Revert "Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities"

This reverts commit 91b359ee5f.

Signed-off-by: Fredrik Adelöw <freben@spotify.com>

plugins/catalog-backend/package.json

@@ -85,7 +85,7 @@
     "fast-json-stable-stringify": "^2.1.0",
     "fs-extra": "^11.2.0",
     "git-url-parse": "^15.0.0",
-    "glob": "^13.0.0",
+    "glob": "^7.1.6",
     "knex": "^3.0.0",
     "lodash": "^4.17.21",
     "luxon": "^3.0.0",
@@ -107,6 +107,7 @@
     "@types/core-js": "^2.5.4",
     "@types/express": "^4.17.6",
     "@types/git-url-parse": "^9.0.0",
+    "@types/glob": "^8.0.0",
     "@types/lodash": "^4.14.151",
     "@types/supertest": "^2.0.8",
     "better-sqlite3": "^12.0.0",

plugins/catalog-backend/src/processors/FileReaderProcessor.ts

@@ -15,8 +15,9 @@
  */
 
 import fs from 'fs-extra';
-import { glob } from 'glob';
+import g from 'glob';
 import path from 'node:path';
+import { promisify } from 'node:util';
 import { LocationSpec } from '@backstage/plugin-catalog-common';
 import {
   CatalogProcessor,
@@ -25,6 +26,8 @@ import {
   processingResult,
 } from '@backstage/plugin-catalog-node';
 
+const glob = promisify(g);
+
 const LOCATION_TYPE = 'file';
 
 /** @public */