Regular expression denial of service in scss-tokenizer

[edmund-dunn]

Description

This is partly a discovery ticket. If you find this is blocked because of version issues, especially with node please annotate that in the Confluence page and here in the ticket.

One other package sass-graph depends on an early version of this. Worst case is that two packages need to be upgraded, so this shouldn’t be too difficult.

Acceptance Criteria

• Upgrade scss-tokenizer to >= 0.4.3

[JakeBapple]

Currently, I believe the node-sass package requires sass-graph, which requires scss-tokenizer. So I believe we need to update the dependency of the tokenizer and graph within node-sass.

[JakeBapple]

this PR was merged and the work here should be good to go @gracekretschmer-metrostar

department-of-veterans-affairs/content-build#2182