search

snowdensb / vets-website

Frontend for VA.gov
Creative Commons Zero v1.0 Universal
0 stars 0 forks source link

Update dependency node-sass to v5 #324

Open mend-for-github-com[bot] opened 2 months ago

mend-for-github-com[bot] commented 2 months ago

This PR contains the following updates:

Package Type Update Change
node-sass devDependencies major ^4.14.1 -> ^5.0.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 8.2 CVE-2021-32803 #96
High 8.2 CVE-2021-32804 #95
High 8.2 CVE-2021-37701 #100
High 8.2 CVE-2021-37712 #103
High 8.2 CVE-2021-37713 #106

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
Medium 6.5 CVE-2018-20190 #70
Medium 6.5 CVE-2018-20821 #63
Medium 6.5 CVE-2019-6283 #64
Medium 6.5 CVE-2019-6284 #59
Medium 6.5 CVE-2019-6286 #61
Medium 5.6 CVE-2018-11694 #17
Medium 5.6 CVE-2018-19827 #34
Medium 5.3 CVE-2020-24025 #38

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
Medium 5.3 CVE-2022-25758 #148

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
Medium 5.3 CVE-2022-25883 #275

Release Notes

sass/node-sass (node-sass) ### [`v5.0.0`](https://togithub.com/sass/node-sass/releases/tag/v5.0.0) [Compare Source](https://togithub.com/sass/node-sass/compare/v4.14.1...v5.0.0) ##### Breaking changes - Only support LTS and current Node versions ([@​nschonni](https://togithub.com/nschonni)) - Remove deprecated process.sass API ([@​xzyfer](https://togithub.com/xzyfer), [#​2986](https://togithub.com/sass/node-sass/issues/2986)) ##### Features - Add support for Node 15 - New node-gyp version that supports building with Python 3 ##### Community - More inclusive documentation ([@​rgeerts](https://togithub.com/rgeerts), [#​2944](https://togithub.com/sass/node-sass/issues/2944)) - Enabled dependabot ([@​nschonni](https://togithub.com/nschonni)) - Improve release automation ([@​nschonni](https://togithub.com/nschonni)) ##### Fixes - Bumped many dependencies ([@​nschonni](https://togithub.com/nschonni)) #### Supported Environments | OS | Architecture | Node | | --- | --- | --- | | Windows | x86 & x64 | 10, 12, 14, 15 | | OSX | x64 | 10, 12, 14, 15 | | Linux\* | x64 | 10, 12, 14, 15 | | Alpine Linux | x64 | 10, 12, 14, 15 | | FreeBSD | i386 amd64 | 10, 12, 14, 15 | \*Linux support refers to major distributions like Ubuntu, and Debian