Merge branch 'master' into feature/enable-scaffolder-dry-run

Signed-off-by: Nolan, Tavi <Tavi.Nolan@fmr.com>
2024-05-15 16:26:16 +01:00
parent f145a0458b 2c2a8f8b14
commit 7170a4edd1
887 changed files with 31081 additions and 14044 deletions
@@ -1,5 +0,0 @@
---
-'@backstage/create-app': patch
---
-
-Removed `packages/backend/src/types.ts` from the template as it is unused. It was mistakenly left in after moving the template to the new backend system.
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-app-api': patch
+---
+
+Fixed a potential crash when passing an object with a `null` prototype as log meta.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-notifications': patch
---
-
-Allow overriding `NotificationsPage` page properties
@@ -1,9 +0,0 @@
---
-'@backstage/plugin-scaffolder-backend-module-github': patch
-'@backstage/core-compat-api': patch
-'@backstage/create-app': patch
-'@backstage/plugin-api-docs': patch
-'@backstage/plugin-catalog': patch
---
-
-Update local development dependencies.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-backend': patch
---
-
-Add lifecycle monitoring for the catalog processing
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-home': patch
---
-
-Use relative time when displaying visits from the same day
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-scaffolder-backend': patch
---
-
-Fix issue with the log format not being respected when logging from actions
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-scaffolder-backend-module-gitea': patch
---
-
-Allow defining `repoVisibility` field for the action `publish:gitea`
@@ -1,5 +0,0 @@
---
-'@backstage/backend-app-api': patch
---
-
-Add ability to configure the Node.js HTTP Server when configuring the root HTTP Router service
@@ -1,5 +0,0 @@
---
-'@backstage/repo-tools': patch
---
-
-Update the paths logic in the api reports command to support complex subpaths
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-backend-module-bitbucket-server': patch
---
-
-Allow skipping archived repositories (`skipArchivedRepos` flag) on Bitbucket.
@@ -1,5 +0,0 @@
---
-'@backstage/catalog-model': minor
---
-
-Introduce a domain attribute to the domain entity to allow a hierarchy of domains to exist.
@@ -1,5 +0,0 @@
---
-'@techdocs/cli': patch
---
-
-Fix cookie endpoint mock for `serve`
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-techdocs': patch
---
-
-Update path in Readme for Plugin Techdocs to show the correct setup information.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-backend-module-gitlab': patch
---
-
-Added events support for `GitlabDiscoveryEntityProvider` and `GitlabOrgDiscoveryEntityProvider`.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-backend-module-incremental-ingestion': patch
---
-
-Fix plugin/incremental-ingestion 'Maximum call stack size exceeded' error when ingest large entities.
@@ -1,5 +0,0 @@
---
-'@backstage/cli': patch
---
-
-Both the target and types library have been bumped from ES2021 to ES2022 in `@backstage/cli/config/tsconfig.json`.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-notifications': patch
+---
+
+Do not always show scrollbars in notification description
@@ -1,6 +0,0 @@
---
-'@backstage/plugin-notifications-backend': patch
-'@backstage/plugin-notifications-node': patch
---
-
-Support for filtering entities from notification recipients after resolving them from the recipients
@@ -1,5 +0,0 @@
---
-'@backstage/backend-app-api': patch
---
-
-Move the JWKS registration outside of the lifecycle middleware
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-notifications': patch
---
-
-The user can newly mark all unread messages as read at one click.
@@ -1,5 +0,0 @@
---
-'@backstage/core-components': patch
---
-
-Fixed an internal circular import that broke Jest mocks.
@@ -1,5 +0,0 @@
---
-'@backstage/cli': patch
---
-
-Add support for `versions:migrate` to do code changes. Can be skipped with `--no-code-changes`
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-techdocs-addons-test-utils': patch
---
-
-Fix bug in TechDocsAddonTester when jest.resetAllMocks is called between tests
@@ -1,5 +0,0 @@
---
-'@backstage/cli': patch
---
-
-Add preserveModules to rollup, which allows better async loading and tree-shaking in webpack
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-notifications-backend-module-email': patch
---
-
-Allow sending notifications by email with the new notifications module
@@ -1,5 +0,0 @@
---
-'@backstage/backend-app-api': patch
---
-
-The default `TokenManager` implementation no longer requires keys to be configured in production, but it will throw an errors when generating or authenticating tokens. The default `AuthService` implementation will now also provide additional context if such an error is throw when falling back to using the `TokenManager` service to generate tokens for outgoing requests.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-notifications': patch
---
-
-Allow showing notifications as snackbars in the UI
@@ -1,5 +0,0 @@
---
-'@backstage/create-app': patch
---
-
-Removed the Tech Radar and GitHub Actions plugins from the template, which have been moved to the community plugins repository.
@@ -1,6 +0,0 @@
---
-'@backstage/plugin-scaffolder-backend': patch
-'@backstage/backend-app-api': patch
---
-
-Redact `meta` fields too with the logger
@@ -0,0 +1,6 @@
+---
+'@backstage/plugin-app-backend': patch
+---
+
+Restore the support of external config schema in the router of the `app-backend` plugin, which was broken in release `1.26.0`.
+This support is critical for dynamic frontend plugins to have access to their config values.
@@ -1,6 +0,0 @@
---
-'@backstage/plugin-search-backend-node': patch
-'@backstage/plugin-search-backend': patch
---
-
-Add lifecycle monitoring for the search index registry
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-techdocs': patch
+---
+
+Fixed bug in CopyToClipboardButton component where positioning of the "Copy to clipboard" button in techdocs code snippets was broken in some cases
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-scaffolder-backend-module-gitlab': patch
---
-
-Add examples for `gitlab:repo:push` scaffolder action & improve related tests
@@ -1,5 +0,0 @@
---
-'@backstage/backend-app-api': patch
---
-
-Internal refactor to only create one external token handler
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-auth-react': patch
---
-
-When using `CookieAuthRefreshProvider` or `useCookieAuthRefresh`, a 404 response from the cookie endpoint will now be treated as if cookie auth is disabled and is not needed.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-scaffolder-backend-module-bitbucket-server': patch
---
-
-Add examples for `publish:bitbucketServer:pull-request` scaffolder action & improve related tests
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-search-backend-module-catalog': patch
---
-
-Fix wiring of the module exported at the `/alpha` path, which was causing authentication failures.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-auth-backend-module-oidc-provider': patch
---
-
-Add nonce to authorize request to be added in ID token
@@ -1,337 +0,0 @@
-{
-  "mode": "pre",
-  "tag": "next",
-  "initialVersions": {
-    "example-app": "0.2.96",
-    "@backstage/app-defaults": "1.5.4",
-    "example-app-next": "0.0.10",
-    "app-next-example-plugin": "0.0.10",
-    "example-backend": "0.2.97",
-    "@backstage/backend-app-api": "0.7.0",
-    "@backstage/backend-common": "0.21.7",
-    "@backstage/backend-defaults": "0.2.17",
-    "@backstage/backend-dev-utils": "0.1.4",
-    "@backstage/backend-dynamic-feature-service": "0.2.9",
-    "example-backend-next": "0.0.25",
-    "@backstage/backend-openapi-utils": "0.1.10",
-    "@backstage/backend-plugin-api": "0.6.17",
-    "@backstage/backend-tasks": "0.5.22",
-    "@backstage/backend-test-utils": "0.3.7",
-    "@backstage/catalog-client": "1.6.4",
-    "@backstage/catalog-model": "1.4.5",
-    "@backstage/cli": "0.26.3",
-    "@backstage/cli-common": "0.1.13",
-    "@backstage/cli-node": "0.2.5",
-    "@backstage/codemods": "0.1.48",
-    "@backstage/config": "1.2.0",
-    "@backstage/config-loader": "1.8.0",
-    "@backstage/core-app-api": "1.12.4",
-    "@backstage/core-compat-api": "0.2.4",
-    "@backstage/core-components": "0.14.4",
-    "@backstage/core-plugin-api": "1.9.2",
-    "@backstage/create-app": "0.5.14",
-    "@backstage/dev-utils": "1.0.31",
-    "e2e-test": "0.2.15",
-    "@backstage/e2e-test-utils": "0.1.1",
-    "@backstage/errors": "1.2.4",
-    "@backstage/eslint-plugin": "0.1.7",
-    "@backstage/frontend-app-api": "0.6.4",
-    "@backstage/frontend-plugin-api": "0.6.4",
-    "@backstage/frontend-test-utils": "0.1.6",
-    "@backstage/integration": "1.10.0",
-    "@backstage/integration-aws-node": "0.1.12",
-    "@backstage/integration-react": "1.1.26",
-    "@backstage/release-manifests": "0.0.11",
-    "@backstage/repo-tools": "0.8.0",
-    "@techdocs/cli": "1.8.9",
-    "techdocs-cli-embedded-app": "0.2.95",
-    "@backstage/test-utils": "1.5.4",
-    "@backstage/theme": "0.5.3",
-    "@backstage/types": "1.1.1",
-    "@backstage/version-bridge": "1.0.8",
-    "@backstage/plugin-adr": "0.6.17",
-    "@backstage/plugin-adr-backend": "0.4.14",
-    "@backstage/plugin-adr-common": "0.2.22",
-    "@backstage/plugin-airbrake": "0.3.34",
-    "@backstage/plugin-airbrake-backend": "0.3.14",
-    "@backstage/plugin-allure": "0.1.50",
-    "@backstage/plugin-analytics-module-ga": "0.2.4",
-    "@backstage/plugin-analytics-module-ga4": "0.2.4",
-    "@backstage/plugin-analytics-module-newrelic-browser": "0.1.4",
-    "@backstage/plugin-apache-airflow": "0.2.24",
-    "@backstage/plugin-api-docs": "0.11.4",
-    "@backstage/plugin-api-docs-module-protoc-gen-doc": "0.1.6",
-    "@backstage/plugin-apollo-explorer": "0.2.0",
-    "@backstage/plugin-app-backend": "0.3.65",
-    "@backstage/plugin-app-node": "0.1.17",
-    "@backstage/plugin-app-visualizer": "0.1.5",
-    "@backstage/plugin-auth-backend": "0.22.4",
-    "@backstage/plugin-auth-backend-module-atlassian-provider": "0.1.9",
-    "@backstage/plugin-auth-backend-module-aws-alb-provider": "0.1.9",
-    "@backstage/plugin-auth-backend-module-azure-easyauth-provider": "0.1.0",
-    "@backstage/plugin-auth-backend-module-bitbucket-provider": "0.1.0",
-    "@backstage/plugin-auth-backend-module-cloudflare-access-provider": "0.1.0",
-    "@backstage/plugin-auth-backend-module-gcp-iap-provider": "0.2.12",
-    "@backstage/plugin-auth-backend-module-github-provider": "0.1.14",
-    "@backstage/plugin-auth-backend-module-gitlab-provider": "0.1.14",
-    "@backstage/plugin-auth-backend-module-google-provider": "0.1.14",
-    "@backstage/plugin-auth-backend-module-guest-provider": "0.1.3",
-    "@backstage/plugin-auth-backend-module-microsoft-provider": "0.1.12",
-    "@backstage/plugin-auth-backend-module-oauth2-provider": "0.1.14",
-    "@backstage/plugin-auth-backend-module-oauth2-proxy-provider": "0.1.10",
-    "@backstage/plugin-auth-backend-module-oidc-provider": "0.1.8",
-    "@backstage/plugin-auth-backend-module-okta-provider": "0.0.10",
-    "@backstage/plugin-auth-backend-module-pinniped-provider": "0.1.11",
-    "@backstage/plugin-auth-backend-module-vmware-cloud-provider": "0.1.9",
-    "@backstage/plugin-auth-node": "0.4.12",
-    "@backstage/plugin-auth-react": "0.1.0",
-    "@backstage/plugin-azure-devops": "0.4.3",
-    "@backstage/plugin-azure-devops-backend": "0.6.4",
-    "@backstage/plugin-azure-devops-common": "0.4.1",
-    "@backstage/plugin-azure-sites": "0.1.23",
-    "@backstage/plugin-azure-sites-backend": "0.3.4",
-    "@backstage/plugin-azure-sites-common": "0.1.3",
-    "@backstage/plugin-badges": "0.2.58",
-    "@backstage/plugin-badges-backend": "0.4.0",
-    "@backstage/plugin-bazaar": "0.2.26",
-    "@backstage/plugin-bazaar-backend": "0.3.15",
-    "@backstage/plugin-bitbucket-cloud-common": "0.2.18",
-    "@backstage/plugin-bitrise": "0.1.61",
-    "@backstage/plugin-catalog": "1.19.0",
-    "@backstage/plugin-catalog-backend": "1.21.1",
-    "@backstage/plugin-catalog-backend-module-aws": "0.3.12",
-    "@backstage/plugin-catalog-backend-module-azure": "0.1.37",
-    "@backstage/plugin-catalog-backend-module-backstage-openapi": "0.2.0",
-    "@backstage/plugin-catalog-backend-module-bitbucket-cloud": "0.2.4",
-    "@backstage/plugin-catalog-backend-module-bitbucket-server": "0.1.31",
-    "@backstage/plugin-catalog-backend-module-gcp": "0.1.18",
-    "@backstage/plugin-catalog-backend-module-gerrit": "0.1.34",
-    "@backstage/plugin-catalog-backend-module-github": "0.6.0",
-    "@backstage/plugin-catalog-backend-module-github-org": "0.1.12",
-    "@backstage/plugin-catalog-backend-module-gitlab": "0.3.15",
-    "@backstage/plugin-catalog-backend-module-incremental-ingestion": "0.4.22",
-    "@backstage/plugin-catalog-backend-module-ldap": "0.5.33",
-    "@backstage/plugin-catalog-backend-module-msgraph": "0.5.25",
-    "@backstage/plugin-catalog-backend-module-openapi": "0.1.35",
-    "@backstage/plugin-catalog-backend-module-puppetdb": "0.1.23",
-    "@backstage/plugin-catalog-backend-module-scaffolder-entity-model": "0.1.15",
-    "@backstage/plugin-catalog-backend-module-unprocessed": "0.4.4",
-    "@backstage/plugin-catalog-common": "1.0.22",
-    "@backstage/plugin-catalog-graph": "0.4.4",
-    "@backstage/plugin-catalog-import": "0.10.10",
-    "@backstage/plugin-catalog-node": "1.11.1",
-    "@backstage/plugin-catalog-react": "1.11.3",
-    "@backstage/plugin-catalog-unprocessed-entities": "0.2.3",
-    "@backstage/plugin-catalog-unprocessed-entities-common": "0.0.1",
-    "@backstage/plugin-cicd-statistics": "0.1.36",
-    "@backstage/plugin-cicd-statistics-module-gitlab": "0.1.30",
-    "@backstage/plugin-circleci": "0.3.34",
-    "@backstage/plugin-cloudbuild": "0.5.1",
-    "@backstage/plugin-code-climate": "0.1.34",
-    "@backstage/plugin-code-coverage": "0.2.27",
-    "@backstage/plugin-code-coverage-backend": "0.2.31",
-    "@backstage/plugin-codescene": "0.1.26",
-    "@backstage/plugin-config-schema": "0.1.54",
-    "@backstage/plugin-cost-insights": "0.12.23",
-    "@backstage/plugin-cost-insights-common": "0.1.2",
-    "@backstage/plugin-devtools": "0.1.13",
-    "@backstage/plugin-devtools-backend": "0.3.3",
-    "@backstage/plugin-devtools-common": "0.1.9",
-    "@backstage/plugin-dynatrace": "10.0.3",
-    "@backstage/plugin-entity-feedback": "0.2.17",
-    "@backstage/plugin-entity-feedback-backend": "0.2.14",
-    "@backstage/plugin-entity-feedback-common": "0.1.3",
-    "@backstage/plugin-entity-validation": "0.1.19",
-    "@backstage/plugin-events-backend": "0.3.4",
-    "@backstage/plugin-events-backend-module-aws-sqs": "0.3.3",
-    "@backstage/plugin-events-backend-module-azure": "0.2.3",
-    "@backstage/plugin-events-backend-module-bitbucket-cloud": "0.2.3",
-    "@backstage/plugin-events-backend-module-gerrit": "0.2.3",
-    "@backstage/plugin-events-backend-module-github": "0.2.3",
-    "@backstage/plugin-events-backend-module-gitlab": "0.2.3",
-    "@backstage/plugin-events-backend-test-utils": "0.1.27",
-    "@backstage/plugin-events-node": "0.3.3",
-    "@internal/plugin-todo-list": "1.0.26",
-    "@internal/plugin-todo-list-backend": "1.0.26",
-    "@internal/plugin-todo-list-common": "1.0.18",
-    "@backstage/plugin-explore": "0.4.20",
-    "@backstage/plugin-explore-backend": "0.0.27",
-    "@backstage/plugin-explore-common": "0.0.2",
-    "@backstage/plugin-explore-react": "0.0.38",
-    "@backstage/plugin-firehydrant": "0.2.18",
-    "@backstage/plugin-fossa": "0.2.66",
-    "@backstage/plugin-gcalendar": "0.3.27",
-    "@backstage/plugin-gcp-projects": "0.3.50",
-    "@backstage/plugin-git-release-manager": "0.3.46",
-    "@backstage/plugin-github-actions": "0.6.15",
-    "@backstage/plugin-github-deployments": "0.1.65",
-    "@backstage/plugin-github-issues": "0.4.1",
-    "@backstage/plugin-github-pull-requests-board": "0.2.0",
-    "@backstage/plugin-gitops-profiles": "0.3.49",
-    "@backstage/plugin-gocd": "0.1.40",
-    "@backstage/plugin-graphiql": "0.3.7",
-    "@backstage/plugin-graphql-voyager": "0.1.16",
-    "@backstage/plugin-home": "0.7.3",
-    "@backstage/plugin-home-react": "0.1.12",
-    "@backstage/plugin-ilert": "0.2.23",
-    "@backstage/plugin-jenkins": "0.9.9",
-    "@backstage/plugin-jenkins-backend": "0.4.4",
-    "@backstage/plugin-jenkins-common": "0.1.25",
-    "@backstage/plugin-kafka": "0.3.34",
-    "@backstage/plugin-kafka-backend": "0.3.15",
-    "@backstage/plugin-kubernetes": "0.11.9",
-    "@backstage/plugin-kubernetes-backend": "0.17.0",
-    "@backstage/plugin-kubernetes-cluster": "0.0.10",
-    "@backstage/plugin-kubernetes-common": "0.7.5",
-    "@backstage/plugin-kubernetes-node": "0.1.11",
-    "@backstage/plugin-kubernetes-react": "0.3.4",
-    "@backstage/plugin-lighthouse": "0.4.19",
-    "@backstage/plugin-lighthouse-backend": "0.4.10",
-    "@backstage/plugin-lighthouse-common": "0.1.5",
-    "@backstage/plugin-linguist": "0.1.19",
-    "@backstage/plugin-linguist-backend": "0.5.15",
-    "@backstage/plugin-linguist-common": "0.1.2",
-    "@backstage/plugin-microsoft-calendar": "0.1.16",
-    "@backstage/plugin-newrelic": "0.3.49",
-    "@backstage/plugin-newrelic-dashboard": "0.3.9",
-    "@backstage/plugin-nomad": "0.1.15",
-    "@backstage/plugin-nomad-backend": "0.1.19",
-    "@backstage/plugin-notifications": "0.2.0",
-    "@backstage/plugin-notifications-backend": "0.2.0",
-    "@backstage/plugin-notifications-common": "0.0.3",
-    "@backstage/plugin-notifications-node": "0.1.3",
-    "@backstage/plugin-octopus-deploy": "0.2.16",
-    "@backstage/plugin-opencost": "0.2.9",
-    "@backstage/plugin-org": "0.6.24",
-    "@backstage/plugin-org-react": "0.1.23",
-    "@backstage/plugin-pagerduty": "0.7.6",
-    "@backstage/plugin-periskop": "0.1.32",
-    "@backstage/plugin-periskop-backend": "0.2.15",
-    "@backstage/plugin-permission-backend": "0.5.41",
-    "@backstage/plugin-permission-backend-module-allow-all-policy": "0.1.14",
-    "@backstage/plugin-permission-common": "0.7.13",
-    "@backstage/plugin-permission-node": "0.7.28",
-    "@backstage/plugin-permission-react": "0.4.22",
-    "@backstage/plugin-playlist": "0.2.8",
-    "@backstage/plugin-playlist-backend": "0.3.21",
-    "@backstage/plugin-playlist-common": "0.1.15",
-    "@backstage/plugin-proxy-backend": "0.4.15",
-    "@backstage/plugin-puppetdb": "0.1.17",
-    "@backstage/plugin-rollbar": "0.4.34",
-    "@backstage/plugin-rollbar-backend": "0.1.62",
-    "@backstage/plugin-scaffolder": "1.19.3",
-    "@backstage/plugin-scaffolder-backend": "1.22.4",
-    "@backstage/plugin-scaffolder-backend-module-azure": "0.1.9",
-    "@backstage/plugin-scaffolder-backend-module-bitbucket": "0.2.7",
-    "@backstage/plugin-scaffolder-backend-module-bitbucket-cloud": "0.1.7",
-    "@backstage/plugin-scaffolder-backend-module-bitbucket-server": "0.1.7",
-    "@backstage/plugin-scaffolder-backend-module-confluence-to-markdown": "0.2.18",
-    "@backstage/plugin-scaffolder-backend-module-cookiecutter": "0.2.41",
-    "@backstage/plugin-scaffolder-backend-module-gerrit": "0.1.9",
-    "@backstage/plugin-scaffolder-backend-module-gitea": "0.1.7",
-    "@backstage/plugin-scaffolder-backend-module-github": "0.2.7",
-    "@backstage/plugin-scaffolder-backend-module-gitlab": "0.3.3",
-    "@backstage/plugin-scaffolder-backend-module-rails": "0.4.34",
-    "@backstage/plugin-scaffolder-backend-module-sentry": "0.1.25",
-    "@backstage/plugin-scaffolder-backend-module-yeoman": "0.3.0",
-    "@backstage/plugin-scaffolder-common": "1.5.1",
-    "@backstage/plugin-scaffolder-node": "0.4.3",
-    "@backstage/plugin-scaffolder-node-test-utils": "0.1.3",
-    "@backstage/plugin-scaffolder-react": "1.8.4",
-    "@backstage/plugin-search": "1.4.10",
-    "@backstage/plugin-search-backend": "1.5.7",
-    "@backstage/plugin-search-backend-module-catalog": "0.1.22",
-    "@backstage/plugin-search-backend-module-elasticsearch": "1.4.0",
-    "@backstage/plugin-search-backend-module-explore": "0.1.21",
-    "@backstage/plugin-search-backend-module-pg": "0.5.26",
-    "@backstage/plugin-search-backend-module-stack-overflow-collator": "0.1.10",
-    "@backstage/plugin-search-backend-module-techdocs": "0.1.22",
-    "@backstage/plugin-search-backend-node": "1.2.21",
-    "@backstage/plugin-search-common": "1.2.11",
-    "@backstage/plugin-search-react": "1.7.10",
-    "@backstage/plugin-sentry": "0.5.19",
-    "@backstage/plugin-shortcuts": "0.3.23",
-    "@backstage/plugin-signals": "0.0.5",
-    "@backstage/plugin-signals-backend": "0.1.3",
-    "@backstage/plugin-signals-node": "0.1.3",
-    "@backstage/plugin-signals-react": "0.0.3",
-    "@backstage/plugin-sonarqube": "0.7.16",
-    "@backstage/plugin-sonarqube-backend": "0.2.19",
-    "@backstage/plugin-sonarqube-react": "0.1.15",
-    "@backstage/plugin-splunk-on-call": "0.4.23",
-    "@backstage/plugin-stack-overflow": "0.1.29",
-    "@backstage/plugin-stack-overflow-backend": "0.2.21",
-    "@backstage/plugin-stackstorm": "0.1.15",
-    "@backstage/plugin-tech-insights": "0.3.26",
-    "@backstage/plugin-tech-insights-backend": "0.5.31",
-    "@backstage/plugin-tech-insights-backend-module-jsonfc": "0.1.49",
-    "@backstage/plugin-tech-insights-common": "0.2.12",
-    "@backstage/plugin-tech-insights-node": "0.6.0",
-    "@backstage/plugin-tech-radar": "0.7.3",
-    "@backstage/plugin-techdocs": "1.10.4",
-    "@backstage/plugin-techdocs-addons-test-utils": "1.0.31",
-    "@backstage/plugin-techdocs-backend": "1.10.4",
-    "@backstage/plugin-techdocs-module-addons-contrib": "1.1.9",
-    "@backstage/plugin-techdocs-node": "1.12.3",
-    "@backstage/plugin-techdocs-react": "1.2.3",
-    "@backstage/plugin-todo": "0.2.38",
-    "@backstage/plugin-todo-backend": "0.3.16",
-    "@backstage/plugin-user-settings": "0.8.5",
-    "@backstage/plugin-user-settings-backend": "0.2.16",
-    "@backstage/plugin-vault": "0.1.29",
-    "@backstage/plugin-vault-backend": "0.4.10",
-    "@backstage/plugin-vault-node": "0.1.10",
-    "@backstage/plugin-xcmetrics": "0.2.52",
-    "@backstage/plugin-catalog-backend-module-gitlab-org": "0.0.0"
-  },
-  "changesets": [
-    "afraid-needles-divide",
-    "bright-pumpkins-rule",
-    "chatty-cycles-unite",
-    "chilly-adults-sing",
-    "chilly-fireants-roll",
-    "cold-rats-leave",
-    "cool-elephants-march",
-    "cuddly-chairs-kick",
-    "curvy-planes-flash",
-    "dry-sloths-impress",
-    "eighty-apricots-kneel",
-    "eighty-bats-stare",
-    "eleven-pandas-divide",
-    "fix-stackoverflow",
-    "fluffy-hotels-wait",
-    "fresh-crews-impress",
-    "gold-waves-bake",
-    "gorgeous-cameras-cross",
-    "green-adults-push",
-    "hip-carrots-drive",
-    "itchy-gorillas-hope",
-    "itchy-keys-wonder",
-    "late-planes-fix",
-    "loud-frogs-eat",
-    "loud-vans-greet",
-    "lovely-games-cry",
-    "lucky-news-guess",
-    "orange-numbers-think",
-    "perfect-points-hope",
-    "proud-doors-cheat",
-    "purple-parents-sin",
-    "purple-waves-smile",
-    "rare-fireants-tickle",
-    "real-crabs-obey",
-    "renovate-0d0bd5c",
-    "selfish-pigs-glow",
-    "shy-students-clap",
-    "smart-avocados-invent",
-    "smooth-garlics-behave",
-    "sour-socks-approve",
-    "stupid-onions-know",
-    "tasty-apes-learn",
-    "thick-llamas-itch",
-    "tricky-cougars-shout",
-    "unlucky-days-play",
-    "unlucky-rivers-collect",
-    "warm-fans-promise",
-    "young-olives-drop"
-  ]
-}
@@ -1,5 +0,0 @@
---
-'@backstage/theme': patch
---
-
-Fixed bug where scrollbars don't pick up the theme when in dark mode
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-backend-module-backstage-openapi': patch
---
-
-Fix incorrect dependency import.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-auth-backend-module-guest-provider': patch
---
-
-Error if used outside of a development environment without explicit allowance
@@ -1,5 +0,0 @@
---
-'@backstage/core-components': patch
---
-
-Added optional `initialShowDropDown` prop to `SidebarSubmenuItem` to internally manage the initial display state of the dropdown items.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-search-backend-module-explore': patch
---
-
-Migrate search collator to use the new auth services.
@@ -1,11 +0,0 @@
---
-'@backstage/plugin-home-react': patch
-'@backstage/plugin-home': patch
-'@backstage/plugin-scaffolder-react': patch
-'@backstage/plugin-scaffolder': patch
---
-
-Updated dependency `@rjsf/utils` to `5.18.2`.
-Updated dependency `@rjsf/core` to `5.18.2`.
-Updated dependency `@rjsf/material-ui` to `5.18.2`.
-Updated dependency `@rjsf/validator-ajv8` to `5.18.2`.
@@ -1,6 +0,0 @@
---
-'@backstage/plugin-auth-backend': patch
-'@backstage/plugin-auth-node': patch
---
-
-Allow overriding default ownership resolving with the new `AuthOwnershipResolutionExtensionPoint`
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-backend-module-gitlab-org': patch
---
-
-Added a new `catalog-backend-module-gitlab-org` module which adds the `GitlabOrgDiscoveryEntityProvider` to the catalog's providers using the new backend system.
@@ -1,5 +0,0 @@
---
-'@backstage/core-components': patch
---
-
-The `SignInPage` guest provider will now fall back to legacy guest auth if the backend request fails, allowing guest auth without a running backend.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-techdocs': patch
+---
+
+Fix weird opening behaviour of the <TechDocsSearch /> component.
@@ -1,5 +0,0 @@
---
-'@backstage/backend-dynamic-feature-service': patch
---
-
-Updates the `scanRoot` method in the `PluginScanner` class to specifically ignore the `lost+found` directory, which is a system-generated directory used for file recovery on Unix-like systems. Skipping this directory avoids unnecessary errors.
@@ -1,5 +0,0 @@
---
-'@backstage/backend-common': patch
---
-
-Added option to `ServerTokenManager.fromConfig` that allows it to be instantiated in production without any configured keys.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-backend': minor
---
-
-Emit well known relationships for the Domain entity kind.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-notifications': patch
---
-
-Empty descriptions are not rendered to improve the look&feel.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-notifications-backend': patch
---
-
-Add possibility to generate random notifications on the fly in local development
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-notifications': patch
---
-
-Fix to show web notifications even when browser is on foreground. Fix duplicate notifications with multiple tabs.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-notifications': patch
---
-
-Allow defining `className` and additional properties for `NotificationsSideBarItem`
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-search-backend-module-explore': patch
---
-
-Update README.md to point to explore plugin in community-plugins repository.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-notifications': patch
---
-
-Fix infinite loop in the notification title counter
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-notifications-backend': patch
---
-
-Updated documentation for sending messages by external services.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-notifications': patch
---
-
-The rendered size of a notification is limited for very long descriptions.
@@ -0,0 +1,5 @@
+---
+'@backstage/cli': patch
+---
+
+Bump `esbuild` target for package builds to `ES2022`.
@@ -1,5 +0,0 @@
---
-'@backstage/backend-plugin-api': patch
---
-
-Removed explicit `toString()` method from `ServiceRef` type.
@@ -61,6 +61,7 @@ yarn.lock                                         @backstage/maintainers @backst
 /plugins/linguist-common                          @backstage/maintainers @backstage/reviewers @awanlin
 /plugins/notifications                            @backstage/maintainers @backstage/notifications-maintainers
 /plugins/notifications-*                          @backstage/maintainers @backstage/notifications-maintainers
+/plugins/scaffolder-backend-module-notifications  @backstage/maintainers @backstage/notifications-maintainers
 /plugins/octopus-deploy                           @backstage/maintainers @backstage/reviewers @jmezach
 /plugins/permission-*                             @backstage/permission-maintainers
 /plugins/playlist                                 @backstage/maintainers @backstage/reviewers @kuangp
@@ -62,9 +62,21 @@
      matchPackageNames: ['p-limit'],
      allowedVersions: '<4.0.0',
    },
+    {
+      matchPackageNames: ['p-throttle'],
+      allowedVersions: '<4.0.0',
+    },
    {
      matchPackageNames: ['p-queue'],
      allowedVersions: '<7.0.0',
    },
+    {
+      matchPackageNames: ['serialize-error'],
+      allowedVersions: '<9.0.0',
+    },
+    {
+      matchPackageNames: ['yn'],
+      allowedVersions: '<5.0.0',
+    },
  ],
 }
@@ -152,6 +152,8 @@ graphviz
 Hackathons
 haproxy
 hardcoded
+Harness
+harness
 Helidon
 Henneke
 Heroku
@@ -464,6 +466,7 @@ Weaveworks
 Webpack
 widget's
 winston
+Wolfi
 www
 WWW
 XCMetrics
@@ -0,0 +1,111 @@
+name: API Breaking Changes (comment)
+
+on:
+  workflow_run:
+    workflows:
+      - 'API Breaking Changes (Trigger)'
+    types:
+      - completed
+
+jobs:
+  setup:
+    name: Add values from previous step
+    runs-on: ubuntu-latest
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
+    permissions:
+      # "If you specify the access for any of these scopes, all of those that are not specified are set to none."
+      # https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
+      actions: read # Access cache
+    outputs:
+      git-ref: ${{ steps.event.outputs.GIT_REF }}
+      pr-number: ${{ steps.event.outputs.PR_NUMBER }}
+      action: ${{ steps.event.outputs.ACTION }}
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
+        with:
+          disable-sudo: true
+          egress-policy: block
+          allowed-endpoints: >
+            api.github.com:443
+
+      - name: 'Download artifacts'
+        # Fetch output (zip archive) from the workflow run that triggered this workflow.
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
+        with:
+          script: |
+            let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({
+               owner: context.repo.owner,
+               repo: context.repo.repo,
+               run_id: context.payload.workflow_run.id,
+            });
+            let matchArtifact = allArtifacts.data.artifacts.filter((artifact) => {
+              return artifact.name == "preview-spec"
+            })[0];
+            if (matchArtifact === undefined) {
+              throw TypeError('Build Artifact not found!');
+            }
+            let download = await github.rest.actions.downloadArtifact({
+               owner: context.repo.owner,
+               repo: context.repo.repo,
+               artifact_id: matchArtifact.id,
+               archive_format: 'zip',
+            });
+            let fs = require('fs');
+            fs.writeFileSync(`${process.env.GITHUB_WORKSPACE}/preview-spec.zip`, Buffer.from(download.data));
+
+      - name: 'Accept event from first stage'
+        run: unzip preview-spec.zip event.json
+
+      - name: Read Event into ENV
+        id: event
+        run: |
+          echo PR_NUMBER=$(jq '.number | tonumber' < event.json) >> $GITHUB_OUTPUT
+          echo ACTION=$(jq --raw-output '.action | tostring | [scan("\\w+")][0]' < event.json) >> $GITHUB_OUTPUT
+          echo GIT_REF=$(jq --raw-output '.pull_request.head.sha | tostring | [scan("\\w+")][0]' < event.json) >> $GITHUB_OUTPUT
+
+      - name: DEBUG - Print Job Outputs
+        if: ${{ runner.debug }}
+        run: |
+          echo "PR number: ${{ steps.event.outputs.PR_NUMBER }}"
+          echo "Git Ref: ${{ steps.event.outputs.GIT_REF }}"
+          echo "Action: ${{ steps.event.outputs.ACTION }}"
+          cat event.json
+
+      - name: Get Comment
+        id: get-comment
+        run: |
+          unzip preview-spec.zip comment.md
+          ls
+          grep
+
+  add-comment:
+    name: Write comment about issues
+    needs:
+      - setup
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
+    permissions:
+      contents: read
+      pull-requests: write
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+
+      # Identify comment to be updated
+      - name: Find comment for API Changes
+        uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3
+        id: find-comment
+        with:
+          issue-number: ${{ needs.setup.outputs.pr-number }}
+          comment-author: 'github-actions[bot]'
+          body-includes: API changes
+          direction: last
+
+      - name: Create or Update Comment with API Changes
+        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4
+        with:
+          comment-id: ${{ steps.find-comment.outputs.comment-id }}
+          issue-number: ${{ github.event.pull_request.number }}
+          body-path: comment.md
+          edit-mode: replace
@@ -0,0 +1,58 @@
+name: API Breaking Changes (Trigger)
+on:
+  pull_request:
+    types: [opened, synchronize, reopened, closed]
+    paths:
+      - '**/openapi.yaml'
+
+jobs:
+  get-backstage-changes:
+    env:
+      NODE_OPTIONS: --max-old-space-size=4096
+    name: Build PR image
+    runs-on: ubuntu-latest
+    if: ${{ github.event_name != 'pull_request' || github.event.action != 'closed' }}
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
+        with:
+          egress-policy: audit
+
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
+        with:
+          # Fetch the commit that's merged into the base rather than the target ref
+          # This will let us diff only the contents of the PR, without fetching more history
+          ref: 'refs/pull/${{ github.event.pull_request.number }}/merge'
+      - name: fetch base
+        run: git fetch --depth 1 origin ${{ github.base_ref }}
+
+      - name: setup-node
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        with:
+          node-version: 18.x
+          registry-url: https://registry.npmjs.org/
+
+      - name: yarn install
+        uses: backstage/actions/yarn-install@a674369920067381b450d398b27df7039b7ef635 # v0.6.5
+        with:
+          cache-prefix: linux-v18
+
+      - name: breaking changes check
+        run: |
+          yarn backstage-repo-tools repo schema openapi check --since origin/${{ github.base_ref }} > comment.md
+
+      - name: Upload Rendered Comment as Artifact
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4
+        with:
+          name: preview-spec
+          path: comment.md
+          retention-days: 2
+          overwrite: true
+
+      - name: Upload PR Event as Artifact
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
+        with:
+          name: preview-spec
+          path: ${{ github.event_path }}
+          retention-days: 2
+          overwrite: true
@@ -13,7 +13,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

@@ -23,11 +23,11 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
        with:
          # Fetch the commit that's merged into the base rather than the target ref
          # This will let us diff only the contents of the PR, without fetching more history
@@ -24,11 +24,11 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
        with:
          ref: '${{ github.event.pull_request.merge_commit_sha }}'

@@ -15,7 +15,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

@@ -40,7 +40,7 @@ jobs:
    name: Test ${{ matrix.node-version }}
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

@@ -28,11 +28,11 @@ jobs:
    name: Install ${{ matrix.node-version }}
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5

      - name: use node.js ${{ matrix.node-version }}
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
@@ -64,11 +64,11 @@ jobs:
    name: Verify ${{ matrix.node-version }}
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5

      - name: use node.js ${{ matrix.node-version }}
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
@@ -187,6 +187,15 @@ jobs:
          --health-retries 5
        ports:
          - 3306/tcp
+      redis:
+        image: redis
+        options: >-
+          --health-cmd "redis-cli ping"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
+        ports:
+          - 6379/tcp

    env:
      CI: true
@@ -197,7 +206,7 @@ jobs:
      INTEGRATION_TEST_AZURE_TOKEN: ${{ secrets.INTEGRATION_TEST_AZURE_TOKEN }}

    steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
      - name: fetch master branch
        run: git fetch origin master

@@ -231,6 +240,7 @@ jobs:
          BACKSTAGE_TEST_DATABASE_POSTGRES16_CONNECTION_STRING: postgresql://postgres:postgres@localhost:${{ job.services.postgres16.ports[5432] }}
          BACKSTAGE_TEST_DATABASE_POSTGRES12_CONNECTION_STRING: postgresql://postgres:postgres@localhost:${{ job.services.postgres12.ports[5432] }}
          BACKSTAGE_TEST_DATABASE_MYSQL8_CONNECTION_STRING: mysql://root:root@localhost:${{ job.services.mysql8.ports[3306] }}/ignored
+          BACKSTAGE_TEST_CACHE_REDIS_CONNECTION_STRING: redis://localhost:${{ job.services.redis.ports[6379] }}

      # We run the test cases before verifying the specs to prevent any failing tests from causing errors.
      - name: verify openapi specs against test cases
@@ -9,7 +9,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

@@ -20,12 +20,12 @@ jobs:

    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

      - name: checkout
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
        with:
          path: backstage
          ref: ${{ github.event.client_payload.version && env.RELEASE_VERSION || github.ref }}
@@ -24,11 +24,11 @@ jobs:

    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5

      - name: use node.js 18.x
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
@@ -15,11 +15,11 @@ jobs:

    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5

      - name: use node.js 18.x
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
@@ -65,7 +65,7 @@ jobs:
      INTEGRATION_TEST_AZURE_TOKEN: ${{ secrets.INTEGRATION_TEST_AZURE_TOKEN }}

    steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5

      - name: use node.js ${{ matrix.node-version }}
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
@@ -105,11 +105,11 @@ jobs:
      - name: test (and upload coverage)
        run: |
          yarn backstage-cli repo test --maxWorkers=3 --workerIdleMemoryLimit=1300M --coverage
-          bash <(curl -s https://codecov.io/bash)
+          # bash <(curl -s https://codecov.io/bash)
          # Upload code coverage for some specific flags. Also see .codecov.yml
-          bash <(curl -s https://codecov.io/bash) -f packages/core-app-api/coverage/* -F core-app-api
-          bash <(curl -s https://codecov.io/bash) -f packages/core-components/coverage/* -F core-components
-          bash <(curl -s https://codecov.io/bash) -f packages/core-plugin-api/coverage/* -F core-plugin-api
+          # bash <(curl -s https://codecov.io/bash) -f packages/core-app-api/coverage/* -F core-app-api
+          # bash <(curl -s https://codecov.io/bash) -f packages/core-components/coverage/* -F core-components
+          # bash <(curl -s https://codecov.io/bash) -f packages/core-plugin-api/coverage/* -F core-plugin-api
        env:
          BACKSTAGE_TEST_DISABLE_DOCKER: 1
          BACKSTAGE_TEST_DATABASE_POSTGRES16_CONNECTION_STRING: postgresql://postgres:postgres@localhost:${{ job.services.postgres16.ports[5432] }}
@@ -144,11 +144,11 @@ jobs:

    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5

      - name: use node.js ${{ matrix.node-version }}
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
@@ -10,7 +10,7 @@ jobs:
    if: github.repository == 'backstage/backstage'
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

@@ -20,7 +20,7 @@ jobs:

    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

@@ -30,7 +30,8 @@ jobs:
        run: |
          mkdir -p ./pr
          echo $PR_NUMBER > ./pr/pr_number
-      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+      - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
        with:
          name: pr_number-${{ github.event.pull_request.number }}
          path: pr/
+          overwrite: true
@@ -17,7 +17,7 @@ jobs:
    steps:
      # Inspired by https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#using-data-from-the-triggering-workflow
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

@@ -18,7 +18,7 @@ jobs:
    if: github.repository == 'backstage/backstage' && ( github.event.pull_request || github.event.issue.pull_request )
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

@@ -29,12 +29,12 @@ jobs:

    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

      - name: 'Checkout code'
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
        with:
          persist-credentials: false

@@ -58,14 +58,15 @@ jobs:
      # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
      # format to the repository Actions tab.
      - name: 'Upload artifact'
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
        with:
          name: SARIF file
          path: results.sarif
          retention-days: 5
+          overwrite: true

      # Upload the results to GitHub's code scanning dashboard.
      - name: 'Upload to code-scanning'
-        uses: github/codeql-action/upload-sarif@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1
+        uses: github/codeql-action/upload-sarif@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
        with:
          sarif_file: results.sarif
@@ -10,11 +10,11 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
        with:
          # Fetch changes to previous commit - required for 'only_changed' in Prettier action
          fetch-depth: 0
@@ -11,12 +11,12 @@ jobs:
    if: github.actor == 'dependabot[bot]' && github.repository == 'backstage/backstage'
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

      - name: Checkout
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
        with:
          fetch-depth: 2
          ref: ${{ github.head_ref }}
@@ -8,7 +8,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

@@ -21,7 +21,7 @@ jobs:
        run: npm install semver@7.3.5 fs-extra@10.0.0 @manypkg/get-packages@1.1.1

      - name: Checkout
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
        with:
          path: backstage
          # 'v' prefix is added here for the tag, we keep it out of the manifest logic
@@ -29,7 +29,7 @@ jobs:

      # Checkout backstage/versions into /backstage/versions, which is where store the output
      - name: Checkout versions
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
        with:
          repository: backstage/versions
          path: backstage/versions
@@ -11,12 +11,12 @@ jobs:
    if: github.actor == 'renovate[bot]' && github.repository == 'backstage/backstage'
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

      - name: Checkout
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
        with:
          fetch-depth: 2
          ref: ${{ github.head_ref }}
@@ -12,11 +12,11 @@ jobs:

    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5

      - name: use node.js 18.x
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
@@ -25,11 +25,11 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
      - name: Monitor and Synchronize Snyk Policies
        uses: snyk/actions/node@8349f9043a8b7f0f3ee8885bf28f0b388d2446e8 # master
        with:
@@ -58,6 +58,6 @@ jobs:
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
          NODE_OPTIONS: --max-old-space-size=7168
      - name: Upload Snyk report
-        uses: github/codeql-action/upload-sarif@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1
+        uses: github/codeql-action/upload-sarif@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
        with:
          sarif_file: snyk.sarif
@@ -14,11 +14,11 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
        with:
          fetch-depth: 20000
          fetch-tags: true
@@ -26,12 +26,12 @@ jobs:
      tags: ${{ steps.meta.outputs.tags }}
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

      - name: checkout
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5

      - name: setup-node
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
@@ -84,12 +84,12 @@ jobs:
      - build-backstage
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

      - name: Checkout git repo
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
      - name: Render Compose File
        run: |
          # update image after the build above
@@ -98,17 +98,19 @@ jobs:
          kustomize build . > manifests.rendered.yml
          cat manifests.rendered.yml
      - name: Upload Rendered Manifests File as Artifact
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4
        with:
          name: preview-spec
          path: ./.github/uffizzi/k8s/manifests/manifests.rendered.yml
          retention-days: 2
+          overwrite: true
      - name: Upload PR Event as Artifact
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
        with:
          name: preview-spec
          path: ${{ github.event_path }}
          retention-days: 2
+          overwrite: true

  delete-preview:
    name: Call for Preview Deletion
@@ -116,14 +118,15 @@ jobs:
    if: ${{ github.event.action == 'closed' }}
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

      # If this PR is closing, we will not render a compose file nor pass it to the next workflow.
      - name: Upload PR Event as Artifact
-        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
        with:
          name: preview-spec
          path: ${{ github.event_path }}
          retention-days: 2
+          overwrite: true
@@ -23,7 +23,7 @@ jobs:
      action: ${{ steps.event.outputs.ACTION }}
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          disable-sudo: true
          egress-policy: block
@@ -26,7 +26,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

@@ -20,11 +20,11 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
      - name: Use Node.js 18.x
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
        with:
@@ -42,12 +42,12 @@ jobs:

    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

      - name: Checkout repository
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+        uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
        with:
          # We must fetch at least the immediate parents so that if this is
          # a pull request then we can checkout the head.
@@ -55,7 +55,7 @@ jobs:

      # Initializes the CodeQL tools for scanning.
      - name: Initialize CodeQL
-        uses: github/codeql-action/init@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1
+        uses: github/codeql-action/init@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
        with:
          languages: ${{ matrix.language }}
          # If you wish to specify custom queries, you can do so here or in a config file.
@@ -66,7 +66,7 @@ jobs:
      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
      # If this step fails, then you should remove it and run the build manually (see below)
      - name: Autobuild
-        uses: github/codeql-action/autobuild@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1
+        uses: github/codeql-action/autobuild@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3

      # ℹ️ Command-line programs to run using the OS shell.
      # 📚 https://git.io/JvXDl
@@ -80,4 +80,4 @@ jobs:
      #   make release

      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1
+        uses: github/codeql-action/analyze@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
@@ -12,11 +12,11 @@ jobs:

    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5

      # Vale does not support file excludes, so we use the script to generate a list of files instead
      # The action also does not allow args or a local config file to be passed in, so the files array
@@ -23,7 +23,7 @@ jobs:
    name: Kubernetes ${{ matrix.node-version }}
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

@@ -22,11 +22,11 @@ jobs:
    name: Kubernetes ${{ matrix.node-version }}
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
+      - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5

      - name: use node.js ${{ matrix.node-version }}
        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
@@ -29,7 +29,7 @@ jobs:
    name: E2E Linux ${{ matrix.node-version }}
    steps:
      - name: Harden Runner
-        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
+        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

--- a/Show More
+++ b/Show More