[Snyk] Security upgrade @backstage/plugin-scaffolder-backend from 0.3.7 to 0.15.9

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/backend/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	581/1000 Why? Recently disclosed, Has a fix available, CVSS 5.9	Directory Traversal SNYK-JS-BACKSTAGEPLUGINSCAFFOLDERBACKEND-1759309	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @backstage/plugin-scaffolder-backend

The new version differs by 250 commits.

• 0995c9c Merge pull request #7644 from backstage/rugvip/scafoodler-fixes
• 6968962 scaffolder-backend: release path traversal fix
• 5ea9500 scaffolder-backend: extra safety around resolving source paths
• 1bcd771 Merge pull request #7588 from SDA-SE/feat/githubpraction
• 639d485 Update how-to-guides.md (#7639)
• 59e822b Merge pull request #7634 from backstage/rugvip/filters
• 223e8de changesets: added changeset for schema error filtering
• 3e2b3e9 config-loader: unit tests for error visibility filtering + fixes
• 8f30ac3 config-loader: filter out schema errors that aren't visible
• b31daba config-loader: collect visibility paths both by data and schema path
• c5664a1 Merge pull request #7629 from niallmccullagh/bv-adopters
• 7015078 docs(adopters): add Bazaarvoice to adopters
• 157843e [Search] add how to guide for indexing TechDocs documents (#7625)
• 35b7a0b Merge pull request #7569 from backstage/rugvip/transformers
• 74b6b5c Merge pull request #7617 from lunarway/fix/github-refresh
• de3e26a Fix refresh reuse bug in Github provider
• 72be1cf Merge pull request #7614 from backstage/rugvip/e2e-fix
• 6a7e90c e2e-test: improve page content checking resilience
• 1b02df9 Merge pull request #7514 from backstage/changeset-release/master
• 4c840ce Version Packages
• efdefe6 Merge pull request #7410 from SDA-SE/feat/starredentitiesapi
• dc93d20 Merge pull request #7355 from backstage/feat/blam/nunjucks-template
• 34c6043 Merge pull request #7605 from backstage/orkohunter/yarn-lock-sync
• 34f9036 chore: sync yarn.lock on master branch

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic