Fix most urgent issues in 2023

[mgreter]

• Fix recursion when resolving parents
• Fix potential memory leak in sass_not
• Fix potential NPE in selector list inspector

[mgreter]

FWIW sass-spec has diverted too much to still support LibSass CI/CD.
Tested via perl-libsass, and didn't see any regressions there.

[connorskees]

This is tangential, but if you're merging changes into libsass, is there any chance sass/sassc#268 could be merged? I'm not sure how one can build sassc in a script without this change applied.

[mgreter]

This is tangential, but if you're merging changes into libsass, is there any chance sass/sassc#268 could be merged? I'm not sure how one can build sassc in a script without this change applied.

Check https://github.com/sass/libsass/blob/master/docs/build.md
E.g. SASS_LIBSASS_PATH=/foo/bar/libsass make ... (AFAIR).

Edit: by default sassc expects libsass in its parent directory, e.g

# ls libsass
./sass-spec
./sassc
...

[jubalh]

I ran these changed against POCs for: CVE-2022-43357, CVE-2022-43358 and CVE-2022-26592. All of these issues are fixed. Thanks @mgreter !

[mgreter]

FWIW Added MSI installers to the 3.6.6 release after some hasle; plugins still seem to work ;)

math{ sin42: sin(42); }