CSC510-Group-25 / feature-hunt

A feature collection platform where users can share/vote/discuss feature requests and product owners can organize them
MIT License
0 stars 6 forks source link

[Snyk] Upgrade sass from 1.39.0 to 1.42.1 #27

Closed snyk-bot closed 2 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to upgrade sass from 1.39.0 to 1.42.1.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-SETVALUE-1540541
365/1000
Why? CVSS 7.3
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: sass
  • 1.42.1 - 2021-09-22

    To install Sass 1.42.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    • Fix a bug where Sass variables and function calls in calculations weren't being resolved correctly if there was a parenthesized interpolation elsewhere in the file.

    See the full changelog for changes in earlier releases.

  • 1.42.0 - 2021-09-21

    To install Sass 1.42.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    • min() and max() expressions are once again parsed as calculations as long as they contain only syntax that's allowed in calculation expressions. To avoid the backwards-compatibility issues that were present in 1.40.0, they now allow unitless numbers to be mixed with numbers with units just like the global min() and max() functions. Similarly, + and - operations within min() and max() functions allow unitless numbers to be mixed with numbers with units.

    See the full changelog for changes in earlier releases.

  • 1.41.1 - 2021-09-16

    To install Sass 1.41.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    • Preserve parentheses around var() functions in calculations, because they could potentially be replaced with sub-expressions that might need to be parenthesized.

    See the full changelog for changes in earlier releases.

  • 1.41.0 - 2021-09-14
  • 1.40.1 - 2021-09-14
  • 1.40.0 - 2021-09-13
  • 1.39.2 - 2021-09-10
  • 1.39.1 - 2021-09-09
  • 1.39.0 - 2021-09-02
from sass GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs