[Snyk] Upgrade sass from 1.43.4 to 1.53.0 #59

ReneWerner87 · 2022-08-11T20:20:28Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade sass from 1.43.4 to 1.53.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 30 versions ahead of your current version.
The recommended version was released 2 months ago, on 2022-06-22.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Information Exposure SNYK-JS-NODEFETCH-2342118	539/1000 Why? Has a fix available, CVSS 6.5	No Known Exploit
User Interface (UI) Misrepresentation of Critical Information SNYK-JS-NEXT-2405694	539/1000 Why? Has a fix available, CVSS 6.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-NEXT-2388583	539/1000 Why? Has a fix available, CVSS 6.5	No Known Exploit
Information Exposure SNYK-JS-NANOID-2332193	539/1000 Why? Has a fix available, CVSS 6.5	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-2429795	539/1000 Why? Has a fix available, CVSS 6.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: sass

1.53.0 - 2022-06-22
1.52.3 - 2022-06-08
1.52.2 - 2022-06-03
1.52.1 - 2022-05-20
1.52.0 - 2022-05-20
1.51.0 - 2022-04-26
1.50.1 - 2022-04-19
1.50.0 - 2022-04-07
1.49.11 - 2022-04-01
1.49.10 - 2022-03-30
1.49.9 - 2022-02-24
1.49.8 - 2022-02-17
1.49.7 - 2022-02-01
1.49.6 - 2022-02-01
1.49.5 - 2022-02-01
1.49.4 - 2022-02-01
1.49.3 - 2022-02-01
1.49.2 - 2022-02-01
1.49.1 - 2022-01-31
1.49.0 - 2022-01-18
1.48.0 - 2022-01-13
1.47.0 - 2022-01-07
1.46.0 - 2022-01-06
1.45.2 - 2021-12-31
1.45.1 - 2021-12-21
1.45.0 - 2021-12-10
1.45.0-rc.2 - 2021-12-02
1.45.0-rc.1 - 2021-11-30
1.44.0 - 2021-11-30
1.43.5 - 2021-11-24
1.43.4 - 2021-10-26

from sass GitHub release notes

Commit messages

Package name: sass

fd4a30f Cut a release (#1726)
c5e1f0b Add support for `var()` with an empty fallback argument (#1723)
8705c06 Fix a buggy interaction between meta.load-css and the legacy JS API (#1722)
4d6b762 Add a changelog entry for Use make-fetch-happen instead of node-fetch when downloading compiler sass/embedded-host-node#117 (#1719)
270f5c4 Deploy the Sass website using GitHub pages rather than Heroku (#1718)
ae6275e fix serializing loud comment crash when importing the same file twice in a row (#1713)
44c2966 Add changelog for PR #849 about preserving trailing loud comment location (#1709)
1faf81c Fix #417 preserve the location of trailing loud comments (#849)
cb74cc4 Run qemu in tmpfs (#1707)
46c2c9b Remove unused methods (#1702)
e69d903 Mention Jest globals differ from Node globals jestjs/jest#2549 in the README (#1700)
d17f70f Revert "Abort sass if stdin is closed when watching (#1411)" (#1699)
561fe25 Use "dart pub publish" instead of "pub publish" (#1698)
fa0d2fb Add support for arbitrary modifiers after @ import (#1695)
b19b3b1 Fix assertUnit and assertNoUnits (#1686)
2e7db70 Add documentation for using it with Docker (#1684)
1e211d6 Escape the source map URL before using it in a CSS comment (#1676)
7004d49 Fix the tracking of variable nodes for scopes (#1681)
0c24114 Update the order of maps returned by map.deep-merge() (#1680)
6eed6eb Fix the string representations of the Sass AST (#1682)
fbd450b Cut a release (#1671)
3dbb552 Add a changelog entry for Treat null importer as noOp if url is not a file: url sass/dart-sass-embedded#83 and Set a FileSystemImporter if custom importer is not given for legacy API sass/embedded-host-node#128 (#1668)
039f2ad Add support for :where() (#1662)
c7ab426 Abort sass if stdin is closed when watching (#1411)