[Snyk] Upgrade sass from 1.52.1 to 1.67.0

[aqianhei]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade sass from 1.52.1 to 1.67.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 46 versions ahead of your current version.
• The recommended version was released a month ago, on 2023-09-14.

Release notes

Package name: sass

• 1.67.0 - 2023-09-14
  

  To install Sass 1.67.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  • All functions defined in CSS Values and Units 4 are now once again parsed as calculation objects: round(), mod(), rem(), sin(), cos(), tan(), asin(), acos(), atan(), atan2(), pow(), sqrt(), hypot(), log(), exp(), abs(), and sign().

    Unlike in 1.65.0, function calls are not locked into being parsed as calculations or plain Sass functions at parse-time. This means that user-defined functions will take precedence over CSS calculations of the same name. Although the function names calc() and clamp() are still forbidden, users may continue to freely define functions whose names overlap with other CSS calculations (including abs(), min(), max(), and round() whose names overlap with global Sass functions).

  • As a consequence of the change in calculation parsing described above, calculation functions containing interpolation are now parsed more strictly than before. However, all interpolations that would have produced valid CSS will continue to work, so this is not considered a breaking change.

  • Interpolations in calculation functions that aren't used in a position that could also have a normal calculation value are now deprecated. For example, calc(1px #{"+ 2px"}) is deprecated, but calc(1px + #{"2px"}) is still allowed. This deprecation is named calc-interp. See the Sass website for more information.

  • Potentially breaking bug fix: The importer used to load a given file is no longer used to load absolute URLs that appear in that file. This was unintented behavior that contradicted the Sass specification. Absolute URLs will now correctly be loaded only from the global importer list. This applies to the modern JS API, the Dart API, and the embedded protocol.

  Embedded Sass

  • Substantially improve the embedded compiler's performance when compiling many files or files that require many importer or function call round-trips with the embedded host.

  See the full changelog for changes in earlier releases.

• 1.66.1 - 2023-08-18
• 1.66.0 - 2023-08-17
• 1.65.1 - 2023-08-09
• 1.65.0 - 2023-08-09
• 1.64.2 - 2023-07-31
• 1.64.1 - 2023-07-22
• 1.64.0 - 2023-07-20
• 1.63.6 - 2023-06-21
• 1.63.5 - 2023-06-21
• 1.63.4 - 2023-06-14
• 1.63.3 - 2023-06-09
• 1.63.2 - 2023-06-08
• 1.63.1 - 2023-06-08
• 1.63.0 - 2023-06-07
• 1.62.1 - 2023-04-25
• 1.62.0 - 2023-04-11
• 1.61.0 - 2023-04-06
• 1.60.0 - 2023-03-23
• 1.59.3 - 2023-03-14
• 1.59.2 - 2023-03-11
• 1.59.1 - 2023-03-10
• 1.59.0 - 2023-03-10
• 1.58.3 - 2023-02-18
• 1.58.2 - 2023-02-17
• 1.58.1 - 2023-02-14
• 1.58.0 - 2023-02-01
• 1.57.1 - 2022-12-19
• 1.57.0 - 2022-12-17
• 1.56.2 - 2022-12-08
• 1.56.1 - 2022-11-09
• 1.56.0 - 2022-11-04
• 1.55.0 - 2022-09-21
• 1.54.9 - 2022-09-07
• 1.54.8 - 2022-08-31
• 1.54.7 - 2022-08-31
• 1.54.6 - 2022-08-29
• 1.54.5 - 2022-08-19
• 1.54.4 - 2022-08-10
• 1.54.3 - 2022-08-04
• 1.54.2 - 2022-08-03
• 1.54.1 - 2022-08-02
• 1.54.0 - 2022-07-22
• 1.53.0 - 2022-06-22
• 1.52.3 - 2022-06-08
• 1.52.2 - 2022-06-03
• 1.52.1 - 2022-05-20

from sass GitHub release notes

Commit messages

Package name: sass

• 5c31d1f Re-enable new calculation functions (#2080)
• bdb145f Fix example (#2074)
• 77e208c Run cli compilations in parallel dart isolates (#2078)
• fddf421 Don't try to load absolute URLs from the base importer (#2077)
• af0118a Improve `sass --embedded` performance (#2013)
• 58cbab4 Stop working around Bogus unnecessary_this with pattern matching and shadowing dart-lang/linter#4381 (#2071)
• 8f0eca3 Update README.md (#2069)
• aa53bd0 Use wrapJSExceptions() to work around dart2js crashes when catching a JS string in strict mode dart-lang/sdk#53105 (#2055)
• e70cd5a Merge pull request #2067 from sass/revert-calc
• a6a06b7 Update pubspec and changelog and re-add abs-percent deprecation
• 458852d Revert "Calc functions implementation (#1970)"
• 86a2f42 Revert "Update abs-percent deprecatedIn version (#2057)"
• 4a86812 Bump http from 0.13.6 to 1.1.0 (#2062)
• bb24476 Update abs-percent deprecatedIn version (#2057)
• e4c8cd6 Calc functions implementation (#1970)
• 4c3bd0e Deprecate explicitly passing null as an alpha value (#2049)
• 8802c69 Add ignores to work around Bogus unnecessary_this with pattern matching and shadowing dart-lang/linter#4381 (#2053)
• 17e3a48 Convert Sass to Dart 3 style (#2038)
• 8e5e7fc Add a pubignore so pub knows to publish protobuf files (#2050)
• 890fc17 Include protobuf definitions in the pub package (#2048)
• 3367abe Bump the sass_api version (#2044)
• 2836216 Fix deprotofy SassCalculation.clamp (#2043)
• b1d56a4 Change terminology to refer to JS instead of Node.js (#2039)
• 89bd36b Revert "Start writing implementation documentation"

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs