - 2023-02-18
• 1.58.2 - 2023-02-17
• 1.58.1 - 2023-02-14
• 1.58.0 - 2023-02-01
• 1.57.1 - 2022-12-19
• 1.57.0 - 2022-12-17
• 1.56.2 - 2022-12-08
• 1.56.1 - 2022-11-09
• 1.56.0 - 2022-11-04
• 1.55.0 - 2022-09-21
• 1.54.9 - 2022-09-07
• 1.54.8 - 2022-08-31
• 1.54.7 - 2022-08-31
• 1.54.6 - 2022-08-29
• 1.54.5 - 2022-08-19
• 1.54.4 - 2022-08-10
• 1.54.3 - 2022-08-04
• 1.54.2 - 2022-08-03
• 1.54.1 - 2022-08-02
• 1.54.0 - 2022-07-22
• 1.53.0 - 2022-06-22
• 1.52.3 - 2022-06-08
• 1.52.2 - 2022-06-03
• 1.52.1 - 2022-05-20
• 1.52.0 - 2022-05-20
• 1.51.0 - 2022-04-26
• 1.50.1 - 2022-04-19
• 1.50.0 - 2022-04-07
• 1.49.11 - 2022-04-01
• 1.49.10 - 2022-03-30
• 1.49.9 - 2022-02-24
• 1.49.8 - 2022-02-17
• 1.49.7 - 2022-02-01
• 1.49.6 - 2022-02-01
• 1.49.5 - 2022-02-01
• 1.49.4 - 2022-02-01
• 1.49.3 - 2022-02-01
• 1.49.2 - 2022-02-01
• 1.49.1 - 2022-01-31
• 1.49.0 - 2022-01-18
• 1.48.0 - 2022-01-13
• 1.47.0 - 2022-01-07
• 1.46.0 - 2022-01-06
• 1.45.2 - 2021-12-31
• 1.45.1 - 2021-12-21
• 1.45.0 - 2021-12-10
• 1.45.0-rc.2 - 2021-12-02
• 1.45.0-rc.1 - 2021-11-30
• 1.44.0 - 2021-11-30
• 1.43.5 - 2021-11-24
• 1.43.4 - 2021-10-26
• 1.43.3 - 2021-10-21
• 1.43.2 - 2021-10-13
• 1.42.1 - 2021-09-22
• 1.42.0 - 2021-09-21
• 1.41.1 - 2021-09-16
• 1.41.0 - 2021-09-14
• 1.40.1 - 2021-09-14
• 1.40.0 - 2021-09-13
• 1.39.2 - 2021-09-10
• 1.39.1 - 2021-09-09
• 1.39.0 - 2021-09-02
• 1.38.2 - 2021-08-28
• 1.38.1 - 2021-08-23
• 1.38.0 - 2021-08-17
• 1.37.5 - 2021-08-04
• 1.37.4 - 2021-08-03
• 1.37.3 - 2021-08-03
• 1.37.2 - 2021-08-03
• 1.37.1 - 2021-08-02
• 1.37.0 - 2021-07-30
• 1.36.0 - 2021-07-23
• 1.35.2 - 2021-07-07
• 1.35.1 - 2021-06-15
• 1.35.0 - 2021-06-15
• 1.34.1 - 2021-06-02
• 1.34.0 - 2021-05-22
• 1.33.0 - 2021-05-21
• 1.32.13 - 2021-05-12
• 1.32.12 - 2021-04-28
• 1.32.11 - 2021-04-19
• 1.32.10 - 2021-04-16
• 1.32.9 - 2021-04-16
• 1.32.8 - 2021-02-18
• 1.32.7 - 2021-02-10
• 1.32.6 - 2021-02-01
• 1.32.5 - 2021-01-20
• 1.32.4 - 2021-01-12
• 1.32.3 - 2021-01-12
• 1.32.2 - 2021-01-07
• 1.32.1 - 2021-01-06
• 1.32.0 - 2020-12-30
• 1.30.0 - 2020-12-04
• 1.29.0 - 2020-11-05
• 1.28.0 - 2020-10-29
• 1.27.2 - 2020-10-29
• 1.27.1 - 2020-10-28
• 1.27.0 - 2020-10-08
• 1.26.12 - 2020-10-06
• 1.26.11 - 2020-09-18
• 1.26.10 - 2020-07-06
• 1.26.9 - 2020-06-22
• 1.26.8 - 2020-06-05
• 1.26.7 - 2020-05-29
• 1.26.6 - 2020-05-28
• 1.26.5 - 2020-04-24
• 1.26.3 - 2020-03-11
• 1.26.2 - 2020-02-29
• 1.26.1 - 2020-02-25
• 1.26.0 - 2020-02-24
• 1.26.0-test.3 - 2020-02-19
• 1.26.0-test.2 - 2020-02-14
• 1.26.0-test.1 - 2020-02-08
• 1.25.1-test.1 - 2020-01-25
• 1.25.0 - 2020-01-17

from sass GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[jit-ci]

❌ Jit has detected 1 important finding in this PR that you should review.
The finding is detailed below as a comment.
It’s highly recommended that you fix this security issue before merge.

[jit-ci]

Security control: Software Component Analysis Js

Type: Glob-Parent Before 5.1.2 Vulnerable To Regular Expression Denial Of Service In Enclosure Regex

Description: sass>chokidar>glob-parent

Is fix available? Yes

Severity: HIGH

Learn more about this issue

---

---

Jit Bot commands and options (e.g., ignore issue)

You can trigger Jit actions by commenting on this PR review:

• #jit_ignore_fp Ignore and mark this specific single instance of finding as “False Positive”
• #jit_ignore_accept Ignore and mark this specific single instance of finding as “Accept Risk”
• #jit_undo_ignore Undo ignore command