782a819e4d
fix: correct changeset bump level for scaffolder-backend ( #34297 )
...
Signed-off-by: benjdlambert <ben@blam.sh >
2026-05-19 10:05:53 +02:00
29d398b57c
fix(auth-backend): harden default allowed patterns for CIMD and DCR ( #34260 )
...
* fix(auth-backend): harden default allowed patterns for CIMD and DCR
Signed-off-by: benjdlambert <ben@blam.sh >
* address PR review feedback for OIDC defaults
- narrow CLI client ID pattern to exact cli.json path
- add BREAKING prefix to changeset
- add IPv6 [::1] to docs examples
- add loopback redirect URI tests for IPv6 and 127.0.0.1
Signed-off-by: benjdlambert <ben@blam.sh >
* remove dead ['*'] fallback when features are disabled
The restrictive defaults are now always used regardless of the enabled
flag, since the patterns are only consulted on code paths that require
the feature to be enabled.
Signed-off-by: benjdlambert <ben@blam.sh >
* add default pattern tests and fix docs cli example
Signed-off-by: benjdlambert <ben@blam.sh >
* use URL constructor for CLI client ID
Signed-off-by: benjdlambert <ben@blam.sh >
* use string templating for cliClientId to match OidcRouter
Signed-off-by: benjdlambert <ben@blam.sh >
* fix docs: remove misleading CLI client_id URL example
Signed-off-by: benjdlambert <ben@blam.sh >
---------
Signed-off-by: benjdlambert <ben@blam.sh >
2026-05-19 09:45:31 +02:00
50d97e714e
Merge pull request #34258 from backstage/freben/mock-credentials-version
...
backend-test-utils: add version field to mock credentials
2026-05-19 09:24:41 +02:00
d325ee31d0
Merge pull request #34225 from backstage/fix/filter-predicate-mixed-operator-keys
...
fix(filter-predicates): reject operator keys mixed with other keys
2026-05-19 09:24:31 +02:00
5f14aba359
Merge pull request #34285 from backstage/rugvip/cimd-metadata-size-cap
...
auth-backend: cap CIMD metadata response size
2026-05-18 17:53:32 +02:00
07ec25de2c
fix(catalog-backend): move generateStableHash out of shared util to fix Storybook build ( #34284 )
...
* fix(catalog-backend): move generateStableHash out of shared util to fix Storybook build
The util.ts file mixed Node.js-only code (createHash from node:crypto)
with pure constants. Since InMemoryCatalogClient reaches into
buildEntitySearch via a relative import, and buildEntitySearch imports
from util.ts, the node:crypto dependency leaked into Vite's browser
bundle causing the Storybook build to fail.
Signed-off-by: benjdlambert <ben@blam.sh >
* add changeset
Signed-off-by: benjdlambert <ben@blam.sh >
---------
Signed-off-by: benjdlambert <ben@blam.sh >
2026-05-18 16:57:26 +02:00
9f269d73ed
auth-backend: cap CIMD metadata response size
...
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-18 16:38:46 +02:00
97515d8356
Merge pull request #33788 from benjidotsh/app/fix-disabled-nav-items
...
fix(app): add check for disabled nav items to discovery of pages
2026-05-18 16:04:24 +02:00
a9eb2d98f3
Merge pull request #34243 from backstage/renovate/vite-7.x-lockfile
...
chore(deps): update dependency vite to v7.3.3
2026-05-18 11:54:11 +00:00
b698610324
Merge pull request #34226 from backstage/renovate/fs-extra-11.x-lockfile
...
chore(deps): update dependency fs-extra to v11.3.5
2026-05-18 11:54:06 +00:00
03a4aec17e
chore(deps): update dependency vite to v7.3.3
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-18 10:02:07 +00:00
2b81167736
chore(deps): update dependency fs-extra to v11.3.5
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-18 10:00:50 +00:00
735af6c8c0
Merge pull request #34142 from backstage/session/suspicious-heron-9w2p
...
feat(auth-backend): validate catalog user existence on refresh token usage
2026-05-18 11:17:21 +02:00
ada7df7929
backend-test-utils: add version field to mock credentials
...
The mock credentials created by mockCredentials.none(), .user(), and
.service() were missing the internal version: 'v1' field. This caused
toInternalBackstageCredentials() to throw when used with mock
credentials in tests.
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Signed-off-by: Fredrik Adelöw <freben@gmail.com >
2026-05-16 17:39:31 +02:00
eab8f7a510
Merge pull request #34256 from backstage/cursor/ui-field-flex
...
fix(ui): allow fields to grow in flex layouts
2026-05-16 16:53:46 +02:00
e51af8cced
Merge pull request #33602 from elaine-mattos/feat/allow-empty-commits
2026-05-16 10:13:59 +02:00
379c3a8264
Merge pull request #34113 from its-mitesh-kumar/fix/user-settings-theme-toggle-i18n-priority
...
fix(user-settings): Prioritize i18n translation for built-in theme names
2026-05-15 20:31:13 +02:00
c667c2bf90
Merge pull request #34262 from backstage/chore/upgrade-storybook-10.4
2026-05-15 19:10:05 +02:00
18aa6e4d56
Merge pull request #34151 from backstage/password
...
Style PasswordField like TextField
2026-05-15 14:22:17 +01:00
b67a862f8e
chore: add storybook ui changeset
...
