fix(deps): update backstage monorepo#25
Merged
Merged
Conversation
643fce3 to
0b40b82
Compare
0b40b82 to
6842d84
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^0.15.2→^0.16.01.7.0→1.8.01.11.0→1.11.11.7.6→1.7.7^0.35.0→^0.36.00.18.7→0.18.81.12.3→1.12.4^0.4.0→^0.5.0^0.14.0→^0.15.00.5.11→0.5.120.2.0→0.2.10.27.1→0.27.30.2.16→0.2.173.4.0→3.5.00.2.17→0.2.182.0.0→2.1.00.7.9→0.7.100.2.16→0.2.170.9.0→0.9.11.7.15→1.7.16Release Notes
backstage/backstage (@backstage/backend-defaults)
v0.16.0Compare Source
Minor Changes
42960f1: The actions registry invoke endpoint now accepts direct user credentials in addition to service principals, enabling CLI and other direct user clients to invoke actions.0e7d8f9: The scheduler service now uses the metrics service to create metrics, providing plugin-scoped attribution.527cf88: BREAKING Removed deprecatedBitbucketUrlReader. Use theBitbucketCloudUrlReaderor theBitbucketServerUrlReaderinstead.Patch Changes
cc8348e: Added permissions integration to the actions registry. Actions registered with avisibilityPermissionfield are now checked against the permissions framework when listing and invoking. Denied actions are filtered from list results, and invoking a denied action returns a404 Not Foundas if the action does not exist. Permissions are automatically registered with thePermissionsRegistryServiceso they appear in the permission policy system.dee4283: AddedpluginIdfield toActionsServiceActiontype, populated from the registering plugin's metadata.015668c: AddedcancelTaskmethod to theSchedulerServiceinterface and implementation, allowing cancellation of currently running scheduled tasks. For global tasks, the database lock is released and a periodic liveness check aborts the running task function. For local tasks, the task's abort signal is triggered directly. A newPOST /.backstage/scheduler/v1/tasks/:id/cancelendpoint is also available.638e6c7: chore(deps): bumpyauzlfrom 3.2.0 to 3.2.16738cf0: build(deps): bumpminimatchfrom 9.0.5 to 10.2.162f0a53: Fixed error forwarding in the actions registry so that known errors likeInputErrorandNotFoundErrorthrown by actions preserve their original status codes and messages instead of being wrapped inForwardedErrorand coerced to 500.d933f62: Add configurable throttling and retry mechanism for GitLab integration.b99158a: Fixedyarn backstage-cli config:check --strict --config app-config.yamlconfig validation error by addingan optional
defaulttype discriminator to PostgreSQL connection configuration,allowing
config:checkto properly validatedefaultconnection configurations.1ee5b28: Adds an alphaMetricsServiceto provide a unified interface for metrics instrumentation across Backstage plugins.5fcbef2: Updated dependencyexpress-rate-limitto^8.0.0.a49a40d: Updated dependencyzodto^3.25.76 || ^4.0.0& migrated to/v3or/v4imports.backstage/backstage (@backstage/backend-plugin-api)
v1.8.0Compare Source
Minor Changes
cc8348e: Added optionalvisibilityPermissionfield toActionsRegistryActionOptions, allowing actions to declare aBasicPermissionthat controls visibility and access.Actions without a
visibilityPermissionfield continue to work as before.015668c: AddedcancelTaskmethod to theSchedulerServiceinterface and implementation, allowing cancellation of currently running scheduled tasks. For global tasks, the database lock is released and a periodic liveness check aborts the running task function. For local tasks, the task's abort signal is triggered directly. A newPOST /.backstage/scheduler/v1/tasks/:id/cancelendpoint is also available.Patch Changes
dee4283: AddedpluginIdfield toActionsServiceActiontype, populated from the registering plugin's metadata.1ee5b28: Adds an alphaMetricsServiceto provide a unified interface for metrics instrumentation across Backstage plugins.a49a40d: Updated dependencyzodto^3.25.76 || ^4.0.0& migrated to/v3or/v4imports.backstage/backstage (@backstage/backend-test-utils)
v1.11.1Compare Source
Patch Changes
dee4283: AddedpluginIdfield toActionsServiceActiontype, populated from the registering plugin's metadata.164711a: AddedcancelTasktoMockSchedulerServiceand mock scheduler service factory.62f0a53: Fixed error forwarding in the actions registry so that known errors likeInputErrorandNotFoundErrorthrown by actions preserve their original status codes and messages instead of being wrapped inForwardedErrorand coerced to 500.a49a40d: Updated dependencyzodto^3.25.76 || ^4.0.0& migrated to/v3or/v4imports.1ee5b28: Adds a new metrics service mock to be leveraged in testsbackstage/backstage (@backstage/catalog-model)
v1.7.7Compare Source
Patch Changes
a49a40d: Updated dependencyzodto^3.25.76 || ^4.0.0& migrated to/v3or/v4imports.backstage/backstage (@backstage/cli)
v0.36.0Compare Source
Minor Changes
d0f4cd2: Added newauthcommand group for authenticating the CLI with Backstage instances using OAuth 2.0 with a pre-registered client metadata document. Commands includelogin,logout,list,show,print-token, andselectfor managing multiple authenticated instances.d806b0c: The CLI now automatically discovers CLI modules from the project root'sdependenciesanddevDependencies. Any installed package with thecli-moduleBackstage role will be loaded automatically without needing to be hardcoded in the CLI itself.If no CLI modules are found in the project dependencies, the CLI falls back to the built-in set of modules and prints a deprecation warning. This fallback will be removed in a future release. To prepare for this, add
@backstage/cli-defaultsas adevDependencyin your rootpackage.json:{ "devDependencies": { "@​backstage/cli-defaults": "backstage:^" } }If you are not using the Backstage Yarn plugin, run the following instead:
For fine-grained control you can instead install individual CLI modules:
{ "devDependencies": { "@​backstage/cli-module-auth": "backstage:^", "@​backstage/cli-module-build": "backstage:^", "@​backstage/cli-module-config": "backstage:^", "@​backstage/cli-module-github": "backstage:^", "@​backstage/cli-module-info": "backstage:^", "@​backstage/cli-module-lint": "backstage:^", "@​backstage/cli-module-maintenance": "backstage:^", "@​backstage/cli-module-migrate": "backstage:^", "@​backstage/cli-module-new": "backstage:^", "@​backstage/cli-module-test-jest": "backstage:^", "@​backstage/cli-module-translations": "backstage:^" } }08d9770: BREAKING: The CLI templates for frontend plugins have been renamed:new-frontend-plugin→frontend-pluginnew-frontend-plugin-module→frontend-plugin-modulefrontend-plugin(legacy) →legacy-frontend-pluginTo smooth out this breaking change, the CLI now auto-detects which frontend system your app uses based on the dependencies in
packages/app/package.json. When using the default templates (no explicittemplatesconfiguration):@backstage/frontend-defaultswill see the new frontend system templates (frontend-plugin,frontend-plugin-module)@backstage/app-defaultswill see the legacy template (displayed asfrontend-plugin)This means existing projects that haven't migrated to the new frontend system will continue to create legacy plugins by default, while new projects will get the new frontend system templates. If you have explicit template configuration in your
package.json, it will be used as-is without any auto-detection.b36a60d: BREAKING: Themigrate package-exportscommand has been removed. Userepo fixinstead.Patch Changes
edf2b77: Added a newcli-moduletemplate for creating CLI module packages.246877a: Updated dependencybfjto^9.0.2.0d2d0f2: Internal refactor of CLI modularization, moving individual commands to be implemented with cleye.a4e5902: Internal refactor of the CLI command registrationbba2e49: Internal refactor to use new concurrency utilities from@backstage/cli-node.2fcba39: Internal refactor to move shared utilities into their consuming modules, reducing cross-module dependencies.c85ac86: Internal refactor to splitloadCliConfiginto separate implementations for the build and config CLI modules, removing a cross-module dependency.94a885a: Added support for the newcli-modulepackage role in the build system, ESLint configuration, Jest configuration, and maintenance commands.fd50cb3: Addedtranslations exportandtranslations importcommands for managing translation files.The
translations exportcommand discovers allTranslationRefdefinitions across frontend plugin dependencies and exports their default messages as JSON files. Thetranslations importcommand generatesTranslationResourcewiring code from translated JSON files, ready to be plugged into the app.Both commands support a
--patternoption for controlling the message file layout, for example--pattern '{lang}/{id}.json'for language-based directory grouping.0be3eab: Migrated CLI plugin modules to usecreateCliModulefrom@backstage/cli-node.61cb976: Migrated internal versioning utilities to use@backstage/cli-nodeinstead of a local implementation.6738cf0: build(deps): bumpminimatchfrom 9.0.5 to 10.2.1ff4a45a: Migrated remaining CLI command handlers fromcommandertocleyefor argument parsing. Several camelCase CLI flags have been deprecated in favor of their kebab-case equivalents (e.g.--successCache→--success-cache). The old camelCase forms still work but will now log a deprecation warning. Please update any scripts or CI configurations to use the kebab-case versions.70fc178: Migrated from deprecatedfindPathstotargetPathsandfindOwnPathsfrom@backstage/cli-common.825c81d: Internal refactor of CLI command modules.ea90ab0: The built-inyarn newtemplates have been moved to@backstage/cli-module-new. Existing references to@backstage/cli/templates/*in your rootpackage.jsonwill continue to work through a backwards compatibility rewrite in thenewcommand.ebeb0d4: Updated the new frontend plugin template to use@backstage/frontend-dev-utilsin itsdev/entry point instead of wiringcreateAppmanually. Generated plugins now get the same dev app helper setup as the built-in examples.971cc94: Thenewcommand now prompts for the plugin package name when creating plugin modules, in order to properly populate thepackage.jsonfile.de62a9d: Upgradedcommanderdependency from^12.0.0to^14.0.3across all CLI packages.092b41f: Updated dependencywebpackto~5.105.0.4a75544: Updated dependencyreact-refreshto^0.18.0.a9d23c4: Properly supportpackage.jsonworkspacesfieldUpdated dependencies
backstage/backstage (@backstage/core-components)
v0.18.8Compare Source
Patch Changes
e26e3de: The login request dialog now handles auth provider icons passed asIconElementin addition toIconComponent.8e09233: Fixed the sharedProgresscomponent to provide an accessible name for its loading indicator by default.8b1a847: Fixed Table component layout when bothfiltersandtitleprops are used together. The filter controls now use a dedicated CSS class (filterControls) instead of incorrectly reusing the root container class.3f36ce1: Clarified theIconElementsizing contract for the new frontend system and aligned legacy system icon rendering with the new icon API.0be2541: Promoted the plugin's translation ref to the stable package entry point. It was previously only available through the alpha entry point.a49a40d: Updated dependencyzodto^3.25.76 || ^4.0.0& migrated to/v3or/v4imports.470f72d: TheLogViewercomponent from@backstage/core-componentsnow supports downloading logs if a callback is passed toonDownloadLogsbackstage/backstage (@backstage/core-plugin-api)
v1.12.4Compare Source
Patch Changes
d911b72: UpdatedcreateApiRefto preserve the direct config call without deprecation warnings while staying compatible with the new frontend API ref typing.59752a2: DeprecatedAlertApi,AlertMessage, andalertApiRefin favor of the newToastApifrom@backstage/frontend-plugin-api.0452d02: Add optionaldescriptionfield to plugin-level feature flags.a49a40d: Updated dependencyzodto^3.25.76 || ^4.0.0& migrated to/v3or/v4imports.fe848e0: ChangeduseApiHolderto return an emptyApiHolderinstead of throwing when used outside of an API context.backstage/backstage (@backstage/frontend-defaults)
v0.5.0Compare Source
Minor Changes
92af1ae: BREAKING: Removed theallowUnknownExtensionConfigoption fromcreateApp. This flag had no effect and was a no-op, so no behavioral changes are expected.33de79d: BREAKING: Removed the deprecatedcreatePublicSignInAppfunction. UsecreateAppfrom@backstage/frontend-defaultswithappModulePublicSignInfrom@backstage/plugin-app/alphainstead.Patch Changes
5b160f9: UpdatedcreateAppto use the phasedprepareSpecializedAppflow, allowing apps to render a bootstrap tree before the full app is finalized.backstage/backstage (@backstage/frontend-plugin-api)
v0.15.1Compare Source
v0.15.0Compare Source
Minor Changes
5fd78ba: RenamedPluginOptionstoCreateFrontendPluginOptionsand deprecated the old name. RemovedResolvedExtensionInputsfrom the main entry point; it is still available as an inline type in extension factory signatures.72991a5: Removed theResolvedExtensionInputandExtensionDataRefToValuehelper types from the public API surface to reduce top-level API clutter. These types were internal plumbing that are not needed by plugin authors. If you were relying onResolvedExtensionInput, use theResolvedExtensionInputstype instead, which maps a full set of inputs. If you were usingExtensionDataRefToValue, replace it withExtensionDataValuecombined with inferred types from yourExtensionDataRef.9508514: BREAKING: PromotedPluginWrapperApi,pluginWrapperApiRef,PluginWrapperBlueprint, and the newPluginWrapperDefinitiontype from@alphato@public. These are now available from the main package entry point rather than only through/alpha.The
PluginWrapperApitype now has a requiredgetRootWrapper()method that returns a root wrapper component. ThepluginWrapperApiRefID changed fromcore.plugin-wrapper.alphatocore.plugin-wrapper.The
PluginWrapperBlueprintnow acceptsPluginWrapperDefinitionas the loader return type, which supports an optionaluseWrapperValuehook that allows sharing state between wrapper instances.6573901: BREAKING: Removed the deprecatedAnyExtensionDataReftype. UseExtensionDataRefwithout type parameters instead.a9440f0: BREAKING: Simplified theExtensionAttachTotype to only support a single attachment target. The array form for attaching to multiple extension points has been removed. Also removed the deprecatedExtensionAttachToSpectype alias.Patch Changes
e26e3de: Theiconfield onAuthProviderInfonow acceptsIconElementin addition toIconComponent, letting you pass<MyIcon />instead ofMyIcon.eea95b8: DeprecatedAlertApiin favor of the newToastApi.AlertApiis now deprecated and will be removed in a future release. Please migrate toToastApiwhich provides richer notification features.Why migrate?
ToastApioffers enhanced capabilities overAlertApi:close()handle returned frompost()Migration Guide
message: stringtitle: ReactNodeseverity: 'error'status: 'danger'severity: 'success' | 'info' | 'warning'status: 'success' | 'info' | 'warning'display: 'transient'timeout: 5000(or custom ms)display: 'permanent'timeoutpost()returnsvoidpost()returns{ close(): void }Example Migration
Note: During the migration period, both APIs work simultaneously. The
ToastDisplaycomponent subscribes to bothAlertApiandToastApi, so existing code continues to work while you migrate incrementally.8a3a906: DeprecatedNavItemBlueprint. Nav items are now automatically inferred fromPageBlueprintextensions based on theirtitleandiconparams.b15a685: DeprecatedwithApis, use thewithApisexport from@backstage/core-compat-apiinstead.0452d02: Add optionaldescriptionfield to plugin-level feature flags.1bec049: Fixed inconsistentJSX.Elementtype reference in theDialogApiDialog.updatemethod signature.9c81af9: Made thepluginIdproperty optional in theFrontendFeaturetype, allowing plugins published against older versions of the framework to be used without type errors.2c383b5: DeprecatedAnalyticsImplementationBlueprintandAnalyticsImplementationFactoryin favor of the exports from@backstage/plugin-app-react.dab6c46: Deprecated theExtensionFactoryMiddlewaretype, which has been moved to@backstage/frontend-app-api.aa29b50: Pages created withPageBlueprintnow render the plugin header by default in the new frontend system.3f36ce1: Clarified theIconElementsizing contract for the new frontend system and aligned legacy system icon rendering with the new icon API.cc459f7: Added a builder form forcreateApiRefin the new frontend system and deprecated the directcreateApiRef({ ... })call in favor ofcreateApiRef().with({ ... }). The builder form now also preserves literal API ref IDs in the resultingApiReftype.The
createApiRef().with({ ... })form can also use an explicitpluginIdto declare API ownership without encoding the plugin ID into the API ref ID, while keeping that metadata internal to runtime handling.5b160f9: Added support forifpredicates oncreateFrontendPluginandcreateFrontendModule, applying shared conditions to every extension in the feature. Plugin and extension overrides can now also replace or remove existingifpredicates.d0206c4: Removed the deprecateddefaultPathmigration helper fromPageBlueprintparams.edb872c: Renamed thePageTabtype toPageLayoutTab. The oldPageTabname is now a deprecated type alias.a49a40d: Updated dependencyzodto^3.25.76 || ^4.0.0& migrated to/v3or/v4imports.7e743f4: Introduced a newToastApifor displaying rich toast notifications in the new frontend system.The new
ToastApiprovides enhanced notification capabilities compared to the existingAlertApi:close()handle returned frompost()Usage:
The
ToastDisplaycomponent subscribes to bothToastApiandAlertApi, providing a migration path where both systems work side by side untilAlertApiis fully deprecated.fe848e0: ChangeduseApiHolderto return an emptyApiHolderinstead of throwing when used outside of an API context.Updated dependencies
backstage/backstage (@backstage/plugin-app-backend)
v0.5.12Compare Source
Patch Changes
backstage/backstage (@backstage/plugin-app-react)
v0.2.1Compare Source
Patch Changes
5f3f5d2:NavContentBlueprintnav item collections now keep previously collectedrest()results in sync when additional items are taken later in the same render, making it easier to place items across multiple sidebar sections.2c383b5: AddedAnalyticsImplementationBlueprintandAnalyticsImplementationFactory, migrated from@backstage/frontend-plugin-api.backstage/backstage (@backstage/plugin-auth-backend)
v0.27.3Compare Source
v0.27.2Compare Source
Patch Changes
1ccad86: Addedwho-am-iaction to the auth backend actions registry. Returns the catalog entity and user info for the currently authenticated user.d0f4cd2: Added optional client metadata document endpoint at/.well-known/oauth-client/cli.jsonrelative to the auth backend base URL for CLI authentication. Enabled whenauth.experimentalClientIdMetadataDocuments.enabledis set totrue.6738cf0: build(deps): bumpminimatchfrom 9.0.5 to 10.2.1e9b6e97: Fixed a security vulnerability where the CIMD metadata fetch could follow HTTP redirects to internal hosts, bypassing SSRF protections.0f9d673: Improved redirect URI validation in the experimental OIDC provider to match against normalized URLs rather than raw strings.a49a40d: Updated dependencyzodto^3.25.76 || ^4.0.0& migrated to/v3or/v4imports.634eded: Fixed a foreign key constraint violation when issuing refresh tokens for CIMD clients, andprevented a failed refresh token issuance from failing the entire token exchange.
Fixed AWS ALB auth provider incorrectly returning HTTP 500 instead of 401 for JWT validation failures,
which caused retry loops and memory pressure under load.
619be54: Update migrations to be reversiblebackstage/backstage (@backstage/plugin-auth-backend-module-guest-provider)
v0.2.17Compare Source
Patch Changes
backstage/backstage (@backstage/plugin-catalog-backend)
v3.5.0Compare Source
Minor Changes
a6b2819: Addedquery-catalog-entitiesaction to the catalog backend actions registry. Supports predicate-based filtering with$all,$any,$not,$exists,$in,$contains, and$hasPrefixoperators.972f686: Added support for predicate-based filtering on the/entities/by-refsendpoint via thequeryfield in the request body. Supports$all,$any,$not,$exists,$in,$contains, and$hasPrefixoperators.5d95e8e: Add anonConflictoption to location creation that can refresh an existing location instead of throwing a conflict error.56c908e: Added support for predicate-based filtering on the/entity-facetsendpoint via a newPOSTmethod. Supports$all,$any,$not,$exists,$in,$contains, and$hasPrefixoperators.0fbcf23: Migrated OpenAPI schemas to 3.1.bf71677: Added opentelemetry metrics for SCM events:catalog.events.scm.messageswith attributeeventType: Counter for the number of SCM events actually received by the catalog backend. TheeventTypeis currently eitherlocationorrepository.51e23eb: Added predicate-based entity filtering via POST /entities/by-query endpoint.Supports
$all,$any,$not,$exists,$in,$hasPrefix, and (partially)$containsoperators for expressive entity queries. Integrated into the existingqueryEntitiesflow with full cursor-based pagination, permission enforcement, andtotalItemssupport.The catalog client's
queryEntities()method automatically routes to the POST endpoint when aquerypredicate is provided.Patch Changes
a91bd1b: Improved catalog entity deletion so parent invalidation and deferred relation restitch scheduling are coordinated more safely.6738cf0: build(deps): bumpminimatchfrom 9.0.5 to 10.2.17416e8b: Moved stitch queue concerns out ofrefresh_stateandfinal_entitiesinto a dedicatedstitch_queuetable withentity_refas the primary key. Thestitch_ticketis used for optimistic concurrency control. When a stitch completes successfully and the ticket hasn't changed, the corresponding row is deleted from the queue. The migration handles existing data and is fully reversible.fbf382f: Minor internal optimisation1ee5b28: Migrates existing catalog metrics to use the alpha MetricsService. This release is a 1:1 migration with no breaking changes.72747b4: Deprecated two processors as they have been moved to the Community Plugins repo with their own backend modules:AnnotateScmSlugEntityProcessor: Use@backstage-community/plugin-catalog-backend-module-annotate-scm-sluginsteadCodeOwnersProcessor: Use@backstage-community/plugin-catalog-backend-module-codeownersinstead3644b72: Make thesearchforeign key catalog migration non-blocking on large tables by using batch deletes and PostgreSQLNOT VALID/VALIDATEto reduce lock durationa49a40d: Updated dependencyzodto^3.25.76 || ^4.0.0& migrated to/v3or/v4imports.3181973: Changed thesearchtable foreign key to point tofinal_entitiesinstead ofrefresh_stateUpdated dependencies
backstage/backstage (@backstage/plugin-catalog-backend-module-scaffolder-entity-model)
v0.2.18Compare Source
Patch Changes
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.