@backstage/plugin-catalog-backend-module-openapi 0.1.4 → 0.1.5-next.1

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # @backstage/plugin-catalog-backend-module-openapi
 
+## 0.1.5-next.1
+
+### Patch Changes
+
+- dd995cdc72: Enabled support of resolving `$refs` in all kind of yaml documents, not only OpenAPI. This implicitly adds `$ref` resolving support for AsyncAPI specs. Thus, the `openApiPlaceholderResolver` has been renamed to `jsonSchemaRefPlaceholderResolver`.
+- Updated dependencies
+  - @backstage/backend-common@0.17.0-next.1
+  - @backstage/plugin-catalog-backend@1.6.0-next.1
+  - @backstage/types@1.0.2-next.1
+  - @backstage/plugin-catalog-node@1.2.2-next.1
+  - @backstage/config@1.0.5-next.1
+  - @backstage/integration@1.4.1-next.1
+  - @backstage/catalog-model@1.1.4-next.1
+
+## 0.1.5-next.0
+
+### Patch Changes
+
+- Updated dependencies
+  - @backstage/plugin-catalog-backend@1.6.0-next.0
+  - @backstage/backend-common@0.16.1-next.0
+  - @backstage/integration@1.4.1-next.0
+  - @backstage/types@1.0.2-next.0
+  - @backstage/plugin-catalog-node@1.2.2-next.0
+  - @backstage/catalog-model@1.1.4-next.0
+  - @backstage/config@1.0.5-next.0
+
 ## 0.1.4
 
 ### Patch Changes

package/README.md

@@ -1,8 +1,10 @@
-# Catalog Backend Module for OpenAPI specifications
+# Catalog Backend Module to resolve $refs in yaml documents
 
-This is an extension module to the plugin-catalog-backend plugin, providing extensions targeted at OpenAPI specifications.
+This is an extension module to the Catalog backend, providing extensions to resolve $refs in yaml documents.
 
-With this you can split your OpenAPI definition into multiple files and reference them. They will be bundled, using an UrlReader, during processing and stored as a single specification.
+With this you can split your yaml documents into multiple files and reference them. They will be bundled, using an UrlReader, during processing and stored as a single specification.
+
+This is useful for OpenAPI and AsyncAPI specifications.
 
 ## Installation
 
@@ -15,15 +17,18 @@ yarn add --cwd packages/backend @backstage/plugin-catalog-backend-module-openapi
 
 ### Adding the plugin to your `packages/backend`
 
-#### **openApiPlaceholderResolver**
+#### **jsonSchemaRefPlaceholderResolver**
 
-The placeholder resolver can be added by importing `openApiPlaceholderResolver` in `src/plugins/catalog.ts` in your `backend` package and adding the following.
+The placeholder resolver can be added by importing `jsonSchemaRefPlaceholderResolver` in `src/plugins/catalog.ts` in your `backend` package and adding the following.
 
 ```ts
-builder.setPlaceholderResolver('openapi', openApiPlaceholderResolver);
+builder.setPlaceholderResolver('openapi', jsonSchemaRefPlaceholderResolver);
+builder.setPlaceholderResolver('asyncapi', jsonSchemaRefPlaceholderResolver);
 ```
 
-This allows you to use the `$openapi` placeholder when referencing your OpenAPI specification. This will then resolve all `$ref` instances in your specification.
+This allows you to use the `$openapi` placeholder when referencing your OpenAPI specification and `$asyncapi` when referencing your AsyncAPI specifications. This will then resolve all `$ref` instances in your specification.
+
+You can also use this resolver for other kind of yaml files to resolve $ref pointer.
 
 ```yaml
 apiVersion: backstage.io/v1alpha1

package/dist/index.cjs.js

@@ -2,11 +2,11 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var integration = require('@backstage/integration');
-var SwaggerParser = require('@apidevtools/swagger-parser');
+var pluginCatalogNode = require('@backstage/plugin-catalog-node');
+var $RefParser = require('@apidevtools/json-schema-ref-parser');
 var yaml = require('yaml');
 var path = require('path');
-var pluginCatalogNode = require('@backstage/plugin-catalog-node');
+var integration = require('@backstage/integration');
 
 function _interopDefaultLegacy (e) { return e && typeof e === 'object' && 'default' in e ? e : { 'default': e }; }
 
@@ -28,7 +28,7 @@ function _interopNamespace(e) {
   return Object.freeze(n);
 }
 
-var SwaggerParser__default = /*#__PURE__*/_interopDefaultLegacy(SwaggerParser);
