From 178e53bc7bb1304365035158d308e6a31b352b53 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 15 Jan 2026 20:47:39 +0000
Subject: [PATCH 1/3] fix: packages/app/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-REMIXRUNROUTER-14908530
- https://snyk.io/vuln/SNYK-JS-REACTROUTER-14908286
- https://snyk.io/vuln/SNYK-JS-REMIXRUNROUTER-14908287
---
 packages/app/package.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/app/package.json b/packages/app/package.json
index 57d3887..cbce86f 100644
--- a/packages/app/package.json
+++ b/packages/app/package.json
@@ -59,8 +59,8 @@
     "history": "^5.0.0",
     "react": "^18.0.2",
     "react-dom": "^18.0.2",
-    "react-router": "^6.3.0",
-    "react-router-dom": "^6.3.0",
+    "react-router": "^6.30.3",
+    "react-router-dom": "^6.30.3",
     "react-use": "^17.2.4"
   },
   "devDependencies": {

From 8feb488d96d1eff7179b50c8a7a84a4fa39b5161 Mon Sep 17 00:00:00 2001
From: Johnny Huynh <27847622+johnnyhuy@users.noreply.github.com>
Date: Tue, 18 Aug 2026 19:53:02 +1000
Subject: [PATCH 2/3] chore: refresh yarn.lock after merging main

---
 yarn.lock | 39 ++++-----------------------------------
 1 file changed, 4 insertions(+), 35 deletions(-)

diff --git a/yarn.lock b/yarn.lock
index fd6263f..6dd9487 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -10801,13 +10801,6 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@remix-run/router@npm:1.19.2":
-  version: 1.19.2
-  resolution: "@remix-run/router@npm:1.19.2"
-  checksum: 10c0/ac7fc813350686705f2c29219e70e1e299d9a8e3b301e9e81f7e84f578c40c6462b590cf0d78863bac40dbc325b68c71ae070f4a1465793d1d1971b619618295
-  languageName: node
-  linkType: hard
-
 "@remix-run/router@npm:1.23.3":
   version: 1.23.3
   resolution: "@remix-run/router@npm:1.23.3"
@@ -15489,8 +15482,8 @@ __metadata:
     history: "npm:^5.0.0"
     react: "npm:^18.0.2"
     react-dom: "npm:^18.0.2"
-    react-router: "npm:^6.3.0"
-    react-router-dom: "npm:^6.3.0"
+    react-router: "npm:^6.30.3"
+    react-router-dom: "npm:^6.30.3"
     react-use: "npm:^17.2.4"
   languageName: unknown
   linkType: soft
@@ -32371,7 +32364,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"react-router-dom@npm:^6.0.0":
+"react-router-dom@npm:^6.0.0, react-router-dom@npm:^6.30.3":
   version: 6.30.4
   resolution: "react-router-dom@npm:6.30.4"
   dependencies:
@@ -32384,31 +32377,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"react-router-dom@npm:^6.3.0":
-  version: 6.26.2
-  resolution: "react-router-dom@npm:6.26.2"
-  dependencies:
-    "@remix-run/router": "npm:1.19.2"
-    react-router: "npm:6.26.2"
-  peerDependencies:
-    react: ">=16.8"
-    react-dom: ">=16.8"
-  checksum: 10c0/7515128a98eef0a6b2bf354ef9dfefad03556a06be00fa9220eda6526aaada8a42f294911083473d7ced6d7128c3088bd193218bbb3d62593f9f4f7053781c23
-  languageName: node
-  linkType: hard
-
-"react-router@npm:6.26.2, react-router@npm:^6.3.0":
-  version: 6.26.2
-  resolution: "react-router@npm:6.26.2"
-  dependencies:
-    "@remix-run/router": "npm:1.19.2"
-  peerDependencies:
-    react: ">=16.8"
-  checksum: 10c0/0d15a39b419c99fb5ccad76388bfc4ee2b01323b3b1b694595a9f9ea28e1fbeea25486b5398f5d3d93922f5c6a9aa751b6bb27419488d85279f6ca5ff9e0a6bb
-  languageName: node
-  linkType: hard
-
-"react-router@npm:6.30.4":
+"react-router@npm:6.30.4, react-router@npm:^6.30.3":
   version: 6.30.4
   resolution: "react-router@npm:6.30.4"
   dependencies:

From c9f14e2ad526a63399fcd7189ff99e831f09e36d Mon Sep 17 00:00:00 2001
From: Johnny Huynh <27847622+johnnyhuy@users.noreply.github.com>
Date: Tue, 18 Aug 2026 20:13:10 +1000
Subject: [PATCH 3/3] fix(ci): drop yarn tsc from Dockerfile (broken under
 Backstage 1.51.1)

backstage-cli repo lint (run by mise run lint) already performs type
checking. The Backstage 1.51.1 upgrade introduced a DOM.AsyncIterable
lib alias that requires TS 5.4+, but this project pins ~5.3.0, so
yarn tsc is no longer runnable.
---
 Dockerfile | 1 -
 1 file changed, 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index a3be9ac..56d8daf 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -54,7 +54,6 @@ COPY tsconfig.json ./
 COPY lerna.json ./
 COPY packages/ packages/
 COPY plugins/ plugins/
-RUN yarn tsc
 
 COPY app-config.yaml ./
 RUN yarn build:backend