74233 Commits

Author SHA1 Message Date
renovate[bot] 4792ecfc44 chore(deps): update dependency @uiw/codemirror-themes to v4.25.7
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-06 09:01:57 +01:00
dev404ai 4f4699525d Add RuleHub Policy Catalog plugin directory entry
Signed-off-by: dev404ai <dev404ai@gmail.com>
2026-03-06 12:16:59 +07:00
renovate[bot] c9c2b94d07 chore(deps): update dependency ldapts to v8.1.7
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-06 04:39:12 +00:00
renovate[bot] 93a8af8631 chore(deps): update dependency isomorphic-git to v1.37.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-06 00:41:12 +00:00
Kai Dubauskas 2fbdbc1679 retrigger CI
Signed-off-by: Kai Dubauskas <kai.dubauskas@doordash.com>
2026-03-05 18:34:55 -05:00
Kai Dubauskas 047c49a971 fix comment
Signed-off-by: Kai Dubauskas <kai.dubauskas@doordash.com>
2026-03-05 18:19:06 -05:00
Kai Dubauskas 2eec3ecc09 changelog wording
Signed-off-by: Kai Dubauskas <kai.dubauskas@doordash.com>
2026-03-05 18:18:04 -05:00
Kai Dubauskas 878e73bd4b changelog wording
Signed-off-by: Kai Dubauskas <kai.dubauskas@doordash.com>
2026-03-05 18:17:37 -05:00
Kai Dubauskas 12a0ccb278 only dm original user entities
Signed-off-by: Kai Dubauskas <kai.dubauskas@doordash.com>
2026-03-05 18:14:42 -05:00
backstage-goalie[bot] 5361cbdcfc Merge pull request #32959 from backstage/renovate/eslint-plugin-testing-library-7.x-lockfile
chore(deps): update dependency eslint-plugin-testing-library to v7.16.0
2026-03-05 23:10:11 +00:00
renovate[bot] d715610824 chore(deps): update dependency eslint-plugin-testing-library to v7.16.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-05 22:09:53 +00:00
renovate[bot] 2485cb5aa3 chore(deps): update dependency @types/nodemailer to v7.0.11
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-05 22:07:32 +00:00
Fredrik Adelöw bf59528fb9 catalog: remove stitch_ticket from final_entities, use two-ticket model in stitch_queue
Replace the single stitch_ticket column in final_entities with a two-ticket
model (latest_ticket + active_ticket) in stitch_queue for optimistic
concurrency control. When picking up stitch work, active_ticket is set to
latest_ticket. Before writing results, the stitcher checks that latest_ticket
hasn't changed. This fully decouples stitching concurrency from final_entities.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-05 23:03:38 +01:00
Fredrik Adelöw 695a57b7e8 Merge pull request #32957 from backstage/renovate/google-cloud-cloud-sql-connector-1.x-lockfile
chore(deps): update dependency @google-cloud/cloud-sql-connector to v1.9.1
2026-03-05 22:55:08 +01:00
dependabot[bot] 6d067374b4 chore(deps): bump svgo from 3.3.2 to 3.3.3 in /microsite
Bumps [svgo](https://github.com/svg/svgo) from 3.3.2 to 3.3.3.
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](https://github.com/svg/svgo/compare/v3.3.2...v3.3.3)

---
updated-dependencies:
- dependency-name: svgo
  dependency-version: 3.3.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-05 21:54:48 +00:00
Fredrik Adelöw ad288d8f94 Merge pull request #32659 from backstage/renovate/remixicon-react-4.x-lockfile
chore(deps): update dependency @remixicon/react to v4.9.0
2026-03-05 22:54:27 +01:00
Fredrik Adelöw 27233a0a2e Merge pull request #32958 from backstage/renovate/github-codeql-action-3.x
chore(deps): update github/codeql-action action to v3.32.5
2026-03-05 22:54:03 +01:00
Fredrik Adelöw ca7748bed7 Merge pull request #32960 from backstage/renovate/knip-5.x-lockfile
chore(deps): update dependency knip to v5.85.0
2026-03-05 22:53:17 +01:00
Fredrik Adelöw 0b2e3feb3d Merge pull request #32981 from backstage/dependabot/npm_and_yarn/bn.js-4.12.3
build(deps): bump bn.js from 4.12.0 to 4.12.3
2026-03-05 22:53:00 +01:00
Fredrik Adelöw c21c86ccf4 Merge pull request #33023 from backstage/renovate/codemirror
chore(deps): update codemirror
2026-03-05 22:52:41 +01:00
Fredrik Adelöw cf40d27ac5 Merge pull request #33024 from backstage/renovate/lodash-4.x-lockfile
chore(deps): update dependency @types/lodash to v4.17.24
2026-03-05 22:52:03 +01:00
Fredrik Adelöw cc30f5c5f8 Merge pull request #33048 from backstage/dependabot/npm_and_yarn/minimatch-10.2.4
build(deps): bump minimatch from 10.2.1 to 10.2.4
2026-03-05 22:51:48 +01:00
Fredrik Adelöw 7218a2aa93 Merge pull request #33105 from backstage/dependabot/npm_and_yarn/underscore-1.13.8
build(deps): bump underscore from 1.13.7 to 1.13.8
2026-03-05 22:51:30 +01:00
Fredrik Adelöw 13c09f6a77 Merge pull request #33121 from backstage/dependabot/npm_and_yarn/hono-4.12.5
chore(deps): bump hono from 4.12.0 to 4.12.5
2026-03-05 22:50:31 +01:00
Fredrik Adelöw 6b9eee7226 Merge pull request #33123 from backstage/dependabot/npm_and_yarn/hono/node-server-1.19.10
chore(deps): bump @hono/node-server from 1.19.9 to 1.19.10
2026-03-05 22:50:12 +01:00
Fredrik Adelöw eb0757a406 Merge pull request #33127 from backstage/dependabot/npm_and_yarn/microsite/immutable-5.1.5
chore(deps): bump immutable from 5.0.2 to 5.1.5 in /microsite
2026-03-05 22:49:55 +01:00
Fredrik Adelöw e867e7949a Merge pull request #33130 from backstage/dependabot/npm_and_yarn/svgo-2.8.2
chore(deps): bump svgo from 2.8.0 to 2.8.2
2026-03-05 22:49:38 +01:00
Fredrik Adelöw bfc6da9f07 Merge pull request #33135 from backstage/dependabot/npm_and_yarn/multer-2.1.1
chore(deps): bump multer from 2.0.2 to 2.1.1
2026-03-05 22:49:13 +01:00
Fredrik Adelöw 863ed41ca1 Merge pull request #33155 from backstage/dependabot/npm_and_yarn/dompurify-3.3.2
chore(deps): bump dompurify from 3.3.1 to 3.3.2
2026-03-05 22:46:53 +01:00
Fredrik Adelöw 7416e8b0c0 catalog: move the stitch queue concerns into a dedicated stitch_queue table
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-05 22:26:33 +01:00
dependabot[bot] 9795d3022b chore(deps): bump dompurify from 3.3.1 to 3.3.2
Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.3.1 to 3.3.2.
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.3.1...3.3.2)

---
updated-dependencies:
- dependency-name: dompurify
  dependency-version: 3.3.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-05 19:18:40 +00:00
Fredrik Adelöw 182cd749d4 Merge pull request #33157 from backstage/freben/novr
skip verify on the dependabot pr fixup
2026-03-05 20:11:42 +01:00
Fredrik Adelöw 03bcb6e8e8 skip verify on the dependabot pr fixup
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-05 20:09:46 +01:00
Fredrik Adelöw e359d84d1c Merge pull request #33156 from backstage/freben/dependabot-dedupe
ci: dedupe yarn.lock in Dependabot PR workflow
2026-03-05 19:48:41 +01:00
Fredrik Adelöw cc6c579945 ci: add upfront dependabot branch check
Move the branch verification to a separate step right after checkout,
and gate all subsequent steps on its output. Removes the redundant
branch check from inside the changeset generation script.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-05 19:08:22 +01:00
Fredrik Adelöw dda57bdf3d ci: update actions/setup-node to v6.2.0
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-05 17:47:48 +01:00
Fredrik Adelöw 5e9e97af08 ci: use node-version 22.x
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-05 17:47:07 +01:00
Fredrik Adelöw 51a36847ae ci: use yarn dedupe for all lockfiles
All lockfiles in the repo use Yarn 4, so use `yarn --cwd <dir> dedupe`
uniformly instead of npx yarn-deduplicate for subdirectories.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-05 17:45:45 +01:00
Fredrik Adelöw 619f6d37cb ci: split dedupe/changeset/commit into separate steps
Each step sets an output only if it actually modified files. The
dedupe step checks git diff after running to avoid staging unchanged
lockfiles. A final step commits and pushes only if either step
made changes.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-05 17:14:54 +01:00
Fredrik Adelöw b3076be06b ci: use node 22 for consistency with other workflows
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-05 17:10:23 +01:00
Fredrik Adelöw 85fcc10e80 ci: dedupe all lockfiles conditionally
Only dedupe each lockfile if it was actually changed by Dependabot.
Covers root (Yarn 4) and docs-ui/microsite (Yarn Classic) lockfiles.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-05 17:06:29 +01:00
Fredrik Adelöw 11d7150b5a ci: dedupe yarn.lock in Dependabot PR workflow
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-05 17:03:45 +01:00
John Collier 4445d88cff address pr review feedback
Signed-off-by: John Collier <jcollier@redhat.com>
2026-03-05 10:54:33 -05:00
Johan Persson 430d5ed323 fix(ui): allow CardBody scrolling in interactive cards (#33151)
* refactor(ui): rename CardOverlay to CardTrigger

Signed-off-by: Johan Persson <johanopersson@gmail.com>

* refactor(ui): replace Card overlay with visually-hidden trigger and focus ring

Signed-off-by: Johan Persson <johanopersson@gmail.com>

* feat(ui): implement hybrid click delegation for interactive cards

Signed-off-by: Johan Persson <johanopersson@gmail.com>

* docs(ui): add story for interactive scrollable card

Signed-off-by: Johan Persson <johanopersson@gmail.com>

* chore: add changeset for interactive card scroll fix

Signed-off-by: Johan Persson <johanopersson@gmail.com>

* fix(ui): fix bottom scroll shadow showing when CardBody has no overflow

The reversed scroll-driven animation used `both` fill mode, causing the
backwards fill to show opacity: 1 when no scroll timeline was active.
Replace with two stacked animations using `forwards` fill only.

Signed-off-by: Johan Persson <johanopersson@gmail.com>

* docs(ui): update InteractiveScrollable story to use onPress

Signed-off-by: Johan Persson <johanopersson@gmail.com>

* style: format Card.module.css

Signed-off-by: Johan Persson <johanopersson@gmail.com>

* fix(ui): guard against Text node target in Card click handler

Signed-off-by: Johan Persson <johanopersson@gmail.com>

* feat(ui): render Card as article element for better semantics

Signed-off-by: Johan Persson <johanopersson@gmail.com>

* chore(ui): update API report

Signed-off-by: Johan Persson <johanopersson@gmail.com>

* fix(ui): prevent synthetic click from double-bubbling and exclude onClick from Card types

Signed-off-by: Johan Persson <johanopersson@gmail.com>

---------

Signed-off-by: Johan Persson <johanopersson@gmail.com>
2026-03-05 14:57:00 +00:00
renovate[bot] e81671c996 chore(deps): update dependency knip to v5.85.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-05 14:34:52 +00:00
renovate[bot] a375c557a3 chore(deps): update dependency @remixicon/react to v4.9.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-05 14:33:30 +00:00
renovate[bot] e633ffe798 chore(deps): update swc monorepo
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-05 14:28:40 +00:00
renovate[bot] e7651d4adb chore(deps): update dependency @types/lodash to v4.17.24
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-05 14:26:58 +00:00
renovate[bot] a929cd88dd chore(deps): update dependency @google-cloud/cloud-sql-connector to v1.9.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-05 14:25:51 +00:00
renovate[bot] 53aa8034a8 chore(deps): update codemirror
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-05 14:25:17 +00:00