+var $RefParser__default = /*#__PURE__*/_interopDefaultLegacy($RefParser);
 var path__namespace = /*#__PURE__*/_interopNamespace(path);
 
 const protocolPattern = /^(\w{2,}):\/\//i;
@@ -39,7 +39,7 @@ const getProtocol = (refPath) => {
   }
   return void 0;
 };
-async function bundleOpenApiSpecification(specification, baseUrl, read, resolveUrl) {
+async function bundleFileWithRefs(fileWithRefs, baseUrl, read, resolveUrl) {
   const fileUrlReaderResolver = {
     canRead: (file) => {
       const protocol = getProtocol(file.url);
@@ -67,9 +67,56 @@ async function bundleOpenApiSpecification(specification, baseUrl, read, resolveU
       http: httpUrlReaderResolver
     }
   };
-  const specObject = yaml.parse(specification);
-  const bundledSpec = await SwaggerParser__default["default"].bundle(specObject, options);
-  return yaml.stringify(bundledSpec);
+  const fileObject = yaml.parse(fileWithRefs);
+  const bundledObject = await $RefParser__default["default"].bundle(fileObject, options);
+  return yaml.stringify(bundledObject);
+}
+
+async function jsonSchemaRefPlaceholderResolver(params) {
+  const { content, url } = await readTextLocation(params);
+  params.emit(pluginCatalogNode.processingResult.refresh(`url:${url}`));
+  try {
+    return await bundleFileWithRefs(
+      content,
+      url,
+      params.read,
+      params.resolveUrl
+    );
+  } catch (error) {
+    throw new Error(
+      `Placeholder $${params.key} unable to bundle the file at ${params.value}, ${error}`
+    );
+  }
+}
+async function readTextLocation(params) {
+  const newUrl = relativeUrl(params);
+  try {
+    const data = await params.read(newUrl);
+    return { content: data.toString("utf-8"), url: newUrl };
+  } catch (e) {
+    throw new Error(
+      `Placeholder $${params.key} could not read location ${params.value}, ${e}`
+    );
+  }
+}
+function relativeUrl({
+  key,
+  value,
+  baseUrl,
+  resolveUrl
+}) {
+  if (typeof value !== "string") {
+    throw new Error(
+      `Placeholder $${key} expected a string value parameter, in the form of an absolute URL or a relative path`
+    );
+  }
+  try {
+    return resolveUrl(value, baseUrl);
+  } catch (e) {
+    throw new Error(
+      `Placeholder $${key} could not form a URL out of ${baseUrl} and ${value}, ${e}`
+    );
+  }
 }
 
 class OpenApiRefProcessor {
@@ -102,7 +149,7 @@ class OpenApiRefProcessor {
     };
     this.logger.debug(`Bundling OpenAPI specification from ${location.target}`);
     try {
-      const bundledSpec = await bundleOpenApiSpecification(
+      const bundledSpec = await bundleFileWithRefs(
         definition.toString(),
         location.target,
         this.reader.read,
@@ -119,53 +166,9 @@ class OpenApiRefProcessor {
   }
 }
 
-async function openApiPlaceholderResolver(params) {
-  const { content, url } = await readTextLocation(params);
-  params.emit(pluginCatalogNode.processingResult.refresh(`url:${url}`));
-  try {
-    return await bundleOpenApiSpecification(
-      content,
-      url,
-      params.read,
-      params.resolveUrl
-    );
-  } catch (error) {
-    throw new Error(
-      `Placeholder $${params.key} unable to bundle OpenAPI specification at ${params.value}, ${error}`
-    );
-  }
-}
-async function readTextLocation(params) {
-  const newUrl = relativeUrl(params);
-  try {
-    const data = await params.read(newUrl);
-    return { content: data.toString("utf-8"), url: newUrl };
-  } catch (e) {
-    throw new Error(
-      `Placeholder $${params.key} could not read location ${params.value}, ${e}`
-    );
-  }
-}
-function relativeUrl({
-  key,
-  value,
-  baseUrl,
-  resolveUrl
-}) {
-  if (typeof value !== "string") {
-    throw new Error(
-      `Placeholder $${key} expected a string value parameter, in the form of an absolute URL or a relative path`
-    );
-  }
-  try {
-    return resolveUrl(value, baseUrl);
-  } catch (e) {
-    throw new Error(
-      `Placeholder $${key} could not form a URL out of ${baseUrl} and ${value}, ${e}`
-    );
-  }
-}
+const openApiPlaceholderResolver = jsonSchemaRefPlaceholderResolver;
 
 exports.OpenApiRefProcessor = OpenApiRefProcessor;
+exports.jsonSchemaRefPlaceholderResolver = jsonSchemaRefPlaceholderResolver;
 exports.openApiPlaceholderResolver = openApiPlaceholderResolver;
 //# sourceMappingURL=index.cjs.js.map

package/dist/index.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs.js","sources":["../src/lib/bundle.ts","../src/OpenApiRefProcessor.ts","../src/openApiPlaceholderResolver.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport SwaggerParser from '@apidevtools/swagger-parser';\nimport { parse, stringify } from 'yaml';\nimport * as path from 'path';\n\nconst protocolPattern = /^(\\w{2,}):\\/\\//i;\nconst getProtocol = (refPath: string) => {\n  const match = protocolPattern.exec(refPath);\n  if (match) {\n    return match[1].toLowerCase();\n  }\n  return undefined;\n};\n\nexport type BundlerRead = (url: string) => Promise<Buffer>;\n\nexport type BundlerResolveUrl = (url: string, base: string) => string;\n\nexport async function bundleOpenApiSpecification(\n  specification: string,\n  baseUrl: string,\n  read: BundlerRead,\n  resolveUrl: BundlerResolveUrl,\n): Promise<string> {\n  const fileUrlReaderResolver: SwaggerParser.ResolverOptions = {\n    canRead: file => {\n      const protocol = getProtocol(file.url);\n      return protocol === undefined || protocol === 'file';\n    },\n    read: async file => {\n      const relativePath = path.relative('.', file.url);\n      const url = resolveUrl(relativePath, baseUrl);\n      return await read(url);\n    },\n  };\n  const httpUrlReaderResolver: SwaggerParser.ResolverOptions = {\n    canRead: ref => {\n      const protocol = getProtocol(ref.url);\n      return protocol === 'http' || protocol === 'https';\n    },\n    read: async ref => {\n      const url = resolveUrl(ref.url, baseUrl);\n      return await read(url);\n    },\n  };\n\n  const options: SwaggerParser.Options = {\n    resolve: {\n      file: fileUrlReaderResolver,\n      http: httpUrlReaderResolver,\n    },\n  };\n  const specObject = parse(specification);\n  const bundledSpec = await SwaggerParser.bundle(specObject, options);\n  return stringify(bundledSpec);\n}\n","/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { UrlReader } from '@backstage/backend-common';\nimport { Entity } from '@backstage/catalog-model';\nimport { Config } from '@backstage/config';\nimport { ScmIntegrations } from '@backstage/integration';\nimport {\n  CatalogProcessor,\n  LocationSpec,\n} from '@backstage/plugin-catalog-backend';\nimport { bundleOpenApiSpecification } from './lib';\nimport { Logger } from 'winston';\n\n/**\n * @public\n * @deprecated replaced by the openApiPlaceholderResolver\n */\nexport class OpenApiRefProcessor implements CatalogProcessor {\n  private readonly integrations: ScmIntegrations;\n  private readonly logger: Logger;\n  private readonly reader: UrlReader;\n\n  static fromConfig(\n    config: Config,\n    options: { logger: Logger; reader: UrlReader },\n  ) {\n    const integrations = ScmIntegrations.fromConfig(config);\n\n    return new OpenApiRefProcessor({\n      ...options,\n      integrations,\n    });\n  }\n\n  constructor(options: {\n    integrations: ScmIntegrations;\n    logger: Logger;\n    reader: UrlReader;\n  }) {\n    this.integrations = options.integrations;\n    this.logger = options.logger;\n    this.reader = options.reader;\n  }\n\n  getProcessorName(): string {\n    return 'OpenApiRefProcessor';\n  }\n\n  async preProcessEntity(\n    entity: Entity,\n    location: LocationSpec,\n  ): Promise<Entity> {\n    if (\n      !entity ||\n      entity.kind !== 'API' ||\n      (entity.spec && entity.spec.type !== 'openapi')\n    ) {\n      return entity;\n    }\n\n    const scmIntegration = this.integrations.byUrl(location.target);\n    const definition = entity.spec!.definition;\n\n    if (!scmIntegration || !definition) {\n      return entity;\n    }\n\n    const resolveUrl = (url: string, base: string): string => {\n      return scmIntegration.resolveUrl({ url, base });\n    };\n\n    this.logger.debug(`Bundling OpenAPI specification from ${location.target}`);\n    try {\n      const bundledSpec = await bundleOpenApiSpecification(\n        definition.toString(),\n        location.target,\n        this.reader.read,\n        resolveUrl,\n      );\n\n      return {\n        ...entity,\n        spec: { ...entity.spec, definition: bundledSpec },\n      };\n    } catch (error) {\n      this.logger.error(`Unable to bundle OpenAPI specification`, error);\n      return entity;\n    }\n  }\n}\n","/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { PlaceholderResolverParams } from '@backstage/plugin-catalog-backend';\nimport { JsonValue } from '@backstage/types';\nimport { processingResult } from '@backstage/plugin-catalog-node';\nimport { bundleOpenApiSpecification } from './lib';\n\n/** @public */\nexport async function openApiPlaceholderResolver(\n  params: PlaceholderResolverParams,\n): Promise<JsonValue> {\n  const { content, url } = await readTextLocation(params);\n\n  params.emit(processingResult.refresh(`url:${url}`));\n\n  try {\n    return await bundleOpenApiSpecification(\n      content,\n      url,\n      params.read,\n      params.resolveUrl,\n    );\n  } catch (error) {\n    throw new Error(\n      `Placeholder \\$${params.key} unable to bundle OpenAPI specification at ${params.value}, ${error}`,\n    );\n  }\n}\n\n/*\n * Helpers, copied from PlaceholderProcessor\n */\n\nasync function readTextLocation(\n  params: PlaceholderResolverParams,\n): Promise<{ content: string; url: string }> {\n  const newUrl = relativeUrl(params);\n\n  try {\n    const data = await params.read(newUrl);\n    return { content: data.toString('utf-8'), url: newUrl };\n  } catch (e) {\n    throw new Error(\n      `Placeholder \\$${params.key} could not read location ${params.value}, ${e}`,\n    );\n  }\n}\n\nfunction relativeUrl({\n  key,\n  value,\n  baseUrl,\n  resolveUrl,\n}: PlaceholderResolverParams): string {\n  if (typeof value !== 'string') {\n    throw new Error(\n      `Placeholder \\$${key} expected a string value parameter, in the form of an absolute URL or a relative path`,\n    );\n  }\n\n  try {\n    return resolveUrl(value, baseUrl);\n  } catch (e) {\n    // The only remaining case that isn't support is a relative file path that should be\n    // resolved using a relative file location. Accessing local file paths can lead to\n    // path traversal attacks and access to any file on the host system. Implementing this\n    // would require additional security measures.\n    throw new Error(\n      `Placeholder \\$${key} could not form a URL out of ${baseUrl} and ${value}, ${e}`,\n    );\n  }\n}\n"],"names":["path","parse","SwaggerParser","stringify","ScmIntegrations","processingResult"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,MAAM,eAAkB,GAAA,iBAAA,CAAA;AACxB,MAAM,WAAA,GAAc,CAAC,OAAoB,KAAA;AACvC,EAAM,MAAA,KAAA,GAAQ,eAAgB,CAAA,IAAA,CAAK,OAAO,CAAA,CAAA;AAC1C,EAAA,IAAI,KAAO,EAAA;AACT,IAAO,OAAA,KAAA,CAAM,GAAG,WAAY,EAAA,CAAA;AAAA,GAC9B;AACA,EAAO,OAAA,KAAA,CAAA,CAAA;AACT,CAAA,CAAA;AAMA,eAAsB,0BACpB,CAAA,aAAA,EACA,OACA,EAAA,IAAA,EACA,UACiB,EAAA;AACjB,EAAA,MAAM,qBAAuD,GAAA;AAAA,IAC3D,SAAS,CAAQ,IAAA,KAAA;AACf,MAAM,MAAA,QAAA,GAAW,WAAY,CAAA,IAAA,CAAK,GAAG,CAAA,CAAA;AACrC,MAAO,OAAA,QAAA,KAAa,UAAa,QAAa,KAAA,MAAA,CAAA;AAAA,KAChD;AAAA,IACA,IAAA,EAAM,OAAM,IAAQ,KAAA;AAClB,MAAA,MAAM,YAAe,GAAAA,eAAA,CAAK,QAAS,CAAA,GAAA,EAAK,KAAK,GAAG,CAAA,CAAA;AAChD,MAAM,MAAA,GAAA,GAAM,UAAW,CAAA,YAAA,EAAc,OAAO,CAAA,CAAA;AAC5C,MAAO,OAAA,MAAM,KAAK,GAAG,CAAA,CAAA;AAAA,KACvB;AAAA,GACF,CAAA;AACA,EAAA,MAAM,qBAAuD,GAAA;AAAA,IAC3D,SAAS,CAAO,GAAA,KAAA;AACd,MAAM,MAAA,QAAA,GAAW,WAAY,CAAA,GAAA,CAAI,GAAG,CAAA,CAAA;AACpC,MAAO,OAAA,QAAA,KAAa,UAAU,QAAa,KAAA,OAAA,CAAA;AAAA,KAC7C;AAAA,IACA,IAAA,EAAM,OAAM,GAAO,KAAA;AACjB,MAAA,MAAM,GAAM,GAAA,UAAA,CAAW,GAAI,CAAA,GAAA,EAAK,OAAO,CAAA,CAAA;AACvC,MAAO,OAAA,MAAM,KAAK,GAAG,CAAA,CAAA;AAAA,KACvB;AAAA,GACF,CAAA;AAEA,EAAA,MAAM,OAAiC,GAAA;AAAA,IACrC,OAAS,EAAA;AAAA,MACP,IAAM,EAAA,qBAAA;AAAA,MACN,IAAM,EAAA,qBAAA;AAAA,KACR;AAAA,GACF,CAAA;AACA,EAAM,MAAA,UAAA,GAAaC,WAAM,aAAa,CAAA,CAAA;AACtC,EAAA,MAAM,WAAc,GAAA,MAAMC,iCAAc,CAAA,MAAA,CAAO,YAAY,OAAO,CAAA,CAAA;AAClE,EAAA,OAAOC,eAAU,WAAW,CAAA,CAAA;AAC9B;;ACvCO,MAAM,mBAAgD,CAAA;AAAA,EAK3D,OAAO,UACL,CAAA,MAAA,EACA,OACA,EAAA;AACA,IAAM,MAAA,YAAA,GAAeC,2BAAgB,CAAA,UAAA,CAAW,MAAM,CAAA,CAAA;AAEtD,IAAA,OAAO,IAAI,mBAAoB,CAAA;AAAA,MAC7B,GAAG,OAAA;AAAA,MACH,YAAA;AAAA,KACD,CAAA,CAAA;AAAA,GACH;AAAA,EAEA,YAAY,OAIT,EAAA;AACD,IAAA,IAAA,CAAK,eAAe,OAAQ,CAAA,YAAA,CAAA;AAC5B,IAAA,IAAA,CAAK,SAAS,OAAQ,CAAA,MAAA,CAAA;AACtB,IAAA,IAAA,CAAK,SAAS,OAAQ,CAAA,MAAA,CAAA;AAAA,GACxB;AAAA,EAEA,gBAA2B,GAAA;AACzB,IAAO,OAAA,qBAAA,CAAA;AAAA,GACT;AAAA,EAEA,MAAM,gBACJ,CAAA,MAAA,EACA,QACiB,EAAA;AACjB,IACE,IAAA,CAAC,MACD,IAAA,MAAA,CAAO,IAAS,KAAA,KAAA,IACf,OAAO,IAAQ,IAAA,MAAA,CAAO,IAAK,CAAA,IAAA,KAAS,SACrC,EAAA;AACA,MAAO,OAAA,MAAA,CAAA;AAAA,KACT;AAEA,IAAA,MAAM,cAAiB,GAAA,IAAA,CAAK,YAAa,CAAA,KAAA,CAAM,SAAS,MAAM,CAAA,CAAA;AAC9D,IAAM,MAAA,UAAA,GAAa,OAAO,IAAM,CAAA,UAAA,CAAA;AAEhC,IAAI,IAAA,CAAC,cAAkB,IAAA,CAAC,UAAY,EAAA;AAClC,MAAO,OAAA,MAAA,CAAA;AAAA,KACT;AAEA,IAAM,MAAA,UAAA,GAAa,CAAC,GAAA,EAAa,IAAyB,KAAA;AACxD,MAAA,OAAO,cAAe,CAAA,UAAA,CAAW,EAAE,GAAA,EAAK,MAAM,CAAA,CAAA;AAAA,KAChD,CAAA;AAEA,IAAA,IAAA,CAAK,MAAO,CAAA,KAAA,CAAM,CAAuC,oCAAA,EAAA,QAAA,CAAS,MAAQ,CAAA,CAAA,CAAA,CAAA;AAC1E,IAAI,IAAA;AACF,MAAA,MAAM,cAAc,MAAM,0BAAA;AAAA,QACxB,WAAW,QAAS,EAAA;AAAA,QACpB,QAAS,CAAA,MAAA;AAAA,QACT,KAAK,MAAO,CAAA,IAAA;AAAA,QACZ,UAAA;AAAA,OACF,CAAA;AAEA,MAAO,OAAA;AAAA,QACL,GAAG,MAAA;AAAA,QACH,MAAM,EAAE,GAAG,MAAO,CAAA,IAAA,EAAM,YAAY,WAAY,EAAA;AAAA,OAClD,CAAA;AAAA,aACO,KAAP,EAAA;AACA,MAAK,IAAA,CAAA,MAAA,CAAO,KAAM,CAAA,CAAA,sCAAA,CAAA,EAA0C,KAAK,CAAA,CAAA;AACjE,MAAO,OAAA,MAAA,CAAA;AAAA,KACT;AAAA,GACF;AACF;;ACjFA,eAAsB,2BACpB,MACoB,EAAA;AACpB,EAAA,MAAM,EAAE,OAAS,EAAA,GAAA,EAAQ,GAAA,MAAM,iBAAiB,MAAM,CAAA,CAAA;AAEtD,EAAA,MAAA,CAAO,IAAK,CAAAC,kCAAA,CAAiB,OAAQ,CAAA,CAAA,IAAA,EAAO,KAAK,CAAC,CAAA,CAAA;AAElD,EAAI,IAAA;AACF,IAAA,OAAO,MAAM,0BAAA;AAAA,MACX,OAAA;AAAA,MACA,GAAA;AAAA,MACA,MAAO,CAAA,IAAA;AAAA,MACP,MAAO,CAAA,UAAA;AAAA,KACT,CAAA;AAAA,WACO,KAAP,EAAA;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAiB,aAAA,EAAA,MAAA,CAAO,GAAiD,CAAA,2CAAA,EAAA,MAAA,CAAO,KAAU,CAAA,EAAA,EAAA,KAAA,CAAA,CAAA;AAAA,KAC5F,CAAA;AAAA,GACF;AACF,CAAA;AAMA,eAAe,iBACb,MAC2C,EAAA;AAC3C,EAAM,MAAA,MAAA,GAAS,YAAY,MAAM,CAAA,CAAA;AAEjC,EAAI,IAAA;AACF,IAAA,MAAM,IAAO,GAAA,MAAM,MAAO,CAAA,IAAA,CAAK,MAAM,CAAA,CAAA;AACrC,IAAA,OAAO,EAAE,OAAS,EAAA,IAAA,CAAK,SAAS,OAAO,CAAA,EAAG,KAAK,MAAO,EAAA,CAAA;AAAA,WAC/C,CAAP,EAAA;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAiB,aAAA,EAAA,MAAA,CAAO,GAA+B,CAAA,yBAAA,EAAA,MAAA,CAAO,KAAU,CAAA,EAAA,EAAA,CAAA,CAAA,CAAA;AAAA,KAC1E,CAAA;AAAA,GACF;AACF,CAAA;AAEA,SAAS,WAAY,CAAA;AAAA,EACnB,GAAA;AAAA,EACA,KAAA;AAAA,EACA,OAAA;AAAA,EACA,UAAA;AACF,CAAsC,EAAA;AACpC,EAAI,IAAA,OAAO,UAAU,QAAU,EAAA;AAC7B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAiB,aAAA,EAAA,GAAA,CAAA,qFAAA,CAAA;AAAA,KACnB,CAAA;AAAA,GACF;AAEA,EAAI,IAAA;AACF,IAAO,OAAA,UAAA,CAAW,OAAO,OAAO,CAAA,CAAA;AAAA,WACzB,CAAP,EAAA;AAKA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,aAAA,EAAiB,GAAmC,CAAA,6BAAA,EAAA,OAAA,CAAA,KAAA,EAAe,KAAU,CAAA,EAAA,EAAA,CAAA,CAAA,CAAA;AAAA,KAC/E,CAAA;AAAA,GACF;AACF;;;;;"}
+{"version":3,"file":"index.cjs.js","sources":["../src/lib/bundle.ts","../src/jsonSchemaRefPlaceholderResolver.ts","../src/OpenApiRefProcessor.ts","../src/index.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport $RefParser from '@apidevtools/json-schema-ref-parser';\nimport { parse, stringify } from 'yaml';\nimport * as path from 'path';\n\nconst protocolPattern = /^(\\w{2,}):\\/\\//i;\nconst getProtocol = (refPath: string) => {\n  const match = protocolPattern.exec(refPath);\n  if (match) {\n    return match[1].toLowerCase();\n  }\n  return undefined;\n};\n\nexport type BundlerRead = (url: string) => Promise<Buffer>;\n\nexport type BundlerResolveUrl = (url: string, base: string) => string;\n\nexport async function bundleFileWithRefs(\n  fileWithRefs: string,\n  baseUrl: string,\n  read: BundlerRead,\n  resolveUrl: BundlerResolveUrl,\n): Promise<string> {\n  const fileUrlReaderResolver: $RefParser.ResolverOptions = {\n    canRead: file => {\n      const protocol = getProtocol(file.url);\n      return protocol === undefined || protocol === 'file';\n    },\n    read: async file => {\n      const relativePath = path.relative('.', file.url);\n      const url = resolveUrl(relativePath, baseUrl);\n      return await read(url);\n    },\n  };\n  const httpUrlReaderResolver: $RefParser.ResolverOptions = {\n    canRead: ref => {\n      const protocol = getProtocol(ref.url);\n      return protocol === 'http' || protocol === 'https';\n    },\n    read: async ref => {\n      const url = resolveUrl(ref.url, baseUrl);\n      return await read(url);\n    },\n  };\n\n  const options: $RefParser.Options = {\n    resolve: {\n      file: fileUrlReaderResolver,\n      http: httpUrlReaderResolver,\n    },\n  };\n  const fileObject = parse(fileWithRefs);\n  const bundledObject = await $RefParser.bundle(fileObject, options);\n  return stringify(bundledObject);\n}\n","/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { PlaceholderResolverParams } from '@backstage/plugin-catalog-backend';\nimport { JsonValue } from '@backstage/types';\nimport { processingResult } from '@backstage/plugin-catalog-node';\nimport { bundleFileWithRefs } from './lib';\n\n/** @public */\nexport async function jsonSchemaRefPlaceholderResolver(\n  params: PlaceholderResolverParams,\n): Promise<JsonValue> {\n  const { content, url } = await readTextLocation(params);\n\n  params.emit(processingResult.refresh(`url:${url}`));\n\n  try {\n    return await bundleFileWithRefs(\n      content,\n      url,\n      params.read,\n      params.resolveUrl,\n    );\n  } catch (error) {\n    throw new Error(\n      `Placeholder \\$${params.key} unable to bundle the file at ${params.value}, ${error}`,\n    );\n  }\n}\n\n/*\n * Helpers, copied from PlaceholderProcessor\n */\n\nasync function readTextLocation(\n  params: PlaceholderResolverParams,\n): Promise<{ content: string; url: string }> {\n  const newUrl = relativeUrl(params);\n\n  try {\n    const data = await params.read(newUrl);\n    return { content: data.toString('utf-8'), url: newUrl };\n  } catch (e) {\n    throw new Error(\n      `Placeholder \\$${params.key} could not read location ${params.value}, ${e}`,\n    );\n  }\n}\n\nfunction relativeUrl({\n  key,\n  value,\n  baseUrl,\n  resolveUrl,\n}: PlaceholderResolverParams): string {\n  if (typeof value !== 'string') {\n    throw new Error(\n      `Placeholder \\$${key} expected a string value parameter, in the form of an absolute URL or a relative path`,\n    );\n  }\n\n  try {\n    return resolveUrl(value, baseUrl);\n  } catch (e) {\n    // The only remaining case that isn't support is a relative file path that should be\n    // resolved using a relative file location. Accessing local file paths can lead to\n    // path traversal attacks and access to any file on the host system. Implementing this\n    // would require additional security measures.\n    throw new Error(\n      `Placeholder \\$${key} could not form a URL out of ${baseUrl} and ${value}, ${e}`,\n    );\n  }\n}\n","/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { UrlReader } from '@backstage/backend-common';\nimport { Entity } from '@backstage/catalog-model';\nimport { Config } from '@backstage/config';\nimport { ScmIntegrations } from '@backstage/integration';\nimport {\n  CatalogProcessor,\n  LocationSpec,\n} from '@backstage/plugin-catalog-backend';\nimport { bundleFileWithRefs } from './lib';\nimport { Logger } from 'winston';\n\n/**\n * @public\n * @deprecated replaced by the openApiPlaceholderResolver\n */\nexport class OpenApiRefProcessor implements CatalogProcessor {\n  private readonly integrations: ScmIntegrations;\n  private readonly logger: Logger;\n  private readonly reader: UrlReader;\n\n  static fromConfig(\n    config: Config,\n    options: { logger: Logger; reader: UrlReader },\n  ) {\n    const integrations = ScmIntegrations.fromConfig(config);\n\n    return new OpenApiRefProcessor({\n      ...options,\n      integrations,\n    });\n  }\n\n  constructor(options: {\n    integrations: ScmIntegrations;\n    logger: Logger;\n    reader: UrlReader;\n  }) {\n    this.integrations = options.integrations;\n    this.logger = options.logger;\n    this.reader = options.reader;\n  }\n\n  getProcessorName(): string {\n    return 'OpenApiRefProcessor';\n  }\n\n  async preProcessEntity(\n    entity: Entity,\n    location: LocationSpec,\n  ): Promise<Entity> {\n    if (\n      !entity ||\n      entity.kind !== 'API' ||\n      (entity.spec && entity.spec.type !== 'openapi')\n    ) {\n      return entity;\n    }\n\n    const scmIntegration = this.integrations.byUrl(location.target);\n    const definition = entity.spec!.definition;\n\n    if (!scmIntegration || !definition) {\n      return entity;\n    }\n\n    const resolveUrl = (url: string, base: string): string => {\n      return scmIntegration.resolveUrl({ url, base });\n    };\n\n    this.logger.debug(`Bundling OpenAPI specification from ${location.target}`);\n    try {\n      const bundledSpec = await bundleFileWithRefs(\n        definition.toString(),\n        location.target,\n        this.reader.read,\n        resolveUrl,\n      );\n\n      return {\n        ...entity,\n        spec: { ...entity.spec, definition: bundledSpec },\n      };\n    } catch (error) {\n      this.logger.error(`Unable to bundle OpenAPI specification`, error);\n      return entity;\n    }\n  }\n}\n","/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { jsonSchemaRefPlaceholderResolver } from './jsonSchemaRefPlaceholderResolver';\n\nexport { OpenApiRefProcessor } from './OpenApiRefProcessor';\nexport { jsonSchemaRefPlaceholderResolver } from './jsonSchemaRefPlaceholderResolver';\n/**\n * @public\n * @deprecated replaced by jsonSchemaRefPlaceholderResolver\n */\nexport const openApiPlaceholderResolver = jsonSchemaRefPlaceholderResolver;\n"],"names":["path","parse","$RefParser","stringify","processingResult","ScmIntegrations"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,MAAM,eAAkB,GAAA,iBAAA,CAAA;AACxB,MAAM,WAAA,GAAc,CAAC,OAAoB,KAAA;AACvC,EAAM,MAAA,KAAA,GAAQ,eAAgB,CAAA,IAAA,CAAK,OAAO,CAAA,CAAA;AAC1C,EAAA,IAAI,KAAO,EAAA;AACT,IAAO,OAAA,KAAA,CAAM,GAAG,WAAY,EAAA,CAAA;AAAA,GAC9B;AACA,EAAO,OAAA,KAAA,CAAA,CAAA;AACT,CAAA,CAAA;AAMA,eAAsB,kBACpB,CAAA,YAAA,EACA,OACA,EAAA,IAAA,EACA,UACiB,EAAA;AACjB,EAAA,MAAM,qBAAoD,GAAA;AAAA,IACxD,SAAS,CAAQ,IAAA,KAAA;AACf,MAAM,MAAA,QAAA,GAAW,WAAY,CAAA,IAAA,CAAK,GAAG,CAAA,CAAA;AACrC,MAAO,OAAA,QAAA,KAAa,UAAa,QAAa,KAAA,MAAA,CAAA;AAAA,KAChD;AAAA,IACA,IAAA,EAAM,OAAM,IAAQ,KAAA;AAClB,MAAA,MAAM,YAAe,GAAAA,eAAA,CAAK,QAAS,CAAA,GAAA,EAAK,KAAK,GAAG,CAAA,CAAA;AAChD,MAAM,MAAA,GAAA,GAAM,UAAW,CAAA,YAAA,EAAc,OAAO,CAAA,CAAA;AAC5C,MAAO,OAAA,MAAM,KAAK,GAAG,CAAA,CAAA;AAAA,KACvB;AAAA,GACF,CAAA;AACA,EAAA,MAAM,qBAAoD,GAAA;AAAA,IACxD,SAAS,CAAO,GAAA,KAAA;AACd,MAAM,MAAA,QAAA,GAAW,WAAY,CAAA,GAAA,CAAI,GAAG,CAAA,CAAA;AACpC,MAAO,OAAA,QAAA,KAAa,UAAU,QAAa,KAAA,OAAA,CAAA;AAAA,KAC7C;AAAA,IACA,IAAA,EAAM,OAAM,GAAO,KAAA;AACjB,MAAA,MAAM,GAAM,GAAA,UAAA,CAAW,GAAI,CAAA,GAAA,EAAK,OAAO,CAAA,CAAA;AACvC,MAAO,OAAA,MAAM,KAAK,GAAG,CAAA,CAAA;AAAA,KACvB;AAAA,GACF,CAAA;AAEA,EAAA,MAAM,OAA8B,GAAA;AAAA,IAClC,OAAS,EAAA;AAAA,MACP,IAAM,EAAA,qBAAA;AAAA,MACN,IAAM,EAAA,qBAAA;AAAA,KACR;AAAA,GACF,CAAA;AACA,EAAM,MAAA,UAAA,GAAaC,WAAM,YAAY,CAAA,CAAA;AACrC,EAAA,MAAM,aAAgB,GAAA,MAAMC,8BAAW,CAAA,MAAA,CAAO,YAAY,OAAO,CAAA,CAAA;AACjE,EAAA,OAAOC,eAAU,aAAa,CAAA,CAAA;AAChC;;AChDA,eAAsB,iCACpB,MACoB,EAAA;AACpB,EAAA,MAAM,EAAE,OAAS,EAAA,GAAA,EAAQ,GAAA,MAAM,iBAAiB,MAAM,CAAA,CAAA;AAEtD,EAAA,MAAA,CAAO,IAAK,CAAAC,kCAAA,CAAiB,OAAQ,CAAA,CAAA,IAAA,EAAO,KAAK,CAAC,CAAA,CAAA;AAElD,EAAI,IAAA;AACF,IAAA,OAAO,MAAM,kBAAA;AAAA,MACX,OAAA;AAAA,MACA,GAAA;AAAA,MACA,MAAO,CAAA,IAAA;AAAA,MACP,MAAO,CAAA,UAAA;AAAA,KACT,CAAA;AAAA,WACO,KAAP,EAAA;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAiB,aAAA,EAAA,MAAA,CAAO,GAAoC,CAAA,8BAAA,EAAA,MAAA,CAAO,KAAU,CAAA,EAAA,EAAA,KAAA,CAAA,CAAA;AAAA,KAC/E,CAAA;AAAA,GACF;AACF,CAAA;AAMA,eAAe,iBACb,MAC2C,EAAA;AAC3C,EAAM,MAAA,MAAA,GAAS,YAAY,MAAM,CAAA,CAAA;AAEjC,EAAI,IAAA;AACF,IAAA,MAAM,IAAO,GAAA,MAAM,MAAO,CAAA,IAAA,CAAK,MAAM,CAAA,CAAA;AACrC,IAAA,OAAO,EAAE,OAAS,EAAA,IAAA,CAAK,SAAS,OAAO,CAAA,EAAG,KAAK,MAAO,EAAA,CAAA;AAAA,WAC/C,CAAP,EAAA;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAiB,aAAA,EAAA,MAAA,CAAO,GAA+B,CAAA,yBAAA,EAAA,MAAA,CAAO,KAAU,CAAA,EAAA,EAAA,CAAA,CAAA,CAAA;AAAA,KAC1E,CAAA;AAAA,GACF;AACF,CAAA;AAEA,SAAS,WAAY,CAAA;AAAA,EACnB,GAAA;AAAA,EACA,KAAA;AAAA,EACA,OAAA;AAAA,EACA,UAAA;AACF,CAAsC,EAAA;AACpC,EAAI,IAAA,OAAO,UAAU,QAAU,EAAA;AAC7B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAiB,aAAA,EAAA,GAAA,CAAA,qFAAA,CAAA;AAAA,KACnB,CAAA;AAAA,GACF;AAEA,EAAI,IAAA;AACF,IAAO,OAAA,UAAA,CAAW,OAAO,OAAO,CAAA,CAAA;AAAA,WACzB,CAAP,EAAA;AAKA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,aAAA,EAAiB,GAAmC,CAAA,6BAAA,EAAA,OAAA,CAAA,KAAA,EAAe,KAAU,CAAA,EAAA,EAAA,CAAA,CAAA,CAAA;AAAA,KAC/E,CAAA;AAAA,GACF;AACF;;ACtDO,MAAM,mBAAgD,CAAA;AAAA,EAK3D,OAAO,UACL,CAAA,MAAA,EACA,OACA,EAAA;AACA,IAAM,MAAA,YAAA,GAAeC,2BAAgB,CAAA,UAAA,CAAW,MAAM,CAAA,CAAA;AAEtD,IAAA,OAAO,IAAI,mBAAoB,CAAA;AAAA,MAC7B,GAAG,OAAA;AAAA,MACH,YAAA;AAAA,KACD,CAAA,CAAA;AAAA,GACH;AAAA,EAEA,YAAY,OAIT,EAAA;AACD,IAAA,IAAA,CAAK,eAAe,OAAQ,CAAA,YAAA,CAAA;AAC5B,IAAA,IAAA,CAAK,SAAS,OAAQ,CAAA,MAAA,CAAA;AACtB,IAAA,IAAA,CAAK,SAAS,OAAQ,CAAA,MAAA,CAAA;AAAA,GACxB;AAAA,EAEA,gBAA2B,GAAA;AACzB,IAAO,OAAA,qBAAA,CAAA;AAAA,GACT;AAAA,EAEA,MAAM,gBACJ,CAAA,MAAA,EACA,QACiB,EAAA;AACjB,IACE,IAAA,CAAC,MACD,IAAA,MAAA,CAAO,IAAS,KAAA,KAAA,IACf,OAAO,IAAQ,IAAA,MAAA,CAAO,IAAK,CAAA,IAAA,KAAS,SACrC,EAAA;AACA,MAAO,OAAA,MAAA,CAAA;AAAA,KACT;AAEA,IAAA,MAAM,cAAiB,GAAA,IAAA,CAAK,YAAa,CAAA,KAAA,CAAM,SAAS,MAAM,CAAA,CAAA;AAC9D,IAAM,MAAA,UAAA,GAAa,OAAO,IAAM,CAAA,UAAA,CAAA;AAEhC,IAAI,IAAA,CAAC,cAAkB,IAAA,CAAC,UAAY,EAAA;AAClC,MAAO,OAAA,MAAA,CAAA;AAAA,KACT;AAEA,IAAM,MAAA,UAAA,GAAa,CAAC,GAAA,EAAa,IAAyB,KAAA;AACxD,MAAA,OAAO,cAAe,CAAA,UAAA,CAAW,EAAE,GAAA,EAAK,MAAM,CAAA,CAAA;AAAA,KAChD,CAAA;AAEA,IAAA,IAAA,CAAK,MAAO,CAAA,KAAA,CAAM,CAAuC,oCAAA,EAAA,QAAA,CAAS,MAAQ,CAAA,CAAA,CAAA,CAAA;AAC1E,IAAI,IAAA;AACF,MAAA,MAAM,cAAc,MAAM,kBAAA;AAAA,QACxB,WAAW,QAAS,EAAA;AAAA,QACpB,QAAS,CAAA,MAAA;AAAA,QACT,KAAK,MAAO,CAAA,IAAA;AAAA,QACZ,UAAA;AAAA,OACF,CAAA;AAEA,MAAO,OAAA;AAAA,QACL,GAAG,MAAA;AAAA,QACH,MAAM,EAAE,GAAG,MAAO,CAAA,IAAA,EAAM,YAAY,WAAY,EAAA;AAAA,OAClD,CAAA;AAAA,aACO,KAAP,EAAA;AACA,MAAK,IAAA,CAAA,MAAA,CAAO,KAAM,CAAA,CAAA,sCAAA,CAAA,EAA0C,KAAK,CAAA,CAAA;AACjE,MAAO,OAAA,MAAA,CAAA;AAAA,KACT;AAAA,GACF;AACF;;AC/EO,MAAM,0BAA6B,GAAA;;;;;;"}

package/dist/index.d.ts

@@ -1,10 +1,13 @@
+import { PlaceholderResolverParams, CatalogProcessor, LocationSpec } from '@backstage/plugin-catalog-backend';
+import { JsonValue } from '@backstage/types';
 import { UrlReader } from '@backstage/backend-common';
 import { Entity } from '@backstage/catalog-model';
 import { Config } from '@backstage/config';
 import { ScmIntegrations } from '@backstage/integration';
-import { CatalogProcessor, LocationSpec, PlaceholderResolverParams } from '@backstage/plugin-catalog-backend';
 import { Logger } from 'winston';
-import { JsonValue } from '@backstage/types';
+
+/** @public */
+declare function jsonSchemaRefPlaceholderResolver(params: PlaceholderResolverParams): Promise<JsonValue>;
 
 /**
  * @public
@@ -27,7 +30,10 @@ declare class OpenApiRefProcessor implements CatalogProcessor {
     preProcessEntity(entity: Entity, location: LocationSpec): Promise<Entity>;
 }
 
-/** @public */
-declare function openApiPlaceholderResolver(params: PlaceholderResolverParams): Promise<JsonValue>;
+/**
+ * @public
+ * @deprecated replaced by jsonSchemaRefPlaceholderResolver
+ */
+declare const openApiPlaceholderResolver: typeof jsonSchemaRefPlaceholderResolver;
 
-export { OpenApiRefProcessor, openApiPlaceholderResolver };
+export { OpenApiRefProcessor, jsonSchemaRefPlaceholderResolver, openApiPlaceholderResolver };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@backstage/plugin-catalog-backend-module-openapi",
   "description": "A Backstage catalog backend module that helps with OpenAPI specifications",
-  "version": "0.1.4",
+  "version": "0.1.5-next.1",
   "main": "dist/index.cjs.js",
   "types": "dist/index.d.ts",
   "license": "Apache-2.0",
@@ -32,20 +32,20 @@
     "start": "backstage-cli package start"
   },
   "dependencies": {
-    "@apidevtools/swagger-parser": "^10.1.0",
-    "@backstage/backend-common": "^0.16.0",
-    "@backstage/catalog-model": "^1.1.3",
-    "@backstage/config": "^1.0.4",
-    "@backstage/integration": "^1.4.0",
-    "@backstage/plugin-catalog-backend": "^1.5.1",
-    "@backstage/plugin-catalog-node": "^1.2.1",
-    "@backstage/types": "^1.0.1",
+    "@apidevtools/json-schema-ref-parser": "^9.0.6",
+    "@backstage/backend-common": "^0.17.0-next.1",
+    "@backstage/catalog-model": "^1.1.4-next.1",
+    "@backstage/config": "^1.0.5-next.1",
+    "@backstage/integration": "^1.4.1-next.1",
+    "@backstage/plugin-catalog-backend": "^1.6.0-next.1",
+    "@backstage/plugin-catalog-node": "^1.2.2-next.1",
+    "@backstage/types": "^1.0.2-next.1",
     "winston": "^3.2.1",
     "yaml": "^2.1.1"
   },
   "devDependencies": {
-    "@backstage/backend-test-utils": "^0.1.30",
-    "@backstage/cli": "^0.21.0",
+    "@backstage/backend-test-utils": "^0.1.31-next.1",
+    "@backstage/cli": "^0.21.2-next.1",
     "openapi-types": "^12.0.0"
   },
   "files": [