Skip to content

Update dependency node-sass to v7 [SECURITY]#302

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-node-sass-vulnerability
Open

Update dependency node-sass to v7 [SECURITY]#302
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-node-sass-vulnerability

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate bot commented May 29, 2023

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
node-sass ^5.0.0^7.0.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2020-24025

Certificate validation in node-sass 2.0.0 to 6.0.1 is disabled when requesting binaries even if the user is not specifying an alternative download path.


Release Notes

sass/node-sass (node-sass)

v7.0.0

Compare Source

Breaking changes
Features
Dependencies
Community
Misc

Supported Environments

OS Architecture Node
Windows x86 & x64 12, 14, 16, 17
OSX x64 12, 14, 16, 17
Linux* x64 12, 14, 16, 17
Alpine Linux x64 12, 14, 16, 17
FreeBSD i386 amd64 12, 14

*Linux support refers to major distributions like Ubuntu, and Debian

v6.0.1

Compare Source

Dependencies
Misc

Supported Environments

OS Architecture Node
Windows x86 & x64 12, 14, 15, 16
OSX x64 12, 14, 15, 16
Linux* x64 12, 14, 15, 16
Alpine Linux x64 12, 14, 15, 16
FreeBSD i386 amd64 12, 14, 15

*Linux support refers to major distributions like Ubuntu, and Debian

v6.0.0

Compare Source

Breaking changes
Features
  • Add support for Node 16
Community

Supported Environments

OS Architecture Node
Windows x86 & x64 12, 14, 15, 16
OSX x64 12, 14, 15, 16
Linux* x64 12, 14, 15, 16
Alpine Linux x64 12, 14, 15, 16
FreeBSD i386 amd64 12, 14, 15

*Linux support refers to major distributions like Ubuntu, and Debian


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • ""
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/npm-node-sass-vulnerability branch 2 times, most recently from 4c3d8a0 to 9be4c00 Compare August 13, 2025 15:15
@renovate renovate bot force-pushed the renovate/npm-node-sass-vulnerability branch from 9be4c00 to 748356a Compare September 25, 2025 18:30
@renovate renovate bot force-pushed the renovate/npm-node-sass-vulnerability branch from 748356a to 030cdd2 Compare October 22, 2025 01:06
@renovate renovate bot force-pushed the renovate/npm-node-sass-vulnerability branch from 030cdd2 to e8f3242 Compare November 10, 2025 20:15
@renovate renovate bot force-pushed the renovate/npm-node-sass-vulnerability branch from e8f3242 to 7ecde99 Compare November 18, 2025 22:53
@renovate renovate bot force-pushed the renovate/npm-node-sass-vulnerability branch 2 times, most recently from 4a6b6ba to 0cf6a15 Compare December 31, 2025 20:44
@renovate renovate bot force-pushed the renovate/npm-node-sass-vulnerability branch from 0cf6a15 to 2db770b Compare February 2, 2026 20:04
@renovate renovate bot force-pushed the renovate/npm-node-sass-vulnerability branch from 2db770b to 2981f86 Compare February 12, 2026 16:45
@renovate renovate bot force-pushed the renovate/npm-node-sass-vulnerability branch from 2981f86 to 7e62762 Compare March 14, 2026 13:56
@renovate renovate bot changed the title Update dependency node-sass to v7 [SECURITY] Update dependency node-sass to v7 [SECURITY] - autoclosed Mar 27, 2026
@renovate renovate bot closed this Mar 27, 2026
@renovate renovate bot deleted the renovate/npm-node-sass-vulnerability branch March 27, 2026 05:34
@renovate renovate bot changed the title Update dependency node-sass to v7 [SECURITY] - autoclosed Update dependency node-sass to v7 [SECURITY] Mar 30, 2026
@renovate renovate bot reopened this Mar 30, 2026
@renovate renovate bot force-pushed the renovate/npm-node-sass-vulnerability branch 2 times, most recently from 7e62762 to 9de5875 Compare March 30, 2026 21:56
@renovate renovate bot force-pushed the renovate/npm-node-sass-vulnerability branch from 9de5875 to 072a14c Compare April 8, 2026 21:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

0 participants