This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade sass from 1.53.0 to 1.63.6.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **35 versions** ahead of your current version.
- The recommended version was released **a month ago**, on 2023-06-21.
Release notes Package name: sass
</li>
<li>
<b>1.63.5</b> - <a href="https://snyk.io/redirect/github/sass/dart-sass/releases/tag/1.63.5">2023-06-21</a></br><p>To install Sass 1.63.5, download one of the packages below and <a href="https://katiek2.github.io/path-doc/" rel="nofollow">add it to your PATH</a>, or see <a href="https://sass-lang.com/install" rel="nofollow">the Sass website</a> for full installation instructions.</p>
Changes
JavaScript API
Fix a bug where loading the package through both CJS require() and ESM import could crash on Node.js.
Embedded Sass
Fix a deadlock when running at high concurrency on 32-bit systems.
Fix a race condition where the embedded compiler could deadlock or crash if a compilation ID was reused immediately after the compilation completed.
</li>
<li>
<b>1.63.4</b> - <a href="https://snyk.io/redirect/github/sass/dart-sass/releases/tag/1.63.4">2023-06-14</a></br><p>To install Sass 1.63.4, download one of the packages below and <a href="https://katiek2.github.io/path-doc/" rel="nofollow">add it to your PATH</a>, or see <a href="https://sass-lang.com/install" rel="nofollow">the Sass website</a> for full installation instructions.</p>
Changes
JavaScript API
Re-enable support for import sass from 'sass' when loading the package from an ESM module in Node.js. However, this syntax is now deprecated; ESM users should use import * as sass from 'sass' instead.
On the browser and other ESM-only platforms, only import * as sass from 'sass' is supported.
Properly export the legacy API values TRUE, FALSE, NULL, and types from the ECMAScript module API.
Embedded Sass
Fix a race condition where closing standard input while requests are in-flight could sometimes cause the process to hang rather than shutting down gracefully.
Properly include the root stylesheet's URL in the set of loaded URLs when it fails to parse.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade sass from 1.53.0 to 1.63.6.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.- The recommended version is **35 versions** ahead of your current version. - The recommended version was released **a month ago**, on 2023-06-21.
Release notes
Package name: sass
To install Sass 1.63.6, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
JavaScript API
import sass from 'sass'again after it was broken in the last release.Embedded Sass
exportsdeclaration inpackage.json.See the full changelog for changes in earlier releases.
Changes
JavaScript API
require()and ESMimportcould crash on Node.js.Embedded Sass
Fix a deadlock when running at high concurrency on 32-bit systems.
Fix a race condition where the embedded compiler could deadlock or crash if a compilation ID was reused immediately after the compilation completed.
See the full changelog for changes in earlier releases.
Changes
JavaScript API
Re-enable support for
import sass from 'sass'when loading the package from an ESM module in Node.js. However, this syntax is now deprecated; ESM users should useimport * as sass from 'sass'instead.On the browser and other ESM-only platforms, only
import * as sass from 'sass'is supported.Properly export the legacy API values
TRUE,FALSE,NULL, andtypesfrom the ECMAScript module API.Embedded Sass
Fix a race condition where closing standard input while requests are in-flight could sometimes cause the process to hang rather than shutting down gracefully.
Properly include the root stylesheet's URL in the set of loaded URLs when it fails to parse.
See the full changelog for changes in earlier releases.
Commit messages
Package name: sass
- 658eb70 Cut a release (#2025)
- b4e8a74 Use the new import name for the ESM default export (#2026)
- a48ced8 Fix a race condition with re-used compilation isolate IDs (#2018)
- 62f29c8 Update README: npm package does not support --embedded flag (#2022)
- cb4b442 Add a changelog entry for google/dart_cli_pkg#132 (#2020)
- c41d52a Bump protobuf and protoc_plugin (#2021)
- 3fce74c Update README: install with brew on macOS or Linux (#2012)
- b11840e Limit pool size (#2019)
- e34a0c7 Cut a release (#2016)
- 3de612e Re-enable support for default exports (#2009)
- ce58d87 Add missing ESM exports (#2010)
- aa59a5f Fix race condition between spawning and killing isolates during shutdown (#2007)
- 760fa2e Add current stylesheet to loadedUrls when throwing parsing error (#1991)
- 645e48f Cut a release (#2006)
- eb09d75 Fix a few more deployment issues (#1998)
- ce909e4 Use the correct pub credential location for deploying sub-packages (#1997)
- eea0717 Block release on all tests (#1996)
- d82654b Fix deploy configuration (#1994)
- c3ed547 Release 1.63.0 (#1987)
- a88318f Run embedded compilations across multiple isolates (#1981)
- b0efcb0 Fix README Docker example (#1982) (#1983)
- 44a3caf Update README.md (#1979)
- 21f98c6 Fix the syntax for browser examples in the README (#1975)
- 9e1d18a Upgrade the analyzer package (#1974)
CompareNote: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs