Sass-loader, a crucial webpack tool for developers using Sass, has seen a minor but potentially impactful update from version 9.0.2 to 9.0.3. While the core functionality remains the same—compiling Sass/SCSS files into CSS for use in web applications—some dependency upgrades may subtly affect project builds and compatibility.
Specifically, the newer 9.0.3 version updates the klona dependency from ^1.1.1 to ^1.1.2. On the development side, jest was bumped from 26.0.1 to 26.2.2, sass from 1.26.8 to 1.26.10, eslint from 7.3.0 to 7.6.0, @babel/cli from 7.10.3 to 7.10.5, @babel/core from 7.10.3 to 7.11.0, css-loader is not updated and @babel/preset-env from 7.10.3 to 7.11.0. Standard-version was also bumped from 8.0.0 to 8.0.2 and @commitlint/cli and @commitlint/config-conventional were both updated from 9.0.1 to 9.1.1. Webpack was also updated from 4.43.0 to 4.44.1`.
These changes might include bug fixes, performance improvements, or new features within those dependencies. Developers should review the changelogs of jest, sass, eslint, @babel/cli, @babel/core, @babel/preset-env, standard-version, @commitlint/cli and @commitlint/config-conventional , and webpack to understand the specific impacts on their projects. While likely minor, these dependency updates can influence build processes, linting rules, code transpilation, and overall compatibility, ensuring a smoother and more secure development workflow. Keep in mind that sass-loader relies on peer dependencies like sass, fibers, webpack, and node-sass to be installed separately, so compatibility with these remains essential.
The are not vulnerabilities for the version 9.0.3 of the package sass-loader