paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 31 Packages Projects Releases Wiki Activity
72,838 Commits 1 Branch 0 Tags
51ee29bac72fedfdd72145f4884571fdbfcd7d3e
Commit Graph

72838 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Rajib Quayum 51ee29bac7 chore: pulls in master 
Signed-off-by: Rajib Quayum <rajibq@users.noreply.github.com>
 2026-04-03 09:27:25 -04:00
Rajib Quayum a4dc401ac3 chore: revert all previous changes 
Signed-off-by: Rajib Quayum <rajibq@users.noreply.github.com>
 2026-04-03 09:24:04 -04:00
Riley Martine d5899c2362 Allow passing showArrowHeads to entity-card:catalog-graph/relations and /catalog-graph page (#33706) 
* Allow passing showArrowHeads to entity-card:catalog-graph/relations and /catalog-graph page

Signed-off-by: Riley Martine <rmartine@integralads.com>

* Update .changeset/nine-signs-end.md

Signed-off-by: Aramis Sennyey <159921952+aramissennyeydd@users.noreply.github.com>

---------

Signed-off-by: Riley Martine <rmartine@integralads.com>
Signed-off-by: Aramis Sennyey <159921952+aramissennyeydd@users.noreply.github.com>
Co-authored-by: Aramis Sennyey <159921952+aramissennyeydd@users.noreply.github.com>
 2026-04-03 12:34:45 +00:00
Fredrik Adelöw 3cdf048f77 Merge pull request #33534 from kurtaking/migrate-scaffolder-to-metrics-service 2026-04-03 09:19:45 +02:00
Kurt King b37a79ef5b Merge branch 'master' of https://github.com/backstage/backstage into migrate-scaffolder-to-metrics-service 2026-04-02 22:47:04 -06:00
Fredrik Adelöw b8158ed1bf Merge pull request #33726 from backstage/renovate/npm-lodash-vulnerability 2026-04-03 06:31:28 +02:00
Fredrik Adelöw a071c6b44d Merge pull request #33722 from backstage/dependabot/npm_and_yarn/lodash-es-4.18.1 2026-04-03 06:30:17 +02:00
Patrik Oldsberg 6e2d963126 Merge pull request #33712 from backstage/rugvip/catalog-nfs-catalog-index-page 
catalog: export CatalogIndexPage from alpha entry point
 2026-04-03 01:01:33 +02:00
Patrik Oldsberg 15660cfbf9 Merge pull request #33682 from backstage/github-support-app-no-org 
Fix GitHub app credentials for bare host URLs
 2026-04-03 00:58:55 +02:00
Johan Persson c193ef1f9f feat(catalog): add Kind field to About Card 
Signed-off-by: Johan Persson <johanopersson@gmail.com>
 2026-04-02 15:03:09 +02:00
Yata Rupesh 7d5a3a2567 Change accordion snippet height to auto for GroupMultipleOpen 
Signed-off-by: Yata Rupesh <99956608+RupeshRoyal@users.noreply.github.com>
 2026-04-02 14:19:14 +02:00
Patrik Oldsberg ee1531dca5 catalog: export CatalogIndexPage from alpha entry point 
Export NfsDefaultCatalogPage as CatalogIndexPage from the ./alpha entry
point along with CatalogIndexPageProps, CatalogTableRow, and
CatalogTableColumnsFunc. This allows adopters to use and customize the
catalog index page within a PageBlueprint in the new frontend system.

No changes to the stable main entry point API.

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
Made-with: Cursor
 2026-04-02 14:03:16 +02:00
renovate[bot] 4acb606f21 chore(deps): update dependency lodash to v4.18.1 [security] 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-02 10:39:07 +00:00
dependabot[bot] 6dc116caf1 chore(deps): Bump lodash-es from 4.17.23 to 4.18.1 
Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1)

---
updated-dependencies:
- dependency-name: lodash-es
  dependency-version: 4.18.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-02 07:45:22 +00:00
Patrik Oldsberg 7bc057e8b6 Merge pull request #33703 from backstage/feat/auth0-federated-logout 
feat(auth): support provider logout redirects, implement Auth0 federated logout
 2026-04-01 15:27:27 +02:00
Jonathan Roebuck 3bddf23896 refactor(auth0): use URL/URLSearchParams for logout URL construction 
Replace manual string concatenation with URL and URLSearchParams for
safer encoding and better readability.

Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-01 13:43:34 +01:00
Jonathan Roebuck 25e8a65b46 refactor(auth0): rename config key federated to federatedLogout 
The `federated` config key was ambiguous. Rename to `federatedLogout`
for clarity since it specifically controls federated logout behavior.

Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-01 13:41:06 +01:00
Jonathan Roebuck 7d002e83a5 fix(auth0): remove untestable app.baseUrl fallback test 
The origin header is always present in browser POST requests, making
the fallback scenario unreachable in practice.

Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-01 13:28:32 +01:00
Jonathan Roebuck e2d96b7140 chore: address PR feedback on changesets 
Add @backstage/plugin-app to core-app-api changeset, reword to avoid
internal export name, and downgrade auth-node bump to patch.

Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-01 13:09:59 +01:00
Jack Palmer 208cf5f922 fix(auth): add security hardening and federated config for Auth0 logout 
Add server-side URL validation for logoutUrl (HTTPS + localhost only),
origin validation on the logout endpoint, and a configurable `federated`
option (default false) for Auth0 provider logout. Includes comprehensive
test coverage for all security controls.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jack Palmer <jackpalmer@spotify.com>
 2026-04-01 13:06:43 +01:00
Jack Palmer 3532be4763 fix(auth): harden logout redirect with origin validation and protocol check 
Add origin allowlist validation in the OAuth logout handler (matching
the existing start/refresh pattern) and validate the logoutUrl protocol
on the frontend before redirecting. Also replace inline type annotation
with the named OAuthAuthenticatorLogoutResult type.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jack Palmer <jackpalmer@spotify.com>
 2026-04-01 13:06:43 +01:00
Jonathan Roebuck a07f0196e2 chore: update auth0 provider API report with domain and clientID fields 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
 2026-04-01 13:06:40 +01:00
Patrik Oldsberg b9fec1bdc8 Merge pull request #33642 from backstage/dist-workspace-pack-batching 
cli-module-build: pack packages in batches inside createDistWorkspace
 2026-04-01 11:54:21 +02:00
Fredrik Adelöw 9c953f9eff Merge pull request #32943 from Vivek1819/fix/scaffolder-markdown-links-new-tab 
fix(scaffolder): open markdown links in new tab for template outputs
 2026-04-01 11:49:20 +02:00
MT Lewis 8f174e18e9 cli-module-build: pack sequentially when cycles are detected in dependencies 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
 2026-04-01 09:48:11 +01:00
Peter Macdonald af968456de Merge pull request #33700 from Parsifal-M/docs/update-fe-skill 
docs: Update FE migration skill
 2026-04-01 09:35:57 +02:00
Fredrik Adelöw 49efae88e4 Merge pull request #33704 from backstage/freben/fix-docs-broken-links 
docs: fix broken links and anchors across documentation
 2026-04-01 09:02:46 +02:00
backstage-goalie[bot] 5407b5dd0a Merge pull request #33709 from backstage/renovate/axios-1.x-lockfile 
chore(deps): update dependency axios to v1.14.0
 2026-04-01 02:40:54 +00:00
renovate[bot] 93466ca419 chore(deps): update dependency axios to v1.14.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-01 01:10:56 +00:00
backstage-goalie[bot] 886fe58ff7 Merge pull request #33707 from backstage/renovate/modelcontextprotocol-sdk-1.x-lockfile 
chore(deps): update dependency @modelcontextprotocol/sdk to v1.28.0
 2026-04-01 00:59:48 +00:00
renovate[bot] a405d69bdd chore(deps): update dependency @modelcontextprotocol/sdk to v1.28.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-01 00:07:43 +00:00
