From ccee6c1920ac3fb7a5171932191875ed27b0f3c7 Mon Sep 17 00:00:00 2001 From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com> Date: Fri, 30 Jan 2026 05:12:53 +0000 Subject: [PATCH 1/2] fix: plugins/catalog-backend-module-unprocessed/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TAR-15127355 --- plugins/catalog-backend-module-unprocessed/package.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/plugins/catalog-backend-module-unprocessed/package.json b/plugins/catalog-backend-module-unprocessed/package.json index 9f3f2f0b1129b0..527db86df127c3 100644 --- a/plugins/catalog-backend-module-unprocessed/package.json +++ b/plugins/catalog-backend-module-unprocessed/package.json @@ -28,9 +28,9 @@ "dist" ], "dependencies": { - "@backstage/backend-plugin-api": "workspace:^", - "@backstage/catalog-model": "workspace:^", - "@backstage/plugin-auth-node": "workspace:^", + "@backstage/backend-plugin-api": "0.6.19", + "@backstage/catalog-model": "0.1.1", + "@backstage/plugin-auth-node": "0.6.0", "express-promise-router": "^4.1.1", "knex": "^2.4.2" } From fb8c8b8d844a16fa9ea2caeb5f1c28d2d63593b7 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 4 Feb 2026 00:01:27 +0000 Subject: [PATCH 2/2] fix: plugins/catalog-backend-module-unprocessed/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-TAR-15127355