74233 Commits

Author SHA1 Message Date
Aditya Kumar 4e265fec15 Merge branch 'master' into devtools-bui-config 2026-04-01 08:30:32 +05:30
backstage-goalie[bot] 5407b5dd0a Merge pull request #33709 from backstage/renovate/axios-1.x-lockfile
chore(deps): update dependency axios to v1.14.0
2026-04-01 02:40:54 +00:00
renovate[bot] 93466ca419 chore(deps): update dependency axios to v1.14.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-01 01:10:56 +00:00
backstage-goalie[bot] 886fe58ff7 Merge pull request #33707 from backstage/renovate/modelcontextprotocol-sdk-1.x-lockfile
chore(deps): update dependency @modelcontextprotocol/sdk to v1.28.0
2026-04-01 00:59:48 +00:00
renovate[bot] a405d69bdd chore(deps): update dependency @modelcontextprotocol/sdk to v1.28.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-01 00:07:43 +00:00
backstage-goalie[bot] 2246288871 Merge pull request #33702 from backstage/renovate/aws-sdk-js-v3-monorepo
chore(deps): update aws-sdk-js-v3 monorepo
2026-04-01 00:01:51 +00:00
Paul Schultz 2072182904 docs: replace JSX codemod tutorial with link to codemod.com
Signed-off-by: Paul Schultz <pschultz@pobox.com>
2026-03-31 15:32:54 -05:00
Fredrik Adelöw bb7768ba06 docs: fix broken links and anchors across documentation
Fix ~30 broken links and anchors across the documentation site, including
incorrect relative paths, mismatched anchor names, zero-width characters
in URLs, and references to renamed or removed headings.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-31 18:43:40 +02:00
Fredrik Adelöw 8270f88fda Merge pull request #33559 from backstage/changeset-release/master
Version Packages (next)
2026-03-31 18:37:41 +02:00
Karthik 329f5920b6 feat(techdocs): add techdocs-cli option to disable external font download
Signed-off-by: Karthik <karthik.jk11@gmail.com>
2026-03-31 21:39:52 +05:30
Karthik 5ef8d166cb feat(techdocs): add app-config option to disable external font download
Signed-off-by: Karthik <karthik.jk11@gmail.com>
2026-03-31 21:30:45 +05:30
Fredrik Adelöw f46363130c Update packages/core-components/src/components/MarkdownContent/MarkdownContent.tsx
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-03-31 17:54:39 +02:00
github-actions[bot] a2cb332e25 Version Packages (next) 2026-03-31 15:30:51 +00:00
Patrik Oldsberg 292b6431a2 Merge pull request #33688 from backstage/fix-frontend-plugin-legacy-id
Fix template name collision and export path in CLI new module
2026-03-31 17:24:04 +02:00
Fredrik Adelöw 0449cf02fd Update packages/core-components/src/components/MarkdownContent/MarkdownContent.tsx
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-03-31 17:20:34 +02:00
Jonathan Roebuck 9244b70c57 chore: add changesets, update API reports, fix type errors
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
2026-03-31 16:20:23 +01:00
Jonathan Roebuck 906f104f6b feat(core-app-api): redirect to provider logoutUrl on sign-out when available
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
2026-03-31 16:20:23 +01:00
Jonathan Roebuck 97850d0ef1 feat(auth0): implement federated logout to clear Auth0 and IdP sessions
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
2026-03-31 16:20:23 +01:00
Jonathan Roebuck 0ef5a03fb3 feat(auth-node): return logoutUrl in logout response when provided by authenticator
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
2026-03-31 16:20:23 +01:00
Jonathan Roebuck fec31bdde5 feat(auth-node): add OAuthAuthenticatorLogoutResult type for provider logout redirects
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
2026-03-31 16:20:23 +01:00
Fredrik Adelöw 8a2a81fa1e Merge pull request #33687 from backstage/freben/bump-glob-rollup
Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities
2026-03-31 16:06:22 +02:00
renovate[bot] 0cbba8a528 chore(deps): update aws-sdk-js-v3 monorepo
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-31 14:06:03 +00:00
Fredrik Adelöw 739b655063 Merge pull request #33250 from backstage/renovate/use-sync-external-store-1.x
chore(deps): update dependency @types/use-sync-external-store to v1
2026-03-31 15:58:16 +02:00
Fredrik Adelöw 9ee88aeb59 Merge pull request #33170 from dbmdz/gitlab-repo-picker-improvements
Gitlab repo picker improvements
2026-03-31 15:55:10 +02:00
Fredrik Adelöw ad19cb040f Merge pull request #33629 from jonkoops/auditor-zod-v4-refactor
refactor(backend-defaults): migrate internal Zod usage from v3 to v4
2026-03-31 15:52:18 +02:00
Fredrik Adelöw 0c6bdf1bd4 Merge pull request #33589 from nikitashalnov/add-aws-plugins-to-directory
Add AWS plugins to plugin directory (ECR, Config, GenAI, Security Hub)
2026-03-31 15:46:47 +02:00
Fredrik Adelöw b6c0ef5d5d Add windowsPathsNoEscape to glob calls that may receive backslash paths
Glob v13 treats backslashes as escape characters by default, unlike v7
which treated them as path separators on Windows. This broke Windows CI
where path.join/resolve produce backslash paths.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-31 15:20:56 +02:00
asheen f6c794ae08 Update .changeset/legal-results-kneel.md
Co-authored-by: Patrik Oldsberg <poldsberg@gmail.com>
Signed-off-by: asheen <sergeantnumnumz@gmail.com>
2026-03-31 09:06:25 -04:00
Fredrik Adelöw c3b4782b97 Merge pull request #33361 from lokeshkaki/feat/azure-scm-events
feat(catalog-backend-module-azure): add Azure DevOps SCM event translation layer
2026-03-31 15:03:26 +02:00
Fredrik Adelöw c5958fc175 Merge pull request #33362 from lokeshkaki/feat/gitlab-scm-events
feat(catalog-backend-module-gitlab): add GitLab SCM event translation layer for catalog reprocessing
2026-03-31 14:59:18 +02:00
Vincenzo Scamporlino 3964163dce Fix export path in frontend plugin module template
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2026-03-31 14:36:58 +02:00
Vincenzo Scamporlino e38bcefb99 Fix template name collision between new and legacy frontend plugin templates
The legacy frontend plugin template had the same name (`frontend-plugin`) as
the new frontend plugin template, causing a conflict error when both were shown
(e.g. when the frontend system could not be auto-detected). Rename the legacy
template to `frontend-plugin-legacy` so both can coexist.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2026-03-31 14:36:53 +02:00
Johan Persson feaf3d1ade fix(ui): fix HeaderNav hover indicator covering tab text
Add `position: relative` and `z-index: 2` to nav items so they
paint above the hover/active indicator, matching the Tabs pattern.
This fixes themes with opaque `--bui-bg-neutral-2` values obscuring
tab labels on hover.

Also fix `--bui-font-family` (non-existent) to `--bui-font-regular`.

Signed-off-by: Johan Persson <johanopersson@gmail.com>
2026-03-31 13:43:25 +02:00
Peter Macdonald 4a1b7f228d update wording
Signed-off-by: Peter Macdonald <peterm4c@pm.me>
2026-03-31 13:30:00 +02:00
Peter Macdonald a3c65c8e2a add a note about the backstage version in the fe-migration skill
Signed-off-by: Peter Macdonald <peterm4c@pm.me>
2026-03-31 13:27:17 +02:00
Patrik Oldsberg 9bfa74bbb5 Merge pull request #33446 from Sarabadu/patch-2
Rename frontend-plugin to legacy-frontend-plugin
2026-03-31 10:30:13 +02:00
Patrik Oldsberg 06648f6b97 Update .changeset/legal-results-kneel.md
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2026-03-31 10:29:04 +02:00
Patrik Oldsberg 0a09b718c8 Update .changeset/legal-results-kneel.md
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2026-03-31 10:28:41 +02:00
Patrik Oldsberg a801348a18 Merge pull request #33692 from drodil/skills_docs
docs(ai): add skills documentation
2026-03-31 10:21:38 +02:00
Fredrik Adelöw c15599c286 Merge pull request #33684 from backstage/freben/fix-api-docs-flaky-test
Fix flaky api-docs alpha test
2026-03-31 09:19:01 +02:00
Hellgren Heikki 8435ce9a81 docs(ai): add skills documentation
based on the BEP-0013 add the necessary docs for using and
contributing AI skills

Signed-off-by: Hellgren Heikki <heikki.hellgren@op.fi>
2026-03-31 07:59:05 +03:00
asheen1234 7eeadfa8e3 feat: add RepoOwnerPicker tests and prettier linting
Signed-off-by: asheen1234 <sergeantnumnumz@gmail.com>
2026-03-30 21:12:40 -04:00
asheen1234 4204cd8bc7 fix: switch from id to title
Signed-off-by: asheen1234 <sergeantnumnumz@gmail.com>
2026-03-30 19:24:56 -04:00
backstage-goalie[bot] 3dd27832fc Merge pull request #33685 from backstage/renovate/zod-to-json-schema-3.x-lockfile
chore(deps): update dependency zod-to-json-schema to v3.25.2
2026-03-30 21:43:01 +00:00
Fredrik Adelöw 2e5c5f85b2 Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities
Addresses the high severity rollup path traversal vulnerability
(GHSA-mw96-cpmx-2vgc) and the glob security advisory by upgrading
all instances across the monorepo. Updates code that used the legacy
callback-based glob API to use the modern promise/sync API.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-30 23:13:08 +02:00
Fredrik Adelöw 0419acede2 Revert "Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities"
This reverts commit 6d76b1729b.

Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-30 23:11:17 +02:00
Fredrik Adelöw 6d76b1729b Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities
Addresses the high severity rollup path traversal vulnerability
(GHSA-mw96-cpmx-2vgc) and the glob security advisory by upgrading
all instances across the monorepo. Updates code that used the legacy
callback-based glob API to use the modern promise/sync API.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-30 23:10:09 +02:00
Fredrik Adelöw d06ba3a58e Revert "Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities"
This reverts commit 91b359ee5f.

Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-30 23:05:11 +02:00
Fredrik Adelöw 91b359ee5f Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities
Addresses the high severity rollup path traversal vulnerability
(GHSA-mw96-cpmx-2vgc) and the glob security advisory by upgrading
all instances across the monorepo. Updates code that used the legacy
callback-based glob API to use the modern promise/sync API.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-30 23:02:37 +02:00
renovate[bot] 8ba5304b3f chore(deps): update dependency zod-to-json-schema to v3.25.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 20:55:51 +00:00