Commit Graph

74007 Commits

Author SHA1 Message Date
renovate[bot] cbf78da153 chore(deps): update dependency dompurify to v3.4.5
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-25 12:05:08 +00:00
Fredrik Adelöw e60d34304d Merge pull request #34174 from backstage/dependabot/npm_and_yarn/microsite/babel/plugin-transform-modules-systemjs-7.29.4
chore(deps): Bump @babel/plugin-transform-modules-systemjs from 7.28.5 to 7.29.4 in /microsite
2026-05-25 13:30:36 +02:00
Fredrik Adelöw 4b0ad7b0b5 Merge pull request #34351 from backstage/dependabot/npm_and_yarn/qs-6.15.2
chore(deps): bump qs from 6.15.1 to 6.15.2
2026-05-25 13:29:33 +02:00
Fredrik Adelöw 380e7f02c7 Merge pull request #34341 from backstage/renovate/migrate-config
Migrate Renovate config
2026-05-25 13:29:01 +02:00
backstage-goalie[bot] 461a3d3320 Merge pull request #34358 from backstage/renovate/stoplight-spectral-rulesets-1.x-lockfile
Update dependency @stoplight/spectral-rulesets to v1.22.3
2026-05-25 11:05:14 +00:00
Vincenzo Scamporlino bfef8b7b20 Merge pull request #34327 from backstage/unprocessed-entities
Unprocessed entities: update installation instructions
2026-05-25 12:46:21 +02:00
Fredrik Adelöw 7b7981b4a3 Reduce to only the effective change: matchPackagePatterns → matchPackageNames
Renovate deprecated matchPackagePatterns. The new matchPackageNames
accepts regex patterns wrapped in / delimiters. All other changes
in this PR (quote style, comment removal) were cosmetic and have
been reverted.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-05-25 12:21:41 +02:00
renovate[bot] 602fb33799 chore(deps): update dependency @stoplight/spectral-rulesets to v1.22.3
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-25 10:17:52 +00:00
Fredrik Adelöw 17cce350b3 Merge pull request #34219 from backstage/renovate/embedded-postgres-18.x
Update dependency embedded-postgres to v18.3.0-beta.17
2026-05-25 12:09:39 +02:00
Fredrik Adelöw 2b2184a26d Merge pull request #34245 from backstage/renovate/ghcr.io-devcontainers-features-common-utils-2.x
Update ghcr.io/devcontainers/features/common-utils Docker tag to v2.5.9
2026-05-25 12:08:05 +02:00
Fredrik Adelöw 4b78a21ba5 Merge pull request #34279 from backstage/renovate/chromaui-action-digest
Update chromaui/action digest to 7aca53e
2026-05-25 12:07:01 +02:00
Fredrik Adelöw 5e438e0db0 Merge pull request #34253 from backstage/renovate/actions-setup-node-6.x
Update actions/setup-node action to v6.4.0
2026-05-25 12:06:46 +02:00
Fredrik Adelöw 0432ce67a3 Merge pull request #34302 from backstage/dependabot/npm_and_yarn/workspaces/ui/vm2-3.11.5
chore(deps): Bump vm2 from 3.10.5 to 3.11.5 in /workspaces/ui
2026-05-25 12:05:57 +02:00
Fredrik Adelöw 445d10130e Merge pull request #34304 from backstage/dependabot/npm_and_yarn/workspaces/ui/fast-uri-3.1.2
chore(deps): Bump fast-uri from 3.1.0 to 3.1.2 in /workspaces/ui
2026-05-25 12:05:01 +02:00
Fredrik Adelöw a073460c13 Merge pull request #34333 from backstage/dependabot/npm_and_yarn/microsite/tootallnate/once-2.0.1
chore(deps): bump @tootallnate/once from 2.0.0 to 2.0.1 in /microsite
2026-05-25 12:04:20 +02:00
Fredrik Adelöw faef6493e7 Merge pull request #34332 from backstage/dependabot/npm_and_yarn/tootallnate/once-2.0.1
chore(deps): bump @tootallnate/once from 1.1.2 to 2.0.1
2026-05-25 12:03:54 +02:00
Fredrik Adelöw 6fdfcb3cb0 Merge pull request #34306 from backstage/dependabot/npm_and_yarn/ws-8.20.1
chore(deps): Bump ws from 8.20.0 to 8.20.1
2026-05-25 12:03:16 +02:00
Fredrik Adelöw b746c2807f Merge pull request #34354 from officialasishkumar/fix-proxied-signin-base64url-token
fix(core-components): decode url-safe base64 tokens in proxy sign-in
2026-05-25 12:00:29 +02:00
Asish Kumar 8add9b992d fix(core-components): decode url-safe base64 tokens in proxy sign-in
The proxy-based sign-in page derived the session expiry from the JWT by
decoding its payload with `window.atob`, which only accepts the standard
base64 alphabet. JWTs are encoded using base64url (RFC 7515), so any
token whose payload contained '-' or '_' raised a decoding error and
broke sign-in. Translate the payload back to the standard alphabet and
restore its padding before decoding.

Signed-off-by: Asish Kumar <officialasishkumar@gmail.com>
2026-05-25 05:30:56 +05:30
dependabot[bot] e0889a3f8e chore(deps): bump qs from 6.15.1 to 6.15.2
Bumps [qs](https://github.com/ljharb/qs) from 6.15.1 to 6.15.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.15.1...v6.15.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-23 12:27:32 +00:00
Fredrik Adelöw 6fa1cacfbe Merge pull request #34347 from koalaty-code/ingestions-last-error-column-type
fix(catalog-incremental): use text for ingestions.last_error column type
2026-05-23 12:16:16 +02:00
Adam Letizia e846874385 fix(catalog-incremental): use text for ingestions.last_error column type
Signed-off-by: Adam Letizia <LetiziaAdam@JohnDeere.com>
2026-05-22 14:21:55 -05:00
Matthew Clarke 7092722057 perf(kubernetes-backend): pool HTTPS agents per cluster in KubernetesFetcher (#34344)
* refactor(kubernetes-backend): boy-scout KubernetesFetcher

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Matthew Clarke <mclarke@spotify.com>

* fix(kubernetes-backend): restore dynamic imports for @kubernetes/client-node

The package is ESM-only and must be loaded via dynamic import() to work
in Jest's CommonJS transform. Reverts to the original inline
await import() pattern while keeping the agent pooling and refactoring.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Matthew Clarke <mclarke@spotify.com>

---------

Signed-off-by: Matthew Clarke <mclarke@spotify.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-05-22 17:59:54 +00:00
renovate[bot] 699b15678b Update actions/setup-node action to v6.4.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-22 17:18:40 +00:00
renovate[bot] 01e3e3d32f Update chromaui/action digest to 7aca53e
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-22 17:18:27 +00:00
Andre Wanlin db91a8666b Merge pull request #34217 from awanlin/docs/update-reveiw-section
Contributing - Review Process Updates
2026-05-22 08:59:08 -05:00
renovate[bot] 834b3cd856 Migrate config .github/renovate.json5 2026-05-22 13:46:02 +00:00
Fredrik Adelöw 70d6810de4 Merge pull request #34338 from backstage/freben/group-opentelemetry-renovate
chore: group @opentelemetry/* packages in Renovate
2026-05-22 15:36:23 +02:00
Fredrik Adelöw 843083711c Group @opentelemetry/* packages in Renovate
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-05-22 14:36:44 +02:00
Aramis Sennyey ac410b1d26 feat(skill): automatically onboard to openapi tooling (#34179)
* feat(skill): automatically onboard to openapi tooling

Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com>

* test skill against notifications backend

Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com>

* update URLs to point to main repo and describe multiple client types

Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com>

* address PR feedback

Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com>

* revert erroneous changes

Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com>

* add changeset

Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com>

* address review feedback: skill doc fixes and entityRef schema dedup

Disambiguate generated entityRef/orderField types and correct skill
guidance on operationId casing and OpenAPI version support.

Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com>

* note in skill that handler-side validation should be stripped

Reviewers may forget that manual InputError guards and primitive-type
checks become dead weight once the OpenAPI validator runs.

Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com>

---------

Signed-off-by: aramissennyeydd <aramis.sennyey@doordash.com>
2026-05-21 23:01:16 -04:00
dependabot[bot] e23f05c33a chore(deps): bump @tootallnate/once from 2.0.0 to 2.0.1 in /microsite
Bumps [@tootallnate/once](https://github.com/TooTallNate/once) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/TooTallNate/once/releases)
- [Changelog](https://github.com/TooTallNate/once/blob/v2.0.1/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/once/compare/2.0.0...v2.0.1)

---
updated-dependencies:
- dependency-name: "@tootallnate/once"
  dependency-version: 2.0.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-21 17:52:42 +00:00
Patrik Oldsberg a7d7542432 Merge pull request #31837 from the-serious-programmer/feature/catalog-export
Feature: catalog export
2026-05-21 19:50:30 +02:00
dependabot[bot] b23bc03183 chore(deps): bump @tootallnate/once from 1.1.2 to 2.0.1
Bumps [@tootallnate/once](https://github.com/TooTallNate/once) from 1.1.2 to 2.0.1.
- [Release notes](https://github.com/TooTallNate/once/releases)
- [Changelog](https://github.com/TooTallNate/once/blob/v2.0.1/CHANGELOG.md)
- [Commits](https://github.com/TooTallNate/once/compare/1.1.2...v2.0.1)

---
updated-dependencies:
- dependency-name: "@tootallnate/once"
  dependency-version: 2.0.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-21 17:11:33 +00:00
Fredrik Adelöw 74c5fbbafd Merge pull request #34324 from backstage/freben/fix-entity-list-triple-fetch
fix(catalog-react): eliminate redundant entity list fetches during filter initialization
2026-05-21 16:48:32 +02:00
Fredrik Adelöw 5dbbb15574 Merge pull request #34323 from backstage/freben/split-query-entities-count
fix(catalog-backend): split queryEntities list and count queries
2026-05-21 15:56:09 +02:00
Fredrik Adelöw 35c473d736 Merge pull request #34273 from backstage/freben/catalog-db-perf-skill
catalog-backend: add query performance battery and baseline
2026-05-21 15:55:30 +02:00
Vincenzo Scamporlino 80b4370413 Add instructions for enabling the catalog-unprocessed-entities page
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2026-05-21 12:48:15 +02:00
Vincenzo Scamporlino bc78e770c0 Update README to clarify plugin activation and DevTools integration
Signed-off-by: Vincenzo Scamporlino <vincenzos@spotify.com>
2026-05-21 12:48:01 +02:00
Fredrik Adelöw 392c1b2851 refactor(catalog-react): drop useCallback on refresh — useDebounce uses a ref internally
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-05-21 10:18:24 +02:00
Fredrik Adelöw 77e7ad4c7d fix(catalog-react): clear fetch dedup ref on failure instead of reverting to previous params
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-05-21 10:12:51 +02:00
Fredrik Adelöw 720fb542d9 cleanup(catalog-react): remove dead appliedCursor field, fix cursor-mode guard, inline getPaginationMode
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-05-21 09:55:57 +02:00
Fredrik Adelöw 9e880b70fd Deduplicate adjustedFilters computation
Move the adjustedFilters useMemo above refresh and reuse it in both
the fetch callback and the frontend filtering memo.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-05-20 22:42:49 +02:00
renovate[bot] 6b58111494 Update ghcr.io/devcontainers/features/common-utils Docker tag to v2.5.9
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-05-20 20:27:38 +00:00
1337 9929df3d8c Merge branch 'backstage:master' into feature/catalog-export 2026-05-20 20:32:27 +02:00
Fredrik Adelöw ffa59be219 Revert lastFetchParamsRef on failed fetch to allow retries
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-05-20 20:24:34 +02:00
Fredrik Adelöw 779749fbd7 Guard against empty-filter fetch on mount and premature URL sync
The lastFetchParamsRef starts as undefined, so the initial debounce
would have fetched with an empty filter (returning every entity in
the catalog). Guard against this by skipping the fetch when no filter
components have registered yet.

Also skip the URL sync effect until at least one filter has been set,
to avoid briefly clearing filter query params from the URL bar before
filter components initialize.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-05-20 17:57:33 +02:00
Fredrik Adelöw 4694eb16e3 Revert EntityKindPicker ref — provider dedup handles it
The label is read by CatalogTable for the table title (e.g. "All
Components (42)"), so suppressing the label update would cause a
visible regression. The provider's ref-based fetch dedup already
prevents the redundant API call when only the label changes, so
the second updateFilters call is harmless.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-05-20 17:37:35 +02:00
Fredrik Adelöw 7c205457b6 Add changeset for entity list triple-fetch fix
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-05-20 17:31:38 +02:00
Fredrik Adelöw a103f0e604 test(catalog-react): add regression test for entity list fetch dedup
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-05-20 17:30:49 +02:00
Fredrik Adelöw 4222c73fd3 fix(catalog-react): eliminate redundant fetches in useEntityListProvider
Replace useAsyncFn + outputState comparison with ref-based fetch dedup
and generation counter. Split entity filtering into a synchronous
useMemo so frontend-only filter changes are instant.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
2026-05-20 17:29:44 +02:00