build(deps-dev): bump sass-loader from 17.0.0 to 17.0.1

[dependabot]

Bumps sass-loader from 17.0.0 to 17.0.1.

Release notes

Sourced from sass-loader's releases.

v17.0.1

Patch Changes

• Remove the byte order mark (BOM) from the compiled CSS. dart-sass prepends it when the compiled CSS contains non ASCII characters and the style option is compressed (the default for the production mode), but a BOM is only valid at the very beginning of a file - tools like css-loader move @import at-rules above it, so it ended up in the middle of the generated CSS and broke the rule after it. Source maps are shifted accordingly. (by @​alexander-akait in #1337)

Changelog

Sourced from sass-loader's changelog.

17.0.1

Patch Changes

• Remove the byte order mark (BOM) from the compiled CSS. dart-sass prepends it when the compiled CSS contains non ASCII characters and the style option is compressed (the default for the production mode), but a BOM is only valid at the very beginning of a file - tools like css-loader move @import at-rules above it, so it ended up in the middle of the generated CSS and broke the rule after it. Source maps are shifted accordingly. (by @​alexander-akait in #1337)

Commits

• f38ee40 chore(release): new release (#1338)
• d33042b docs: explain how @use/@import requests are resolved (#1339)
• 72640db fix: remove the BOM from the compiled CSS (#1337)
• a28ab73 docs: use the built-in CSS support of webpack in examples (#1336)
• 7b81867 chore(deps): apply socket fixes (#1333)
• b17bc02 chore(deps-dev): bump postcss from 8.5.14 to 8.5.26 (#1332)
• c7a83fe chore(deps-dev): bump fast-uri from 3.1.2 to 3.1.5 (#1331)
• 14a29c0 chore(deps-dev): bump shell-quote from 1.8.2 to 1.10.0 (#1328)
• e2a48b8 chore(deps): bump immutable from 5.1.5 to 5.1.9 (#1327)
• 87864a5 chore(deps-dev): bump @​babel/core from 7.29.0 to 7.29.6 (#1326)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Quality Report — ConductionNL/shillinq @ 9c13b53

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
check-manifest-shell		✅
format		✅
check-l10n-js		✅
check-schema-l10n		✅
check-manifest-budget		✅
check-markers		✅
check-registers		✅
check-seeds		✅
check-fragment-required		✅
check-nav-reachability		✅
check-job-registration		✅
test-l10n		✅
composer			✅	✅ 106/106
npm			✅	✅ 537/537
app:check-code	⏭️
info.xml	✅
REUSE	❌
PHPUnit					✅
Newman					✅
Playwright					⏭️ deferred — runs on the promotion into beta/main, not on a pull request into development
Hydra gates					✅

---

Quality workflow — 2026-09-01 22:13 UTC

Download the full PDF report from the workflow artifacts.