[Snyk] Security upgrade @backstage/plugin-catalog-backend from 1.26.0 to 1.30.0

[sfdevops]

Snyk has created this PR to fix 14 vulnerabilities in the yarn dependencies of this project.

Snyk changed the following file(s):

• packages/backend/package.json

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

⚠️ Warning

Failed to update the yarn.lock, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Remote Code Execution (RCE) SNYK-JS-JSONPATHPLUS-7945884	786
	Regular Expression Denial of Service (ReDoS) SNYK-JS-CROSSSPAWN-8303230	756
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	696
	Denial of Service (DoS) SNYK-JS-WS-7266574	696
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	666
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-8482416	666
	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	646
	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	646
	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	631
	Asymmetric Resource Consumption (Amplification) SNYK-JS-BODYPARSER-7926860	624
	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	529
	Resource Exhaustion SNYK-JS-JOSE-6419224	479
	Cross-site Scripting SNYK-JS-SEND-7926862	319
	Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	319

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled resource consumption
🦉 Cross-site Scripting (XSS)
🦉 Remote Code Execution (RCE)
🦉 More lessons are available in Snyk Learn

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud