[Snyk] Upgrade sass from 1.26.3 to 1.35.2 #281
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade sass from 1.26.3 to 1.35.2.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: sass
To install Sass 1.35.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
Potentially breaking bug fix: Properly throw an error for Unicode ranges that have too many
?
s after hexadecimal digits, such asU+12345??
.Potentially breaking bug fix: Fixed a bug where certain local variable declarations nested within multiple
@ if
statements would incorrectly override a global variable. It's unlikely that any real stylesheets were relying on this bug, but if so they can simply add!global
to the variable declaration to preserve the old behavior.Potentially breaking bug fix: Fix a bug where imports of root-relative URLs (those that begin with
/
) in@ import
rules would be passed to both Dart and JS importers asfile:
URLs.Properly support selector lists for the
$extendee
argument toselector.extend()
andselector.replace()
.Fix an edge case where
@ extend
wouldn't affect a selector within a pseudo-selector such as:is()
that itself extended other selectors.Fix a race condition where
meta.load-css()
could trigger an internal error when running in asynchronous mode.Dart API
@ internal
annotation to indicate whichValue
APIs are available for public use.See the full changelog for changes in earlier releases.
To install Sass 1.35.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
@ import
.See the full changelog for changes in earlier releases.
To install Sass 1.35.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
Fix a couple bugs that could prevent some members from being found in certain files that use a mix of imports and the module system.
Fix incorrect recommendation for migrating division expressions that reference namespaced variables.
JS API
Add a
quietDeps
option which silences compiler warnings from stylesheets loaded through importers and load paths.Add a
verbose
option which causes the compiler to emit all deprecation warnings, not just 5 per feature.See the full changelog for changes in earlier releases.
To install Sass 1.34.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
Fix a bug where
--update
would always compile any file that depends on a built-in module.Fix the URL for the
@-moz-document
deprecation message.Fix a bug with
@ for
loops nested inside property declarations.See the full changelog for changes in earlier releases.
To install Sass 1.34.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
Don't emit the same warning in the same location multiple times.
Cap deprecation warnings at 5 per feature by default.
Command Line Interface
Add a
--quiet-deps
flag which silences compiler warnings from stylesheets loaded through--load-path
s.Add a
--verbose
flag which causes the compiler to emit all deprecation warnings, not just 5 per feature.Dart API
Add a
quietDeps
argument tocompile()
,compileString()
,compileAsync()
, andcompileStringAsync()
which silences compiler warnings from stylesheets loaded through importers, load paths, andpackage:
URLs.Add a
verbose
argument tocompile()
,compileString()
,compileAsync()
, andcompileStringAsync()
which causes the compiler to emit all deprecation warnings, not just 5 per feature.See the full changelog for changes in earlier releases.
To install Sass 1.33.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
/
for division. The newmath.div()
function should be used instead. See this page for details.Add a
list.slash()
function that returns a slash-separated list.Potentially breaking bug fix: The heuristics around when potentially slash-separated numbers are converted to slash-free numbers—for example, when
1/2
will be printed as0.5
rather than1/2
—have been slightly expanded. Previously, a number would be made slash-free if it was passed as an argument to a user-defined function, but not to a built-in function. Now it will be made slash-free in both cases. This is a behavioral change, but it's unlikely to affect any real-world stylesheets.:is()
now behaves identically to:matches()
.Fix a bug where non-integer numbers that were very close to integer values would be incorrectly formatted in CSS.
Fix a bug where very small number and very large negative numbers would be incorrectly formatted in CSS.
JS API
this
context for importers now has afromImport
field, which istrue
if the importer is being invoked from an@ import
andfalse
otherwise. Importers should only use this to determine whether to load import-only files.Dart API
Importer.fromImport
getter, which istrue
if the currentImporter.canonicalize()
call comes from an@ import
rule andfalse
otherwise. Importers should only use this to determine whether to load import-only files.See the full changelog for changes in earlier releases.
To install Sass 1.32.13, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
Potentially breaking bug fix: Null values in
@ use
and@ forward
configurations no longer override the!default
variable, matching the behavior of the equivalent code using@ import
.Use the proper parameter names in error messages about
string.slice
See the full changelog for changes in earlier releases.
To install Sass 1.32.12, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
See the full changelog for changes in earlier releases.
To install Sass 1.32.11, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.
Changes
See the full changelog for changes in earlier releases.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs