From 51e34d9a76cbb2486e76dc31170d482f29525c55 Mon Sep 17 00:00:00 2001 From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com> Date: Fri, 23 Jan 2026 04:42:25 +0000 Subject: [PATCH] fix: plugins/techdocs-backend/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-DIFF-14917201 - https://snyk.io/vuln/SNYK-JS-BACKSTAGEBACKENDPLUGINAPI-15054291 - https://snyk.io/vuln/SNYK-JS-LODASH-15053838 - https://snyk.io/vuln/SNYK-JS-LODASHES-15053836 --- plugins/techdocs-backend/package.json | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/plugins/techdocs-backend/package.json b/plugins/techdocs-backend/package.json index f3718e7a7d3d60..379fac4bfa74d6 100644 --- a/plugins/techdocs-backend/package.json +++ b/plugins/techdocs-backend/package.json @@ -48,25 +48,25 @@ "clean": "backstage-cli package clean" }, "dependencies": { - "@backstage/backend-common": "workspace:^", - "@backstage/backend-plugin-api": "workspace:^", + "@backstage/backend-common": "0.24.1", + "@backstage/backend-plugin-api": "1.6.1", "@backstage/catalog-client": "workspace:^", "@backstage/catalog-model": "workspace:^", "@backstage/config": "workspace:^", "@backstage/errors": "workspace:^", "@backstage/integration": "workspace:^", - "@backstage/plugin-catalog-common": "workspace:^", + "@backstage/plugin-catalog-common": "0.1.0", "@backstage/plugin-permission-common": "workspace:^", - "@backstage/plugin-search-backend-module-techdocs": "workspace:^", - "@backstage/plugin-search-common": "workspace:^", - "@backstage/plugin-techdocs-node": "workspace:^", + "@backstage/plugin-search-backend-module-techdocs": "0.2.2", + "@backstage/plugin-search-common": "0.3.1", + "@backstage/plugin-techdocs-node": "1.7.2", "@types/express": "^4.17.6", "dockerode": "^3.3.1", "express": "^4.17.1", "express-promise-router": "^4.1.0", "fs-extra": "10.1.0", "knex": "^2.0.0", - "lodash": "^4.17.21", + "lodash": "^4.17.23", "node-fetch": "^2.6.7", "p-limit": "^3.1.0", "winston": "^3.2.1"