Jonathan Roebuck
906f104f6b
feat(core-app-api): redirect to provider logoutUrl on sign-out when available
...
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com >
2026-03-31 16:20:23 +01:00
Jonathan Roebuck
97850d0ef1
feat(auth0): implement federated logout to clear Auth0 and IdP sessions
...
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com >
2026-03-31 16:20:23 +01:00
Jonathan Roebuck
0ef5a03fb3
feat(auth-node): return logoutUrl in logout response when provided by authenticator
...
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com >
2026-03-31 16:20:23 +01:00
Jonathan Roebuck
fec31bdde5
feat(auth-node): add OAuthAuthenticatorLogoutResult type for provider logout redirects
...
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com >
2026-03-31 16:20:23 +01:00
Patrik Oldsberg
9bfa74bbb5
Merge pull request #33446 from Sarabadu/patch-2
...
Rename frontend-plugin to legacy-frontend-plugin
2026-03-31 10:30:13 +02:00
Patrik Oldsberg
a801348a18
Merge pull request #33692 from drodil/skills_docs
...
docs(ai): add skills documentation
2026-03-31 10:21:38 +02:00
Fredrik Adelöw
c15599c286
Merge pull request #33684 from backstage/freben/fix-api-docs-flaky-test
...
Fix flaky api-docs alpha test
2026-03-31 09:19:01 +02:00
Hellgren Heikki
8435ce9a81
docs(ai): add skills documentation
...
based on the BEP-0013 add the necessary docs for using and
contributing AI skills
Signed-off-by: Hellgren Heikki <heikki.hellgren@op.fi >
2026-03-31 07:59:05 +03:00
backstage-goalie[bot]
3dd27832fc
Merge pull request #33685 from backstage/renovate/zod-to-json-schema-3.x-lockfile
...
chore(deps): update dependency zod-to-json-schema to v3.25.2
2026-03-30 21:43:01 +00:00
Fredrik Adelöw
0419acede2
Revert "Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities"
...
This reverts commit 6d76b1729b .
Signed-off-by: Fredrik Adelöw <freben@spotify.com >
2026-03-30 23:11:17 +02:00
Fredrik Adelöw
6d76b1729b
Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities
...
Addresses the high severity rollup path traversal vulnerability
(GHSA-mw96-cpmx-2vgc) and the glob security advisory by upgrading
all instances across the monorepo. Updates code that used the legacy
callback-based glob API to use the modern promise/sync API.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Signed-off-by: Fredrik Adelöw <freben@spotify.com >
2026-03-30 23:10:09 +02:00
Fredrik Adelöw
d06ba3a58e
Revert "Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities"
...
This reverts commit 91b359ee5f .
Signed-off-by: Fredrik Adelöw <freben@spotify.com >
2026-03-30 23:05:11 +02:00
Fredrik Adelöw
91b359ee5f
Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities
...
Addresses the high severity rollup path traversal vulnerability
(GHSA-mw96-cpmx-2vgc) and the glob security advisory by upgrading
all instances across the monorepo. Updates code that used the legacy
callback-based glob API to use the modern promise/sync API.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Signed-off-by: Fredrik Adelöw <freben@spotify.com >
2026-03-30 23:02:37 +02:00
renovate[bot]
8ba5304b3f
chore(deps): update dependency zod-to-json-schema to v3.25.2
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 20:55:51 +00:00
Fredrik Adelöw
a1f6de6ac0
Merge pull request #33678 from milliehartnt123/milliehartnt123-modify-graphics-update-comp
...
Fix repository name and owner in graphics
2026-03-30 22:52:20 +02:00
Fredrik Adelöw
c64d386fc6
Fix flaky api-docs alpha test by increasing findByText timeout
...
The test assertions for lazy-loaded extension components used the
default 1000ms RTL timeout, which is insufficient under CI load.
Increased to 10000ms to match the pattern in createDevApp.test.tsx.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Signed-off-by: Fredrik Adelöw <freben@spotify.com >
2026-03-30 22:51:48 +02:00
backstage-goalie[bot]
3bd006e7f5
Merge pull request #33683 from backstage/renovate/undici-7.x-lockfile
...
chore(deps): update dependency undici to v7.24.6
2026-03-30 20:45:38 +00:00
renovate[bot]
629351c6ad
chore(deps): update dependency undici to v7.24.6
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 19:56:55 +00:00
backstage-goalie[bot]
b678af1a20
Merge pull request #33679 from backstage/renovate/mini-css-extract-plugin-2.x-lockfile
...
chore(deps): update dependency mini-css-extract-plugin to v2.10.2
2026-03-30 19:51:17 +00:00
Patrik Oldsberg
96657b9812
Merge pull request #33549 from backstage/rugvip/hide-compat-wrapper-headers
...
core-compat-api: hide page header for compat-wrapped legacy pages
2026-03-30 21:22:19 +02:00
renovate[bot]
722bcc3000
chore(deps): update dependency mini-css-extract-plugin to v2.10.2
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 18:37:07 +00:00
Patrik Oldsberg
d10af0be6d
Merge pull request #33657 from backstage/rugvip/replace-discord-action
...
workflows: replace Ilshidur/action-discord with inline github-script
2026-03-30 20:28:04 +02:00
milliehartnt123
a9d22e1acd
Fix repository name and owner in graphics
...
Signed-off-by: milliehartnt123 <108491788+milliehartnt123@users.noreply.github.com >
2026-03-30 13:22:07 -04:00
Patrik Oldsberg
f48e496e65
Merge pull request #33668 from backstage/docs-auth-oidc-new-frontend
...
docs: migrate OIDC auth docs to new frontend system
2026-03-30 17:42:42 +02:00
Patrik Oldsberg
19b3196c67
docs: fix Prettier formatting in OIDC auth docs
...
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
2026-03-30 17:26:29 +02:00
Patrik Oldsberg
cd0a7b58cc
Merge pull request #33581 from backstage/rugvip/dual-frontend-system-support
...
plugins: add title and icon to NFS plugin definitions
2026-03-30 17:26:05 +02:00
Patrik Oldsberg
bf1eb45609
Apply suggestions from code review
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
2026-03-30 17:14:00 +02:00
Patrik Oldsberg
ebc6622ec5
Apply suggestion from @freben
...
Co-authored-by: Fredrik Adelöw <freben@gmail.com >
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
2026-03-30 16:43:43 +02:00
Patrik Oldsberg
26537124e0
Merge pull request #33665 from backstage/rugvip/docs-notifications-new-frontend
...
docs: migrate notifications docs to new frontend system
2026-03-30 16:42:19 +02:00
Patrik Oldsberg
014ba202ba
Merge pull request #33670 from backstage/rugvip/app-routes-redirect-config
...
plugin-app: add redirect config to app/routes extension
2026-03-30 16:40:37 +02:00
Fredrik Adelöw
0a51db2547
Merge pull request #33676 from backstage/freben/catalog-search-table-sync
...
catalog: Reduce search table write churn during stitching
2026-03-30 16:27:23 +02:00
Fredrik Adelöw
9da73bf599
catalog: Reduce search table write churn during stitching
...
Replace the bulk DELETE + INSERT of all search rows with a minimal sync
that only touches rows that actually changed:
- Postgres: single writable CTE with unnest — DELETE stale rows and
INSERT new ones in one atomic statement using snapshot isolation
- MySQL: temporary table merge with deadlock retry (errno 1213)
- SQLite: unchanged bulk replace (sufficient for dev/test)
For a typical user entity with ~200 search rows where one annotation
changed, this reduces the operation from ~400 row writes to ~2.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Signed-off-by: Fredrik Adelöw <freben@spotify.com >
2026-03-30 16:01:37 +02:00
Charles de Dreuille
293bd67c64
Merge pull request #33675 from backstage/fix/storybook-apptheme-api
...
fix(storybook): register appThemeApiRef in Storybook API providers
2026-03-30 13:55:46 +01:00
Patrik Oldsberg
baa72405ac
Fix root path redirect matching all routes
...
Special-case `from: '/'` in redirect config to use an exact path match
instead of the `/*` wildcard, which would match the entire app.
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
2026-03-30 14:46:18 +02:00
Patrik Oldsberg
6cabf73736
Merge pull request #33669 from backstage/rugvip/docs-getting-started-new-frontend
...
docs: migrate getting-started docs to new frontend system
2026-03-30 14:40:34 +02:00
Charles de Dreuille
3bd5a0c7b8
Improve Toast setup
...
Signed-off-by: Charles de Dreuille <charles.dedreuille@gmail.com >
2026-03-30 13:13:23 +01:00
Fredrik Adelöw
aa8c802cf2
Merge pull request #33672 from backstage/freben/kebabs
...
remove some cli deprecation warnings
2026-03-30 13:42:46 +02:00
Charles de Dreuille
4dab043bd5
Update Toast.stories.tsx
...
Signed-off-by: Charles de Dreuille <charles.dedreuille@gmail.com >
2026-03-30 12:05:12 +01:00
Patrik Oldsberg
0f8b40ddc5
docs: address copilot review comments
...
Add installation example for extraIcons in the customize-theme guide
and fix "productional code" typo in quickstart-app-plugin--old.
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
2026-03-30 12:57:47 +02:00
Charles de Dreuille
cf2de9c8b8
Update Toast.stories.tsx
...
Signed-off-by: Charles de Dreuille <charles.dedreuille@gmail.com >
2026-03-30 11:56:42 +01:00
Charles de Dreuille
b651807e56
fix(storybook): replace require() with ESM import in Toast stories
...
The RealAlertApiStory component used require('@backstage/core-plugin-api')
inside the function body. Vite bundles Storybook as ESM, where require is
not available at runtime, causing a ReferenceError. Replace with a
standard top-level import.
Signed-off-by: Charles de Dreuille <charles.dedreuille@gmail.com >
Made-with: Cursor
2026-03-30 11:55:27 +01:00
Charles de Dreuille
e21dd5edc4
fix(storybook): register appThemeApiRef in Storybook API providers
...
Add AppThemeSelector as an implementation for appThemeApiRef in the
shared Storybook API registry. Without this, any story that renders
a ToastContainer fails with NotImplementedError for core.apptheme.
Signed-off-by: Charles de Dreuille <charles.dedreuille@gmail.com >
Made-with: Cursor
2026-03-30 11:49:34 +01:00
Patrik Oldsberg
88296d5d33
docs: pass auth environment in OAuth2.create example
...
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
2026-03-30 12:48:01 +02:00
Patrik Oldsberg
c38a71f855
docs: migrate OIDC auth docs to new frontend system
...
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
2026-03-30 12:45:05 +02:00
Patrik Oldsberg
89e3f98fa1
Apply suggestions from code review
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
2026-03-30 12:39:13 +02:00
Patrik Oldsberg
769fa96fe8
docs: address review feedback on notifications docs
...
Use dynamic import pattern for SubPageBlueprint loader instead of
Promise.resolve, and fix missing comma in TypeScript example.
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
2026-03-30 12:36:27 +02:00
Charles de Dreuille
ac9286767c
Merge pull request #33673 from backstage/bui-manifest
...
Improve BUI manifest
2026-03-30 11:34:01 +01:00
Patrik Oldsberg
964e8f9779
Update docs/notifications/index--old.md
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
2026-03-30 12:30:11 +02:00
Patrik Oldsberg
b70d3ca1ab
Update docs/notifications/index.md
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
2026-03-30 12:30:04 +02:00
Patrik Oldsberg
e1b0ed1cff
Fix changeset to target catalog-import instead of catalog-graph
...
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com >
Made-with: Cursor
2026-03-30 12:28:44 +02:00