Code

CVE-2022-25758 Fix#50

Code

Open

Gyarbij wants to merge 87 commits intosasstools:mastersasstools/scss-tokenizer:masterfrom konzepts:mainkonzepts/tokenizer4scss:mainCopy head branch name to clipboard

+6,398-6,261

Commits

Commits on Aug 2, 2022

• Bump ini from 1.3.5 to 1.3.8

  Show description for 83ba42e
  dependabot[bot]

  authored
  83ba42e

• Bump handlebars from 4.0.12 to 4.7.7

  Show description for e4e1d59
  dependabot[bot]

  authored
  e4e1d59

• Bump y18n from 3.2.1 to 3.2.2

  Show description for 6c9ca41
  dependabot[bot]

  authored
  6c9ca41

• Bump lodash from 4.17.5 to 4.17.21

  Show description for b310e0e
  dependabot[bot]

  authored
  b310e0e

• Create dependabot.yml

  Gyarbij

  authored
  fcb5fe4

• Bump tmpl from 1.0.4 to 1.0.5

  Show description for 9d0d586
  dependabot[bot]

  authored
  9d0d586

• Merge pull request #8 from konzepts/Gyarbij-dependabot

  Show description for e5488c8
  Gyarbij

  authored
  e5488c8

• Update README.md

  Gyarbij

  authored
  133d137

• Merge pull request #1 from konzepts/dependabot/npm_and_yarn/ini-1.3.8

  Show description for 0dfd455
  Gyarbij

  authored
  0dfd455

• Merge pull request #2 from konzepts/dependabot/npm_and_yarn/handlebars-4.7.7

  Show description for 407badb
  Gyarbij

  authored
  407badb

• Merge pull request #3 from konzepts/dependabot/npm_and_yarn/y18n-3.2.2

  Show description for 1c3c1fa
  Gyarbij

  authored
  1c3c1fa

• Merge pull request #4 from konzepts/dependabot/npm_and_yarn/lodash-4.17.21

  Show description for bf9ddf3
  Gyarbij

  authored
  bf9ddf3

• Bump json-schema from 0.2.3 to 0.4.0

  Show description for a69f73f
  dependabot[bot]

  authored
  a69f73f

• Merge pull request #5 from konzepts/dependabot/npm_and_yarn/tmpl-1.0.5

  Show description for f1e0b02
  Gyarbij

  authored
  f1e0b02

• Merge pull request #10 from konzepts/dependabot/npm_and_yarn/json-schema-0.4.0

  Show description for bfc358f
  Gyarbij

  authored
  bfc358f

• Bump async from 2.6.1 to 2.6.4

  Show description for 319b7e4
  dependabot[bot]

  authored
  319b7e4

• Bump ws from 5.2.2 to 5.2.3

  Show description for c0936f7
  dependabot[bot]

  authored
  c0936f7

• Bump set-value from 0.4.3 to 2.0.1

  Show description for 3cc9b85
  dependabot[bot]

  authored
  3cc9b85

• Merge pull request #6 from konzepts/dependabot/npm_and_yarn/ws-5.2.3

  Show description for 171c0c6
  Gyarbij

  authored
  171c0c6

• Merge pull request #7 from konzepts/dependabot/npm_and_yarn/async-2.6.4

  Show description for cdcc459
  Gyarbij

  authored
  cdcc459

• Bump path-parse from 1.0.6 to 1.0.7

  Show description for 903d943
  dependabot[bot]

  authored
  903d943

• Bump minimist from 0.0.8 to 1.2.6

  Show description for 7a91575
  dependabot[bot]

  authored
  7a91575

• Merge pull request #11 from konzepts/dependabot/npm_and_yarn/minimist-1.2.6

  Show description for a3d1b5e
  Gyarbij

  authored
  a3d1b5e

• Bump tar from 4.4.1 to 4.4.19

  Show description for 5ddf179
  dependabot[bot]

  authored
  5ddf179

• Merge pull request #14 from konzepts/dependabot/npm_and_yarn/path-parse-1.0.7

  Show description for 8a5d59f
  Gyarbij

  authored
  8a5d59f

• Merge pull request #13 from konzepts/dependabot/npm_and_yarn/set-value-2.0.1

  Show description for 1d594c4
  Gyarbij

  authored
  1d594c4

• Merge pull request #12 from konzepts/dependabot/npm_and_yarn/tar-4.4.19

  Show description for fd366d9
  Gyarbij

  authored
  fd366d9

• Bump hosted-git-info from 2.6.0 to 2.8.9

  Show description for f7a3454
  dependabot[bot]

  authored
  f7a3454

• Bump ajv from 6.6.1 to 6.12.6

  Show description for b2ae0a4
  dependabot[bot]

  authored
  b2ae0a4

• Merge pull request #17 from konzepts/dependabot/npm_and_yarn/ajv-6.12.6

  Show description for 1ad925c
  Gyarbij

  authored
  1ad925c

• Merge pull request #16 from konzepts/dependabot/npm_and_yarn/hosted-git-info-2.8.9

  Show description for 77d21c9
  Gyarbij

  authored
  77d21c9

• Create codeql-analysis.yml

  Gyarbij

  authored
  e6bd86c

• Bump mixin-deep from 1.3.1 to 1.3.2

  Show description for f601716
  dependabot[bot]

  authored
  f601716

• Merge pull request #18 from konzepts/dependabot/npm_and_yarn/mixin-deep-1.3.2

  Show description for 02aeeb8
  Gyarbij

  authored
  02aeeb8

• Bump chownr from 1.0.1 to 1.1.4

  Show description for e480add
  dependabot[bot]

  authored
  e480add

Commits on Aug 8, 2022

• Bump babel-jest from 23.6.0 to 28.1.3

  Show description for f01b720
  dependabot[bot]

  authored
  f01b720

• Bump source-map from 0.7.3 to 0.7.4

  Show description for 26e2665
  dependabot[bot]

  authored
  26e2665

• Bump sass-spec from 3.5.1 to 3.5.4

  Show description for ab50474
  dependabot[bot]

  authored
  ab50474

Commits on Aug 9, 2022

• Merge pull request #22 from konzepts/dependabot/npm_and_yarn/sass-spec-3.5.4

  Show description for b8ea643
  Gyarbij

  authored
  b8ea643

• Merge pull request #21 from konzepts/dependabot/npm_and_yarn/source-map-0.7.4

  Show description for 7039af1
  Gyarbij

  authored
  7039af1

• Bump js-base64 from 2.4.9 to 3.7.2

  Show description for 9db1997
  dependabot[bot]

  authored
  9db1997

• Merge pull request #20 from konzepts/dependabot/npm_and_yarn/babel-jest-28.1.3

  Show description for 8eb1b30
  Gyarbij

  authored
  8eb1b30

• Merge pull request #15 from konzepts/dependabot/npm_and_yarn/chownr-1.1.4

  Show description for 8117c49
  Gyarbij

  authored
  8117c49

• Bump js-yaml from 3.12.0 to 3.14.1

  Show description for 75cd570
  dependabot[bot]

  authored
  75cd570

• Merge pull request #24 from konzepts/dependabot/npm_and_yarn/js-yaml-3.14.1

  Show description for 98f6800
  Gyarbij

  authored
  98f6800

• Merge pull request #23 from konzepts/dependabot/npm_and_yarn/js-base64-3.7.2

  Show description for 3810794
  Gyarbij

  authored
  3810794

• Bump mem from 1.1.0 to 4.3.0

  Show description for 6959370
  dependabot[bot]

  authored
  6959370

• Merge pull request #25 from konzepts/dependabot/npm_and_yarn/mem-4.3.0

  Show description for 7bb1202
  Gyarbij

  authored
  7bb1202

Commits on Aug 15, 2022

• Bump glob from 7.1.3 to 8.0.3

  Show description for fdeca07
  dependabot[bot]

  authored
  fdeca07

Commits on Aug 20, 2022

• Merge pull request #26 from konzepts/dependabot/npm_and_yarn/glob-8.0.3

  Show description for a5d7f13
  Gyarbij

  authored
  a5d7f13

• Bump jest from 23.6.0 to 28.1.3

  Show description for c2c72d8
  dependabot[bot]

  authored
  c2c72d8

Commits on Aug 25, 2022

• Merge pull request #19 from konzepts/dependabot/npm_and_yarn/jest-28.1.3

  Show description for 8554458
  Gyarbij

  authored
  8554458

Commits on Sep 5, 2022

• Bump babel-jest from 28.1.3 to 29.0.2

  Show description for 2951aa9
  dependabot[bot]

  authored
  2951aa9

Commits on Sep 7, 2022

• Merge pull request #30 from konzepts/dependabot/npm_and_yarn/babel-jest-29.0.2

  Show description for e5c60a3
  Gyarbij

  authored
  e5c60a3

Commits on Sep 12, 2022

• Bump jest from 28.1.3 to 29.0.3

  Show description for 57c2e04
  dependabot[bot]

  authored
  57c2e04

• Bump babel-jest from 29.0.2 to 29.0.3

  Show description for 3b4d436
  dependabot[bot]

  authored
  3b4d436

Commits on Sep 14, 2022

• Merge pull request #32 from konzepts/dependabot/npm_and_yarn/babel-jest-29.0.3

  Show description for 01232a1
  Gyarbij

  authored
  01232a1

• Merge pull request #31 from konzepts/dependabot/npm_and_yarn/jest-29.0.3

  Show description for 83f1a26
  Gyarbij

  authored
  83f1a26

Commits on Nov 13, 2022

• Bump minimatch from 3.0.4 to 3.1.2

  Show description for 4369127
  dependabot[bot]

  authored
  4369127

Commits on Nov 14, 2022

• Bump babel-jest from 29.0.3 to 29.3.1

  Show description for c3747f3
  dependabot[bot]

  authored
  c3747f3

• Bump jest from 29.0.3 to 29.3.1

  Show description for dfd2fd4
  dependabot[bot]

  authored
  dfd2fd4

• Merge pull request #43 from konzepts/dependabot/npm_and_yarn/jest-29.3.1

  Show description for 7747f45
  Gyarbij

  authored
  7747f45

• Merge pull request #42 from konzepts/dependabot/npm_and_yarn/babel-jest-29.3.1

  Show description for 979dadc
  Gyarbij

  authored
  979dadc

• Merge pull request #41 from konzepts/dependabot/npm_and_yarn/minimatch-3.1.2

  Show description for ff06eca
  Gyarbij

  authored
  ff06eca

• Merge branch 'sasstools:master' into main

  Gyarbij

  authored
  e9c0912

Commits on Nov 21, 2022

• Bump js-base64 from 3.7.2 to 3.7.3

  Show description for ea5a9c1
  dependabot[bot]

  authored
  ea5a9c1

Commits on Nov 24, 2022

• Merge pull request #44 from konzepts/dependabot/npm_and_yarn/js-base64-3.7.3

  Show description for b996394
  Gyarbij

  authored
  b996394

Commits on Dec 9, 2022

• Bump decode-uri-component from 0.2.0 to 0.2.2

  Show description for 4291e53
  dependabot[bot]

  authored
  4291e53

Commits on Apr 5, 2023

• Merge pull request #45 from konzepts/dependabot/npm_and_yarn/decode-uri-component-0.2.2

  Show description for 121abed
  Gyarbij

  authored
  121abed

Commits on Apr 10, 2023

• Bump jest from 29.3.1 to 29.5.0

  Show description for 9e1e4a6
  dependabot[bot]

  authored
  9e1e4a6

Commits on Apr 17, 2023

• Bump glob from 8.0.3 to 10.1.0

  Show description for 7d3594c
  dependabot[bot]

  authored
  7d3594c

Commits on Apr 21, 2023

• Merge pull request #59 from konzepts/dependabot/npm_and_yarn/glob-10.1.0

  Show description for d81f998
  Gyarbij

  authored
  d81f998

• Merge pull request #57 from konzepts/dependabot/npm_and_yarn/jest-29.5.0

  Show description for 61cc573
  Gyarbij

  authored
  61cc573

Commits on May 22, 2023

• Bump glob from 10.1.0 to 10.2.6

  Show description for a32da4c
  dependabot[bot]

  authored
  a32da4c

Commits on Jun 5, 2023

• Merge pull request #62 from konzepts/dependabot/npm_and_yarn/glob-10.2.6

  Show description for ee54c32
  Gyarbij

  authored
  ee54c32

Commits on Jul 3, 2023

• Bump glob from 10.2.6 to 10.3.1

  Show description for 7901df7
  dependabot[bot]

  authored
  7901df7

• Merge pull request #65 from konzepts/dependabot/npm_and_yarn/glob-10.3.1

  Show description for bcdbd90
  Gyarbij

  authored
  bcdbd90

Commits on Jul 10, 2023

• Bump jest from 29.5.0 to 29.6.1

  Show description for 348d11a
  dependabot[bot]

  authored
  348d11a

• Bump babel-jest from 29.3.1 to 29.6.1

  Show description for d8c4bf3
  dependabot[bot]

  authored
  d8c4bf3

• Bump glob from 10.3.1 to 10.3.3

  Show description for 94e1f34
  dependabot[bot]

  authored
  94e1f34

Commits on Jul 12, 2023

• Merge pull request #66 from konzepts/dependabot/npm_and_yarn/jest-29.6.1

  Show description for 48108d9
  Gyarbij

  authored
  48108d9

• Merge pull request #67 from konzepts/dependabot/npm_and_yarn/babel-jest-29.6.1

  Show description for adc8cdf
  Gyarbij

  authored
  adc8cdf

• Merge pull request #68 from konzepts/dependabot/npm_and_yarn/glob-10.3.3

  Show description for bfa5c9f
  Gyarbij

  authored
  bfa5c9f

Commits on Oct 10, 2023

• Bump fsevents from 1.2.4 to 1.2.13

  Show description for bcf4665
  dependabot[bot]

  authored
  bcf4665

Commits on Oct 18, 2023

• Bump @babel/traverse from 7.18.11 to 7.23.2

  Show description for e6b2e66
  dependabot[bot]

  authored
  e6b2e66

Commits on Oct 23, 2023

• Merge pull request #79 from konzepts/dependabot/npm_and_yarn/babel/traverse-7.23.2

  Show description for cc0fc59
  Gyarbij

  authored
  cc0fc59

• Merge pull request #78 from konzepts/dependabot/npm_and_yarn/fsevents-1.2.13

  Show description for cf6254b
  Gyarbij

  authored
  cf6254b