[Snyk] Upgrade sass from 1.54.4 to 1.62.1 #3
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade sass from 1.54.4 to 1.62.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-LOADERUTILS-3043105
Why? CVSS 7.5
SNYK-JS-COOKIEJAR-3149984
Why? CVSS 7.5
SNYK-JS-JSON5-3182856
Why? CVSS 7.5
SNYK-JS-LOADERUTILS-3042992
Why? CVSS 7.5
SNYK-JS-LOADERUTILS-3105943
Why? CVSS 7.5
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: sass
To install Sass 1.62.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
:has(+ &)
and related constructs would drop the leading combinator.See the full changelog for changes in earlier releases.
To install Sass 1.62.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
Deprecate the use of multiple
!global
or!default
flags on the same variable. This deprecation is namedduplicate-var-flags
.Allow special numbers like
var()
orcalc()
in the global functions:grayscale()
,invert()
,saturate()
, andopacity()
. These are also native CSSfilter
functions. This is in addition to number values which were already allowed.Fix a cosmetic bug where an outer rule could be duplicated after nesting was resolved, instead of re-using a shared rule.
See the full changelog for changes in earlier releases.
To install Sass 1.61.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
Potentially breaking change: Drop support for End-of-Life Node.js 12.
Fix remaining cases for the performance regression introduced in 1.59.0.
Embedded Sass
See the full changelog for changes in earlier releases.
To install Sass 1.60.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
Add support for the
pi
,e
,infinity
,-infinity
, andNaN
constants in calculations. These will be interpreted as the corresponding numbers.Add support for unknown constants in calculations. These will be interpreted as unquoted strings.
Serialize numbers with value
infinity
,-infinity
, andNaN
tocalc()
expressions rather than CSS-invalid identifiers. Numbers with complex units still can't be serialized.See the full changelog for changes in earlier releases.
To install Sass 1.59.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
Fix a performance regression introduced in 1.59.0.
The NPM release of 1.59.0 dropped support for Node 12 without actually indicating so in its pubspec. This release temporarily adds back support so that the latest Sass version that declares it supports Node 12 actually does so. However, Node 12 is now end-of-life, so we will drop support for it properly in an upcoming release.
See the full changelog for changes in earlier releases.
Commit messages
Package name: sass
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs