From 250021f4e465d166fba63478bdcf9d0b0cf17153 Mon Sep 17 00:00:00 2001 From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com> Date: Fri, 23 Jan 2026 04:43:25 +0000 Subject: [PATCH] fix: plugins/scaffolder/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-DIFF-14917201 - https://snyk.io/vuln/SNYK-JS-BACKSTAGEBACKENDPLUGINAPI-15054291 - https://snyk.io/vuln/SNYK-JS-LODASH-15053838 - https://snyk.io/vuln/SNYK-JS-LODASHES-15053836 --- plugins/scaffolder/package.json | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/plugins/scaffolder/package.json b/plugins/scaffolder/package.json index 08a3004e08fb44..a62cf8362532ac 100644 --- a/plugins/scaffolder/package.json +++ b/plugins/scaffolder/package.json @@ -48,18 +48,18 @@ "@backstage/catalog-client": "workspace:^", "@backstage/catalog-model": "workspace:^", "@backstage/config": "workspace:^", - "@backstage/core-components": "workspace:^", + "@backstage/core-components": "0.1.0", "@backstage/core-plugin-api": "workspace:^", - "@backstage/errors": "workspace:^", - "@backstage/integration": "workspace:^", - "@backstage/integration-react": "workspace:^", + "@backstage/errors": "0.1.1", + "@backstage/integration": "0.1.0", + "@backstage/integration-react": "0.1.1", "@backstage/plugin-catalog-common": "workspace:^", "@backstage/plugin-catalog-react": "workspace:^", "@backstage/plugin-permission-react": "workspace:^", "@backstage/plugin-scaffolder-common": "workspace:^", - "@backstage/plugin-scaffolder-react": "workspace:^", + "@backstage/plugin-scaffolder-react": "1.6.0", "@backstage/theme": "workspace:^", - "@backstage/types": "workspace:^", + "@backstage/types": "0.1.1", "@codemirror/language": "^6.0.0", "@codemirror/legacy-modes": "^6.1.0", "@codemirror/view": "^6.0.0", @@ -80,7 +80,7 @@ "immer": "^9.0.1", "json-schema": "^0.4.0", "json-schema-library": "^7.3.9", - "lodash": "^4.17.21", + "lodash": "^4.17.23", "luxon": "^3.0.0", "qs": "^6.9.4", "react-use": "^17.2.4",