Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 1, 2025

Bumps the npm_and_yarn group with 14 updates in the / directory:

Package From To
@backstage/plugin-app-backend 0.3.73 0.3.75
@backstage/plugin-catalog-backend 1.25.2 1.26.0
@backstage/plugin-permission-backend 0.5.48 0.6.0
@backstage/plugin-techdocs-backend 1.10.12 1.10.13
@babel/runtime-corejs3 7.25.6 7.27.4
@backstage/plugin-scaffolder-node 0.4.10 0.4.12
axios 1.7.7 1.9.0
dompurify 2.5.6 2.5.8
elliptic 6.5.7 6.6.1
formidable 3.5.1 3.5.4
http-proxy-middleware 2.0.6 2.0.9
multer 1.4.5-lts.1 1.4.5-lts.2
rollup 4.21.3 4.41.1
undici 5.28.4 5.29.0

Bumps the npm_and_yarn group with 4 updates in the /packages/backend directory: @backstage/plugin-app-backend, @backstage/plugin-catalog-backend, @backstage/plugin-permission-backend and @backstage/plugin-techdocs-backend.

Updates @backstage/plugin-app-backend from 0.3.73 to 0.3.75

Changelog

Sourced from @​backstage/plugin-app-backend's changelog.

@​backstage/plugin-app-backend

0.5.3-next.0

Patch Changes

  • Updated dependencies
    • @​backstage/backend-plugin-api@​1.4.0-next.0
    • @​backstage/config-loader@​1.10.1
    • @​backstage/plugin-auth-node@​0.6.4-next.0
    • @​backstage/plugin-app-node@​0.1.34-next.0

0.5.2

Patch Changes

  • Updated dependencies
    • @​backstage/plugin-auth-node@​0.6.3
    • @​backstage/backend-plugin-api@​1.3.1
    • @​backstage/config-loader@​1.10.1
    • @​backstage/config@​1.3.2
    • @​backstage/errors@​1.2.7
    • @​backstage/types@​1.2.1
    • @​backstage/plugin-app-node@​0.1.33

0.5.2-next.2

Patch Changes

  • Updated dependencies
    • @​backstage/plugin-auth-node@​0.6.3-next.2
    • @​backstage/backend-plugin-api@​1.3.1-next.2
    • @​backstage/config@​1.3.2
    • @​backstage/config-loader@​1.10.1-next.0
    • @​backstage/errors@​1.2.7
    • @​backstage/types@​1.2.1
    • @​backstage/plugin-app-node@​0.1.33-next.2

0.5.2-next.1

Patch Changes

  • Updated dependencies
    • @​backstage/plugin-auth-node@​0.6.3-next.1
    • @​backstage/backend-plugin-api@​1.3.1-next.1
    • @​backstage/config-loader@​1.10.1-next.0
    • @​backstage/config@​1.3.2
    • @​backstage/errors@​1.2.7
    • @​backstage/types@​1.2.1
    • @​backstage/plugin-app-node@​0.1.33-next.1

... (truncated)

Commits

Updates @backstage/plugin-catalog-backend from 1.25.2 to 1.26.0

Changelog

Sourced from @​backstage/plugin-catalog-backend's changelog.

1.26.0

Minor Changes

  • 74acf06: Add dependencyOf prop to catalog model for Component kind to enable building relationship graphs with both directions using dependsOn and dependencyOf.
  • 78475c3: Allow offset mode paging in entity list provider
  • bd35cdb: The analyze-location endpoint is now protected by the catalog.location.analyze permission. The validate-entity endpoint is now protected by the catalog.entity.validate permission.

Patch Changes

  • 1882cfe: Moved getEntities ordering to utilize database instead of having it inside catalog client

    Please note that the latest version of @backstage/catalog-client will not order the entities in the same way as before. This is because the ordering is now done in the database query instead of in the client. If you rely on the ordering of the entities, you may need to update your backend plugin or code to handle this change.

  • d425fc4: Modules, plugins, and services are now BackendFeature, not a function that returns a feature.

  • c2b63ab: Updated dependency supertest to ^7.0.0.

  • 53cce86: Fixed an issue with the by-query call, where ordering by a field that does not exist on all entities led to not all results being returned

  • Updated dependencies

    • @​backstage/backend-common@​0.25.0
    • @​backstage/backend-plugin-api@​1.0.0
    • @​backstage/catalog-model@​1.7.0
    • @​backstage/catalog-client@​1.7.0
    • @​backstage/plugin-search-backend-module-catalog@​0.2.2
    • @​backstage/plugin-permission-node@​0.8.3
    • @​backstage/plugin-catalog-common@​1.1.0
    • @​backstage/plugin-catalog-node@​1.13.0
    • @​backstage/integration@​1.15.0
    • @​backstage/backend-openapi-utils@​0.1.18
    • @​backstage/plugin-events-node@​0.4.0
    • @​backstage/config@​1.2.0
    • @​backstage/errors@​1.2.4
    • @​backstage/types@​1.1.1
    • @​backstage/plugin-permission-common@​0.8.1

1.26.0-next.2

Minor Changes

  • 78475c3: Allow offset mode paging in entity list provider

Patch Changes

  • c2b63ab: Updated dependency supertest to ^7.0.0.
  • Updated dependencies
    • @​backstage/backend-common@​0.25.0-next.2
    • @​backstage/backend-plugin-api@​1.0.0-next.2
    • @​backstage/catalog-client@​1.7.0-next.1
    • @​backstage/integration@​1.15.0-next.0
    • @​backstage/backend-openapi-utils@​0.1.18-next.2

... (truncated)

Commits
  • 0e48f5a Version Packages
  • d5a1fe1 chore: change most of plugins to use LoggerService
  • 036b9b3 Version Packages (next)
  • c6635e5 Merge pull request #23022 from RoadieHQ/quiter-logs
  • 366cf07 Version Packages (next)
  • 51e3f70 Merge pull request #23084 from aramissennyeydd/openapi-tooling/schemathesis
  • d7c6675 url is not necessarily a git url
  • 81ff959 remove charset from spec
  • 317cb08 feat(openapi-tooling): add support for fuzzing with schemathesis
  • 7e72802 api reports
  • Additional commits viewable in compare view

Updates @backstage/plugin-permission-backend from 0.5.48 to 0.6.0

Changelog

Sourced from @​backstage/plugin-permission-backend's changelog.

0.6.0

Minor Changes

  • 78eaa50: Improved validation for the /authorize endpoint when a resourceRef is provided alongside a basic permission. Additionally, introduced a clearer error message for cases where users attempt to directly evaluate conditional permissions.

Patch Changes

  • Updated dependencies
    • @​backstage/backend-plugin-api@​1.3.0
    • @​backstage/plugin-auth-node@​0.6.2
    • @​backstage/plugin-permission-node@​0.9.1
    • @​backstage/config@​1.3.2
    • @​backstage/errors@​1.2.7
    • @​backstage/plugin-permission-common@​0.8.4

0.5.55

Patch Changes

  • Updated dependencies
    • @​backstage/plugin-permission-node@​0.9.0
    • @​backstage/plugin-auth-node@​0.6.1
    • @​backstage/backend-plugin-api@​1.2.1
    • @​backstage/config@​1.3.2
    • @​backstage/errors@​1.2.7
    • @​backstage/plugin-permission-common@​0.8.4

0.5.55-next.1

Patch Changes

  • Updated dependencies
    • @​backstage/plugin-auth-node@​0.6.1-next.1
    • @​backstage/backend-plugin-api@​1.2.1-next.1
    • @​backstage/config@​1.3.2
    • @​backstage/errors@​1.2.7
    • @​backstage/plugin-permission-common@​0.8.4
    • @​backstage/plugin-permission-node@​0.8.9-next.1

0.5.55-next.0

Patch Changes

  • Updated dependencies
    • @​backstage/plugin-permission-node@​0.8.9-next.0
    • @​backstage/plugin-auth-node@​0.6.1-next.0
    • @​backstage/backend-plugin-api@​1.2.1-next.0

0.5.54

... (truncated)

Commits

Updates @backstage/plugin-techdocs-backend from 1.10.12 to 1.10.13

Changelog

Sourced from @​backstage/plugin-techdocs-backend's changelog.

1.10.13

Patch Changes

  • 086c32d: Dedicated token for techdocs cache sync
  • 5b679ac: The createRouter and its related types has been marked as deprecared. This backend should instead be initialized using the new backend system.
  • d425fc4: Modules, plugins, and services are now BackendFeature, not a function that returns a feature.
  • c2b63ab: Updated dependency supertest to ^7.0.0.
  • 5edd344: Refactor to use injected catalog client in the new backend system
  • Updated dependencies
    • @​backstage/backend-common@​0.25.0
    • @​backstage/plugin-techdocs-node@​1.12.11
    • @​backstage/backend-plugin-api@​1.0.0
    • @​backstage/catalog-model@​1.7.0
    • @​backstage/catalog-client@​1.7.0
    • @​backstage/plugin-search-backend-module-techdocs@​0.2.2
    • @​backstage/plugin-catalog-common@​1.1.0
    • @​backstage/plugin-catalog-node@​1.13.0
    • @​backstage/integration@​1.15.0
    • @​backstage/config@​1.2.0
    • @​backstage/errors@​1.2.4
    • @​backstage/plugin-permission-common@​0.8.1
    • @​backstage/plugin-techdocs-common@​0.1.0

1.10.13-next.2

Patch Changes

  • c2b63ab: Updated dependency supertest to ^7.0.0.
  • Updated dependencies
    • @​backstage/backend-common@​0.25.0-next.2
    • @​backstage/backend-plugin-api@​1.0.0-next.2
    • @​backstage/catalog-client@​1.7.0-next.1
    • @​backstage/plugin-techdocs-node@​1.12.11-next.2
    • @​backstage/integration@​1.15.0-next.0
    • @​backstage/catalog-model@​1.6.0
    • @​backstage/config@​1.2.0
    • @​backstage/errors@​1.2.4
    • @​backstage/plugin-catalog-common@​1.0.26
    • @​backstage/plugin-catalog-node@​1.12.7-next.2
    • @​backstage/plugin-permission-common@​0.8.1
    • @​backstage/plugin-search-backend-module-techdocs@​0.2.2-next.2
    • @​backstage/plugin-techdocs-common@​0.1.0

1.10.13-next.1

Patch Changes

  • 5edd344: Refactor to use injected catalog client in the new backend system
  • Updated dependencies

... (truncated)

Commits

Updates @babel/runtime-corejs3 from 7.25.6 to 7.27.4

Release notes

Sourced from @​babel/runtime-corejs3's releases.

v7.27.4 (2025-05-30)

👓 Spec Compliance

  • babel-parser, babel-plugin-proposal-explicit-resource-management

💅 Polish

🔬 Output optimization

  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone

Committers: 4

v7.27.3 (2025-05-27)

🐛 Bug Fix

  • babel-generator
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • babel-plugin-proposal-explicit-resource-management
  • babel-plugin-proposal-decorators, babel-types
    • #17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@​magic-akari)
  • babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
    • #17257 Preserve class id when transforming using declarations with exported class (@​JLHwung)
  • babel-parser
  • babel-generator, babel-parser

Committers: 7

... (truncated)

Changelog

Sourced from @​babel/runtime-corejs3's changelog.

v7.27.4 (2025-05-30)

👓 Spec Compliance

  • babel-parser, babel-plugin-proposal-explicit-resource-management

💅 Polish

🔬 Output optimization

  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone

v7.27.3 (2025-05-27)

🐛 Bug Fix

  • babel-generator
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • babel-plugin-proposal-explicit-resource-management
  • babel-plugin-proposal-decorators, babel-types
    • #17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@​magic-akari)
  • babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
    • #17257 Preserve class id when transforming using declarations with exported class (@​JLHwung)
  • babel-parser
  • babel-generator, babel-parser

v7.27.2 (2025-05-06)

🐛 Bug Fix

  • babel-parser
  • babel-plugin-transform-object-rest-spread
  • babel-plugin-transform-modules-commonjs, babel-template

🏃‍♀️ Performance

  • babel-cli

... (truncated)

Commits

Updates @backstage/plugin-scaffolder-node from 0.4.10 to 0.4.12

Changelog

Sourced from @​backstage/plugin-scaffolder-node's changelog.

@​backstage/plugin-scaffolder-node

0.8.3-next.0

Patch Changes

  • 9c8ff0c: Update pull request creation filter to include .gitignore files in the created pull request
  • Updated dependencies
    • @​backstage/backend-plugin-api@​1.4.0-next.0

0.8.2

Patch Changes

  • 16e2e9c: trim leading and trailing slashes from parseRepoUrl query parameters
  • 72d019d: Removed various typos
  • ec42f8e: Generating new tokens on each Scaffolder Task Retry
  • Updated dependencies
    • @​backstage/integration@​1.17.0
    • @​backstage/catalog-model@​1.7.4
    • @​backstage/backend-plugin-api@​1.3.1
    • @​backstage/errors@​1.2.7
    • @​backstage/types@​1.2.1
    • @​backstage/plugin-scaffolder-common@​1.5.11

0.8.2-next.3

Patch Changes

  • 16e2e9c: trim leading and trailing slashes from parseRepoUrl query parameters
  • ec42f8e: Generating new tokens on each Scaffolder Task Retry
  • Updated dependencies
    • @​backstage/integration@​1.17.0-next.3
    • @​backstage/backend-plugin-api@​1.3.1-next.2
    • @​backstage/catalog-model@​1.7.3
    • @​backstage/errors@​1.2.7
    • @​backstage/types@​1.2.1
    • @​backstage/plugin-scaffolder-common@​1.5.11-next.0

0.8.2-next.2

Patch Changes

  • Updated dependencies
    • @​backstage/integration@​1.17.0-next.2
    • @​backstage/backend-plugin-api@​1.3.1-next.1
    • @​backstage/catalog-model@​1.7.3
    • @​backstage/errors@​1.2.7
    • @​backstage/types@​1.2.1
    • @​backstage/plugin-scaffolder-common@​1.5.11-next.0

... (truncated)

Commits

Updates axios from 1.7.7 to 1.9.0

Release notes

Sourced from axios's releases.

Release v1.9.0

Release notes:

Bug Fixes

  • core: fix the Axios constructor implementation to treat the config argument as optional; (#6881) (6c5d4cd)
  • fetch: fixed ERR_NETWORK mapping for Safari browsers; (#6767) (dfe8411)
  • headers: allow iterable objects to be a data source for the set method; (#6873) (1b1f9cc)
  • headers: fix getSetCookie by using 'get' method for caseless access; (#6874) (d4f7df4)
  • headers: fixed support for setting multiple header values from an iterated source; (#6885) (f7a3b5e)
  • http: send minimal end multipart boundary (#6661) (987d2e2)
  • types: fix autocomplete for adapter config (#6855) (e61a893)

Features

  • AxiosHeaders: add getSetCookie method to retrieve set-cookie headers values (#5707) (80ea756)

Contributors to this release

Release v1.8.4

Release notes:

Bug Fixes

  • buildFullPath: handle allowAbsoluteUrls: false without baseURL (#6833) (f10c2e0)

Contributors to this release

Release v1.8.3

Release notes:

Bug Fixes

  • add missing type for allowAbsoluteUrls (#6818) (10fa70e)
  • xhr/fetch: pass allowAbsoluteUrls to buildFullPath in xhr and fetch adapters (#6814) (ec159e5)

Contributors to this release

Release v1.8.2

... (truncated)

Changelog

Sourced from axios's changelog.

1.9.0 (2025-04-24)

Bug Fixes

  • core: fix the Axios constructor implementation to treat the config argument as optional; (#6881) (6c5d4cd)
  • fetch: fixed ERR_NETWORK mapping for Safari browsers; (#6767) (dfe8411)
  • headers: allow iterable objects to be a data source for the set method; (#6873) (1b1f9cc)
  • headers: fix getSetCookie by using 'get' method for caseless access; (#6874) (d4f7df4)
  • headers: fixed support for setting multiple header values from an iterated source; (#6885) (f7a3b5e)
  • http: send minimal end multipart boundary (#6661) (987d2e2)
  • types: fix autocomplete for adapter config (#6855) (e61a893)

Features

  • AxiosHeaders: add getSetCookie method to retrieve set-cookie headers values (#5707) (80ea756)

Contributors to this release

1.8.4 (2025-03-19)

Bug Fixes

  • buildFullPath: handle allowAbsoluteUrls: false without baseURL (#6833) (f10c2e0)

Contributors to this release

1.8.3 (2025-03-10)

Bug Fixes

  • add missing type for allowAbsoluteUrls (#6818) (10fa70e)
  • xhr/fetch: pass allowAbsoluteUrls to buildFullPath in xhr and fetch adapters (#6814) (ec159e5)

Contributors to this release

... (truncated)

Commits
  • cdcfd21 chore(release): v1.9.0 (#6891)
  • 987d2e2 fix(http): send minimal end multipart boundary (#6661)
  • f112edf chore(ci): add PR files guard action; (#6890)
  • 61de4c0 chore(ci): update github actions; (#6889)
  • c3aba3d chore(ci): add labeler github action; (#6888)
  • f7a3b5e fix(headers): fixed support for setting multiple header values from an iterat...
  • e61a893 fix(types): fix autocomplete for adapter config (#6855)
  • 6c5d4cd fix(core): fix the Axios constructor implementation to treat the config argum...
  • dfe8411 fix(fetch): fixed ERR_NETWORK mapping for Safari browsers; (#6767)
  • d4f7df4 fix(headers): fix getSetCookie by using 'get' method for caseless access; (...
  • Additional commits viewable in compare view

Updates dompurify from 2.5.6 to 2.5.8

Release notes

Sourced from dompurify's releases.

DOMPurify 2.5.8

DOMPurify 2.5.7

  • Fixed an issue with comment detection and possible bypasses with specific config settings, thanks @​masatokinugawa
  • Removed the foreignObject element from the list of HTML entry-points, thanks @​masatokinugawa
Commits

Updates elliptic from 6.5.7 to 6.6.1

Commits

Updates formidable from 3.5.1 to 3.5.4

Release notes

Sourced from formidable's releases.

v3.5.3

What's Changed

  • Fix existing test failure by @​ryhmrt in node-formidable/formidable#990

  • update Ryan Dahl x account link by @​moetezch in node-formidable/formidable#989

  • update failing tests

  • update CI/CD workflows and actions;

  • update CodeQL github action for security analysis

  • update readme, links and badges

  • update to use cuid2 (battle-tested @paralleldrive/cuid2 package) for better random names - should not be breaking anything since it's still 25 characters long, but a lot safer and faster.

New Contributors

Full Changelog: node-formidable/formidable@v3.5.2...v3.5.3

v3.5.2

No release notes provided.

Changelog

Sourced from formidable's changelog.

3.5.4

  • fix the os.machine breaking some dependents, fix #994
  • add Node 16, 18, 20, 22 to CI/CD

3.5.3

  • security report by ZAST.AI help for some vulnerabilities addressing (primarily the random names generation)
  • update failing tests
  • update CI/CD workflows and actions;
  • update CodeQL github action for security analysis
  • update readme, links and badges
  • update to use cuid2 (battle-tested @paralleldrive/cuid2 package) for better random names - should not be breaking anything since it's still 25 characters long, but a lot safer and faster.

3.5.2

  • fix: (#982) make it easier to import hexoid with webpack
Commits

Updates http-proxy-middleware from 2.0.6 to 2.0.9

Release notes

Sourced from http-proxy-middleware's releases.

v2.0.9

What's Changed

Full Changelog: chimurai/http-proxy-middleware@v2.0.8...v2.0.9

v2.0.8

What's Changed

Full Changelog: chimurai/http-proxy-middleware@v2.0.7...v2.0.8

v2.0.7

Full Changelog: chimurai/http-proxy-middleware@v2.0.6...v2.0.7

v2.0.7-beta.1

Full Changelog: chimurai/http-proxy-middleware@v2.0.7-beta.0...v2.0.7-beta.1

v2.0.7-beta.0

Full Changelog: chimurai/http-proxy-middleware@v2.0.6...v2.0.7-beta.0

Changelog

Sourced from http-proxy-middleware's changelog.

v2.0.9

  • fix(fixRequestBody): check readableLength

v2.0.8

  • fix(fixRequestBody): prevent multiple .write() calls
  • fix(fixRequestBody): handle invalid request

v2.0.7

  • ci(github actions): add publish.yml
  • fix(filter): handle errors
Commits

… updates

Bumps the npm_and_yarn group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@backstage/plugin-app-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/app-backend) | `0.3.73` | `0.3.75` |
| [@backstage/plugin-catalog-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/catalog-backend) | `1.25.2` | `1.26.0` |
| [@backstage/plugin-permission-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/permission-backend) | `0.5.48` | `0.6.0` |
| [@backstage/plugin-techdocs-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/techdocs-backend) | `1.10.12` | `1.10.13` |
| [@babel/runtime-corejs3](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime-corejs3) | `7.25.6` | `7.27.4` |
| [@backstage/plugin-scaffolder-node](https://github.com/backstage/backstage/tree/HEAD/plugins/scaffolder-node) | `0.4.10` | `0.4.12` |
| [axios](https://github.com/axios/axios) | `1.7.7` | `1.9.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `2.5.6` | `2.5.8` |
| [elliptic](https://github.com/indutny/elliptic) | `6.5.7` | `6.6.1` |
| [formidable](https://github.com/node-formidable/formidable) | `3.5.1` | `3.5.4` |
| [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.6` | `2.0.9` |
| [multer](https://github.com/expressjs/multer) | `1.4.5-lts.1` | `1.4.5-lts.2` |
| [rollup](https://github.com/rollup/rollup) | `4.21.3` | `4.41.1` |
| [undici](https://github.com/nodejs/undici) | `5.28.4` | `5.29.0` |

Bumps the npm_and_yarn group with 4 updates in the /packages/backend directory: [@backstage/plugin-app-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/app-backend), [@backstage/plugin-catalog-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/catalog-backend), [@backstage/plugin-permission-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/permission-backend) and [@backstage/plugin-techdocs-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/techdocs-backend).


Updates `@backstage/plugin-app-backend` from 0.3.73 to 0.3.75
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/app-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/HEAD/plugins/app-backend)

Updates `@backstage/plugin-catalog-backend` from 1.25.2 to 1.26.0
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/catalog-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/v1.26.0/plugins/catalog-backend)

Updates `@backstage/plugin-permission-backend` from 0.5.48 to 0.6.0
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/permission-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/v0.6.0/plugins/permission-backend)

Updates `@backstage/plugin-techdocs-backend` from 1.10.12 to 1.10.13
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/techdocs-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/HEAD/plugins/techdocs-backend)

Updates `@babel/runtime-corejs3` from 7.25.6 to 7.27.4
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.27.4/packages/babel-runtime-corejs3)

Updates `@backstage/plugin-scaffolder-node` from 0.4.10 to 0.4.12
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/scaffolder-node/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/HEAD/plugins/scaffolder-node)

Updates `axios` from 1.7.7 to 1.9.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.7.7...v1.9.0)

Updates `dompurify` from 2.5.6 to 2.5.8
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@2.5.6...2.5.8)

Updates `elliptic` from 6.5.7 to 6.6.1
- [Commits](indutny/elliptic@v6.5.7...v6.6.1)

Updates `formidable` from 3.5.1 to 3.5.4
- [Release notes](https://github.com/node-formidable/formidable/releases)
- [Changelog](https://github.com/node-formidable/formidable/blob/master/CHANGELOG.md)
- [Commits](https://github.com/node-formidable/formidable/commits)

Updates `http-proxy-middleware` from 2.0.6 to 2.0.9
- [Release notes](https://github.com/chimurai/http-proxy-middleware/releases)
- [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.9/CHANGELOG.md)
- [Commits](chimurai/http-proxy-middleware@v2.0.6...v2.0.9)

Updates `multer` from 1.4.5-lts.1 to 1.4.5-lts.2
- [Release notes](https://github.com/expressjs/multer/releases)
- [Changelog](https://github.com/expressjs/multer/blob/main/CHANGELOG.md)
- [Commits](expressjs/multer@v1.4.5-lts.1...v1.4.5-lts.2)

Updates `rollup` from 4.21.3 to 4.41.1
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.21.3...v4.41.1)

Updates `undici` from 5.28.4 to 5.29.0
- [Release notes](https://github.com/nodejs/undici/releases)
- [Commits](nodejs/undici@v5.28.4...v5.29.0)

Updates `@backstage/plugin-app-backend` from 0.3.73 to 0.3.76
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/app-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/HEAD/plugins/app-backend)

Updates `@backstage/plugin-catalog-backend` from 1.25.2 to 1.32.1
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/catalog-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/v1.26.0/plugins/catalog-backend)

Updates `@backstage/plugin-permission-backend` from 0.5.48 to 0.6.0
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/permission-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/v0.6.0/plugins/permission-backend)

Updates `@backstage/plugin-techdocs-backend` from 1.10.12 to 1.11.6
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/techdocs-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/HEAD/plugins/techdocs-backend)

Updates `@backstage/plugin-app-backend` from 0.3.76 to 0.5.2
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/app-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/HEAD/plugins/app-backend)

Updates `@backstage/plugin-catalog-backend` from 1.32.1 to 2.0.0
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/catalog-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/v1.26.0/plugins/catalog-backend)

Updates `@backstage/plugin-permission-backend` from 0.5.55 to 0.7.0
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/permission-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/v0.6.0/plugins/permission-backend)

Updates `@backstage/plugin-techdocs-backend` from 1.11.6 to 2.0.2
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/techdocs-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/HEAD/plugins/techdocs-backend)

---
updated-dependencies:
- dependency-name: "@backstage/plugin-app-backend"
  dependency-version: 0.3.75
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-catalog-backend"
  dependency-version: 1.26.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-permission-backend"
  dependency-version: 0.6.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-techdocs-backend"
  dependency-version: 1.10.13
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@babel/runtime-corejs3"
  dependency-version: 7.27.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-scaffolder-node"
  dependency-version: 0.4.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 1.9.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: dompurify
  dependency-version: 2.5.8
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: elliptic
  dependency-version: 6.6.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: formidable
  dependency-version: 3.5.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: http-proxy-middleware
  dependency-version: 2.0.9
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: multer
  dependency-version: 1.4.5-lts.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: rollup
  dependency-version: 4.41.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: undici
  dependency-version: 5.29.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-app-backend"
  dependency-version: 0.3.76
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-catalog-backend"
  dependency-version: 1.32.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-permission-backend"
  dependency-version: 0.6.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-techdocs-backend"
  dependency-version: 1.11.6
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-app-backend"
  dependency-version: 0.5.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-catalog-backend"
  dependency-version: 2.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-permission-backend"
  dependency-version: 0.7.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-techdocs-backend"
  dependency-version: 2.0.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 1, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 1, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jun 1, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/npm_and_yarn-545e4c4d71 branch June 1, 2025 15:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant