Bump scss-tokenizer and node-sass in /frontend #7

Merged
dependabot[bot] merged 1 commits from dependabot/npm_and_yarn/frontend/scss-tokenizer-and-node-sass-0.4.3 into master 2022-12-25 17:17:27 +00:00
dependabot[bot] commented 2022-12-09 14:49:56 +00:00 (Migrated from github.com)

Bumps scss-tokenizer to 0.4.3 and updates ancestor dependency node-sass. These dependencies need to be updated together.

Updates scss-tokenizer from 0.2.3 to 0.4.3

Release notes

Sourced from scss-tokenizer's releases.

v0.4.3

What's Changed

New Contributors

Full Changelog: https://github.com/sasstools/scss-tokenizer/compare/v0.4.2...v0.4.3

v0.4.2

Misc

  • Restore prepublishOnly npm script (@​xzyfer, ae79d74)

v0.4.1

Fixes

v0.4.0

Fixes

Tests

  • Add basic test coverage to interpolant tokenization (@​xzyfer, #20)

Dependencies

Misc

  • TravisCI now tests all supported Node versions
  • Commit package-lock.json

v0.3.0

... (truncated)

Commits

Updates node-sass from 4.14.1 to 8.0.0

Release notes

Sourced from node-sass's releases.

v8.0.0

What's Changed

Breaking changes

Features

Dependencies

  • Bump true-case-path@2.2.1
  • Bump node-gyp @​9.0.0
  • Bump nan@^2.17.0
  • Bump sass-graph@^4.0.1

Misc

Supported Environments

OS Architecture Node
Windows x86 & x64 14, 16, 18, 19
OSX x64 14, 16, 18, 19
Linux* x64 14, 16, 18, 19
Alpine Linux x64 14, 16, 18, 19
FreeBSD i386 amd64 12, 14

*Linux support refers to major distributions like Ubuntu, and Debian

v7.0.3

Dependencies

  • Bump sass-graph from 4.0.0 to ^4.0.1

Supported Environments

| OS | Architecture | Node |

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [scss-tokenizer](https://github.com/sasstools/scss-tokenizer) to 0.4.3 and updates ancestor dependency [node-sass](https://github.com/sass/node-sass). These dependencies need to be updated together. Updates `scss-tokenizer` from 0.2.3 to 0.4.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sasstools/scss-tokenizer/releases">scss-tokenizer's releases</a>.</em></p> <blockquote> <h2>v0.4.3</h2> <h2>What's Changed</h2> <ul> <li>Bump acorn from 5.7.3 to 5.7.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/pull/33">sasstools/scss-tokenizer#33</a></li> <li>Fixed ReDoS in &quot;loadAnnotation&quot; function of &quot;previous-map.js&quot; by <a href="https://github.com/sushantmittal"><code>@​sushantmittal</code></a> in <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/pull/49">sasstools/scss-tokenizer#49</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/dependabot"><code>@​dependabot</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/pull/33">sasstools/scss-tokenizer#33</a></li> <li><a href="https://github.com/sushantmittal"><code>@​sushantmittal</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/pull/49">sasstools/scss-tokenizer#49</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sasstools/scss-tokenizer/compare/v0.4.2...v0.4.3">https://github.com/sasstools/scss-tokenizer/compare/v0.4.2...v0.4.3</a></p> <h2>v0.4.2</h2> <h2>Misc</h2> <ul> <li>Restore <code>prepublishOnly</code> npm script (<a href="https://github.com/xzyfer"><code>@​xzyfer</code></a>, ae79d74)</li> </ul> <h2>v0.4.1</h2> <h2>Fixes</h2> <ul> <li>Error handling utf-8 encoded sourcemap urls (<a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/issues/13">#13</a>, <a href="https://github.com/xzyfer"><code>@​xzyfer</code></a>)</li> </ul> <h2>v0.4.0</h2> <h2>Fixes</h2> <ul> <li>Fix <code>endInterpolant</code> not being captured (<a href="https://github.com/xzyfer"><code>@​xzyfer</code></a>, <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/issues/20">#20</a>)</li> <li>Fix tracking of token position (<a href="https://github.com/xzyfer"><code>@​xzyfer</code></a>, <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/issues/22">#22</a>)</li> </ul> <h2>Tests</h2> <ul> <li>Add basic test coverage to interpolant tokenization (<a href="https://github.com/xzyfer"><code>@​xzyfer</code></a>, <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/issues/20">#20</a>)</li> </ul> <h2>Dependencies</h2> <ul> <li>Replace babel-preset-es2015 with babel-preset-env (<a href="https://github.com/xzyfer"><code>@​xzyfer</code></a>, <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/issues/23">#23</a>)</li> <li>sass-spec@2.5.1 (<a href="https://github.com/xzyfer"><code>@​xzyfer</code></a>, <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/issues/23">#23</a>)</li> <li>babel-core@^6.26.3 (<a href="https://github.com/xzyfer"><code>@​xzyfer</code></a>, <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/issues/23">#23</a>)</li> <li>babel-jest@^23.6.0 (<a href="https://github.com/xzyfer"><code>@​xzyfer</code></a>, <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/issues/23">#23</a>)</li> <li>glob@^7.1.3 (<a href="https://github.com/xzyfer"><code>@​xzyfer</code></a>, <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/issues/23">#23</a>)</li> <li>jest@^23.6.0 (<a href="https://github.com/xzyfer"><code>@​xzyfer</code></a>, <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/issues/23">#23</a>)</li> <li>js-base64@^2.4.9 (<a href="https://github.com/xzyfer"><code>@​xzyfer</code></a>, <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/issues/23">#23</a>)</li> <li>source-map@^0.7.3 (<a href="https://github.com/xzyfer"><code>@​xzyfer</code></a>, <a href="https://github-redirect.dependabot.com/sasstools/scss-tokenizer/issues/23">#23</a>)</li> </ul> <h2>Misc</h2> <ul> <li>TravisCI now tests all supported Node versions</li> <li>Commit <code>package-lock.json</code></li> </ul> <h2>v0.3.0</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sasstools/scss-tokenizer/commit/3e518d908cea22d0ca1bdf927ef752b7539f0533"><code>3e518d9</code></a> 0.4.3</li> <li><a href="https://github.com/sasstools/scss-tokenizer/commit/ff8e9945bcf991d30e009e2f0ef4088d2830c92d"><code>ff8e994</code></a> Update changelog</li> <li><a href="https://github.com/sasstools/scss-tokenizer/commit/a53b6f233e648cc01acbdd89c58786cf8ba56e35"><code>a53b6f2</code></a> Fixed ReDoS in 'loadAnnotation' function of previous-map.js.</li> <li><a href="https://github.com/sasstools/scss-tokenizer/commit/b55257baa54197e7dae8085184cad7948fea0796"><code>b55257b</code></a> Bump acorn from 5.7.3 to 5.7.4</li> <li><a href="https://github.com/sasstools/scss-tokenizer/commit/db9b196df81b399fa104928e8361c5c6f3efde10"><code>db9b196</code></a> 0.4.2</li> <li><a href="https://github.com/sasstools/scss-tokenizer/commit/ae79d74ad591e2f8a5e61ed68be2595b4bfd37af"><code>ae79d74</code></a> Restore prepublishOnly npm script</li> <li><a href="https://github.com/sasstools/scss-tokenizer/commit/32a65d8d8d757f2e0cca0b2e71ec69840466dded"><code>32a65d8</code></a> 0.4.1</li> <li><a href="https://github.com/sasstools/scss-tokenizer/commit/cef5140251617c6d15cf639a4ffda246b7704344"><code>cef5140</code></a> Add support for utf8 name in input source map encoding</li> <li><a href="https://github.com/sasstools/scss-tokenizer/commit/07c191732c621047a302c68b6718fd6bf0bd90d4"><code>07c1917</code></a> 0.4.0</li> <li><a href="https://github.com/sasstools/scss-tokenizer/commit/d74f8038a00673adcb7a3b2fee91eebb7d6153e3"><code>d74f803</code></a> Commit package-lock.json</li> <li>Additional commits viewable in <a href="https://github.com/sasstools/scss-tokenizer/compare/v0.2.3...v0.4.3">compare view</a></li> </ul> </details> <br /> Updates `node-sass` from 4.14.1 to 8.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sass/node-sass/releases">node-sass's releases</a>.</em></p> <blockquote> <h2>v8.0.0</h2> <h2>What's Changed</h2> <ul> <li>Fix binaries being partially downloaded by <a href="https://github.com/xzyfer"><code>@​xzyfer</code></a> in <a href="https://github-redirect.dependabot.com/sass/node-sass/pull/3313">sass/node-sass#3313</a></li> <li>Bump node-gyp and nan for node 19 support by <a href="https://github.com/xzyfer"><code>@​xzyfer</code></a> in <a href="https://github-redirect.dependabot.com/sass/node-sass/pull/3314">sass/node-sass#3314</a></li> <li>feat: Node 18 and 19 support and drop Node 17 by <a href="https://github.com/nschonni"><code>@​nschonni</code></a> in <a href="https://github-redirect.dependabot.com/sass/node-sass/pull/3257">sass/node-sass#3257</a></li> </ul> <h3>Breaking changes</h3> <ul> <li>Drop support for Node 12 (<a href="https://github.com/nschonni"><code>@​nschonni</code></a>)</li> <li>Drop support for Node 17 (<a href="https://github.com/nschonni"><code>@​nschonni</code></a>)</li> <li>Set <code>rejectUnauthorized</code> to <code>true</code> by default (<a href="https://github.com/scott-ut"><code>@​scott-ut</code></a>, <a href="https://github-redirect.dependabot.com/sass/node-sass/issues/3149">#3149</a>)</li> </ul> <h3>Features</h3> <ul> <li>Add support for Node 18 (<a href="https://github.com/nschonni"><code>@​nschonni</code></a>)</li> <li>Add support for Node 19 (<a href="https://github.com/nschonni"><code>@​nschonni</code></a>)</li> <li>Replace <code>request</code> with <code>make-fetch-happen</code> (<a href="https://github.com/CamilleDrapier"><code>@​CamilleDrapier</code></a> <a href="https://github.com/xzyfer"><code>@​xzyfer</code></a>, <a href="https://github-redirect.dependabot.com/sass/node-sass/issues/3193">#3193</a>, <a href="https://github-redirect.dependabot.com/sass/node-sass/issues/3313">#3313</a>)</li> </ul> <h3>Dependencies</h3> <ul> <li>Bump true-case-path@2.2.1</li> <li>Bump node-gyp <a href="https://github.com/9"><code>@​9</code></a>.0.0</li> <li>Bump nan@^2.17.0</li> <li>Bump sass-graph@^4.0.1</li> </ul> <h3>Misc</h3> <ul> <li>Bump various GitHub Actions dependencies (<a href="https://github.com/nschonni"><code>@​nschonni</code></a>)</li> </ul> <h2>Supported Environments</h2> <table> <thead> <tr> <th>OS</th> <th>Architecture</th> <th>Node</th> </tr> </thead> <tbody> <tr> <td>Windows</td> <td>x86 &amp; x64</td> <td>14, 16, 18, 19</td> </tr> <tr> <td>OSX</td> <td>x64</td> <td>14, 16, 18, 19</td> </tr> <tr> <td>Linux*</td> <td>x64</td> <td>14, 16, 18, 19</td> </tr> <tr> <td>Alpine Linux</td> <td>x64</td> <td>14, 16, 18, 19</td> </tr> <tr> <td>FreeBSD</td> <td>i386 amd64</td> <td>12, 14</td> </tr> </tbody> </table> <p>*Linux support refers to major distributions like Ubuntu, and Debian</p> <h2>v7.0.3</h2> <h3>Dependencies</h3> <ul> <li>Bump sass-graph from 4.0.0 to ^4.0.1</li> </ul> <h2>Supported Environments</h2> <p>| OS | Architecture | Node |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sass/node-sass/commit/ee13eb9c62449d1e535189a063cbdd15583ebf32"><code>ee13eb9</code></a> 8.0.0</li> <li><a href="https://github.com/sass/node-sass/commit/98e75b39e22ba2fdf7726eefa23ba5f7247540c4"><code>98e75b3</code></a> feat: Node 18 and 19 support and drop Node 17 (<a href="https://github-redirect.dependabot.com/sass/node-sass/issues/3257">#3257</a>)</li> <li><a href="https://github.com/sass/node-sass/commit/e9bb866b0cfec9f9f98c370be325289d25be5c62"><code>e9bb866</code></a> Bump node-gyp and nan for node 19 support (<a href="https://github-redirect.dependabot.com/sass/node-sass/issues/3314">#3314</a>)</li> <li><a href="https://github.com/sass/node-sass/commit/ab7840b335d58f59731315354f2ea18d6bdf8fd6"><code>ab7840b</code></a> Fix binaries being partially downloaded (<a href="https://github-redirect.dependabot.com/sass/node-sass/issues/3313">#3313</a>)</li> <li><a href="https://github.com/sass/node-sass/commit/d595abf2ed3e8013509c04b1205005e95d3fcc2e"><code>d595abf</code></a> 7.0.3</li> <li><a href="https://github.com/sass/node-sass/commit/3b556c1c9a79e87fd54fdaa9a1a18741a7616025"><code>3b556c1</code></a> 7.0.2</li> <li><a href="https://github.com/sass/node-sass/commit/c7163594c339942d2732c513b6c68f03af070a3a"><code>c716359</code></a> Bump sass-graph@^4.0.1 (<a href="https://github-redirect.dependabot.com/sass/node-sass/issues/3292">#3292</a>)</li> <li><a href="https://github.com/sass/node-sass/commit/24741b351cb046c4548e77886647cd4c89b48c66"><code>24741b3</code></a> docs(readme): fix docpad plugin link</li> <li><a href="https://github.com/sass/node-sass/commit/15233309452f1a33896fe08fcbd3cdc0294c7818"><code>1523330</code></a> feat: Drop Node 12</li> <li><a href="https://github.com/sass/node-sass/commit/365d357a8b720d3a2ba9b7f662e2d75d1e6a85b2"><code>365d357</code></a> update <a href="https://registry.npm.taobao.org">https://registry.npm.taobao.org</a> to <a href="https://registry.npmmirror.com">https://registry.npmmirror.com</a></li> <li>Additional commits viewable in <a href="https://github.com/sass/node-sass/compare/v4.14.1...v8.0.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/melzubeir/socialhose/network/alerts). </details>
Sign in to join this conversation.