Sass-loader 8.0.0 represents a notable update from version 7.3.1, primarily impacting dependency management and supported environments. A key difference lies in the peerDependencies. Version 8.0.0 mandates specific versions of sass (>=1.3.0), fibers (>=3.1.0), webpack (>=4.36.0), and node-sass (>=4.0.0), offering finer control and potentially improved compatibility, whereas the previous version offers much less control allowing webpack versions 3 and 4. Developers upgrading should carefully check their project dependencies to ensure alignment with these requirements.
Furthermore, the direct dependencies have also seen adjustments. pify has been removed, which might influence projects relying on its specific promise conversion utilities. loader-utils has been bumped from version 1.0.1 to 1.2.3 and schema-utils added for version 2.1.0. This indicates internal refactoring or enhancements in argument validation via schemas.
The devDependencies exhibit numerous updates, reflecting changes in the development and testing environment. Updates to tools like del, eslint, prettier, and various testing libraries suggest improvements in code quality, linting, and testing processes. Moreover, newer versions of webpack-related tools such as webpack-cli and webpack-dev-server suggest alignment with current webpack ecosystem standards. For developers, these changes likely translate to a more robust and maintainable loader, albeit with a need to review their dependency configurations during the upgrade process.
The are not vulnerabilities for the version 8.0.0 of the package sass-loader