Signed-off-by: Charles de Dreuille <charles.dedreuille@gmail.com >
2026-05-15 10:35:24 +01:00
e6e796e45c
chore(deps): update storybook monorepo to v10.4.0
...
Signed-off-by: Charles de Dreuille <charles.dedreuille@gmail.com >
2026-05-15 10:29:56 +01:00
5520e07992
fix(ui): allow fields to grow in flex layouts
...
Signed-off-by: Charles de Dreuille <charles.dedreuille@gmail.com >
2026-05-14 15:39:41 +01:00
0f1f4392d6
Merge pull request #34250 from backstage/renovate/actions-labeler-6.x
...
chore(deps): update actions/labeler action to v6.1.0
2026-05-14 11:10:08 +02:00
d7116e3780
chore(deps): update actions/labeler action to v6.1.0
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-14 04:27:10 +00:00
b180f0ffd4
Merge pull request #34246 from backstage/renovate/storybook-monorepo
...
chore(deps): update storybook monorepo to v10.3.6
2026-05-14 01:10:12 +00:00
1e7a08e887
Merge pull request #34241 from backstage/renovate/typedoc-0.x-lockfile
...
chore(deps): update dependency typedoc to v0.28.19
2026-05-14 01:10:08 +00:00
ca888297e3
chore(deps): update storybook monorepo to v10.3.6
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-14 00:05:47 +00:00
afca62ead6
chore(deps): update dependency typedoc to v0.28.19
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-14 00:05:10 +00:00
cf08a738a9
Merge pull request #34244 from backstage/renovate/yaml-2.x-lockfile
...
chore(deps): update dependency yaml to v2.8.4
2026-05-14 00:00:28 +00:00
6040d367b7
chore(deps): update dependency yaml to v2.8.4
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-13 23:17:38 +00:00
6670f74caf
Merge pull request #34242 from backstage/renovate/typescript-json-schema-0.x-lockfile
...
chore(deps): update dependency typescript-json-schema to v0.67.2
2026-05-13 23:07:44 +00:00
2d75ed020b
chore(deps): update dependency typescript-json-schema to v0.67.2
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-13 22:16:03 +00:00
b76a6ec075
Merge pull request #34240 from backstage/renovate/tar-7.x-lockfile
...
chore(deps): update dependency tar to v7.5.15
2026-05-13 22:10:24 +00:00
959601304d
Merge pull request #34239 from backstage/renovate/swagger-ui-react-5.x-lockfile
...
chore(deps): update dependency swagger-ui-react to v5.32.5
2026-05-13 22:10:18 +00:00
478f12c184
chore(deps): update dependency tar to v7.5.15
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-13 21:11:05 +00:00
6ec8e42eba
chore(deps): update dependency swagger-ui-react to v5.32.5
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-13 21:10:33 +00:00
df89659f2b
Merge pull request #34238 from backstage/renovate/rollup-4.x-lockfile
...
chore(deps): update dependency rollup to v4.60.3
2026-05-13 21:04:27 +00:00
8cc996acf0
Merge pull request #34237 from backstage/renovate/qs-6.x-lockfile
...
chore(deps): update dependency qs to v6.15.1
2026-05-13 21:04:22 +00:00
c209e693bf
chore(deps): update dependency rollup to v4.60.3
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-13 20:03:13 +00:00
f56fc8b56a
chore(deps): update dependency qs to v6.15.1
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-13 20:02:42 +00:00
371dbb452e
Merge pull request #34235 from backstage/renovate/path-to-regexp-8.x-lockfile
...
chore(deps): update dependency path-to-regexp to v8.4.2
2026-05-13 19:52:02 +00:00
ac07705ac9
Merge pull request #34232 from backstage/cursor/header-container-alignment
...
fix(ui): align header sections with container
2026-05-13 21:17:40 +02:00
f714ed1a5a
chore(deps): update dependency path-to-regexp to v8.4.2
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-13 19:02:50 +00:00
e477bdc83b
Merge pull request #34229 from backstage/freben/rel
...
exit prerelease mode
2026-05-13 20:57:10 +02:00
68bc2567e2
Merge pull request #34234 from backstage/renovate/nodemailer-8.x-lockfile
...
chore(deps): update dependency nodemailer to v8.0.7
2026-05-13 17:48:24 +00:00
28a84f79b3
Merge pull request #34233 from backstage/renovate/material-ui-popup-state-5.x-lockfile
...
chore(deps): update dependency material-ui-popup-state to v5.3.7
2026-05-13 17:48:19 +00:00
fa10a5c3c5
chore(deps): update dependency nodemailer to v8.0.7
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-13 17:06:54 +00:00
de0153f3b2
chore(deps): update dependency material-ui-popup-state to v5.3.7
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-13 17:06:25 +00:00
5540775512
Merge pull request #34231 from backstage/renovate/libsodium-wrappers-0.x-lockfile
...
chore(deps): update dependency libsodium-wrappers to v0.8.4
2026-05-13 17:00:41 +00:00
31fab301dc
Merge pull request #34230 from backstage/renovate/isomorphic-git-1.x-lockfile
...
chore(deps): update dependency isomorphic-git to v1.37.6
2026-05-13 17:00:36 +00:00
Ben Lambert