Update dependency dompurify to v2.5.4 [SECURITY] by renovate[bot] · Pull Request #7368 · https-quantumblockchainai-atlassian-net/backstage

renovate · 2025-08-13T17:34:19Z

This PR contains the following updates:

Package	Change	Age	Confidence
dompurify	`2.4.5` → `2.5.4`

DOMPurify allows tampering by prototype pollution

CVE-2024-45801 / GHSA-mmhx-hmjr-r674

More information

Details

It has been discovered that malicious HTML using special nesting techniques can bypass the depth checking added to DOMPurify in recent releases. It was also possible to use Prototype Pollution to weaken the depth check.

This renders dompurify unable to avoid XSS attack.

Fixed by cure53/DOMPurify@1e52026 (3.x branch) and cure53/DOMPurify@26e1d69 (2.x branch).

Severity

CVSS Score: 8.3 / 10 (High)
Vector String: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Release Notes

cure53/DOMPurify (dompurify)

`v2.5.4`: DOMPurify 2.5.4

Compare Source

Fixed a bug with latest isNaN checks affecting MSIE, thanks @tulach
Fixed the tests for MSIE and fixed related test-runner

`v2.5.3`: DOMPurify 2.5.3

Compare Source

Fixed several mXSS variations found by and thanks to @kevin-mizu & @Ry0taK
Added better configurability for comment scrubbing default behavior
Added better hardening against Prototype Pollution attacks, thanks @kevin-mizu
Fixed some smaller issues in README and other documentation

`v2.5.2`: DOMPurify 2.5.2

Compare Source

Addressed and fixed a mXSS variation found by @kevin-mizu
Addressed and fixed a mXSS variation found by Adam Kues of Assetnote
Updated tests for older Safari and Chrome versions

`v2.5.1`: DOMPurify 2.5.1

Compare Source

Fixed an mXSS sanitizer bypass reported by @icesfont
Added new code to track element nesting depth
Added new code to enforce a maximum nesting depth of 255
Added coverage tests and necessary clobbering protections

Note that this is a security release and should be upgraded to immediately. Please also note that further releases may follow as the underlying vulnerability is apparently new and further variations may be discovered.

`v2.5.0`: DOMPurify 2.5.0

Compare Source

Added new setting SAFE_FOR_XML to enable better control over comment scrubbing
Updated the LICENSE file to show the accurate year number
Updated several build and test dependencies

`v2.4.9`: DOMPurify 2.4.9

Compare Source

Fixed another conditional bypass caused by Processing Instructions, thanks @Ry0taK
Fixed the regex for HTML Custom Element detection, thanks @AlekseySolovey3T

`v2.4.8`: DOMPurify 2.4.8

Compare Source

Fixed two possible bypasses when sanitizing an XML document and later using it in HTML, thanks @Slonser

`v2.4.7`: DOMPurify 2.4.7

Compare Source

Fixed a licensing issue spotted and reported by @george-thomas-hill

`v2.4.6`: DOMPurify 2.4.6

Compare Source

Fixed a bypass in jsdom 22 in case the noframes element is permitted, thanks @leeN

Configuration

📅 Schedule: (UTC)

Branch creation
- ""
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codesandbox · 2025-08-13T17:34:25Z

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

snyk-io · 2025-08-13T17:34:46Z

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

github-actions · 2025-08-20T17:34:54Z

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

github-actions · 2025-08-28T04:49:58Z

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

socket-security · 2025-09-01T01:22:58Z

No dependency changes detected. Learn more about Socket for GitHub.

👍 No dependency changes detected in pull request

github-actions · 2025-09-10T19:12:27Z

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

github-actions · 2025-09-22T14:49:45Z

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

github-actions · 2025-10-15T19:55:55Z

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

renovate · 2025-10-15T22:18:40Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock

➤ YN0000: ┌ Resolution step
➤ YN0002: │ @apollo/explorer@npm:2.0.2 [50250] doesn't provide graphql (p7bf73), requested by graphql-ws
➤ YN0002: │ @apollo/explorer@npm:2.0.2 [50250] doesn't provide graphql (p91e73), requested by subscriptions-transport-ws
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide @material-ui/core (p80ba2), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react (pa4f5f), requested by @backstage/core-plugin-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react (p6674a), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react (pd565f), requested by @backstage/core-app-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react (p7c746), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react (pd62e5), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react (p74657), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react-dom (pfec59), requested by @backstage/core-plugin-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react-dom (p88e1f), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react-dom (pe4fff), requested by @backstage/core-app-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react-dom (pd783e), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react-dom (pb6fb7), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react-dom (p958e8), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react-router-dom (p9a431), requested by @backstage/core-plugin-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react-router-dom (p4376a), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react-router-dom (pf2a6d), requested by @backstage/core-app-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react-router-dom (pd9315), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide react-router-dom (p57ba4), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide typescript (p27099), requested by eslint-plugin-deprecation
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide typescript (pde6e7), requested by fork-ts-checker-webpack-plugin
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide typescript (p15e3a), requested by rollup-plugin-dts
➤ YN0002: │ @backstage/cli@workspace:packages/cli doesn't provide typescript (p023ef), requested by ts-node
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide @material-ui/core (pc85ca), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide react (pf3b8a), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide react (p1da7b), requested by @backstage/core-plugin-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide react (p83929), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide react (p68578), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide react (pb82bc), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide react-dom (p9fc4c), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide react-dom (p142c0), requested by @backstage/core-plugin-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide react-dom (pad141), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide react-dom (pb690c), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide react-dom (p55a11), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide react-router-dom (p729d0), requested by @backstage/core-plugin-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide react-router-dom (p96e8f), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide react-router-dom (pb2ca8), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide react-router-dom (p3fc28), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide typescript (pbb1c7), requested by eslint-plugin-deprecation
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide typescript (p60911), requested by fork-ts-checker-webpack-plugin
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide typescript (p7e86d), requested by rollup-plugin-dts
➤ YN0002: │ @backstage/cli@workspace:packages/cli [07278] doesn't provide typescript (p4c081), requested by ts-node
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide @material-ui/core (p0bce4), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide react (p7924c), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide react (p93315), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide react (p5e4b1), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide react (pba854), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide react-dom (p9b2e0), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide react-dom (p91bc3), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide react-dom (paad57), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide react-dom (pa860c), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide react-router-dom (pff84d), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide react-router-dom (p6bf1e), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide react-router-dom (pddfb3), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide typescript (pb1d6a), requested by eslint-plugin-deprecation
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide typescript (p29b8e), requested by fork-ts-checker-webpack-plugin
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide typescript (p599b4), requested by rollup-plugin-dts
➤ YN0002: │ @backstage/cli@workspace:packages/cli [11fe3] doesn't provide typescript (p29bf1), requested by ts-node
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide @material-ui/core (p828b2), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide react (p42e22), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide react (p36a6f), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide react (p45274), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide react (p24909), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide react-dom (p39439), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide react-dom (p0a3fb), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide react-dom (pdf5ce), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide react-dom (p13979), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide react-router-dom (p7c0ec), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide react-router-dom (p7364d), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide react-router-dom (p17621), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide typescript (p7ca09), requested by eslint-plugin-deprecation
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide typescript (pe8130), requested by fork-ts-checker-webpack-plugin
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide typescript (p18d9f), requested by rollup-plugin-dts
➤ YN0002: │ @backstage/cli@workspace:packages/cli [31634] doesn't provide typescript (p9fad5), requested by ts-node
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide @material-ui/core (p0d1c7), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide react (pdd8af), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide react (p32b13), requested by @backstage/core-app-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide react (pd0b1d), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide react (p8d412), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide react (p8f188), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide react-dom (pf1526), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide react-dom (pf9823), requested by @backstage/core-app-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide react-dom (pc0131), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide react-dom (pce5ee), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide react-dom (p98914), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide react-router-dom (pc91f2), requested by @backstage/core-app-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide react-router-dom (p16434), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide react-router-dom (p08523), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide react-router-dom (p90d63), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide typescript (p1a335), requested by eslint-plugin-deprecation
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide typescript (peab6b), requested by fork-ts-checker-webpack-plugin
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide typescript (p00a9a), requested by rollup-plugin-dts
➤ YN0002: │ @backstage/cli@workspace:packages/cli [39bca] doesn't provide typescript (pfa13c), requested by ts-node
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide @material-ui/core (p52369), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide react (p5d35c), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide react (pb97d0), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide react (pe54a9), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide react (p4a8ff), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide react-dom (pdff3a), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide react-dom (p9d7c4), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide react-dom (p36d19), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide react-dom (pb5d7b), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide react-router-dom (p790c9), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide react-router-dom (pba3ba), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide react-router-dom (p545e4), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide typescript (p3b15e), requested by eslint-plugin-deprecation
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide typescript (pf1a34), requested by fork-ts-checker-webpack-plugin
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide typescript (p273c5), requested by rollup-plugin-dts
➤ YN0002: │ @backstage/cli@workspace:packages/cli [4b958] doesn't provide typescript (pb0a01), requested by ts-node
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide @material-ui/core (p254c2), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide react (p1d406), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide react (p53084), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide react (pd9ed6), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide react (pa32f7), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide react-dom (p85a5d), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide react-dom (p421ee), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide react-dom (pd2d9a), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide react-dom (p8e0fa), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide react-router-dom (p26439), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide react-router-dom (pd3afe), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide react-router-dom (p79f2d), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide typescript (pf921d), requested by eslint-plugin-deprecation
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide typescript (pf0609), requested by fork-ts-checker-webpack-plugin
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide typescript (p86bb0), requested by rollup-plugin-dts
➤ YN0002: │ @backstage/cli@workspace:packages/cli [70735] doesn't provide typescript (pe5d81), requested by ts-node
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide @material-ui/core (pb3590), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide react (p696da), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide react (p166c3), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide react (pd2a4b), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide react (peb7dd), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide react-dom (pea224), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide react-dom (pa24bc), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide react-dom (p6bb98), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide react-dom (pf7271), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide react-router-dom (p1bcde), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide react-router-dom (pa69b6), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide react-router-dom (pf4bf3), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide typescript (p5ec52), requested by eslint-plugin-deprecation
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide typescript (pa2ffb), requested by fork-ts-checker-webpack-plugin
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide typescript (ped3dc), requested by rollup-plugin-dts
➤ YN0002: │ @backstage/cli@workspace:packages/cli [aad9f] doesn't provide typescript (pc2e01), requested by ts-node
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide @material-ui/core (peaced), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react (pc8f1d), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react (pde5f1), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react (p53497), requested by @backstage/core-app-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react (pf8dac), requested by @backstage/core-plugin-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react (p9a954), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react (pe73b7), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react-dom (p73c4c), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react-dom (p7b78a), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react-dom (p26b3a), requested by @backstage/core-app-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react-dom (p3d2c0), requested by @backstage/core-plugin-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react-dom (p3aecc), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react-dom (pbe625), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react-router-dom (p17736), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react-router-dom (p8db20), requested by @backstage/core-app-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react-router-dom (pe5e12), requested by @backstage/core-plugin-api
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react-router-dom (p132e8), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide react-router-dom (pcb649), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide typescript (pb739e), requested by eslint-plugin-deprecation
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide typescript (pf10ca), requested by fork-ts-checker-webpack-plugin
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide typescript (p0f506), requested by rollup-plugin-dts
➤ YN0002: │ @backstage/cli@workspace:packages/cli [b9c15] doesn't provide typescript (p1b2eb), requested by ts-node
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide @material-ui/core (p7ae90), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide react (pc5fe3), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide react (p1b33e), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide react (p4e60a), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide react (pe7331), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide react-dom (pc0ff4), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide react-dom (pf07ee), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide react-dom (pb21b0), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide react-dom (pb0543), requested by @backstage/theme
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide react-router-dom (p0b227), requested by @backstage/test-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide react-router-dom (p1c4c6), requested by @backstage/core-components
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide react-router-dom (p77285), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide typescript (p60676), requested by eslint-plugin-deprecation
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide typescript (pd2f01), requested by fork-ts-checker-webpack-plugin
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide typescript (p884fd), requested by rollup-plugin-dts
➤ YN0002: │ @backstage/cli@workspace:packages/cli [c856b] doesn't provide typescript (p9a6f5), requested by ts-node
➤ YN0060: │ @backstage/codemods@workspace:packages/codemods provides jscodeshift (p6b040) with version 0.15.0, which doesn't satisfy what jscodeshift-add-imports and some of its descendants request
➤ YN0002: │ @backstage/codemods@workspace:packages/codemods doesn't provide typescript (p702a6), requested by ts-node
➤ YN0002: │ @backstage/config@workspace:packages/config doesn't provide react (paa05e), requested by @backstage/test-utils
➤ YN0002: │ @backstage/config@workspace:packages/config doesn't provide react-dom (pd0037), requested by @backstage/test-utils
➤ YN0002: │ @backstage/config@workspace:packages/config doesn't provide react-router-dom (p23282), requested by @backstage/test-utils
➤ YN0002: │ @backstage/core-components@npm:0.1.0 doesn't provide @date-io/core (p9a29c), requested by material-table
➤ YN0060: │ @backstage/core-components@npm:0.1.0 provides @types/react (p27398) with version 17.0.52, which doesn't satisfy what @material-ui/lab requests
➤ YN0002: │ @backstage/core-components@npm:0.1.0 doesn't provide history (p63594), requested by react-router
➤ YN0002: │ @backstage/core-components@npm:0.1.0 doesn't provide history (p97913), requested by react-router-dom
➤ YN0002: │ @backstage/core-components@npm:0.1.0 doesn't provide react-test-renderer (pf61ec), requested by @testing-library/react-hooks
➤ YN0002: │ @backstage/core-components@npm:0.12.5 [b0aa7] doesn't provide @date-io/core (pe9176), requested by @material-table/core
➤ YN0002: │ @backstage/core-plugin-api@npm:0.1.0 doesn't provide react-dom (p6de82), requested by @backstage/theme
➤ YN0002: │ @backstage/core-plugin-api@npm:0.1.0 doesn't provide react-dom (p14bb2), requested by react-router-dom
➤ YN0002: │ @backstage/core-plugin-api@npm:0.1.0 doesn't provide react-dom (p6abf3), requested by react-use
➤ YN0002: │ @backstage/core-plugin-api@npm:0.1.13 doesn't provide react-dom (p569e9), requested by @material-ui/core
➤ YN0002: │ @backstage/core-plugin-api@npm:0.1.13 doesn't provide react-dom (pf53c1), requested by @backstage/theme
➤ YN0002: │ @backstage/core-plugin-api@npm:0.1.13 doesn't provide react-dom (p072e8), requested by react-router-dom
➤ YN0002: │ @backstage/core-plugin-api@npm:0.1.13 doesn't provide react-dom (pf9a67), requested by react-use
➤ YN0002: │ @backstage/create-app@workspace:packages/create-app doesn't provide typescript (p159b4), requested by ts-node
➤ YN0002: │ @backstage/integration-aws-node@workspace:packages/integration-aws-node doesn't provide react (p930b9), requested by @backstage/test-utils
➤ YN0002: │ @backstage/integration-aws-node@workspace:packages/integration-aws-node doesn't provide react-dom (p1af83), requested by @backstage/test-utils
➤ YN0002: │ @backstage/integration-aws-node@workspace:packages/integration-aws-node doesn't provide react-router-dom (p6830b), requested by @backstage/test-utils
➤ YN0002: │ @backstage/plugin-analytics-module-ga4@workspace:plugins/analytics-module-ga4 doesn't provide @material-ui/core (pbf6ae), requested by @backstage/theme
➤ YN0002: │ @backstage/plugin-analytics-module-newrelic-browser@workspace:plugins/analytics-module-newrelic-browser doesn't provide @testing-library/dom (p693bb), requested by @testing-library/user-event
➤ YN0002: │ @backstage/plugin-analytics-module-newrelic-browser@workspace:plugins/analytics-module-newrelic-browser doesn't provide react-dom (p1079d), requested by @backstage/test-utils
➤ YN0002: │ @backstage/plugin-analytics-module-newrelic-browser@workspace:plugins/analytics-module-newrelic-browser doesn't provide react-dom (pec2d9), requested by @backstage/core-components
➤ YN0002: │ @backstage/plugin-analytics-module-newrelic-browser@workspace:plugins/analytics-module-newrelic-browser doesn't provide react-dom (p015f3), requested by @backstage/dev-utils
➤ YN0002: │ @backstage/plugin-analytics-module-newrelic-browser@workspace:plugins/analytics-module-newrelic-browser doesn't provide react-dom (p84eef), requested by @testing-library/react
➤ YN0002: │ @backstage/plugin-analytics-module-newrelic-browser@workspace:plugins/analytics-module-newrelic-browser doesn't provide react-dom (p9d879), requested by react-use
➤ YN0002: │ @backstage/plugin-analytics-module-newrelic-browser@workspace:plugins/analytics-module-newrelic-browser doesn't provide react-router-dom (p84118), requested by @backstage/test-utils
➤ YN0002: │ @backstage/plugin-analytics-module-newrelic-browser@workspace:plugins/analytics-module-newrelic-browser doesn't provide react-router-dom (pe3ef6), requested by @backstage/core-components
➤ YN0002: │ @backstage/plugin-analytics-module-newrelic-browser@workspace:plugins/analytics-module-newrelic-browser doesn't provide react-router-dom (p99807), requested by @backstage/dev-utils
➤ YN0060: │ @backstage/plugin-bazaar@workspace:plugins/bazaar provides luxon (p4c0a7) with version 3.3.0, which doesn't satisfy what @date-io/luxon requests
➤ YN0002: │ @backstage/plugin-bazaar@workspace:plugins/bazaar doesn't provide prop-types (p94096), requested by @material-ui/pickers
➤ YN0002: │ @backstage/plugin-bitrise@workspace:plugins/bitrise doesn't provide prop-types (p8b933), requested by recharts
➤ YN0002: │ @backstage/plugin-catalog-backend-module-unprocessed@workspace:plugins/catalog-backend-module-unprocessed doesn't provide express (p61736), requested by express-promise-router
➤ YN0002: │ @backstage/plugin-catalog-unprocessed-entities@workspace:plugins/catalog-unprocessed-entities doesn't provide @testing-library/dom (pacca7), requested by @testing-library/user-event
➤ YN0002: │ @backstage/plugin-catalog-unprocessed-entities@workspace:plugins/catalog-unprocessed-entities [d47fc] doesn't provide @testing-library/dom (pcda51), requested by @testing-library/user-event
➤ YN0060: │ @backstage/plugin-cicd-statistics@workspace:plugins/cicd-statistics provides luxon (p86a00) with version 3.3.0, which doesn't satisfy what @date-io/luxon requests
➤ YN0060: │ @backstage/plugin-cicd-statistics@workspace:plugins/cicd-statistics [d38e0] provides luxon (p30055) with version 3.3.0, which doesn't satisfy what @date-io/luxon requests
➤ YN0002: │ @backstage/plugin-code-coverage@workspace:plugins/code-coverage doesn't provide prop-types (pdd8b4), requested by recharts
➤ YN0002: │ @backstage/plugin-code-coverage@workspace:plugins/code-coverage [d47fc] doesn't provide prop-types (pa6b7d), requested by recharts
➤ YN0002: │ @backstage/plugin-cost-insights@workspace:plugins/cost-insights doesn't provide prop-types (pc3c27), requested by recharts
➤ YN0002: │ @backstage/plugin-cost-insights@workspace:plugins/cost-insights [d47fc] doesn't provide prop-types (pe320d), requested by recharts
➤ YN0002: │ @backstage/plugin-devtools@workspace:plugins/devtools doesn't provide @testing-library/dom (p670e2), requested by @testing-library/user-event
➤ YN0002: │ @backstage/plugin-devtools@workspace:plugins/devtools [d47fc] doesn't provide @testing-library/dom (p60743), requested by @testing-library/user-event
➤ YN0002: │ @backstage/plugin-git-release-manager@workspace:plugins/git-release-manager doesn't provide prop-types (pa45ea), requested by recharts
➤ YN0002: │ @backstage/plugin-graphql-backend@workspace:plugins/graphql-backend doesn't provide react (p81d13), requested by @backstage/plugin-catalog-graphql
➤ YN0002: │ @backstage/plugin-graphql-backend@workspace:plugins/graphql-backend doesn't provide react-dom (pba46f), requested by @backstage/plugin-catalog-graphql
➤ YN0002: │ @backstage/plugin-graphql-backend@workspace:plugins/graphql-backend doesn't provide react-router-dom (p79731), requested by @backstage/plugin-catalog-graphql
➤ YN0002: │ @backstage/plugin-graphql-voyager@workspace:plugins/graphql-voyager doesn't provide graphql (pd0213), requested by graphql-voyager
➤ YN0002: │ @backstage/plugin-home@npm:0.5.4 [0af0a] doesn't provide @rjsf/core (p9bc61), requested by @rjsf/material-ui
➤ YN0002: │ @backstage/plugin-home@workspace:plugins/home doesn't provide @rjsf/core (pfbaf4), requested by @rjsf/material-ui
➤ YN0002: │ @backstage/plugin-home@workspace:plugins/home [d47fc] doesn't provide @rjsf/core (pd9b59), requested by @rjsf/material-ui
➤ YN0060: │ @backstage/plugin-ilert@workspace:plugins/ilert provides luxon (pd6bdb) with version 3.3.0, which doesn't satisfy what @date-io/luxon requests
➤ YN0002: │ @backstage/plugin-kafka-backend@workspace:plugins/kafka-backend doesn't provide jest (p91a08), requested by jest-when
➤ YN0002: │ @backstage/plugin-kafka@workspace:plugins/kafka doesn't provide jest (pe7281), requested by jest-when
➤ YN0002: │ @backstage/plugin-kafka@workspace:plugins/kafka [d47fc] doesn't provide jest (pcac40), requested by jest-when
➤ YN0002: │ @backstage/plugin-nomad@workspace:plugins/nomad doesn't provide @testing-library/dom (pdbfbe), requested by @testing-library/user-event
➤ YN0002: │ @backstage/plugin-nomad@workspace:plugins/nomad [d47fc] doesn't provide @testing-library/dom (p9351f), requested by @testing-library/user-event
➤ YN0002: │ @backstage/plugin-puppetdb@workspace:plugins/puppetdb doesn't provide @testing-library/dom (p88fae), requested by @testing-library/user-event
➤ YN0002: │ @backstage/plugin-puppetdb@workspace:plugins/puppetdb [d47fc] doesn't provide @testing-library/dom (p5160e), requested by @testing-library/user-event
➤ YN0002: │ @backstage/plugin-scaffolder-backend-module-rails@workspace:plugins/scaffolder-backend-module-rails doesn't provide jest (p15e8b), requested by jest-when
➤ YN0002: │ @backstage/plugin-scaffolder-backend@workspace:plugins/scaffolder-backend doesn't provide jest (peb325), requested by jest-when
➤ YN0060: │ @backstage/plugin-scaffolder-react@workspace:plugins/scaffolder-react provides @rjsf/core (pfcf32) with version 3.2.1, which doesn't satisfy what @rjsf/material-ui requests
➤ YN0060: │ @backstage/plugin-scaffolder-react@workspace:plugins/scaffolder-react [d47fc] provides @rjsf/core (p660c9) with version 3.2.1, which doesn't satisfy what @rjsf/material-ui requests
➤ YN0060: │ @backstage/plugin-scaffolder-react@workspace:plugins/scaffolder-react [e1917] provides @rjsf/core (pb5f0e) with version 3.2.1, which doesn't satisfy what @rjsf/material-ui requests
➤ YN0002: │ @backstage/plugin-xcmetrics@workspace:plugins/xcmetrics doesn't provide prop-types (p4b0d2), requested by recharts
➤ YN0002: │ @backstage/release-manifests@workspace:packages/release-manifests doesn't provide react (p0c4d7), requested by @backstage/test-utils
➤ YN0002: │ @backstage/release-manifests@workspace:packages/release-manifests doesn't provide react-dom (p2bef1), requested by @backstage/test-utils
➤ YN0002: │ @backstage/release-manifests@workspace:packages/release-manifests doesn't provide react-router-dom (pac0a9), requested by @backstage/test-utils
➤ YN0002: │ @backstage/repo-tools@workspace:packages/repo-tools doesn't provide openapi-types (p4fca6), requested by @apidevtools/swagger-parser
➤ YN0002: │ @backstage/repo-tools@workspace:packages/repo-tools [36a01] doesn't provide openapi-types (p86ab5), requested by @apidevtools/swagger-parser
➤ YN0002: │ @backstage/theme@npm:0.1.1 doesn't provide react (p561df), requested by @material-ui/core
➤ YN0002: │ @backstage/theme@npm:0.1.1 doesn't provide react-dom (p837f9), requested by @material-ui/core
➤ YN0002: │ @graphiql/react@npm:0.10.0 [5d586] doesn't provide @codemirror/language (pe2a85), requested by codemirror-graphql
➤ YN0002: │ @graphiql/react@npm:0.10.0 [5d586] doesn't provide graphql-ws (p38d2c), requested by @graphiql/toolkit
➤ YN0002: │ @graphiql/react@npm:0.10.0 [deeb5] doesn't provide @codemirror/language (pf4a0a), requested by codemirror-graphql
➤ YN0002: │ @graphiql/react@npm:0.10.0 [deeb5] doesn't provide graphql-ws (p7118b), requested by @graphiql/toolkit
➤ YN0002: │ @graphql-tools/graphql-tag-pluck@npm:7.4.0 [a7df1] doesn't provide @babel/core (p604a6), requested by @babel/plugin-syntax-import-assertions
➤ YN0002: │ @graphql-tools/graphql-tag-pluck@npm:7.5.0 [def44] doesn't provide @babel/core (p0cd60), requested by @babel/plugin-syntax-import-assertions
➤ YN0002: │ @internal/plugin-todo-list-common@workspace:plugins/example-todo-list-common doesn't provide react (p9ec8e), requested by @backstage/test-utils
➤ YN0002: │ @internal/plugin-todo-list-common@workspace:plugins/example-todo-list-common doesn't provide react (pb8d2c), requested by @backstage/dev-utils
➤ YN0002: │ @internal/plugin-todo-list-common@workspace:plugins/example-todo-list-common doesn't provide react-dom (p86b13), requested by @backstage/test-utils
➤ YN0002: │ @internal/plugin-todo-list-common@workspace:plugins/example-todo-list-common doesn't provide react-dom (p4b4b4), requested by @backstage/dev-utils
➤ YN0002: │ @internal/plugin-todo-list-common@workspace:plugins/example-todo-list-common doesn't provide react-router-dom (pf3f42), requested by @backstage/test-utils
➤ YN0002: │ @internal/plugin-todo-list-common@workspace:plugins/example-todo-list-common doesn't provide react-router-dom (p7a82c), requested by @backstage/dev-utils
➤ YN0060: │ @openapitools/openapi-generator-cli@npm:2.6.0 provides @nestjs/common (p3f9a0) with version 9.3.11, which doesn't satisfy what @nestjs/axios requests
➤ YN0002: │ @oriflame/backstage-plugin-score-card@npm:0.7.0 [d47fc] doesn't provide react-router-dom (p67c8c), requested by @backstage/core-plugin-api
➤ YN0002: │ @oriflame/backstage-plugin-score-card@npm:0.7.0 [d47fc] doesn't provide react-router-dom (pf2156), requested by @backstage/version-bridge
➤ YN0002: │ @oriflame/backstage-plugin-score-card@npm:0.7.0 [d47fc] doesn't provide react-router-dom (p1b2ba), requested by @backstage/core-components
➤ YN0002: │ @oriflame/backstage-plugin-score-card@npm:0.7.0 [d47fc] doesn't provide react-router-dom (p91c2a), requested by @backstage/plugin-catalog-react
➤ YN0002: │ @roadiehq/backstage-plugin-github-insights@npm:2.3.16 [d47fc] doesn't provide react-router-dom (pcbca0), requested by @backstage/core-plugin-api
➤ YN0002: │ @roadiehq/backstage-plugin-github-insights@npm:2.3.16 [d47fc] doesn't provide react-router-dom (p16eee), requested by @backstage/plugin-catalog-react
➤ YN0002: │ @roadiehq/backstage-plugin-github-insights@npm:2.3.16 [d47fc] doesn't provide react-router-dom (pc4faa), requested by @backstage/integration-react
➤ YN0002: │ @roadiehq/backstage-plugin-github-pull-requests@npm:2.5.13 [d47fc] doesn't provide react-router-dom (pb6d45), requested by @backstage/core-plugin-api
➤ YN0002: │ @roadiehq/backstage-plugin-github-pull-requests@npm:2.5.13 [d47fc] doesn't provide react-router-dom (p71ed7), requested by @backstage/plugin-catalog-react
➤ YN0002: │ @roadiehq/backstage-plugin-github-pull-requests@npm:2.5.13 [d47fc] doesn't provide react-router-dom (pb20ba), requested by @backstage/plugin-home
➤ YN0002: │ @techdocs/cli@workspace:packages/techdocs-cli doesn't provide typescript (p6324f), requested by ts-node
➤ YN0002: │ @techdocs/cli@workspace:packages/techdocs-cli doesn't provide webpack (p54d19), requested by react-dev-utils
➤ YN0002: │ @types/rollup-plugin-postcss@npm:3.1.4 doesn't provide postcss (p881c4), requested by rollup-plugin-postcss
➤ YN0002: │ @types/terser-webpack-plugin@npm:5.2.0 doesn't provide webpack (p33c86), requested by terser-webpack-plugin
➤ YN0002: │ @whatwg-node/fetch@npm:0.8.1 doesn't provide @types/node (p07ead), requested by @whatwg-node/node-fetch
➤ YN0002: │ e2e-test@workspace:packages/e2e-test doesn't provide typescript (p6df66), requested by ts-node
➤ YN0060: │ example-app@workspace:packages/app provides @types/react (p46482) with version 17.0.52, which doesn't satisfy what @roadiehq/backstage-plugin-github-insights and some of its descendants request
➤ YN0060: │ example-app@workspace:packages/app provides cypress (pe6fa5) with version 10.11.0, which doesn't satisfy what @testing-library/cypress requests
➤ YN0002: │ example-app@workspace:packages/app doesn't provide eslint (p7ddec), requested by eslint-plugin-cypress
➤ YN0060: │ example-app@workspace:packages/app provides react (p97a62) with version 17.0.2, which doesn't satisfy what @backstage/core-components and some of its descendants request
➤ YN0060: │ example-app@workspace:packages/app provides react (p79e40) with version 17.0.2, which doesn't satisfy what @backstage/plugin-catalog-react and some of its descendants request
➤ YN0060: │ example-app@workspace:packages/app provides react (p01ee7) with version 17.0.2, which doesn't satisfy what @roadiehq/backstage-plugin-github-insights and some of its descendants request
➤ YN0060: │ example-app@workspace:packages/app provides react-dom (p1595d) with version 17.0.2, which doesn't satisfy what @backstage/core-components and some of its descendants request
➤ YN0060: │ example-app@workspace:packages/app provides react-dom (p76a40) with version 17.0.2, which doesn't satisfy what @roadiehq/backstage-plugin-github-insights and some of its descendants request
➤ YN0002: │ graphiql@npm:1.11.5 [b1c8a] doesn't provide graphql-ws (p75ec6), requested by @graphiql/toolkit
➤ YN0002: │ graphiql@npm:1.11.5 [cee85] doesn't provide graphql-ws (p1f91c), requested by @graphiql/toolkit
➤ YN0060: │ grpc-docs@npm:1.1.3 [f09cb] provides rollup (p50e3b) with version 0.60.7, which doesn't satisfy what rollup-plugin-smart-asset requests
➤ YN0002: │ react-resizable@npm:3.0.5 [b75c5] doesn't provide react-dom (pa18e1), requested by react-draggable
➤ YN0002: │ root@workspace:. doesn't provide @microsoft/api-extractor-model (p679bb), requested by @backstage/repo-tools
➤ YN0002: │ root@workspace:. doesn't provide @microsoft/tsdoc (p7bab6), requested by @backstage/repo-tools
➤ YN0002: │ root@workspace:. doesn't provide @microsoft/tsdoc-config (pd98aa), requested by @backstage/repo-tools
➤ YN0002: │ root@workspace:. doesn't provide @typescript-eslint/parser (p96d0e), requested by @spotify/eslint-plugin
➤ YN0002: │ techdocs-cli-embedded-app@workspace:packages/techdocs-cli-embedded-app doesn't provide eslint (p5c6a2), requested by eslint-plugin-cypress
➤ YN0060: │ techdocs-cli-embedded-app@workspace:packages/techdocs-cli-embedded-app provides react (p2bdd1) with version 17.0.2, which doesn't satisfy what @backstage/core-components and some of its descendants request
➤ YN0060: │ techdocs-cli-embedded-app@workspace:packages/techdocs-cli-embedded-app provides react-dom (p6e6c8) with version 17.0.2, which doesn't satisfy what @backstage/core-components and some of its descendants request
➤ YN0000: │ Some peer dependencies are incorrectly met; run yarn explain peer-requirements <hash> for details, where <hash> is the six-letter p-prefixed code
➤ YN0000: └ Completed in 2s 330ms
➤ YN0000: ┌ Fetch step
➤ YN0013: │ 3595 packages were already cached
➤ YN0000: └ Completed in 1s 625ms
➤ YN0000: ┌ Link step
➤ YN0008: │ root@workspace:. must be rebuilt because its dependency tree changed
➤ YN0007: │ isolated-vm@npm:4.5.0 must be built because it never has been before or the last one failed
➤ YN0000: │ root@workspace:. STDOUT husky - Git hooks installed
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info it worked if it ends with ok
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info using node-gyp@9.4.0
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info using node@18.20.8 | linux | x64
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info find Python using Python version 3.12.3 found at "/usr/bin/python3"
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn /usr/bin/python3
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args [
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '/tmp/renovate/repos/github/https-quantumblockchainai-atlassian-net/backstage/node_modules/node-gyp/gyp/gyp_main.py',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   'binding.gyp',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '-f',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   'make',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '-I',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '/tmp/renovate/repos/github/https-quantumblockchainai-atlassian-net/backstage/node_modules/isolated-vm/build/config.gypi',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '-I',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '/tmp/renovate/repos/github/https-quantumblockchainai-atlassian-net/backstage/node_modules/node-gyp/addon.gypi',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '-I',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '/home/ubuntu/.cache/node-gyp/18.20.8/include/node/common.gypi',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '-Dlibrary=shared_library',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '-Dvisibility=default',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '-Dnode_root_dir=/home/ubuntu/.cache/node-gyp/18.20.8',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '-Dnode_gyp_dir=/tmp/renovate/repos/github/https-quantumblockchainai-atlassian-net/backstage/node_modules/node-gyp',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '-Dnode_lib_file=/home/ubuntu/.cache/node-gyp/18.20.8/<(target_arch)/node.lib',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '-Dmodule_root_dir=/tmp/renovate/repos/github/https-quantumblockchainai-atlassian-net/backstage/node_modules/isolated-vm',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '-Dnode_engine=v8',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '--depth=.',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '--no-parallel',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '--generator-output',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   'build',
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args   '-Goutput_dir=.'
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp info spawn args ]
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR Traceback (most recent call last):
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR   File "/tmp/renovate/repos/github/https-quantumblockchainai-atlassian-net/backstage/node_modules/node-gyp/gyp/gyp_main.py", line 42, in <module>
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR     import gyp  # noqa: E402
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR     ^^^^^^^^^^
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR   File "/tmp/renovate/repos/github/https-quantumblockchainai-atlassian-net/backstage/node_modules/node-gyp/gyp/pylib/gyp/__init__.py", line 9, in <module>
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR     import gyp.input
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR   File "/tmp/renovate/repos/github/https-quantumblockchainai-atlassian-net/backstage/node_modules/node-gyp/gyp/pylib/gyp/input.py", line 19, in <module>
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR     from distutils.version import StrictVersion
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR ModuleNotFoundError: No module named 'distutils'
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp ERR! configure error 
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp ERR! stack Error: `gyp` failed with exit code: 1
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp ERR! stack     at ChildProcess.onCpExit (/tmp/renovate/repos/github/https-quantumblockchainai-atlassian-net/backstage/node_modules/node-gyp/lib/configure.js:325:16)
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp ERR! stack     at ChildProcess.emit (node:events:517:28)
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp ERR! stack     at ChildProcess._handle.onexit (node:internal/child_process:292:12)
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp ERR! System Linux 6.1.155
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp ERR! command "/opt/containerbase/tools/node/18.20.8/bin/node" "/tmp/renovate/repos/github/https-quantumblockchainai-atlassian-net/backstage/node_modules/node-gyp/bin/node-gyp.js" "rebuild" "--release" "-j" "4"
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp ERR! cwd /tmp/renovate/repos/github/https-quantumblockchainai-atlassian-net/backstage/node_modules/isolated-vm
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp ERR! node -v v18.20.8
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp ERR! node-gyp -v v9.4.0
➤ YN0000: │ isolated-vm@npm:4.5.0 STDERR gyp ERR! not ok 
➤ YN0009: │ isolated-vm@npm:4.5.0 couldn't be built successfully (exit code 1, logs can be found here: /tmp/xfs-cbc74186/build.log)
➤ YN0000: └ Completed in 5s 832ms
➤ YN0000: Failed with errors in 10s 813ms

github-actions · 2025-11-30T11:56:24Z

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

github-actions · 2025-12-19T15:56:01Z

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

github-actions · 2025-12-28T02:09:56Z

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

github-actions · 2026-01-04T15:55:03Z

This PR has been automatically marked as stale because it has not had recent activity from the author. It will be closed if no further activity occurs. If the PR was closed and you want it re-opened, let us know and we'll re-open the PR so that you can continue the contribution!

renovate Bot added the dependencies Pull requests that update a dependency file label Aug 13, 2025

github-actions Bot added the area:techdocs label Aug 13, 2025

github-actions Bot added the stale label Aug 20, 2025

renovate Bot force-pushed the renovate/npm-dompurify-vulnerability branch from 2c8f945 to f433daf Compare August 21, 2025 04:40

github-actions Bot removed the stale label Aug 21, 2025

github-actions Bot added the stale label Aug 28, 2025

renovate Bot force-pushed the renovate/npm-dompurify-vulnerability branch from f433daf to 2337c36 Compare September 1, 2025 01:21

github-actions Bot removed the stale label Sep 3, 2025

github-actions Bot added stale and removed stale labels Sep 10, 2025

github-actions Bot added the stale label Sep 22, 2025

fix(deps): update dependency dompurify to v3 [security]

2178557

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot force-pushed the renovate/npm-dompurify-vulnerability branch from 2337c36 to 2178557 Compare September 25, 2025 17:23

github-actions Bot removed the stale label Sep 30, 2025

github-actions Bot added the stale label Oct 15, 2025

renovate Bot changed the title ~~fix(deps): update dependency dompurify to v3 [security]~~ chore(deps): update dependency dompurify to v2.5.4 [security] Oct 15, 2025

github-actions Bot removed the stale label Oct 15, 2025

github-actions Bot added stale and removed stale labels Nov 30, 2025

github-actions Bot added stale and removed stale labels Dec 19, 2025

github-actions Bot added stale and removed stale labels Dec 28, 2025

github-actions Bot added stale and removed stale labels Jan 4, 2026

renovate Bot changed the title ~~chore(deps): update dependency dompurify to v2.5.4 [security]~~ Update dependency dompurify to v2.5.4 [SECURITY] Apr 15, 2026

Conversation

renovate Bot commented Aug 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

DOMPurify allows tampering by prototype pollution

Details

Severity

References

Release Notes

v2.5.4: DOMPurify 2.5.4

v2.5.3: DOMPurify 2.5.3

v2.5.2: DOMPurify 2.5.2

v2.5.1: DOMPurify 2.5.1

v2.5.0: DOMPurify 2.5.0

v2.4.9: DOMPurify 2.4.9

v2.4.8: DOMPurify 2.4.8

v2.4.7: DOMPurify 2.4.7

v2.4.6: DOMPurify 2.4.6

Configuration

Uh oh!

codesandbox Bot commented Aug 13, 2025

Review or Edit in CodeSandbox

Uh oh!

snyk-io Bot commented Aug 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🎉 Snyk checks have passed. No issues have been found so far.

Uh oh!

github-actions Bot commented Aug 20, 2025

Uh oh!

github-actions Bot commented Aug 28, 2025

Uh oh!

socket-security Bot commented Sep 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 10, 2025

Uh oh!

github-actions Bot commented Sep 22, 2025

Uh oh!

github-actions Bot commented Oct 15, 2025

Uh oh!

renovate Bot commented Oct 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: yarn.lock

Uh oh!

github-actions Bot commented Nov 30, 2025

Uh oh!

github-actions Bot commented Dec 19, 2025

Uh oh!

github-actions Bot commented Dec 28, 2025

Uh oh!

github-actions Bot commented Jan 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 13, 2025 •

edited

Loading

`v2.5.4`: DOMPurify 2.5.4

`v2.5.3`: DOMPurify 2.5.3

`v2.5.2`: DOMPurify 2.5.2

`v2.5.1`: DOMPurify 2.5.1

`v2.5.0`: DOMPurify 2.5.0

`v2.4.9`: DOMPurify 2.4.9

`v2.4.8`: DOMPurify 2.4.8

`v2.4.7`: DOMPurify 2.4.7

`v2.4.6`: DOMPurify 2.4.6

snyk-io Bot commented Aug 13, 2025 •

edited

Loading

socket-security Bot commented Sep 1, 2025 •

edited

Loading

renovate Bot commented Oct 15, 2025 •

edited

Loading