Snyk has created this PR to upgrade sass from 1.57.1 to 1.58.0.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 1 version ahead of your current version.
The recommended version was released a day ago, on 2023-02-01.
To install Sass 1.58.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
Remove sourcemap comments from Sass sources. The generated sourcemap comment for the compiled CSS output remains unaffected.
Fix a bug in @ extend logic where certain selectors with three or more combinators were incorrectly considered superselectors of similar selectors with fewer combinators, causing them to be incorrectly trimmed from the output.
Produce a better error message for a number with a leading + or -, a decimal point, but no digits.
Produce a better error message for a nested property whose name starts with --.
Fix a crash when a selector ends in an escaped backslash.
Add the relative length units from CSS Values 4 and CSS Contain 3 as known units to validate bad computation in calc.
Command Line Interface
The --watch flag will now track loads through calls to meta.load-css() as long as their URLs are literal strings without any interpolation.
Snyk has created this PR to upgrade sass from 1.57.1 to 1.58.0.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: sass
-
1.58.0 - 2023-02-01
-
-
-
-
-
-
- The
-
1.57.1 - 2022-12-19
- No user-visible changes.
from sass GitHub release notesTo install Sass 1.58.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
Remove sourcemap comments from Sass sources. The generated sourcemap comment for the compiled CSS output remains unaffected.
Fix a bug in
@ extendlogic where certain selectors with three or more combinators were incorrectly considered superselectors of similar selectors with fewer combinators, causing them to be incorrectly trimmed from the output.Produce a better error message for a number with a leading
+or-, a decimal point, but no digits.Produce a better error message for a nested property whose name starts with
--.Fix a crash when a selector ends in an escaped backslash.
Add the relative length units from CSS Values 4 and CSS Contain 3 as known units to validate bad computation in
calc.Command Line Interface
--watchflag will now track loads through calls tometa.load-css()as long as their URLs are literal strings without any interpolation.See the full changelog for changes in earlier releases.
To install Sass 1.57.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
See the full changelog for changes in earlier releases.
Commit messages
Package name: sass
- 98fe9a4 Track dependencies through `meta.load-css()` with `--watch` (#1877)
- 5a521b8 Add all CSS length units in known compatibilities (#1868)
- 499965a Update CI Node versions to 18/16/14 (#1871)
- 0006924 Fix escaped backslash crash (#1870)
- 0248608 Return an error when using a custom property in a propset instead of crashing (#1874)
- b98fa4f Fix an edge case in superselector computation (#1866)
- 14c1634 Don't crash when parsing `+.` (#1865)
- aceb1e8 Remove sourcemap comments from Sass sources (#1860)
- 441be80 Delete dead code (#1864)
CompareNote: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs