Skip to content

Bump sass-embedded from 1.105.1 to 1.106.1 - #252

Merged
Lenni009 merged 1 commit into
devfrom
dependabot/npm_and_yarn/dev/sass-embedded-1.105.2
Oct 26, 2026
Merged

Lenni009 merged 1 commit into
devfrom
dependabot/npm_and_yarn/dev/sass-embedded-1.105.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps sass-embedded from 1.105.1 to 1.106.1.

Changelog

Sourced from sass-embedded's changelog.

1.106.1

  • Fix a bug where an attribute selector with an empty value (such as [class=""]) would crash when serializing.

  • Don't crash when serializing a number with an empty unit. This is only possible through the JavaScript and Dart APIs or the embedded protocol.

Embedded Dart Sass

  • More robustly convert invalid value errors into PARAMS errors.

1.106.0

  • Don't normalize CSS escapes in statement contexts that can contain interpolation. For example, @f\6Fo is now emitted as written rather than normalized to @foo.

  • Fix a bug where quotes would be removed from attribute selector values that contained backslashes.

  • Fix invalid source spans that could cause crashes when encountering a syntax error in selectors or media queries that also contain escape sequences.

  • Fix a bug where the indented syntax parser would crash when parsing a file where the first statement was indented and appeared after the first line.

  • Fix a bug that could cause crashes when encountering errors or warnings in interpolations that contain patterns like // */.

  • Potentially breaking compatibility fix: CSS escape codes whose values are 0, for Unicode surrogates, or greater than the maximum allowed code point are now consistently normalized to U+FFFD REPLACEMENT CHARACTER in expression contexts. Previously, in some cases these were instead normalized to the normalized form of the original escape sequence, which violates the principle that all escape sequences for identical values should be normalized the same way. In other cases, these would simply throw errors.

    As a special case, \0 on its own will continue to be normalized to \0 to support historical CSS hacks.

  • Potentially breaking bug fix: Throw an error for mixins and functions that have rest parameters which are the same as normal parameters. Previously, the positional parameters wouldn't be accessible and calling such a mixin or function with a named argument would crash the compiler.

  • Potentially breaking bug fix: Fix various cases where using a CSS escape code at the beginning of an identifier would change parsing behavior versus using the character directly.

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 19, 2026
Bumps [sass-embedded](https://github.com/sass/embedded-host-node) from 1.105.1 to 1.106.1.
- [Changelog](https://github.com/sass/embedded-host-node/blob/main/CHANGELOG.md)
- [Commits](sass/embedded-host-node@1.105.1...1.106.1)

---
updated-dependencies:
- dependency-name: sass-embedded
  dependency-version: 1.105.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump sass-embedded from 1.105.1 to 1.105.2 Bump sass-embedded from 1.105.1 to 1.106.1 Oct 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev/sass-embedded-1.105.2 branch from e8ed826 to 740bf91 Compare October 26, 2026 08:44
@Lenni009
Lenni009 merged commit 65a9f48 into dev Oct 26, 2026
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev/sass-embedded-1.105.2 branch October 26, 2026 08:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant