74233 Commits

Author SHA1 Message Date
benjdlambert 97c917ea1c refactor: rename permission to visibilityPermission
Signed-off-by: benjdlambert <ben@blam.sh>
2026-03-12 15:07:32 +01:00
benjdlambert 5f739e1312 fix: address PR feedback for actions permissions
Signed-off-by: benjdlambert <ben@blam.sh>
2026-03-12 15:00:36 +01:00
chanchalkhatri19 21608833fa docs: add missing description frontmatter to golden-path docs
Signed-off-by: chanchalkhatri19 <chanchal.khatri01@infosys.com>
2026-03-12 12:44:43 +00:00
renovate[bot] b3b081909a chore(deps): update github artifact actions
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-12 12:09:03 +00:00
renovate[bot] 8976bd58fd chore(deps): update docker/setup-buildx-action action to v4
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-12 12:08:55 +00:00
Fredrik Adelöw a9d338d1a3 Merge pull request #33168 from dev404ai/add-rulehub-policy-catalog
Add RuleHub Policy Catalog plugin to the Backstage plugin directory
2026-03-12 13:04:22 +01:00
Fredrik Adelöw 154c52d6ed Merge pull request #33313 from chanchalkhatri19/fix-doc-typos
docs: fix typos and grammar errors across documentation
2026-03-12 13:03:32 +01:00
Fredrik Adelöw b46669d743 Merge pull request #33309 from zeshanziya/document-qntity-full-text-filter
docs: document full text filtering section of entity api
2026-03-12 13:02:43 +01:00
backstage-goalie[bot] ad4941dccd Merge pull request #33310 from backstage/renovate/flatted-3.x-lockfile
chore(deps): update dependency flatted to v3.4.1
2026-03-12 11:45:59 +00:00
chanchalkhatri19 39ba427d8a docs: fix typos and grammar errors across documentation
Signed-off-by: chanchalkhatri19 <chanchal.khatri01@infosys.com>
2026-03-12 11:31:24 +00:00
renovate[bot] 3de804a11b chore(deps): update docker/login-action action to v4
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-12 11:07:50 +00:00
renovate[bot] 05c704d07f chore(deps): update dependency flatted to v3.4.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-12 11:06:23 +00:00
zeshanziya 4ec13e7cea docs: document full text filtering section of entity api
Signed-off-by: zeshanziya <zeshan.aws@gmail.com>
2026-03-12 16:34:34 +05:30
Fredrik Adelöw 19dc1a45cb Merge pull request #33280 from drodil/remove_trx
fix(catalog): make catalog entity deletion transactional
2026-03-12 11:58:26 +01:00
Hellgren Heikki a91bd1b8a0 fix(catalog): make catalog entity deletion transactional
additionally, make the catalog build respect the deferred stitching mode
after deleting entities.

Signed-off-by: Hellgren Heikki <heikki.hellgren@op.fi>
2026-03-12 12:20:10 +02:00
renovate[bot] 293dfe00f1 chore(deps): update docker/build-push-action action to v7
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-12 10:05:34 +00:00
renovate[bot] f55c567da3 chore(deps): update dependency windows to v2025
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-12 10:05:25 +00:00
Fredrik Adelöw 2195a2955a Merge pull request #33238 from backstage/renovate/step-security-harden-runner-2.x
chore(deps): update step-security/harden-runner action to v2.15.1
2026-03-12 10:32:44 +01:00
Fredrik Adelöw a8ff4ad8c7 Merge pull request #33245 from backstage/renovate/jquery-4.x
chore(deps): update dependency @types/jquery to v4
2026-03-12 10:32:23 +01:00
Fredrik Adelöw 223a3d1f88 Merge pull request #33269 from backstage/renovate/lint-staged-16.x
chore(deps): update dependency lint-staged to v16
2026-03-12 10:31:48 +01:00
Fredrik Adelöw d0f37c369b Merge pull request #33295 from backstage/renovate/sort-package-json-3.x
chore(deps): update dependency sort-package-json to v3
2026-03-12 10:30:15 +01:00
Fredrik Adelöw de44367824 Merge pull request #33294 from backstage/renovate/snyk-nodejs-lockfile-parser-2.x
chore(deps): update dependency snyk-nodejs-lockfile-parser to v2
2026-03-12 10:29:29 +01:00
Fredrik Adelöw a41eff026f Merge pull request #33251 from backstage/renovate/globals-17.x
chore(deps): update dependency globals to v17
2026-03-12 10:25:46 +01:00
Fredrik Adelöw c0b779f5a0 Merge pull request #33281 from backstage/freben/search-fk-safe-migration
fix(catalog): make search FK migration safe for large databases
2026-03-12 10:07:18 +01:00
benjdlambert d504478c1e docs: add permissions documentation for actions registry
Signed-off-by: benjdlambert <ben@blam.sh>
2026-03-12 10:06:40 +01:00
Fredrik Adelöw d6669758af Merge pull request #33298 from backstage/freben/devtools-cancel-task
devtools: Add cancel task operation to scheduled tasks
2026-03-12 10:02:54 +01:00
benjdlambert cc8348ef2e feat: add permissions integration to actions registry
Signed-off-by: benjdlambert <ben@blam.sh>
2026-03-12 09:58:04 +01:00
Fredrik Adelöw 325feafebf Update .changeset/devtools-cancel-scheduled-task.md
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-03-12 09:24:38 +01:00
Hellgren Heikki fa33a33a6a docs: add seo improvements to microsite
following the #33200 but adding also LD+JSON data, preconnect
for google fonts, robots.txt, and other additional metadata
for the page.

Signed-off-by: Hellgren Heikki <heikki.hellgren@op.fi>
2026-03-12 10:18:45 +02:00
chanchalkhatri19 9df38f2e53 docs: add accountId option to AWS S3 discovery config examples
Signed-off-by: chanchalkhatri19 <chanchal.khatri01@infosys.com>
2026-03-12 06:18:57 +00:00
abdellahhanane 5fbe51d713 Add log for the workflow run url
Signed-off-by: abdellahhanane <abdellahhanane44@gmail.com>
2026-03-11 21:27:58 -04:00
Fredrik Adelöw 239c8dcfd2 cleanup
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-11 20:32:31 +01:00
Fredrik Adelöw 9110c16c8a api report
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-11 19:41:10 +01:00
AmbrishRamachandiran 4776d564ce Fix review comments
Signed-off-by: AmbrishRamachandiran <ambrish.r@infosys.com>
2026-03-11 21:47:18 +05:30
Rickard Dybeck 6b6b5de514 feat(kubernetes): add DNS endpoint support to GKE cluster locator (#33297)
* feat(kubernetes): add DNS endpoint support to GKE cluster locator

Add endpointType config option to GkeClusterLocator allowing use of
DNS-based control plane endpoints instead of public IP endpoints.
When set to 'dns', the locator uses the cluster's DNS endpoint
(e.g. gke-<uid>.<region>.gke.goog) with fallback to public IP if
no DNS endpoint is available.

Signed-off-by: Rickard Dybeck <dybeck@spotify.com>

* fix: fix relevant AI review comments

Signed-off-by: Rickard Dybeck <dybeck@spotify.com>

---------

Signed-off-by: Rickard Dybeck <dybeck@spotify.com>
2026-03-11 12:09:52 -04:00
Fredrik Adelöw f80195ec3f Add changeset for devtools cancel task
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
Made-with: Cursor
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
Made-with: Cursor
2026-03-11 17:01:40 +01:00
Fredrik Adelöw 85f38c29d1 devtools: Add cancel task operation to scheduled tasks
Renames useTriggerScheduledTask to useScheduledTasksOperations and adds
cancelTask alongside triggerTask, with shared isLoading/error state. Adds
CancelScheduledTask type to devtools-common and cancelScheduledTask to the
DevToolsApi interface and client, hitting the existing scheduler cancel
endpoint. The ScheduledTasksContent UI now shows both trigger and cancel
buttons per task row.

Signed-off-by: Fredrik Adelöw <freben@spotify.com>
Made-with: Cursor
2026-03-11 16:47:24 +01:00
Fredrik Adelöw 2b87d22ad4 Update plugins/catalog-backend/migrations/20260214000000_search_fk_final_entities.js
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-03-11 16:19:19 +01:00
Fredrik Adelöw 57fee86920 Merge pull request #33272 from backstage/freben/perfnow
one more flake
2026-03-11 15:59:39 +01:00
Fredrik Adelöw 34af7b4551 catalog-backend: improve search FK migration test coverage
Add tests for NULL entity_id rows surviving migration, FK enforcement
rejecting invalid inserts, and down migration orphan cleanup.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-11 15:03:06 +01:00
Fredrik Adelöw 1b69ff9c82 catalog-backend: make MySQL FK swap idempotent with retry loop
Replace the non-atomic MySQL transaction wrapper with a retry loop that
checks information_schema before dropping the FK and retries the add if
new orphan rows appear during the window between DROP and ADD.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-11 14:56:45 +01:00
Fredrik Adelöw 09c7e49f82 catalog-backend: combine PG DROP+ADD into single ALTER TABLE, fix MySQL comment
- Combine DROP CONSTRAINT and ADD CONSTRAINT into a single ALTER TABLE
  statement for PostgreSQL, eliminating the brief window where no FK exists
- Reword MySQL transaction comment to clarify that ALTER TABLE causes
  implicit commits in InnoDB, so the wrapper doesn't provide full atomicity

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-11 14:43:10 +01:00
Fredrik Adelöw 89a1c313d0 catalog-backend: address review comments on search FK migration
- Close PG race window: drop old FK and add NOT VALID FK before batch
  cleanup, so no new orphans can be inserted during cleanup
- Extract batch-delete helpers (batchDeleteOrphansPg, batchDeleteOrphansMysql)
  to reduce duplication across up/down and dialects
- Fix ShareUpdateExclusiveLock comment to be more precise
- Make changeset message more descriptive

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-11 14:16:25 +01:00
renovate[bot] 28f5462bd8 chore(deps): update dependency sort-package-json to v3
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-11 13:05:08 +00:00
Fredrik Adelöw 1ecf82a5c2 catalog-backend: wrap MySQL/SQLite migration branches in explicit transactions
The search FK migration uses transaction: false for PostgreSQL's benefit,
but this left MySQL and SQLite branches non-atomic. A failure between
dropForeign and the new addForeign would leave the table with no FK
constraint. Wrap those branches in explicit knex.transaction() calls.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-11 14:00:52 +01:00
Fredrik Adelöw 3644b725f8 add changeset
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-11 13:58:44 +01:00
Patrik Oldsberg f7f54fca9d Merge pull request #33277 from backstage/rugvip/fix-agents-md-key-directories
AGENTS.md: fix duplicate /packages/app entry in Key Directories
2026-03-11 13:48:41 +01:00
renovate[bot] 2bc7595dfa chore(deps): update dependency snyk-nodejs-lockfile-parser to v2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-11 12:41:43 +00:00
benjdlambert 26b5f7a5f9 chore: fix main build
Signed-off-by: benjdlambert <ben@blam.sh>
2026-03-11 13:41:01 +01:00
Ben Lambert e9b6e978f1 Merge commit from fork
* fix: prevent SSRF via redirect in CIMD metadata fetch

* fix: prevent SSRF via redirect in CIMD metadata fetch

* fix: add redirect target listener to SSRF redirect test
2026-03-11 13:34:25 +01:00