[Snyk] Upgrade sass from 1.49.10 to 1.55.0

[snyk-bot]

Snyk has created this PR to upgrade sass from 1.49.10 to 1.55.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 20 versions ahead of your current version.
• The recommended version was released a month ago, on 2022-09-21.

Release notes

Package name: sass

• 1.55.0 - 2022-09-21
  

  To install Sass 1.55.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  • Potentially breaking bug fix: Sass numbers are now universally stored as 64-bit floating-point numbers, rather than sometimes being stored as integers. This will generally make arithmetic with very large numbers more reliable and more consistent across platforms, but it does mean that numbers between nine quadrillion and nine quintillion will no longer be represented with full accuracy when compiling Sass on the Dart VM.

  • Potentially breaking bug fix: Sass equality is now properly transitive. Two numbers are now considered equal (after doing unit conversions) if they round to the same 1e-11th. Previously, numbers were considered equal if they were within 1e-11 of one another, which led to some circumstances where $a == $b and $b == $c but $a != $b.

  • Potentially breaking bug fix: Various functions in sass:math no longer treat floating-point numbers that are very close (but not identical) to integers as integers. Instead, these functions now follow the floating-point specification exactly. For example, math.pow(0.000000000001, -1) now returns 1000000000000 instead of Infinity.

  • Emit a deprecation warning for $a -$b and $a +$b, since these look like they could be unary operations but they're actually parsed as binary operations. Either explicitly write $a - $b or $a (-$b). See https://sass-lang.com/d/strict-unary for more details.

  Dart API

  • Add an optional argumentName parameter to SassScriptException() to make it easier to throw exceptions associated with particular argument names.

  • Most APIs that previously returned num now return double. All APIs continue to accept num, although in Dart 2.0.0 these APIs will be changed to accept only double.

  JS API

  • Fix a bug in which certain warning spans would not have their properties accessible by the JS API.

  See the full changelog for changes in earlier releases.

• 1.54.9 - 2022-09-07
  

  To install Sass 1.54.9, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  • Fix an incorrect span in certain @ media query deprecation warnings.

  See the full changelog for changes in earlier releases.

• 1.54.8 - 2022-08-31
  

  To install Sass 1.54.8, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  • No user-visible changes.

  See the full changelog for changes in earlier releases.

• 1.54.7 - 2022-08-31
  

  To install Sass 1.54.7, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  • Add support for 32-bit ARM releases on Linux.

  See the full changelog for changes in earlier releases.

• 1.54.6 - 2022-08-29
  

  To install Sass 1.54.6, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

  Changes

  • Fix a bug where a @ media query could be incorrectly omitted from a stylesheet if it had multiple levels of nested @ media queries within it and the inner queries were mergeable but the outer query was not.

  See the full changelog for changes in earlier releases.

• 1.54.5 - 2022-08-19
• 1.54.4 - 2022-08-10
• 1.54.3 - 2022-08-04
• 1.54.2 - 2022-08-03
• 1.54.1 - 2022-08-02
• 1.54.0 - 2022-07-22
• 1.53.0 - 2022-06-22
• 1.52.3 - 2022-06-08
• 1.52.2 - 2022-06-03
• 1.52.1 - 2022-05-20
• 1.52.0 - 2022-05-20
• 1.51.0 - 2022-04-26
• 1.50.1 - 2022-04-19
• 1.50.0 - 2022-04-07
• 1.49.11 - 2022-04-01
• 1.49.10 - 2022-03-30

from sass GitHub release notes

Commit messages

Package name: sass

• a65e504 Release 1.55.0 (chore: bump credentials-themes version #1806)
• 103cb19 Consistently use floating-point numbers everywhere ([Snyk] Upgrade sass from 1.49.10 to 1.55.0 #1802)
• 90b6190 Add a deprecation warning for strict unary operations (fix: broken styles in program cert print media #1800)
• db1e126 Fix bug in JS MultiSpan (chore(deps): update dependency minimatch to 3.0.5 [security] #1801)
• 5466dd7 Give SassScriptException a name parameter (VC fields and mapping to Credentials IDA stored data #1798)
• e2f9705 Merge pull request Python Requirements Update #1795 from stof/upgrade_dependencies
• 0344842 Fix span for not operations (docs: [FC-0002] plugin extensions ADR #1797)
• fb107bd Migrate deprecation warnings to sass-lang short links (docs: Add comments on legacy frontend components/classes that can be removed as part of issue #1722 #1796)
• ba2971c Disable the prefer_interpolation_to_compose_strings rule
• 19ef66f Remove useless ignore rules
• 8480259 Avoid using private types in public APIs
• a705445 Avoid null check on potentially nullable type parameter
• fec9a2a Remove leading underscore on local identifiers
• 35cd8a7 Remove usage of deprecated member
• 184dfbf Upgrade dev dependencies to the latest version
• 5393754 Cut a release (feat: redirect users to LR MFE records pages where appropriate #1793)
• 7e91457 Release 32-bit ARM on Linux (chore(deps): update dependency terser to 5.14.2 [security] #1704)
• 016ab24 Fix a bug with `@ media` query bubbling (Switch from node-sass to sass library #1792)
• 6df3497 Release 1.54.5 (test: test invalid migration failure #1785)
• 98f326b Convert visitor classes to mixins (Chore: Update program_records.rst to include information about the learner records MFE #1784)
• 7695332 Update specificity calculation for selector pseudos (Revert "Convert ansible to dockerfile" #1781)
• c850501 Allow a module loaded multiple times by the same configuration (Python Requirements Update #1739)
• 3f98441 Deprecate math.random() when $limit has units (test: use force_login instead of login to speed up tests #1779)
• 0b8a0f6 Transform all enum-like classes to dart enums (fix: revert recent change to CourseGradeSerializer #1777)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[openedx-webhooks]

Thanks for the pull request, @snyk-bot! Please note that it may take us up to several weeks or months to complete a review and merge your PR.

Feel free to add as much of the following information to the ticket as you can:

• supporting documentation
• Open edX discussion forum threads
• timeline information ("this must be merged by XX date", and why that is)
• partner information ("this is a course on edx.org")
• any other information that can help Product understand the context for the PR

All technical communication about the code itself will be done via the GitHub pull request interface. As a reminder, our process documentation is here.

Please let us know once your PR is ready for our review and all tests are green.

⚠️ We can't start reviewing your pull request until you've submitted a signed contributor agreement or indicated your institutional affiliation. Please see the CONTRIBUTING file for more information. If you've signed an agreement in the past, you may need to re-sign. See The New Home of the Open edX Codebase for details.

Once you've signed the CLA, please allow 1 business day for it to be processed. After this time, you can re-run the CLA check by editing the PR title. If the problem persists, you can tag the @openedx/cla-problems team in a comment on your PR for further assistance.

[openedx-webhooks]

@snyk-bot Even though your pull request wasn’t merged, please take a moment to answer a two question survey so we can improve your experience in the future.