[Snyk] Upgrade gulp-sass from 3.2.1 to 5.1.0

[YoutacRandS-VA]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade gulp-sass from 3.2.1 to 5.1.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

• The recommended version is 7 versions ahead of your current version.

• The recommended version was released on 2 years ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Use After Free SNYK-JS-NODESASS-541000	654	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	654	Proof of Concept
	Arbitrary File Write SNYK-JS-TAR-1579155	654	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536528	654	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536531	654	No Known Exploit
	NULL Pointer Dereference SNYK-JS-NODESASS-535500	654	Proof of Concept
	Arbitrary File Write SNYK-JS-TAR-1579147	654	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579152	654	No Known Exploit
	Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	654	No Known Exploit
	Out-of-bounds Read SNYK-JS-NODESASS-541002	654	Proof of Concept
	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	654	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SCSSTOKENIZER-2339884	654	No Known Exploit
	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	654	Proof of Concept
	Improper Certificate Validation SNYK-JS-NODESASS-1059081	654	No Known Exploit
	Out-of-Bounds SNYK-JS-NODESASS-535498	654	Proof of Concept
	Out-of-bounds Read SNYK-JS-NODESASS-540958	654	Proof of Concept
	Uncontrolled Recursion SNYK-JS-NODESASS-540964	654	Proof of Concept
	Denial of Service (DoS) SNYK-JS-NODESASS-540978	654	Proof of Concept
	NULL Pointer Dereference SNYK-JS-NODESASS-540992	654	Proof of Concept
	Out-of-Bounds SNYK-JS-NODESASS-540998	654	Proof of Concept
	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	654	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	654	No Known Exploit

Release notes

Package name: gulp-sass

• 5.1.0 - 2021-12-31
  

  Huge shout out to @ XhmikosR for putting a ton of effort into this release 🎉

  What's Changed

  • Document usage in ESM modules by @ mxmason in #805
  • Typo @ README.md by @ radimvaculik in #807
  • package.json: specify the files to include by @ XhmikosR in #817
  • Enforce LF by @ XhmikosR in #814
  • Update dependencies by @ XhmikosR in #816
  • Switch to GitHub Actions CI by @ XhmikosR in #813
  • Replace lodash with the lodash.clonedeep package by @ XhmikosR in #818
  • Tweak README.md by @ XhmikosR in #821
  • Move eslint to npm scripts by @ XhmikosR in #819
  • Minor lint tweaks by @ XhmikosR in #820
  • Fix fix script by @ XhmikosR in #823
  • Minor tweaks and cleanup by @ XhmikosR in #822
  • Update devDependencies and switch to Node.js 16/npm 7+ by @ XhmikosR in #829
  • Update devDependencies by @ XhmikosR in #835
  • Update README.md by @ XhmikosR in #832
  • Clean up return statements by @ XhmikosR in #836
  • CI: use lts/* for the lint job by @ XhmikosR in #839
  • Replace chalk with picocolors by @ XhmikosR in #833
  • Reword missing compiler message by @ XhmikosR in #834
  • Remove should by @ XhmikosR in #841
  • Remove transfob package by @ XhmikosR in #840
  • Update CHANGELOG.md by @ XhmikosR in #831
  • Add sass tests too by @ XhmikosR in #842

  New Contributors

  • @ radimvaculik made their first contribution in #807
  • @ XhmikosR made their first contribution in #817

  Full Changelog: v5.0.0...v5.1.0

• 5.0.0 - 2021-06-25
  

  First and foremost a huge shout out to @ mxmason for making this long awaited release possible <3

  Breaking changes

  • Require Node >= 12
  • Require Gulp 4
  • Drop dependency on the deprecate node-sass
  • Remove hardcoded default Sass compiler

  Upgrading to v5

  It is now required to explicitly install a Sass compiler.

  npm install gulp-sass sass

  or to continue using node-sass

  npm install gulp-sass node-sass

  Gulp tasks will also need to be update to use the installed Sass compiler

  const sass = require('gulp-sass')(require('sass'));

  Check out the upgrade guide for more details.

• 4.1.1 - 2021-06-24
  

  Dependencies

  • Bump lodash@^4.17.20 (@ Larinar, #776)
• 4.1.0 - 2020-04-23
  

  Features

  • Update modified time on output file (@ WraithKenny, #706)

  Dependencies

  • Migrate to the lodash package (@ stof, #728)
• 4.0.2 - 2018-10-16
  

  Documentation

  • Document how to use Dart Sass (@ nex3, #672)
• 4.0.1 - 2018-04-08
  

  Fixes

  • logError causing an error (@ DKvistgaard, #681)
• 4.0.0 - 2018-04-05
  

  This release is remove our dependency on the deprecated gulp-util package. To do so we need to drop support for Node < 4.

  We took this opportunity to update our support policy to match the upcoming Node Sass 5 release. From now on Gulp Sass will only support Active LTS and Current Node versions.

  At the time of release this means Node ^6.9 || ^8.9 || ^9 || ^10.

  Breaking changes

  • Drop support for non-Active LTS and Current releases

  Misc

  • Replace deprecated gulp-utils (@ demurgos)
  • Update dependencies (@ demurgos)
• 3.2.1 - 2018-03-24
  

  Features

  • Bump minimum node-sass to 4.8.3 (@ xzyfer)

from gulp-sass GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs