Commit Graph

73442 Commits

Author SHA1 Message Date
Jonathan Roebuck 9244b70c57 chore: add changesets, update API reports, fix type errors
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
2026-03-31 16:20:23 +01:00
Jonathan Roebuck 906f104f6b feat(core-app-api): redirect to provider logoutUrl on sign-out when available
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
2026-03-31 16:20:23 +01:00
Jonathan Roebuck 97850d0ef1 feat(auth0): implement federated logout to clear Auth0 and IdP sessions
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
2026-03-31 16:20:23 +01:00
Jonathan Roebuck 0ef5a03fb3 feat(auth-node): return logoutUrl in logout response when provided by authenticator
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
2026-03-31 16:20:23 +01:00
Jonathan Roebuck fec31bdde5 feat(auth-node): add OAuthAuthenticatorLogoutResult type for provider logout redirects
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
2026-03-31 16:20:23 +01:00
Fredrik Adelöw 8a2a81fa1e Merge pull request #33687 from backstage/freben/bump-glob-rollup
Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities
2026-03-31 16:06:22 +02:00
renovate[bot] 0cbba8a528 chore(deps): update aws-sdk-js-v3 monorepo
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-31 14:06:03 +00:00
Fredrik Adelöw 739b655063 Merge pull request #33250 from backstage/renovate/use-sync-external-store-1.x
chore(deps): update dependency @types/use-sync-external-store to v1
2026-03-31 15:58:16 +02:00
Fredrik Adelöw 9ee88aeb59 Merge pull request #33170 from dbmdz/gitlab-repo-picker-improvements
Gitlab repo picker improvements
2026-03-31 15:55:10 +02:00
Fredrik Adelöw ad19cb040f Merge pull request #33629 from jonkoops/auditor-zod-v4-refactor
refactor(backend-defaults): migrate internal Zod usage from v3 to v4
2026-03-31 15:52:18 +02:00
Fredrik Adelöw 0c6bdf1bd4 Merge pull request #33589 from nikitashalnov/add-aws-plugins-to-directory
Add AWS plugins to plugin directory (ECR, Config, GenAI, Security Hub)
2026-03-31 15:46:47 +02:00
Fredrik Adelöw b6c0ef5d5d Add windowsPathsNoEscape to glob calls that may receive backslash paths
Glob v13 treats backslashes as escape characters by default, unlike v7
which treated them as path separators on Windows. This broke Windows CI
where path.join/resolve produce backslash paths.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-31 15:20:56 +02:00
Fredrik Adelöw c3b4782b97 Merge pull request #33361 from lokeshkaki/feat/azure-scm-events
feat(catalog-backend-module-azure): add Azure DevOps SCM event translation layer
2026-03-31 15:03:26 +02:00
Fredrik Adelöw c5958fc175 Merge pull request #33362 from lokeshkaki/feat/gitlab-scm-events
feat(catalog-backend-module-gitlab): add GitLab SCM event translation layer for catalog reprocessing
2026-03-31 14:59:18 +02:00
Vincenzo Scamporlino 3964163dce Fix export path in frontend plugin module template
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2026-03-31 14:36:58 +02:00
Vincenzo Scamporlino e38bcefb99 Fix template name collision between new and legacy frontend plugin templates
The legacy frontend plugin template had the same name (`frontend-plugin`) as
the new frontend plugin template, causing a conflict error when both were shown
(e.g. when the frontend system could not be auto-detected). Rename the legacy
template to `frontend-plugin-legacy` so both can coexist.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2026-03-31 14:36:53 +02:00
Johan Persson feaf3d1ade fix(ui): fix HeaderNav hover indicator covering tab text
Add `position: relative` and `z-index: 2` to nav items so they
paint above the hover/active indicator, matching the Tabs pattern.
This fixes themes with opaque `--bui-bg-neutral-2` values obscuring
tab labels on hover.

Also fix `--bui-font-family` (non-existent) to `--bui-font-regular`.

Signed-off-by: Johan Persson <johanopersson@gmail.com>
2026-03-31 13:43:25 +02:00
Peter Macdonald 4a1b7f228d update wording
Signed-off-by: Peter Macdonald <peterm4c@pm.me>
2026-03-31 13:30:00 +02:00
Peter Macdonald a3c65c8e2a add a note about the backstage version in the fe-migration skill
Signed-off-by: Peter Macdonald <peterm4c@pm.me>
2026-03-31 13:27:17 +02:00
Patrik Oldsberg 9bfa74bbb5 Merge pull request #33446 from Sarabadu/patch-2
Rename frontend-plugin to legacy-frontend-plugin
2026-03-31 10:30:13 +02:00
Patrik Oldsberg a801348a18 Merge pull request #33692 from drodil/skills_docs
docs(ai): add skills documentation
2026-03-31 10:21:38 +02:00
Fredrik Adelöw c15599c286 Merge pull request #33684 from backstage/freben/fix-api-docs-flaky-test
Fix flaky api-docs alpha test
2026-03-31 09:19:01 +02:00
Hellgren Heikki 8435ce9a81 docs(ai): add skills documentation
based on the BEP-0013 add the necessary docs for using and
contributing AI skills

Signed-off-by: Hellgren Heikki <heikki.hellgren@op.fi>
2026-03-31 07:59:05 +03:00
backstage-goalie[bot] 3dd27832fc Merge pull request #33685 from backstage/renovate/zod-to-json-schema-3.x-lockfile
chore(deps): update dependency zod-to-json-schema to v3.25.2
2026-03-30 21:43:01 +00:00
Fredrik Adelöw 2e5c5f85b2 Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities
Addresses the high severity rollup path traversal vulnerability
(GHSA-mw96-cpmx-2vgc) and the glob security advisory by upgrading
all instances across the monorepo. Updates code that used the legacy
callback-based glob API to use the modern promise/sync API.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-30 23:13:08 +02:00
Fredrik Adelöw 0419acede2 Revert "Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities"
This reverts commit 6d76b1729b.

Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-30 23:11:17 +02:00
Fredrik Adelöw 6d76b1729b Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities
Addresses the high severity rollup path traversal vulnerability
(GHSA-mw96-cpmx-2vgc) and the glob security advisory by upgrading
all instances across the monorepo. Updates code that used the legacy
callback-based glob API to use the modern promise/sync API.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-30 23:10:09 +02:00
Fredrik Adelöw d06ba3a58e Revert "Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities"
This reverts commit 91b359ee5f.

Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-30 23:05:11 +02:00
Fredrik Adelöw 91b359ee5f Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities
Addresses the high severity rollup path traversal vulnerability
(GHSA-mw96-cpmx-2vgc) and the glob security advisory by upgrading
all instances across the monorepo. Updates code that used the legacy
callback-based glob API to use the modern promise/sync API.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-30 23:02:37 +02:00
renovate[bot] 8ba5304b3f chore(deps): update dependency zod-to-json-schema to v3.25.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 20:55:51 +00:00
Fredrik Adelöw a1f6de6ac0 Merge pull request #33678 from milliehartnt123/milliehartnt123-modify-graphics-update-comp
Fix repository name and owner in graphics
2026-03-30 22:52:20 +02:00
Fredrik Adelöw c64d386fc6 Fix flaky api-docs alpha test by increasing findByText timeout
The test assertions for lazy-loaded extension components used the
default 1000ms RTL timeout, which is insufficient under CI load.
Increased to 10000ms to match the pattern in createDevApp.test.tsx.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-30 22:51:48 +02:00
backstage-goalie[bot] 3bd006e7f5 Merge pull request #33683 from backstage/renovate/undici-7.x-lockfile
chore(deps): update dependency undici to v7.24.6
2026-03-30 20:45:38 +00:00
Vincenzo Scamporlino d96b7281dc Make owner parameter optional in getAppToken and getInstallationCredentials methods
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2026-03-30 21:59:27 +02:00
renovate[bot] 629351c6ad chore(deps): update dependency undici to v7.24.6
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 19:56:55 +00:00
backstage-goalie[bot] b678af1a20 Merge pull request #33679 from backstage/renovate/mini-css-extract-plugin-2.x-lockfile
chore(deps): update dependency mini-css-extract-plugin to v2.10.2
2026-03-30 19:51:17 +00:00
Fredrik Adelöw f55c195f03 Use lodash sortBy for entity sorting to avoid repeated presentation lookups
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-30 21:42:51 +02:00
Vincenzo Scamporlino d1124998ca Fix SingleInstanceGithubCredentialsProvider to return app credentials for bare host URLs
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2026-03-30 21:35:40 +02:00
Patrik Oldsberg 96657b9812 Merge pull request #33549 from backstage/rugvip/hide-compat-wrapper-headers
core-compat-api: hide page header for compat-wrapped legacy pages
2026-03-30 21:22:19 +02:00
Fredrik Adelöw 0277801a96 Remove duplicate presentation API exports from alpha, import from public API
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-30 21:16:11 +02:00
Fredrik Adelöw 5bc450b7f1 Rename entityPresentation parameter to entityPresentationApi for consistency
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
2026-03-30 20:57:39 +02:00
renovate[bot] 722bcc3000 chore(deps): update dependency mini-css-extract-plugin to v2.10.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 18:37:07 +00:00
Patrik Oldsberg d10af0be6d Merge pull request #33657 from backstage/rugvip/replace-discord-action
workflows: replace Ilshidur/action-discord with inline github-script
2026-03-30 20:28:04 +02:00
milliehartnt123 a9d22e1acd Fix repository name and owner in graphics
Signed-off-by: milliehartnt123 <108491788+milliehartnt123@users.noreply.github.com>
2026-03-30 13:22:07 -04:00
Patrik Oldsberg f48e496e65 Merge pull request #33668 from backstage/docs-auth-oidc-new-frontend
docs: migrate OIDC auth docs to new frontend system
2026-03-30 17:42:42 +02:00
Patrik Oldsberg 19b3196c67 docs: fix Prettier formatting in OIDC auth docs
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
Made-with: Cursor
2026-03-30 17:26:29 +02:00
Patrik Oldsberg cd0a7b58cc Merge pull request #33581 from backstage/rugvip/dual-frontend-system-support
plugins: add title and icon to NFS plugin definitions
2026-03-30 17:26:05 +02:00
Patrik Oldsberg bf1eb45609 Apply suggestions from code review
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2026-03-30 17:14:00 +02:00
Patrik Oldsberg ebc6622ec5 Apply suggestion from @freben
Co-authored-by: Fredrik Adelöw <freben@gmail.com>
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2026-03-30 16:43:43 +02:00
Patrik Oldsberg 26537124e0 Merge pull request #33665 from backstage/rugvip/docs-notifications-new-frontend
docs: migrate notifications docs to new frontend system
2026-03-30 16:42:19 +02:00