[Snyk] Upgrade sass-loader from 12.6.0 to 14.2.1

[YoutacRandS-VA]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade sass-loader from 12.6.0 to 14.2.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

• The recommended version is 16 versions ahead of your current version.

• The recommended version was released on 2 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-WS-7266574	554	Proof of Concept
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	554	Proof of Concept
	Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	554	Proof of Concept
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	554	No Known Exploit
	Path Traversal SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555	554	Proof of Concept
	Denial of Service (DoS) SNYK-JS-WS-7266574	554	Proof of Concept
	Open Redirect SNYK-JS-EXPRESS-6474509	554	No Known Exploit
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	554	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6147607	554	Proof of Concept
	Malicious Package SNYK-JS-SPICYSECTIONS-3038484	554	Mature

Release notes

Package name: sass-loader

• 14.2.1 - 2024-04-16
  

  14.2.1 (2024-04-16)

  Bug Fixes

  • avoid multiple sass compiler creation (#1199) (77051d8)
• 14.2.0 - 2024-04-11
  

  14.2.0 (2024-04-11)

  Features

  • added the modern-compiler value for API to reuse compiler process (#1195) (cef40a8)
  • support webpack built-in resolver for modern and modern-compiler API (#1197) (2265b72)

  Notes:

  Using the modern-compiler value for the api option together with sass-embedded reduces compilation time by 5-10 times, especially for projects using large files with a lot of @ import/@ use, for small files the build time reduction will not be significant.

• 14.1.1 - 2024-02-19
  

  14.1.1 (2024-02-19)

  Bug Fixes

  • handle pkg: scheme (#1191) (c34c8e3)
• 14.1.0 - 2024-01-30
  

  14.1.0 (2024-01-30)

  Features

  • add @ rspack/core as an optional peer dependency (#1184) (637ba5b)
• 14.0.0 - 2024-01-15
  

  14.0.0 (2024-01-15)

  ⚠ BREAKING CHANGES

  • removed fibers support
  • minimum supported Node.js version is 18.12.0 (627f55d)
• 13.3.3 - 2023-12-25
  

  13.3.3 (2023-12-25)

  Bug Fixes

  • sass embedded importer detection (e34f938)
  • warning output (#1173) (0084b93)
• 13.3.2 - 2023-06-09
  

  13.3.2 (2023-06-09)

  Bug Fixes

  • perf: avoid using klona for sass options (#1145) (9e87b6b)
• 13.3.1 - 2023-05-28
• 13.3.0 - 2023-05-22
• 13.2.2 - 2023-03-27
• 13.2.1 - 2023-03-18
• 13.2.0 - 2022-11-09
• 13.1.0 - 2022-10-06
• 13.0.2 - 2022-06-27
• 13.0.1 - 2022-06-24
• 13.0.0 - 2022-05-18
• 12.6.0 - 2022-02-15

from sass-loader GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs