[Snyk] Upgrade sass from 1.50.1 to 1.79.4

[rawanst]

Snyk has created this PR to upgrade sass from 1.50.1 to 1.79.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 80 versions ahead of your current version.
• The recommended version was released 25 days ago, on 2024-09-28.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: sass

• 1.79.4 - 2024-09-28
• 1.79.3 - 2024-09-20
• 1.79.2 - 2024-09-19
• 1.79.1 - 2024-09-18
• 1.79.0 - 2024-09-17
• 1.78.0 - 2024-09-03
• 1.77.8 - 2024-07-11
• 1.77.7 - 2024-07-09
• 1.77.6 - 2024-06-17
• 1.77.5 - 2024-06-11
• 1.77.4 - 2024-05-30
• 1.77.3 - 2024-05-29
• 1.77.2 - 2024-05-16
• 1.77.1 - 2024-05-10
• 1.77.0 - 2024-05-07
• 1.76.0 - 2024-04-30
• 1.75.0 - 2024-04-11
• 1.74.1 - 2024-04-04
• 1.72.0 - 2024-03-13
• 1.71.1 - 2024-02-21
• 1.71.0 - 2024-02-16
• 1.70.0 - 2024-01-18
• 1.69.7 - 2024-01-02
• 1.69.6 - 2023-12-28
• 1.69.5 - 2023-10-26
• 1.69.4 - 2023-10-17
• 1.69.3 - 2023-10-12
• 1.69.2 - 2023-10-10
• 1.69.1 - 2023-10-09
• 1.69.0 - 2023-10-05
• 1.68.0 - 2023-09-21
• 1.67.0 - 2023-09-14
• 1.66.1 - 2023-08-18
• 1.66.0 - 2023-08-17
• 1.65.1 - 2023-08-09
• 1.65.0 - 2023-08-09
• 1.64.2 - 2023-07-31
• 1.64.1 - 2023-07-22
• 1.64.0 - 2023-07-20
• 1.63.6 - 2023-06-21
• 1.63.5 - 2023-06-21
• 1.63.4 - 2023-06-14
• 1.63.3 - 2023-06-09
• 1.63.2 - 2023-06-08
• 1.63.1 - 2023-06-08
• 1.63.0 - 2023-06-07
• 1.62.1 - 2023-04-25
• 1.62.0 - 2023-04-11
• 1.61.0 - 2023-04-06
• 1.60.0 - 2023-03-23
• 1.59.3 - 2023-03-14
• 1.59.2 - 2023-03-11
• 1.59.1 - 2023-03-10
• 1.59.0 - 2023-03-10
• 1.58.3 - 2023-02-18
• 1.58.2 - 2023-02-17
• 1.58.1 - 2023-02-14
• 1.58.0 - 2023-02-01
• 1.57.1 - 2022-12-19
• 1.57.0 - 2022-12-17
• 1.56.2 - 2022-12-08
• 1.56.1 - 2022-11-09
• 1.56.0 - 2022-11-04
• 1.55.0 - 2022-09-21
• 1.54.9 - 2022-09-07
• 1.54.8 - 2022-08-31
• 1.54.7 - 2022-08-31
• 1.54.6 - 2022-08-29
• 1.54.5 - 2022-08-19
• 1.54.4 - 2022-08-10
• 1.54.3 - 2022-08-04
• 1.54.2 - 2022-08-03
• 1.54.1 - 2022-08-02
• 1.54.0 - 2022-07-22
• 1.53.0 - 2022-06-22
• 1.52.3 - 2022-06-08
• 1.52.2 - 2022-06-03
• 1.52.1 - 2022-05-20
• 1.52.0 - 2022-05-20
• 1.51.0 - 2022-04-26
• 1.50.1 - 2022-04-19

from sass GitHub release notes

Commit messages

Package name: sass

• f84e867 Fix JS API legacy SassColor.change (#2368)
• 72612c4 Bump bufbuild/buf-setup-action in /.github/util/initialize (#2363)
• b85ef9c Quote `$channel` in channel function replacement suggestions (#2361)
• fa4827f Add documentation link to legacy-js-api warning (#2355)
• 7c3f5e2 Add a `$space` parameter to the channel function deprecation (#2354)
• 5fa04d3 Fix sass-parser publishing (#2349)
• d740d02 Emit deprecation warnings for the legacy JS API (#2343)
• a957eea Bump chokidar to v4 (#2347)
• aa35aa2 Bump bufbuild/buf-setup-action in /.github/util/initialize (#2346)
• f826ed2 Stop emitting `mixed-decls` in a bunch of unnecessary cases (#2342)
• 2f0d0da Merge pull request #2341 from sass/feature.color-4
• de181d9 Poke CI
• 34f98c7 Update color API tests
• 422f037 Fix a typo
• 4db68a1 Merge pull request #2339 from sass/merge-main
• 8f8467a Merge branch 'main' of github.com:sass/dart-sass into merge-main
• 4fa5a02 Use a `file:` dependency for sass-parser -> sass (#2340)
• 519ce69 Merge branch 'main' of github.com:sass/dart-sass into feature.color-4
• 05e1691 Bump bufbuild/buf-setup-action in /.github/util/initialize (#2338)
• 6848763 Merge pull request #2337 from sass/even-more-statements
• d9e854a Add support for silent comments
• cf918bc Add support for `@ media`
• 717867b Add a future global-builtin deprecation (#2336)
• 5dff2e8 Merge pull request #2317 from sass/more-statements

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs