Skip to content

Bump the npm_and_yarn group across 1 directory with 11 updates #71

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the npm_and_yarn group across 1 directory with 11 updates #71

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2024

Bumps the npm_and_yarn group with 7 updates in the /backstage directory:

Package From To
@backstage/plugin-catalog-backend 1.14.0 1.26.0
@backstage/plugin-techdocs-backend 1.8.0 1.10.13
express 4.19.2 4.20.0
dompurify 2.4.7 2.5.7
micromatch 4.0.5 4.0.8
rollup 2.79.1 2.79.2
webpack 5.94.0 5.95.0

Updates @backstage/plugin-catalog-backend from 1.14.0 to 1.26.0

Release notes

Sourced from @​backstage/plugin-catalog-backend's releases.

v1.26.0

See docs/releases/v1.26.0-changelog.md for more information.

v1.26.0-next.1

See docs/releases/v1.26.0-next.1-changelog.md for more information.

v1.26.0-next.0

See docs/releases/v1.26.0-next.0-changelog.md for more information.

v1.25.2

This release fixes an issue where requests for the public http routes for the events-backend were authenticated causing 401 errors.

v1.25.1

This release fixes an bug where the kubernetes plugin would crash reading credentials from undefined.

v1.25.0

These are the release notes for the v1.25.0 release of Backstage. This is an unscheduled release that replaces what would’ve otherwise been the v1.25.0-next.1 release, due to a problem with the patch releases for 1.24.0. The next main line release will still be released on April 16th as scheduled, but will now instead be 1.26.0.

A huge thanks to the whole team of maintainers and contributors as well as the amazing Backstage Community for the hard work in getting this release developed and done.

Highlights

Auth service fixes

A number of fixes have been made to various plugins related to the new auth system:

Rate limiting has been disabled as it was a bit too aggressive and didn’t interact well with proxies. Fixes an issue in the TechDocs CLI related to cookie auth Fixes an integration issue of the new auth services in the Jenkins backend plugin Fixed an issue in the scaffolder were credentials weren’t forwarded correctly to the action context. Fixed an issue where the proxy backend blocked unauthenticated requests.

Catalog

The catalog backend can now be extended with additional permissions through new addPermissions methods of the CatalogBuilder and catalogPermissionExtensionPoint. The paginated catalog table now saves the search text in the query parameters and debounces the server requests.

Security Fixes

This release does not contain any security fixes.

Upgrade path

We recommend that you keep your Backstage project up to date with this latest release. For more guidance on how to upgrade, check out the documentation for keeping Backstage updated.

Links and References

Below you can find a list of links and references to help you learn about and start using this new release.

... (truncated)

Changelog

Sourced from @​backstage/plugin-catalog-backend's changelog.

1.26.0

Minor Changes

  • 74acf06: Add dependencyOf prop to catalog model for Component kind to enable building relationship graphs with both directions using dependsOn and dependencyOf.
  • 78475c3: Allow offset mode paging in entity list provider
  • bd35cdb: The analyze-location endpoint is now protected by the catalog.location.analyze permission. The validate-entity endpoint is now protected by the catalog.entity.validate permission.

Patch Changes

  • 1882cfe: Moved getEntities ordering to utilize database instead of having it inside catalog client

    Please note that the latest version of @backstage/catalog-client will not order the entities in the same way as before. This is because the ordering is now done in the database query instead of in the client. If you rely on the ordering of the entities, you may need to update your backend plugin or code to handle this change.

  • d425fc4: Modules, plugins, and services are now BackendFeature, not a function that returns a feature.

  • c2b63ab: Updated dependency supertest to ^7.0.0.

  • 53cce86: Fixed an issue with the by-query call, where ordering by a field that does not exist on all entities led to not all results being returned

  • Updated dependencies

    • @​backstage/backend-common@​0.25.0
    • @​backstage/backend-plugin-api@​1.0.0
    • @​backstage/catalog-model@​1.7.0
    • @​backstage/catalog-client@​1.7.0
    • @​backstage/plugin-search-backend-module-catalog@​0.2.2
    • @​backstage/plugin-permission-node@​0.8.3
    • @​backstage/plugin-catalog-common@​1.1.0
    • @​backstage/plugin-catalog-node@​1.13.0
    • @​backstage/integration@​1.15.0
    • @​backstage/backend-openapi-utils@​0.1.18
    • @​backstage/plugin-events-node@​0.4.0
    • @​backstage/config@​1.2.0
    • @​backstage/errors@​1.2.4
    • @​backstage/types@​1.1.1
    • @​backstage/plugin-permission-common@​0.8.1

1.26.0-next.2

Minor Changes

  • 78475c3: Allow offset mode paging in entity list provider

Patch Changes

  • c2b63ab: Updated dependency supertest to ^7.0.0.
  • Updated dependencies
    • @​backstage/backend-common@​0.25.0-next.2
    • @​backstage/backend-plugin-api@​1.0.0-next.2
    • @​backstage/catalog-client@​1.7.0-next.1
    • @​backstage/integration@​1.15.0-next.0
    • @​backstage/backend-openapi-utils@​0.1.18-next.2

... (truncated)

Commits

Updates @backstage/plugin-techdocs-backend from 1.8.0 to 1.10.13

Changelog

Sourced from @​backstage/plugin-techdocs-backend's changelog.

1.10.13

Patch Changes

  • 086c32d: Dedicated token for techdocs cache sync
  • 5b679ac: The createRouter and its related types has been marked as deprecared. This backend should instead be initialized using the new backend system.
  • d425fc4: Modules, plugins, and services are now BackendFeature, not a function that returns a feature.
  • c2b63ab: Updated dependency supertest to ^7.0.0.
  • 5edd344: Refactor to use injected catalog client in the new backend system
  • Updated dependencies
    • @​backstage/backend-common@​0.25.0
    • @​backstage/plugin-techdocs-node@​1.12.11
    • @​backstage/backend-plugin-api@​1.0.0
    • @​backstage/catalog-model@​1.7.0
    • @​backstage/catalog-client@​1.7.0
    • @​backstage/plugin-search-backend-module-techdocs@​0.2.2
    • @​backstage/plugin-catalog-common@​1.1.0
    • @​backstage/plugin-catalog-node@​1.13.0
    • @​backstage/integration@​1.15.0
    • @​backstage/config@​1.2.0
    • @​backstage/errors@​1.2.4
    • @​backstage/plugin-permission-common@​0.8.1
    • @​backstage/plugin-techdocs-common@​0.1.0

1.10.13-next.2

Patch Changes

  • c2b63ab: Updated dependency supertest to ^7.0.0.
  • Updated dependencies
    • @​backstage/backend-common@​0.25.0-next.2
    • @​backstage/backend-plugin-api@​1.0.0-next.2
    • @​backstage/catalog-client@​1.7.0-next.1
    • @​backstage/plugin-techdocs-node@​1.12.11-next.2
    • @​backstage/integration@​1.15.0-next.0
    • @​backstage/catalog-model@​1.6.0
    • @​backstage/config@​1.2.0
    • @​backstage/errors@​1.2.4
    • @​backstage/plugin-catalog-common@​1.0.26
    • @​backstage/plugin-catalog-node@​1.12.7-next.2
    • @​backstage/plugin-permission-common@​0.8.1
    • @​backstage/plugin-search-backend-module-techdocs@​0.2.2-next.2
    • @​backstage/plugin-techdocs-common@​0.1.0

1.10.13-next.1

Patch Changes

  • 5edd344: Refactor to use injected catalog client in the new backend system
  • Updated dependencies

... (truncated)

Commits

Updates express from 4.19.2 to 4.20.0

Release notes

Sourced from express's releases.

4.20.0

What's Changed

Important

  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect

Other Changes

New Contributors

Full Changelog: expressjs/express@4.19.1...4.20.0

Changelog

Sourced from express's changelog.

4.20.0 / 2024-09-10

  • deps: serve-static@0.16.0
    • Remove link renderization in html while redirecting
  • deps: send@0.19.0
    • Remove link renderization in html while redirecting
  • deps: body-parser@0.6.0
    • add depth option to customize the depth level in the parser
    • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
  • Remove link renderization in html while using res.redirect
  • deps: path-to-regexp@0.1.10
    • Adds support for named matching groups in the routes using a regex
    • Adds backtracking protection to parameters without regexes defined
  • deps: encodeurl@~2.0.0
    • Removes encoding of \, |, and ^ to align better with URL spec
  • Deprecate passing options.maxAge and options.expires to res.clearCookie
    • Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie
Commits

Updates axios from 0.21.4 to 0.27.2

Release notes

Sourced from axios's releases.

v0.27.2

Fixes and Functionality:

  • Fixed FormData posting in browser environment by reverting #3785 (#4640)
  • Enhanced protocol parsing implementation (#4639)
  • Fixed bundle size

v0.27.1

Fixes and Functionality:

  • Removed import of url module in browser build due to huge size overhead and builds being broken (#4594)
  • Bumped follow-redirects to ^1.14.9 (#4615)

v0.27.0

Breaking changes:

  • New toFormData helper function that allows the implementor to pass an object and allow axios to convert it to FormData (#3757)
  • Removed functionality that removed the the Content-Type request header when passing FormData (#3785)
  • (*) Refactored error handling implementing AxiosError as a constructor, this is a large change to error handling on the whole (#3645)
  • Separated responsibility for FormData instantiation between transformRequest and toFormData (#4470)
  • (*) Improved and fixed multiple issues with FormData support (#4448)

QOL and DevX improvements:

  • Added a multipart/form-data testing playground allowing contributors to debug changes easily (#4465)

Fixes and Functionality:

  • Refactored project file structure to avoid circular imports (#4515) & (#4516)
  • Bumped follow-redirects to ^1.14.9 (#4562)

Internal and Tests:

  • Updated dev dependencies to latest version

Documentation:

  • Fixing incorrect link in changelog (#4551)

Notes:

  • (*) Please read these pull requests before updating, these changes are very impactful and far reaching.

v0.26.1

Fixes and Functionality:

  • Refactored project file structure to avoid circular imports (#4220)

v0.26.0

Fixes and Functionality:

  • Fixed The timeoutErrorMessage property in config not work with Node.js (#3581)
  • Added errors to be displayed when the query parsing process itself fails (#3961)
  • Fix/remove url required (#4426)
  • Update follow-redirects dependency due to Vulnerability (#4462)
  • Bump karma from 6.3.11 to 6.3.14 (#4461)
  • Bump follow-redirects from 1.14.7 to 1.14.8 (#4473)

v0.25.0

Breaking changes:

... (truncated)

Changelog

Sourced from axios's changelog.

0.27.2 (April 27, 2022)

Fixes and Functionality:

  • Fixed FormData posting in browser environment by reverting #3785 (#4640)
  • Enhanced protocol parsing implementation (#4639)
  • Fixed bundle size

0.27.1 (April 26, 2022)

Fixes and Functionality:

  • Removed import of url module in browser build due to huge size overhead and builds being broken (#4594)
  • Bumped follow-redirects to ^1.14.9 (#4615)

0.27.0 (April 25, 2022)

Breaking changes:

  • New toFormData helper function that allows the implementor to pass an object and allow axios to convert it to FormData (#3757)
  • Removed functionality that removed the the Content-Type request header when passing FormData (#3785)
  • (*) Refactored error handling implementing AxiosError as a constructor, this is a large change to error handling on the whole (#3645)
  • Separated responsibility for FormData instantiation between transformRequest and toFormData (#4470)
  • (*) Improved and fixed multiple issues with FormData support (#4448)

QOL and DevX improvements:

  • Added a multipart/form-data testing playground allowing contributors to debug changes easily (#4465)

Fixes and Functionality:

  • Refactored project file structure to avoid circular imports (#4515) & (#4516)
  • Bumped follow-redirects to ^1.14.9 (#4562)

Internal and Tests:

  • Updated dev dependencies to latest version

Documentation:

  • Fixing incorrect link in changelog (#4551)

Notes:

  • (*) Please read these pull requests before updating, these changes are very impactful and far reaching.

0.26.1 (March 9, 2022)

Fixes and Functionality:

  • Refactored project file structure to avoid circular imports (#4220)

0.26.0 (February 13, 2022)

Fixes and Functionality:

  • Fixed The timeoutErrorMessage property in config not work with Node.js (#3581)
  • Added errors to be displayed when the query parsing process itself fails (#3961)
  • Fix/remove url required (#4426)
  • Update follow-redirects dependency due to Vulnerability (#4462)

... (truncated)

Commits
  • bc733fe Releasing v0.27.2
  • b9e9fb4 Enhanced protocol parsing implementation to fix #4633; (#4639)
  • 76432c1 Fixed FormData posting in browser environment by reverting #3785; (#4640)
  • 82fd15f Combined build process and cleaned it up a bit
  • 1d82af1 Fixing issues with bundle sizes
  • bcb166e Fixed incorrect date in changelog
  • 838f53b Merge branch 'master' of github.com:axios/axios
  • cb9c534 Releasing v0.27.1
  • 91d21fc Releasing v0.72.1
  • 167cb8b Remove eslint-g package as this seems have been added in error
  • Additional commits viewable in compare view

Updates body-parser from 1.20.2 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

New Contributors

Full Changelog: expressjs/body-parser@1.20.2...1.20.3

Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)
Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.


Updates dompurify from 2.4.7 to 2.5.7

Release notes

Sourced from dompurify's releases.

DOMPurify 2.5.7

  • Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @​masatokinugawa
  • Removed the foreignObject element from the list of HTML entry-points, thanks @​masatokinugawa

DOMPurify 2.5.6

  • Fixed an issue with the execution logic of attribute hooks to prevent bypasses, thanks @​kevin-mizu
  • Fixed a minor problem with the bower file pointing to the wrong dist path
  • Updated several development dependencies

DOMPurify 2.5.5

  • Fixed a minor issue with the dist paths in bower.js, thanks @​HakumenNC
  • Fixed a minor issue with sanitizing HTML coming from copy&paste Word content, thanks @​kakao-bishop-cho

DOMPurify 2.5.4

  • Fixed a bug with latest isNaN checks affecting MSIE, thanks @​tulach
  • Fixed the tests for MSIE and fixed related test-runner

DOMPurify 2.5.3

  • Fixed several mXSS variations found by and thanks to @​kevin-mizu & @​Ry0taK
  • Added better configurability for comment scrubbing default behavior
  • Added better hardening against Prototype Pollution attacks, thanks @​kevin-mizu
  • Fixed some smaller issues in README and other documentation

DOMPurify 2.5.2

  • Addressed and fixed a mXSS variation found by @​kevin-mizu
  • Addressed and fixed a mXSS variation found by Adam Kues of Assetnote
  • Updated tests for older Safari and Chrome versions

DOMPurify 2.5.1

  • Fixed an mXSS sanitizer bypass reported by @​icesfont
  • Added new code to track element nesting depth
  • Added new code to enforce a maximum nesting depth of 255
  • Added coverage tests and necessary clobbering protections

Note that this is a security release and should be upgraded to immediately. Please also note that further releases may follow as the underlying vulnerability is apparently new and further variations may be discovered.

DOMPurify 2.5.0

  • Added new setting SAFE_FOR_XML to enable better control over comment scrubbing
  • Updated the LICENSE file to show the accurate year number
  • Updated several build and test dependencies

DOMPurify 2.4.9

  • Fixed another conditional bypass caused by Processing Instructions, thanks @​Ry0taK
  • Fixed the regex for HTML Custom Element detection, thanks @​AlekseySolovey3T

DOMPurify 2.4.8

  • Fixed two possible bypasses when sanitizing an XML document and later using it in HTML, thanks @​Slonser
Commits
  • 71683cb chore: Preparing 2.5.7 release
  • d78f241 chore: Preparing 2.5.6 release
  • 38e8410 fix: Added changes to 2.x regarding attribute value checks
  • 9a7cd98 See #961
  • de2545c chore: Preparing 2.5.5 release
  • f1e27e6 chore: Also removed depth counter logic from 2.x branch for now
  • 10c1261 docs: Updated README ever so slightly
  • 1c92880 test: Fixed two more tests for MSIE11 and Edge 18
  • 1401208 test: Fixed more tests for MSIE and Edge 18
  • 2c6410a test: Fixed several new tests for MSIE11 and Edge 18
  • Additional commits viewable in compare view

Updates micromatch from 4.0.5 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

[4.0.7] - 2024-05-22

  • this is basically v4.0.5, with some README updates
  • it is vulnerable to CVE-2024-4067
  • Updated braces to v3.0.3 to avoid CVE-2024-4068
  • does NOT break API compatibility

[4.0.6] - 2024-05-21

  • Added hasBraces to check if a pattern contains braces.
  • Fixes CVE-2024-4067
  • BREAKS API COMPATIBILITY
  • Should be labeled as a major release, but it's not.
Commits

Updates path-to-regexp from 0.1.7 to 0.1.10

Release notes

Sourced from path-to-regexp's releases.

Backtrack protection

Fixed

  • Add backtrack protection to parameters 29b96b4
    • This will break some edge cases but should improve performance

pillarjs/path-to-regexp@v0.1.9...v0.1.10

Support non-lookahead regex output

Added

  • Allow a non-lookahead regex (#312) c4272e4

component/path-to-regexp@v0.1.8...v0.1.9

Support named matching groups in RegExp

Added

  • Add support for named matching groups (#301) 114f62d

pillarjs/path-to-regexp@v0.1.7...v0.1.8

Commits

Updates rollup from 2.79.1 to 2.79.2

Changelog

Sourced from rollup's changelog.

rollup changelog

4.23.0

2024-10-01

Features

  • Collect all emitted names and originalFileNames for assets (#5686)

Pull Requests

4.22.5

2024-09-27

Bug Fixes

  • Allow parsing of certain unicode characters again (#5674)

Pull Requests

4.22.4

2024-09-21

Bug Fixes

  • Fix a vulnerability in generated code that affects IIFE, UMD and CJS bundles when run in a browser context (#5671)

Pull Requests

4.22.3

2024-09-21

Bug Fixes

... (truncated)

Commits

Updates serve-static from 1.15.0 to 1.16.0

Release notes

Sourced from serve-static's releases.

1.16.0

What's Changed

New Contributors

Full Changelog: expressjs/serve-static@v1.15.0...1.16.0

Changelog

Sourced from serve-static's changelog.

1.16.0 / 2024-09-10

  • Remove link renderization in html while redirecting
Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for serve-static since your current version.


Updates webpack from 5.94.0 to 5.95.0

Release notes

Sourced from webpack's releases.

v5.95.0

Bug Fixes

  • Fixed hanging when attempting to read a symlink-like file that it can't read
  • Handle default for import context element dependency
  • Merge duplicate chunks call after split chunks
  • Generate correctly code for dynamically importing the same file twice and destructuring
  • Use content hash as [base] and [name] for extracted DataURI's
  • Distinguish module and import in module-import for externals import's
  • [Types] Make EnvironmentPlugin default values types less strict
  • [Types] Typescript 5.6 compatibility

New Features

  • Add new optimization.avoidEntryIife option (true by default for the production mode)
  • Pass output.hash* options to loader context

Performance

  • Avoid unneeded re-visit in build chunk graph
Commits
  • e20fd63 chore(release): 5.95.0
  • 4866b0d feat: added new optimization.entryIife option
  • d90f692 fix: merge duplicate chunks after split chunks
  • 90dec30 fix(externals): distinguish “module” and “import” in “module-import”
  • c1a0a46 fix(externals): distinguish “module” and “import” in “module-import”
  • 14d8fa8 fix: all tests cases
  • dae16ad feat: pass output.hash* options to loader context
  • 75d185d feat: pass output.hash* options to loader context
  • 46e0b9c test: update
  • 8e62f9f test
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge t...

Description has been truncated

@dependabot
Bump the npm_and_yarn group across 1 directory with 11 updates
0a6e5ae 
Bumps the npm_and_yarn group with 7 updates in the /backstage directory:

| Package | From | To |
| --- | --- | --- |
| [@backstage/plugin-catalog-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/catalog-backend) | `1.14.0` | `1.26.0` |
| [@backstage/plugin-techdocs-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/techdocs-backend) | `1.8.0` | `1.10.13` |
| [express](https://github.com/expressjs/express) | `4.19.2` | `4.20.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `2.4.7` | `2.5.7` |
| [micromatch](https://github.com/micromatch/micromatch) | `4.0.5` | `4.0.8` |
| [rollup](https://github.com/rollup/rollup) | `2.79.1` | `2.79.2` |
| [webpack](https://github.com/webpack/webpack) | `5.94.0` | `5.95.0` |



Updates `@backstage/plugin-catalog-backend` from 1.14.0 to 1.26.0
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/catalog-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/v1.26.0/plugins/catalog-backend)

Updates `@backstage/plugin-techdocs-backend` from 1.8.0 to 1.10.13
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/techdocs-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/HEAD/plugins/techdocs-backend)

Updates `express` from 4.19.2 to 4.20.0
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/master/History.md)
- [Commits](expressjs/express@4.19.2...4.20.0)

Updates `axios` from 0.21.4 to 0.27.2
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v0.27.2/CHANGELOG.md)
- [Commits](axios/axios@v0.21.4...v0.27.2)

Updates `body-parser` from 1.20.2 to 1.20.3
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.20.2...1.20.3)

Updates `dompurify` from 2.4.7 to 2.5.7
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@2.4.7...2.5.7)

Updates `micromatch` from 4.0.5 to 4.0.8
- [Release notes](https://github.com/micromatch/micromatch/releases)
- [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/micromatch@4.0.5...4.0.8)

Updates `path-to-regexp` from 0.1.7 to 0.1.10
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.10)

Updates `rollup` from 2.79.1 to 2.79.2
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v2.79.1...v2.79.2)

Updates `serve-static` from 1.15.0 to 1.16.0
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/master/HISTORY.md)
- [Commits](expressjs/serve-static@v1.15.0...1.16.0)

Updates `webpack` from 5.94.0 to 5.95.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.94.0...v5.95.0)

---
updated-dependencies:
- dependency-name: "@backstage/plugin-catalog-backend"
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-techdocs-backend"
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: body-parser
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: dompurify
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: micromatch
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: path-to-regexp
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: rollup
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: webpack
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant