fix(security): resolve CVE-2025-57319 by upgrading (resolution) pino to v10.1.0 which drops the usage of fast-redact

alizard0 · alizard0 · commit 5a54a2870beb · 2025-12-17T10:35:31.000+01:00
diff --git a/dynamic-plugins/package.json b/dynamic-plugins/package.json
@@ -42,7 +42,7 @@
     "@backstage/plugin-scaffolder-node@^0.2.9": "^0.7.0",
     "@backstage/plugin-home@^0.8.11": "patch:@backstage/plugin-home@npm%3A0.8.12#./.yarn/patches/@backstage-plugin-home-npm-0.8.12-0d7fbcc764.patch",
     "refractor@npm:3.6.0/prismjs": "^1.30.0",
-    "pino": "^10.1.0" // fixes CVE-2025-57319
+    "pino": "^10.1.0"
   },
   "packageManager": "yarn@3.8.7"
 }

Original file line number	Diff line number	Diff line change
`@@ -42,7 +42,7 @@`
`42`	`42`	`"@backstage/plugin-scaffolder-node@^0.2.9": "^0.7.0",`
`43`	`43`	`"@backstage/plugin-home@^0.8.11": "patch:@backstage/plugin-home@npm%3A0.8.12#./.yarn/patches/@backstage-plugin-home-npm-0.8.12-0d7fbcc764.patch",`
`44`	`44`	`"refractor@npm:3.6.0/prismjs": "^1.30.0",`
`45`		`- "pino": "^10.1.0" // fixes CVE-2025-57319`
	`45`	`+ "pino": "^10.1.0"`
`46`	`46`	`},`
`47`	`47`	`"packageManager": "[email protected]"`
`48`	`48`	`}`