Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade sass from 1.51.0 to 1.79.3 #90

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

ryanwittmers
Copy link
Owner

Snyk has created this PR to upgrade sass from 1.51.0 to 1.79.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 78 versions ahead of your current version.
  • The recommended version was released 23 days ago, on 2024-09-20.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: sass
  • 1.79.3 - 2024-09-20

    To install Sass 1.79.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    • Update the $channel parameter in the suggested replacement for color.red(), color.green(), color.blue(), color.hue(), color.saturation(), color.lightness(), color.whiteness(), and color.blackness() to use a quoted string.

    See the full changelog for changes in earlier releases.

  • 1.79.2 - 2024-09-19

    To install Sass 1.79.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    • Add a $space parameter to the suggested replacement for color.red(), color.green(), color.blue(), color.hue(), color.saturation(), color.lightness(), color.whiteness(), and color.blackness().

    • Update deprecation warnings for the legacy JS API to include a link to relevant documentation.

    See the full changelog for changes in earlier releases.

  • 1.79.1 - 2024-09-18
  • 1.79.0 - 2024-09-17
  • 1.78.0 - 2024-09-03
  • 1.77.8 - 2024-07-11
  • 1.77.7 - 2024-07-09
  • 1.77.6 - 2024-06-17
  • 1.77.5 - 2024-06-11
  • 1.77.4 - 2024-05-30
  • 1.77.3 - 2024-05-29
  • 1.77.2 - 2024-05-16
  • 1.77.1 - 2024-05-10
  • 1.77.0 - 2024-05-07
  • 1.76.0 - 2024-04-30
  • 1.75.0 - 2024-04-11
  • 1.74.1 - 2024-04-04
  • 1.72.0 - 2024-03-13
  • 1.71.1 - 2024-02-21
  • 1.71.0 - 2024-02-16
  • 1.70.0 - 2024-01-18
  • 1.69.7 - 2024-01-02
  • 1.69.6 - 2023-12-28
  • 1.69.5 - 2023-10-26
  • 1.69.4 - 2023-10-17
  • 1.69.3 - 2023-10-12
  • 1.69.2 - 2023-10-10
  • 1.69.1 - 2023-10-09
  • 1.69.0 - 2023-10-05
  • 1.68.0 - 2023-09-21
  • 1.67.0 - 2023-09-14
  • 1.66.1 - 2023-08-18
  • 1.66.0 - 2023-08-17
  • 1.65.1 - 2023-08-09
  • 1.65.0 - 2023-08-09
  • 1.64.2 - 2023-07-31
  • 1.64.1 - 2023-07-22
  • 1.64.0 - 2023-07-20
  • 1.63.6 - 2023-06-21
  • 1.63.5 - 2023-06-21
  • 1.63.4 - 2023-06-14
  • 1.63.3 - 2023-06-09
  • 1.63.2 - 2023-06-08
  • 1.63.1 - 2023-06-08
  • 1.63.0 - 2023-06-07
  • 1.62.1 - 2023-04-25
  • 1.62.0 - 2023-04-11
  • 1.61.0 - 2023-04-06
  • 1.60.0 - 2023-03-23
  • 1.59.3 - 2023-03-14
  • 1.59.2 - 2023-03-11
  • 1.59.1 - 2023-03-10
  • 1.59.0 - 2023-03-10
  • 1.58.3 - 2023-02-18
  • 1.58.2 - 2023-02-17
  • 1.58.1 - 2023-02-14
  • 1.58.0 - 2023-02-01
  • 1.57.1 - 2022-12-19
  • 1.57.0 - 2022-12-17
  • 1.56.2 - 2022-12-08
  • 1.56.1 - 2022-11-09
  • 1.56.0 - 2022-11-04
  • 1.55.0 - 2022-09-21
  • 1.54.9 - 2022-09-07
  • 1.54.8 - 2022-08-31
  • 1.54.7 - 2022-08-31
  • 1.54.6 - 2022-08-29
  • 1.54.5 - 2022-08-19
  • 1.54.4 - 2022-08-10
  • 1.54.3 - 2022-08-04
  • 1.54.2 - 2022-08-03
  • 1.54.1 - 2022-08-02
  • 1.54.0 - 2022-07-22
  • 1.53.0 - 2022-06-22
  • 1.52.3 - 2022-06-08
  • 1.52.2 - 2022-06-03
  • 1.52.1 - 2022-05-20
  • 1.52.0 - 2022-05-20
  • 1.51.0 - 2022-04-26
from sass GitHub release notes
Commit messages
Package name: sass
  • b85ef9c Quote `$channel` in channel function replacement suggestions (#2361)
  • fa4827f Add documentation link to legacy-js-api warning (#2355)
  • 7c3f5e2 Add a `$space` parameter to the channel function deprecation (#2354)
  • 5fa04d3 Fix sass-parser publishing (#2349)
  • d740d02 Emit deprecation warnings for the legacy JS API (#2343)
  • a957eea Bump chokidar to v4 (#2347)
  • aa35aa2 Bump bufbuild/buf-setup-action in /.github/util/initialize (#2346)
  • f826ed2 Stop emitting `mixed-decls` in a bunch of unnecessary cases (#2342)
  • 2f0d0da Merge pull request #2341 from sass/feature.color-4
  • de181d9 Poke CI
  • 34f98c7 Update color API tests
  • 422f037 Fix a typo
  • 4db68a1 Merge pull request #2339 from sass/merge-main
  • 8f8467a Merge branch 'main' of github.com:sass/dart-sass into merge-main
  • 4fa5a02 Use a `file:` dependency for sass-parser -> sass (#2340)
  • 519ce69 Merge branch 'main' of github.com:sass/dart-sass into feature.color-4
  • 05e1691 Bump bufbuild/buf-setup-action in /.github/util/initialize (#2338)
  • 6848763 Merge pull request #2337 from sass/even-more-statements
  • d9e854a Add support for silent comments
  • cf918bc Add support for `@ media`
  • 717867b Add a future global-builtin deprecation (#2336)
  • 5dff2e8 Merge pull request #2317 from sass/more-statements
  • 7784231 Add support for loud comments
  • 21819c3 Add support for `@ for` rules

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants