[Snyk] Upgrade sass-loader from 13.3.2 to 16.0.2

[nerds-github]

Snyk has created this PR to upgrade sass-loader from 13.3.2 to 16.0.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

• The recommended version is 10 versions ahead of your current version.

• The recommended version was released on a month ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-HTTPPROXYMIDDLEWARE-8229906	386	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	386	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6147607	386	Proof of Concept

Release notes

Package name: sass-loader

• 16.0.2 - 2024-09-20
  

  16.0.2 (2024-09-20)

  Bug Fixes

  • error message from sass (#1231) (c75c606)
• 16.0.1 - 2024-08-19
  

  16.0.1 (2024-08-19)

  Bug Fixes

  • generate correct sourceMaps for modern-compiler api (#1228) (f862f7a)
• 16.0.0 - 2024-07-26
  

  16.0.0 (2024-07-26)

  ⚠ BREAKING CHANGES

  • use modern Sass JS API by default for sass and sass-embedded

  Warning

  The sass options are different for the legacy (before) and modern APIs. Please look at docs how to migrate to the modern options.
  Legacy options - https://sass-lang.com/documentation/js-api/interfaces/legacystringoptions/
  Modern options - https://sass-lang.com/documentation/js-api/interfaces/options/

  To return to the previous logic use:

  module.exports = {
    module: {
      rules: [
        {
          test: /\.s[ac]ss$/i,
          use: [
            "style-loader",
            "css-loader",
            {
              loader: "sass-loader",
              options: {
                api: "legacy",
                // Your options
              },
            },
          ],
        },
      ],
    },
  };

  Features

  • use modern Sass JS API by default for sass and sass-embedded (10be1ba)
• 15.0.0 - 2024-07-23
  

  ⚠ BREAKING CHANGES

  • prefer sass-embedded over sass by default (#1211)

  Features

  • prefer sass-embedded over sass by default (#1211) (83423ff)
• 14.2.1 - 2024-04-16
  

  14.2.1 (2024-04-16)

  Bug Fixes

  • avoid multiple sass compiler creation (#1199) (77051d8)
• 14.2.0 - 2024-04-11
  

  14.2.0 (2024-04-11)

  Features

  • added the modern-compiler value for API to reuse compiler process (#1195) (cef40a8)
  • support webpack built-in resolver for modern and modern-compiler API (#1197) (2265b72)

  Notes:

  Using the modern-compiler value for the api option together with sass-embedded reduces compilation time by 5-10 times, especially for projects using large files with a lot of @ import/@ use, for small files the build time reduction will not be significant.

• 14.1.1 - 2024-02-19
  

  14.1.1 (2024-02-19)

  Bug Fixes

  • handle pkg: scheme (#1191) (c34c8e3)
• 14.1.0 - 2024-01-30
  

  14.1.0 (2024-01-30)

  Features

  • add @ rspack/core as an optional peer dependency (#1184) (637ba5b)
• 14.0.0 - 2024-01-15
  

  14.0.0 (2024-01-15)

  ⚠ BREAKING CHANGES

  • removed fibers support
  • minimum supported Node.js version is 18.12.0 (627f55d)
• 13.3.3 - 2023-12-25
• 13.3.2 - 2023-06-09

from sass-loader GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs