Upgrading node-sass 6 to 7

Breaking6.0.1 → 7.0.3Breaking2Security1New1Changed7Other2

SecurityModerate · CVSS 5.3Improper Certificate Validation in node-sassGHSA-r8f7-9pfq-mjmv · CVE-2020-24025 ↗

BreakingUpgrade verdict

2 breaking changes and a security fix.

In plain terms

This version no longer runs on Node.js 15.
Downloads now verify TLS certificates by default, so self-signed or invalid certificates will be rejected unless you opt out.
Improper Certificate Validation in node-sass

Must act 3 items need code or config changes

Installs 233 packages in all (was 211).

What you must change

Breaking2

Drops support for Node 15.

7.0.0GitHub ReleaseSummarizedView source

Sets rejectUnauthorized to true by default.

rejectUnauthorized

7.0.0GitHub ReleaseSummarizedView source

Security1

Improper Certificate Validation in node-sass

Moderate · CVSS 5.3

7.0.0GitHub AdvisoryOriginalView source