backstage-goalie[bot] 2246288871 Merge pull request #33702 from backstage/renovate/aws-sdk-js-v3-monorepo 
chore(deps): update aws-sdk-js-v3 monorepo
 2026-04-01 00:01:51 +00:00
Fredrik Adelöw bb7768ba06 docs: fix broken links and anchors across documentation 
Fix ~30 broken links and anchors across the documentation site, including
incorrect relative paths, mismatched anchor names, zero-width characters
in URLs, and references to renamed or removed headings.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
 2026-03-31 18:43:40 +02:00
Fredrik Adelöw 8270f88fda Merge pull request #33559 from backstage/changeset-release/master 
Version Packages (next)
 2026-03-31 18:37:41 +02:00
Fredrik Adelöw f46363130c Update packages/core-components/src/components/MarkdownContent/MarkdownContent.tsx 
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
 2026-03-31 17:54:39 +02:00
github-actions[bot] a2cb332e25 Version Packages (next) 2026-03-31 15:30:51 +00:00
Patrik Oldsberg 292b6431a2 Merge pull request #33688 from backstage/fix-frontend-plugin-legacy-id 
Fix template name collision and export path in CLI new module
 2026-03-31 17:24:04 +02:00
Fredrik Adelöw 0449cf02fd Update packages/core-components/src/components/MarkdownContent/MarkdownContent.tsx 
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
 2026-03-31 17:20:34 +02:00
Jonathan Roebuck 9244b70c57 chore: add changesets, update API reports, fix type errors 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
 2026-03-31 16:20:23 +01:00
Jonathan Roebuck 906f104f6b feat(core-app-api): redirect to provider logoutUrl on sign-out when available 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
 2026-03-31 16:20:23 +01:00
Jonathan Roebuck 97850d0ef1 feat(auth0): implement federated logout to clear Auth0 and IdP sessions 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
 2026-03-31 16:20:23 +01:00
Jonathan Roebuck 0ef5a03fb3 feat(auth-node): return logoutUrl in logout response when provided by authenticator 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
 2026-03-31 16:20:23 +01:00
Jonathan Roebuck fec31bdde5 feat(auth-node): add OAuthAuthenticatorLogoutResult type for provider logout redirects 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
 2026-03-31 16:20:23 +01:00
Fredrik Adelöw 8a2a81fa1e Merge pull request #33687 from backstage/freben/bump-glob-rollup 
Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities
 2026-03-31 16:06:22 +02:00
renovate[bot] 0cbba8a528 chore(deps): update aws-sdk-js-v3 monorepo 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-31 14:06:03 +00:00
Fredrik Adelöw 739b655063 Merge pull request #33250 from backstage/renovate/use-sync-external-store-1.x 
chore(deps): update dependency @types/use-sync-external-store to v1
 2026-03-31 15:58:16 +02:00
Fredrik Adelöw 9ee88aeb59 Merge pull request #33170 from dbmdz/gitlab-repo-picker-improvements 
Gitlab repo picker improvements
 2026-03-31 15:55:10 +02:00
Fredrik Adelöw ad19cb040f Merge pull request #33629 from jonkoops/auditor-zod-v4-refactor 
refactor(backend-defaults): migrate internal Zod usage from v3 to v4
 2026-03-31 15:52:18 +02:00
Fredrik Adelöw 0c6bdf1bd4 Merge pull request #33589 from nikitashalnov/add-aws-plugins-to-directory 
Add AWS plugins to plugin directory (ECR, Config, GenAI, Security Hub)
 2026-03-31 15:46:47 +02:00
Fredrik Adelöw b6c0ef5d5d Add windowsPathsNoEscape to glob calls that may receive backslash paths 
Glob v13 treats backslashes as escape characters by default, unlike v7
which treated them as path separators on Windows. This broke Windows CI
where path.join/resolve produce backslash paths.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
 2026-03-31 15:20:56 +02:00