[Snyk] Upgrade sass from 1.58.3 to 1.61.0

[snyk-bot]

Snyk has created this PR to upgrade sass from 1.58.3 to 1.61.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 6 versions ahead of your current version.
• The recommended version was released 25 days ago, on 2023-04-06.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-FASTXMLPARSER-3325616	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Sandbox Bypass SNYK-JS-WEBPACK-3358798	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: sass

• 1.61.0 - 2023-04-06
  

  To install Sass 1.61.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  • Potentially breaking change: Drop support for End-of-Life Node.js 12.

  • Fix remaining cases for the performance regression introduced in 1.59.0.

  Embedded Sass

  • The JS embedded host now loads files from the working directory when using the legacy API.

  See the full changelog for changes in earlier releases.

• 1.60.0 - 2023-03-23
  

  To install Sass 1.60.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  • Add support for the pi, e, infinity, -infinity, and NaN constants in calculations. These will be interpreted as the corresponding numbers.

  • Add support for unknown constants in calculations. These will be interpreted as unquoted strings.

  • Serialize numbers with value infinity, -infinity, and NaN to calc() expressions rather than CSS-invalid identifiers. Numbers with complex units still can't be serialized.

  See the full changelog for changes in earlier releases.

• 1.59.3 - 2023-03-14
  

  To install Sass 1.59.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  • Fix a performance regression introduced in 1.59.0.

  • The NPM release of 1.59.0 dropped support for Node 12 without actually indicating so in its pubspec. This release temporarily adds back support so that the latest Sass version that declares it supports Node 12 actually does so. However, Node 12 is now end-of-life, so we will drop support for it properly in an upcoming release.

  See the full changelog for changes in earlier releases.

• 1.59.2 - 2023-03-11
• 1.59.1 - 2023-03-10
• 1.59.0 - 2023-03-10
• 1.58.3 - 2023-02-18

from sass GitHub release notes

Commit messages

Package name: sass

• 702a7ee Fix the performance of selector span expansion (#1929)
• 4ddd8f5 Add a changelog entry for Fix resolving against the working directory in legacy API sass/embedded-host-node#212 (#1928)
• 60b8be6 Remove Node 12 from CI (#1925)
• c6e7dbc Require node>=14.0.0 (#1911)
• f5a3dea Add support for constants in calculations (#1922)
• 09a5f09 Fix performance regression from selector spans (#1916)
• b540d59 Release 1.59.2 (#1908)
• d0ca8e0 Fix macOS arm64 build and release a new version (#1906)
• 8f8138d Add --fatal-deprecations and --future-deprecations (#1820)
• 9417b6e Track original source spans for selectors (#1903)
• 434f2b9 Remove workaround for Automatically choose the correct architecture dart-lang/setup-dart#59 (#1904)
• f022e02 Improve errors for invalid CSS values passed to CSS functions (#1901)
• eb1ced1 Pull @ font-face out to root (#1899)
• 664a670 Add a changelog entry for Improve launch performance by skipping wrapper script sass/embedded-host-node#207 (#1898)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs