[Snyk] Upgrade sass from 1.53.0 to 1.64.2

[Woodpile37]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade sass from 1.53.0 to 1.64.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 38 versions ahead of your current version.
• The recommended version was released 23 days ago, on 2023-07-31.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Undesired Behavior SNYK-JS-STYLEDCOMPONENTS-3149924	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: sass

• 1.64.2 - 2023-07-31
  

  To install Sass 1.64.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  Dart API

  • Include protocol buffer definitions when uploading the sass package to pub.

  See the full changelog for changes in earlier releases.

• 1.64.1 - 2023-07-22
• 1.64.0 - 2023-07-20
• 1.63.6 - 2023-06-21
• 1.63.5 - 2023-06-21
• 1.63.4 - 2023-06-14
• 1.63.3 - 2023-06-09
• 1.63.2 - 2023-06-08
• 1.63.1 - 2023-06-08
• 1.63.0 - 2023-06-07
• 1.62.1 - 2023-04-25
• 1.62.0 - 2023-04-11
• 1.61.0 - 2023-04-06
• 1.60.0 - 2023-03-23
• 1.59.3 - 2023-03-14
• 1.59.2 - 2023-03-11
• 1.59.1 - 2023-03-10
• 1.59.0 - 2023-03-10
• 1.58.3 - 2023-02-18
• 1.58.2 - 2023-02-17
• 1.58.1 - 2023-02-14
• 1.58.0 - 2023-02-01
• 1.57.1 - 2022-12-19
• 1.57.0 - 2022-12-17
• 1.56.2 - 2022-12-08
• 1.56.1 - 2022-11-09
• 1.56.0 - 2022-11-04
• 1.55.0 - 2022-09-21
• 1.54.9 - 2022-09-07
• 1.54.8 - 2022-08-31
• 1.54.7 - 2022-08-31
• 1.54.6 - 2022-08-29
• 1.54.5 - 2022-08-19
• 1.54.4 - 2022-08-10
• 1.54.3 - 2022-08-04
• 1.54.2 - 2022-08-03
• 1.54.1 - 2022-08-02
• 1.54.0 - 2022-07-22
• 1.53.0 - 2022-06-22

from sass GitHub release notes

Commit messages

Package name: sass

• 890fc17 Include protobuf definitions in the pub package (Update using-git-rebase-on-the-command-line.md github/docs#2048)
• 3367abe Bump the sass_api version (. github/docs#2044)
• 2836216 Fix deprotofy SassCalculation.clamp (Rename content/github/managing-your-work-on-github/about-issues.md to… github/docs#2043)
• b1d56a4 Change terminology to refer to JS instead of Node.js (Update viewing-contributions-on-your-profile.md github/docs#2039)
• 89bd36b Revert "Start writing implementation documentation"
• 6c59213 Start writing implementation documentation
• ca2be2a Expose calculations in JS API (Merge github/docs#1988)
• fe7f9a1 Do not validate a CSS declaration if its key is interpolated (#2020 github/docs#2036)
• 262961c Check the fs library to determine if we're on Node.js (piste github/docs#2033)
• 60dbddf Use a fine-grained personal access token to push to the Sass site (Update community Guidlines github/docs#2029)
• 78150a9 Add changelog for Legacy importer wrapper only searches for relative URLs if the URL is not canonicalized sass/embedded-host-node#226 (Not matching URLs for emoji-cheat-sheet github/docs#1992)
• e9e44d7 Emit comments in source order where possible (Remove references to global webhooks REST API preview github/docs#1989)
• 2bece76 Un-skip a test (Make profile page of user github/docs#2028)
• 61af9ee Use a common error handler for embedded protocol errors (Jdmd github/docs#2027)
• 658eb70 Cut a release (Issue: Improve the docs.github.com site github/docs#2025)
• b4e8a74 Use the new import name for the ESM default export (Kdkd github/docs#2026)
• a48ced8 Fix a race condition with re-used compilation isolate IDs (xx github/docs#2018)
• 62f29c8 Update README: npm package does not support --embedded flag (rmmak github/docs#2022)
• cb4b442 Add a changelog entry for Fix double-loading packages on npm google/dart_cli_pkg#132 (repo sync github/docs#2020)
• c41d52a Bump protobuf and protoc_plugin (update dropdown github/docs#2021)
• 3fce74c Update README: install with brew on macOS or Linux (Automatically added for iOS & OS X Mail Outlook.office365.com github/docs#2012)
• b11840e Limit pool size (Update issue_comment link in GitHub Actions docs github/docs#2019)
• e34a0c7 Cut a release (repo sync github/docs#2016)
• 3de612e Re-enable support for default exports (repo sync github/docs#2009)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[changeset-bot]

⚠️ No Changeset found

Latest commit: 5f67c38

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR