@axis-backstage/plugin-readme 0.17.0 → 0.18.1

package/CHANGELOG.md

@@ -1,5 +1,36 @@
 # @axis-backstage/plugin-readme
 
+## 0.18.1
+
+### Patch Changes
+
+- 199bd49: Fix critical security vulnerabilities by upgrading Backstage dependencies:
+
+  **Security Fixes:**
+
+  - Fixed CVE-2025-8101 (High Severity) in linkifyjs/linkify-react by upgrading @backstage/core-components from ^0.18.4 to ^0.18.6
+  - Fixed CVE-2026-24046 (High Severity) - UNIX Symbolic Link Following in @backstage/backend-plugin-api by upgrading from ^1.6.0 to ^1.6.2
+  - Fixed CVE-2026-24047 (High Severity) - Symlink Attack in @backstage/backend-defaults by upgrading from ^0.14.0 to ^0.15.1
+  - Fixed SNYK-JS-QS-14724253 (High Severity) - Allocation of Resources Without Limits or Throttling in qs by adding resolution to ^6.14.1
+
+  **Additional Package Upgrades:**
+  Upgraded packages to versions that depend on patched Backstage core packages:
+
+  - @backstage/plugin-mcp-actions-backend: ^0.1.6 → ^0.1.8
+  - @backstage/plugin-search-backend: ^2.0.9 → ^2.0.11
+  - @backstage/plugin-techdocs-backend: ^2.1.3 → ^2.1.4
+  - @backstage/backend-test-utils: ^1.10.2 → ^1.10.4 (in jira-dashboard-backend and readme-backend)
+
+  **Code Improvements:**
+
+  - Removed redundant @backstage/backend-defaults imports from production code paths in backend plugins (jira-dashboard-backend, readme-backend, statuspage-backend)
+
+## 0.18.0
+
+### Minor Changes
+
+- 7d98ad2: Bumped to backstage 1.46.2
+
 ## 0.17.0
 
 ### Minor Changes

package/README.md

@@ -140,8 +140,8 @@ Addition to this; ensure that `backstage:source-location` value has the trailing
 metadata:
   annotations:
     # This will not work
-    backstage:source-location: https://bitbucket.org/org-name/repo-id/src/master
+    backstage.io/source-location: url:https://bitbucket.org/org-name/repo-id/src/master
     # This value will work.
-    backstage:source-location: https://bitbucket.org/org-name/repo-id/src/master/
+    backstage.io/source-location: url:https://bitbucket.org/org-name/repo-id/src/master/
 ...
 ```

package/dist/alpha.d.ts

@@ -3,7 +3,6 @@ import * as _backstage_catalog_model from '@backstage/catalog-model';
 import * as react from 'react';
 import * as _backstage_plugin_catalog_react_alpha from '@backstage/plugin-catalog-react/alpha';
 import * as _backstage_frontend_plugin_api from '@backstage/frontend-plugin-api';
-import * as _backstage_core_plugin_api from '@backstage/core-plugin-api';
 
 /**
  * Frontend plugin that fetches and displays the readme for an entity
@@ -11,18 +10,18 @@ import * as _backstage_core_plugin_api from '@backstage/core-plugin-api';
  * @packageDocumentation
  */
 declare const _default: _backstage_frontend_plugin_api.OverridableFrontendPlugin<{}, {}, {
-    "api:readme": _backstage_frontend_plugin_api.ExtensionDefinition<{
+    "api:readme": _backstage_frontend_plugin_api.OverridableExtensionDefinition<{
         kind: "api";
         name: undefined;
         config: {};
         configInput: {};
-        output: _backstage_frontend_plugin_api.ExtensionDataRef<_backstage_core_plugin_api.AnyApiFactory, "core.api.factory", {}>;
+        output: _backstage_frontend_plugin_api.ExtensionDataRef<_backstage_frontend_plugin_api.AnyApiFactory, "core.api.factory", {}>;
         inputs: {};
         params: <TApi, TImpl extends TApi, TDeps extends {
             [x: string]: unknown;
-        }>(params: _backstage_core_plugin_api.ApiFactory<TApi, TImpl, TDeps>) => _backstage_frontend_plugin_api.ExtensionBlueprintParams<_backstage_core_plugin_api.AnyApiFactory>;
+        }>(params: _backstage_frontend_plugin_api.ApiFactory<TApi, TImpl, TDeps>) => _backstage_frontend_plugin_api.ExtensionBlueprintParams<_backstage_frontend_plugin_api.AnyApiFactory>;
     }>;
-    "entity-card:readme": _backstage_frontend_plugin_api.ExtensionDefinition<{
+    "entity-card:readme": _backstage_frontend_plugin_api.OverridableExtensionDefinition<{
         kind: "entity-card";
         name: undefined;
         config: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axis-backstage/plugin-readme",
-  "version": "0.17.0",
+  "version": "0.18.1",
   "exports": {
     ".": {
       "import": "./dist/index.esm.js",
@@ -56,14 +56,14 @@
     "postpack": "backstage-cli package postpack"
   },
   "dependencies": {
-    "@backstage/catalog-model": "^1.7.5",
-    "@backstage/core-compat-api": "^0.5.1",
-    "@backstage/core-components": "^0.17.5",
-    "@backstage/core-plugin-api": "^1.10.9",
+    "@backstage/catalog-model": "^1.7.6",
+    "@backstage/core-compat-api": "^0.5.5",
+    "@backstage/core-components": "^0.18.6",
+    "@backstage/core-plugin-api": "^1.12.1",
     "@backstage/errors": "^1.2.7",
-    "@backstage/frontend-plugin-api": "^0.11.0",
-    "@backstage/plugin-catalog-react": "^1.20.1",
-    "@backstage/theme": "^0.6.8",
+    "@backstage/frontend-plugin-api": "^0.13.2",
+    "@backstage/plugin-catalog-react": "^1.21.4",
+    "@backstage/theme": "^0.7.1",
     "@mui/icons-material": "^5.15.7",
     "@mui/material": "^5.15.7",
     "react-use": "^17.2.4"
@@ -75,10 +75,10 @@
     "react-router-dom": "^6.3.0"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.34.1",
-    "@backstage/core-app-api": "^1.18.0",
-    "@backstage/dev-utils": "^1.1.13",
-    "@backstage/test-utils": "^1.7.11",
+    "@backstage/cli": "^0.35.1",
+    "@backstage/core-app-api": "^1.19.3",
+    "@backstage/dev-utils": "^1.1.18",
+    "@backstage/test-utils": "^1.7.14",
     "@testing-library/dom": "^10.0.0",
     "@testing-library/jest-dom": "^6.0.0",
     "@testing-library/react": "^16.0.0",