Merge pull request #9048 from backstage/revert-8987-dependabot/npm_and_yarn/helmet-5.0.1

Revert "build(deps): bump helmet from 4.4.1 to 5.0.1"

plugins/app-backend/package.json

@@ -39,7 +39,7 @@
     "express": "^4.17.1",
     "express-promise-router": "^4.1.0",
     "fs-extra": "9.1.0",
-    "helmet": "^5.0.1",
+    "helmet": "^4.0.0",
     "knex": "^0.95.1",
     "lodash": "^4.17.21",
     "luxon": "^2.0.2",

plugins/auth-backend/package.json

@@ -47,7 +47,7 @@
     "express-session": "^1.17.1",
     "fs-extra": "9.1.0",
     "google-auth-library": "^7.6.1",
-    "helmet": "^5.0.1",
+    "helmet": "^4.0.0",
     "jose": "^1.27.1",
     "jwt-decode": "^3.1.0",
     "knex": "^0.95.1",

plugins/graphql-backend/package.json

@@ -42,7 +42,7 @@
     "express": "^4.17.1",
     "express-promise-router": "^4.1.0",
     "graphql": "^16.0.0",
-    "helmet": "^5.0.1",
+    "helmet": "^4.0.0",
     "reflect-metadata": "^0.1.13",
     "winston": "^3.2.1",
     "yn": "^4.0.0"

plugins/kubernetes-backend/package.json

@@ -47,7 +47,7 @@
     "express": "^4.17.1",
     "express-promise-router": "^4.1.0",
     "fs-extra": "9.1.0",
-    "helmet": "^5.0.1",
+    "helmet": "^4.0.0",
     "lodash": "^4.17.21",
     "morgan": "^1.10.0",
     "stream-buffers": "^3.0.2",

plugins/rollbar-backend/package.json

@@ -40,7 +40,7 @@
     "express": "^4.17.1",
     "express-promise-router": "^4.1.0",
     "fs-extra": "9.1.0",
-    "helmet": "^5.0.1",
+    "helmet": "^4.0.0",
     "lodash": "^4.17.21",
     "morgan": "^1.10.0",
     "node-fetch": "^2.6.1",

plugins/scaffolder-backend/package.json

@@ -56,7 +56,7 @@
     "git-url-parse": "^11.6.0",
     "globby": "^11.0.0",
     "handlebars": "^4.7.6",
-    "helmet": "^5.0.1",
+    "helmet": "^4.0.0",
     "isbinaryfile": "^4.0.8",
     "isomorphic-git": "^1.8.0",
     "jsonschema": "^1.2.6",