[Snyk] Upgrade sass from 1.43.4 to 1.53.0

[ReneWerner87]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade sass from 1.43.4 to 1.53.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 30 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2022-06-22.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Information Exposure SNYK-JS-NODEFETCH-2342118	539/1000 Why? Has a fix available, CVSS 6.5	No Known Exploit
	User Interface (UI) Misrepresentation of Critical Information SNYK-JS-NEXT-2405694	539/1000 Why? Has a fix available, CVSS 6.5	No Known Exploit
	Denial of Service (DoS) SNYK-JS-NEXT-2388583	539/1000 Why? Has a fix available, CVSS 6.5	No Known Exploit
	Information Exposure SNYK-JS-NANOID-2332193	539/1000 Why? Has a fix available, CVSS 6.5	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-2429795	539/1000 Why? Has a fix available, CVSS 6.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: sass

• 1.53.0 - 2022-06-22
• 1.52.3 - 2022-06-08
• 1.52.2 - 2022-06-03
• 1.52.1 - 2022-05-20
• 1.52.0 - 2022-05-20
• 1.51.0 - 2022-04-26
• 1.50.1 - 2022-04-19
• 1.50.0 - 2022-04-07
• 1.49.11 - 2022-04-01
• 1.49.10 - 2022-03-30
• 1.49.9 - 2022-02-24
• 1.49.8 - 2022-02-17
• 1.49.7 - 2022-02-01
• 1.49.6 - 2022-02-01
• 1.49.5 - 2022-02-01
• 1.49.4 - 2022-02-01
• 1.49.3 - 2022-02-01
• 1.49.2 - 2022-02-01
• 1.49.1 - 2022-01-31
• 1.49.0 - 2022-01-18
• 1.48.0 - 2022-01-13
• 1.47.0 - 2022-01-07
• 1.46.0 - 2022-01-06
• 1.45.2 - 2021-12-31
• 1.45.1 - 2021-12-21
• 1.45.0 - 2021-12-10
• 1.45.0-rc.2 - 2021-12-02
• 1.45.0-rc.1 - 2021-11-30
• 1.44.0 - 2021-11-30
• 1.43.5 - 2021-11-24
• 1.43.4 - 2021-10-26

from sass GitHub release notes

Commit messages

Package name: sass

• fd4a30f Cut a release (#1726)
• c5e1f0b Add support for `var()` with an empty fallback argument (#1723)
• 8705c06 Fix a buggy interaction between meta.load-css and the legacy JS API (#1722)
• 4d6b762 Add a changelog entry for Use make-fetch-happen instead of node-fetch when downloading compiler sass/embedded-host-node#117 (#1719)
• 270f5c4 Deploy the Sass website using GitHub pages rather than Heroku (#1718)
• ae6275e fix serializing loud comment crash when importing the same file twice in a row (#1713)
• 44c2966 Add changelog for PR #849 about preserving trailing loud comment location (#1709)
• 1faf81c Fix #417 preserve the location of trailing loud comments (#849)
• cb74cc4 Run qemu in tmpfs (#1707)
• 46c2c9b Remove unused methods (#1702)
• e69d903 Mention Jest globals differ from Node globals jestjs/jest#2549 in the README (#1700)
• d17f70f Revert "Abort sass if stdin is closed when watching (#1411)" (#1699)
• 561fe25 Use "dart pub publish" instead of "pub publish" (#1698)
• fa0d2fb Add support for arbitrary modifiers after @ import (#1695)
• b19b3b1 Fix assertUnit and assertNoUnits (#1686)
• 2e7db70 Add documentation for using it with Docker (#1684)
• 1e211d6 Escape the source map URL before using it in a CSS comment (#1676)
• 7004d49 Fix the tracking of variable nodes for scopes (#1681)
• 0c24114 Update the order of maps returned by map.deep-merge() (#1680)
• 6eed6eb Fix the string representations of the Sass AST (#1682)
• fbd450b Cut a release (#1671)
• 3dbb552 Add a changelog entry for Treat null importer as noOp if url is not a file: url sass/dart-sass-embedded#83 and Set a FileSystemImporter if custom importer is not given for legacy API sass/embedded-host-node#128 (#1668)
• 039f2ad Add support for :where() (#1662)
• c7ab426 Abort sass if stdin is closed when watching (#1411)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs