From c1a6d642bdca3e2063c9311a8907463083af02c3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 18 Jan 2022 09:46:32 +0000 Subject: [PATCH] build(deps): bump helmet from 4.4.1 to 5.0.1 Bumps [helmet](https://github.com/helmetjs/helmet) from 4.4.1 to 5.0.1. - [Release notes](https://github.com/helmetjs/helmet/releases) - [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md) - [Commits](https://github.com/helmetjs/helmet/compare/v4.4.1...v5.0.1) --- updated-dependencies: - dependency-name: helmet dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .changeset/dependabot-c0a46e9.md | 11 +++++++++++ packages/backend-common/package.json | 2 +- plugins/app-backend/package.json | 2 +- plugins/auth-backend/package.json | 2 +- plugins/graphql-backend/package.json | 2 +- plugins/kubernetes-backend/package.json | 2 +- plugins/rollbar-backend/package.json | 2 +- plugins/scaffolder-backend/package.json | 2 +- yarn.lock | 8 ++++---- 9 files changed, 22 insertions(+), 11 deletions(-) create mode 100644 .changeset/dependabot-c0a46e9.md diff --git a/.changeset/dependabot-c0a46e9.md b/.changeset/dependabot-c0a46e9.md new file mode 100644 index 0000000000..9242dc6692 --- /dev/null +++ b/.changeset/dependabot-c0a46e9.md @@ -0,0 +1,11 @@ +--- +'@backstage/backend-common': patch +'@backstage/plugin-app-backend': patch +'@backstage/plugin-auth-backend': patch +'@backstage/plugin-graphql-backend': patch +'@backstage/plugin-kubernetes-backend': patch +'@backstage/plugin-rollbar-backend': patch +'@backstage/plugin-scaffolder-backend': patch +--- + +build(deps): bump `helmet` from 4.4.1 to 5.0.1 diff --git a/packages/backend-common/package.json b/packages/backend-common/package.json index a1e3533fb7..78c0906651 100644 --- a/packages/backend-common/package.json +++ b/packages/backend-common/package.json @@ -51,7 +51,7 @@ "express-promise-router": "^4.1.0", "fs-extra": "9.1.0", "git-url-parse": "^11.6.0", - "helmet": "^4.0.0", + "helmet": "^5.0.1", "isomorphic-git": "^1.8.0", "jose": "^1.27.1", "keyv": "^4.0.3", diff --git a/plugins/app-backend/package.json b/plugins/app-backend/package.json index a7fb51f772..87670d7d9d 100644 --- a/plugins/app-backend/package.json +++ b/plugins/app-backend/package.json @@ -39,7 +39,7 @@ "express": "^4.17.1", "express-promise-router": "^4.1.0", "fs-extra": "9.1.0", - "helmet": "^4.0.0", + "helmet": "^5.0.1", "knex": "^0.95.1", "lodash": "^4.17.21", "luxon": "^2.0.2", diff --git a/plugins/auth-backend/package.json b/plugins/auth-backend/package.json index 69dd53987f..0482fca118 100644 --- a/plugins/auth-backend/package.json +++ b/plugins/auth-backend/package.json @@ -47,7 +47,7 @@ "express-session": "^1.17.1", "fs-extra": "9.1.0", "google-auth-library": "^7.6.1", - "helmet": "^4.0.0", + "helmet": "^5.0.1", "jose": "^1.27.1", "jwt-decode": "^3.1.0", "knex": "^0.95.1", diff --git a/plugins/graphql-backend/package.json b/plugins/graphql-backend/package.json index 0144b7ca93..29cc689d28 100644 --- a/plugins/graphql-backend/package.json +++ b/plugins/graphql-backend/package.json @@ -42,7 +42,7 @@ "express": "^4.17.1", "express-promise-router": "^4.1.0", "graphql": "^16.0.0", - "helmet": "^4.0.0", + "helmet": "^5.0.1", "reflect-metadata": "^0.1.13", "winston": "^3.2.1", "yn": "^4.0.0" diff --git a/plugins/kubernetes-backend/package.json b/plugins/kubernetes-backend/package.json index f4be95dcb8..daf75ed5c8 100644 --- a/plugins/kubernetes-backend/package.json +++ b/plugins/kubernetes-backend/package.json @@ -47,7 +47,7 @@ "express": "^4.17.1", "express-promise-router": "^4.1.0", "fs-extra": "9.1.0", - "helmet": "^4.0.0", + "helmet": "^5.0.1", "lodash": "^4.17.21", "morgan": "^1.10.0", "stream-buffers": "^3.0.2", diff --git a/plugins/rollbar-backend/package.json b/plugins/rollbar-backend/package.json index 986d78043b..63480eedf9 100644 --- a/plugins/rollbar-backend/package.json +++ b/plugins/rollbar-backend/package.json @@ -40,7 +40,7 @@ "express": "^4.17.1", "express-promise-router": "^4.1.0", "fs-extra": "9.1.0", - "helmet": "^4.0.0", + "helmet": "^5.0.1", "lodash": "^4.17.21", "morgan": "^1.10.0", "node-fetch": "^2.6.1", diff --git a/plugins/scaffolder-backend/package.json b/plugins/scaffolder-backend/package.json index c497306d71..7d5bc42906 100644 --- a/plugins/scaffolder-backend/package.json +++ b/plugins/scaffolder-backend/package.json @@ -56,7 +56,7 @@ "git-url-parse": "^11.6.0", "globby": "^11.0.0", "handlebars": "^4.7.6", - "helmet": "^4.0.0", + "helmet": "^5.0.1", "isbinaryfile": "^4.0.8", "isomorphic-git": "^1.8.0", "jsonschema": "^1.2.6", diff --git a/yarn.lock b/yarn.lock index 5f62caf397..e315265b8a 100644 --- a/yarn.lock +++ b/yarn.lock @@ -16289,10 +16289,10 @@ headers-utils@^3.0.2: resolved "https://registry.npmjs.org/headers-utils/-/headers-utils-3.0.2.tgz#dfc65feae4b0e34357308aefbcafa99c895e59ef" integrity sha512-xAxZkM1dRyGV2Ou5bzMxBPNLoRCjcX+ya7KSWybQD2KwLphxsapUVK6x/02o7f4VU6GPSXch9vNY2+gkU8tYWQ== -helmet@^4.0.0: - version "4.4.1" - resolved "https://registry.npmjs.org/helmet/-/helmet-4.4.1.tgz#a17e1444d81d7a83ddc6e6f9bc6e2055b994efe7" - integrity sha512-G8tp0wUMI7i8wkMk2xLcEvESg5PiCitFMYgGRc/PwULB0RVhTP5GFdxOwvJwp9XVha8CuS8mnhmE8I/8dx/pbw== +helmet@^5.0.1: + version "5.0.1" + resolved "https://registry.npmjs.org/helmet/-/helmet-5.0.1.tgz#e8b2aacf881dd5cffadbb640f23155f23de485ae" + integrity sha512-iyYpGYH2nbQVaQtauYDnemWg45S2RyGvJ+iKj+V9jp7Dc1NTtAJHmD+hFOSYS7Xdwe1GeyVEYSydggXLOg6TKQ== highlight.js@^10.1.0, highlight.js@^10.1.1, highlight.js@^10.4.1, highlight.js@^10.6.0: version "10.7.2"