Merge pull request #32955 from F-Secure-web/upgrade-graphiql-to-latest-v3

Upgrade graphiql to 3.8.3 in plugin-api-docs

.changeset/smooth-bees-invite.md

@@ -0,0 +1,7 @@
+---
+'@backstage/plugin-api-docs': patch
+---
+
+Updated dependency `graphiql` to `3.9.0` to address security vulnerability in `markdown-it` package.
+Updated dependency `@graphiql/react` to `0.29.0` to match the version used by `graphiql`.
+Moved dependency `graphql-config` to `devDependencies` as it is needed only for types.

plugins/api-docs/package.json

@@ -62,13 +62,12 @@
     "@backstage/plugin-catalog-common": "workspace:^",
     "@backstage/plugin-catalog-react": "workspace:^",
     "@backstage/plugin-permission-react": "workspace:^",
-    "@graphiql/react": "^0.23.0",
+    "@graphiql/react": "0.29.0",
     "@material-ui/core": "^4.12.2",
     "@material-ui/icons": "^4.9.1",
     "@material-ui/lab": "4.0.0-alpha.61",
-    "graphiql": "3.1.1",
+    "graphiql": "^3.9.0",
     "graphql": "^16.0.0",
-    "graphql-config": "^5.0.2",
     "graphql-ws": "^5.4.1",
     "swagger-ui-react": "^5.27.1"
   },
@@ -85,6 +84,7 @@
     "@types/highlightjs": "^10.1.0",
     "@types/react": "^18.0.0",
     "@types/swagger-ui-react": "^5.0.0",
+    "graphql-config": "^5.1.6",
     "react": "^18.0.2",
     "react-dom": "^18.0.2",
     "react-router-dom": "^6.30.2"