paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 27 Packages Projects Releases Wiki Activity
74,056 Commits 1 Branch 0 Tags
de49b985a5391fea5f4824eb2933149d9ee3fb2a
Commit Graph

74056 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
backstage-goalie[bot] de49b985a5 Merge pull request #34370 from backstage/renovate/typescript-json-schema-0.x-lockfile 
chore(deps): update dependency typescript-json-schema to v0.67.4
 2026-05-25 16:28:26 +00:00
backstage-goalie[bot] e28288008f Merge pull request #34369 from backstage/renovate/shell-quote-1.x-lockfile 
chore(deps): update dependency shell-quote to v1.8.4
 2026-05-25 16:28:21 +00:00
renovate[bot] 1754d0de8c chore(deps): update dependency typescript-json-schema to v0.67.4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-25 15:03:24 +00:00
renovate[bot] 44fc7cfdfe Update dependency @uiw/codemirror-themes to v4.25.10 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-25 17:02:55 +02:00
renovate[bot] 298ee9fe86 chore(deps): update dependency shell-quote to v1.8.4 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-25 15:02:49 +00:00
Fredrik Adelöw 6b6eee5c3b Merge pull request #34034 from backstage/dependabot/npm_and_yarn/xmldom/xmldom-0.8.13 
build(deps): bump @xmldom/xmldom from 0.8.11 to 0.8.13
 2026-05-25 16:56:11 +02:00
renovate[bot] 1c6b2d7791 fix(deps): update nextjs monorepo to v16.2.6 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-25 16:53:02 +02:00
dependabot[bot] 6774440286 chore(deps): bump next from 16.2.3 to 16.2.6 in /docs-ui 
Bumps [next](https://github.com/vercel/next.js) from 16.2.3 to 16.2.6.
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](https://github.com/vercel/next.js/compare/v16.2.3...v16.2.6)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.2.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-25 16:50:49 +02:00
renovate[bot] 3758a8a1ef chore(deps): update dependency next-mdx-remote-client to v2.1.10 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-25 16:48:12 +02:00
dependabot[bot] a259b29c20 chore(deps): Bump @xmldom/xmldom from 0.8.11 to 0.8.13 
Bumps [@xmldom/xmldom](https://github.com/xmldom/xmldom) from 0.8.11 to 0.8.13.
- [Release notes](https://github.com/xmldom/xmldom/releases)
- [Changelog](https://github.com/xmldom/xmldom/blob/master/CHANGELOG.md)
- [Commits](https://github.com/xmldom/xmldom/compare/0.8.11...0.8.13)

---
updated-dependencies:
- dependency-name: "@xmldom/xmldom"
  dependency-version: 0.8.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-25 14:17:55 +00:00
Fredrik Adelöw aaf850607f Merge pull request #34365 from backstage/renovate/express-4.x-lockfile 
chore(deps): update dependency express to v4.22.2
 2026-05-25 16:16:17 +02:00
Fredrik Adelöw bf02ec6263 Merge pull request #34366 from backstage/renovate/ldapts-8.x-lockfile 
chore(deps): update dependency ldapts to v8.1.8
 2026-05-25 16:07:21 +02:00
Andre Wanlin 0f2671f6fd Merge pull request #34343 from ryoku4/docs/github-casing 
docs: correct "Github" to "GitHub" for consistency in branding
 2026-05-25 09:06:48 -05:00
Fredrik Adelöw 9af020191e Merge pull request #34317 from backstage/freben/fix-entity-page-test-flake 
fix(catalog): fix flaky entity page test
 2026-05-25 16:00:49 +02:00
Andre Wanlin 8b31484e82 Merge pull request #33690 from asheen1234/gitlab-repo-owner-picker 
Add GitLabRepoOwnerPicker for RepoOwnerPicker
 2026-05-25 09:00:36 -05:00
renovate[bot] 75b91cf12a chore(deps): update dependency ldapts to v8.1.8 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-25 13:42:29 +00:00
renovate[bot] 3af8ed5d3a chore(deps): update dependency express to v4.22.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-25 13:41:39 +00:00
Fredrik Adelöw b304686e03 Merge pull request #34353 from officialasishkumar/fix-rate-limit-ipv6-key-generator 
fix(backend-defaults): use ipKeyGenerator for rate limiter keys
 2026-05-25 15:40:43 +02:00
Fredrik Adelöw 844026931d Merge pull request #34305 from backstage/dependabot/npm_and_yarn/webpack-dev-server-5.2.4 
chore(deps): Bump webpack-dev-server from 5.2.3 to 5.2.4
 2026-05-25 15:37:34 +02:00
backstage-goalie[bot] c7ef56e571 Merge pull request #34364 from backstage/renovate/dompurify-3.x-lockfile 
chore(deps): update dependency dompurify to v3.4.5
 2026-05-25 13:32:43 +00:00
Fredrik Adelöw 23686b5095 Update changeset and PR description 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
 2026-05-25 15:24:02 +02:00
Fredrik Adelöw 7efdc27464 Remove mountPath → initialRouteEntries defaulting 
Don't auto-default initialRouteEntries from mountPath — for
parameterized paths this silently produces wrong params (literal
':name' values). Require callers to set both explicitly.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
 2026-05-25 15:18:11 +02:00
Fredrik Adelöw f5827aa8ee Reduce to lockfile-only update 
Remove the package.json range bump and changeset — the range already
covers the new version, so only the lockfile needs updating.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
 2026-05-25 14:26:22 +02:00
dependabot[bot] a2d06dacc1 chore(deps): Bump webpack-dev-server from 5.2.3 to 5.2.4 
Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.2.3 to 5.2.4.
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-dev-server/compare/v5.2.3...v5.2.4)

---
updated-dependencies:
- dependency-name: webpack-dev-server
  dependency-version: 5.2.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-25 14:25:38 +02:00
renovate[bot] cbf78da153 chore(deps): update dependency dompurify to v3.4.5 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-25 12:05:08 +00:00
Fredrik Adelöw e60d34304d Merge pull request #34174 from backstage/dependabot/npm_and_yarn/microsite/babel/plugin-transform-modules-systemjs-7.29.4 
chore(deps): Bump @babel/plugin-transform-modules-systemjs from 7.28.5 to 7.29.4 in /microsite
 2026-05-25 13:30:36 +02:00
Fredrik Adelöw 4b0ad7b0b5 Merge pull request #34351 from backstage/dependabot/npm_and_yarn/qs-6.15.2 
chore(deps): bump qs from 6.15.1 to 6.15.2
 2026-05-25 13:29:33 +02:00
Fredrik Adelöw 380e7f02c7 Merge pull request #34341 from backstage/renovate/migrate-config 
Migrate Renovate config
 2026-05-25 13:29:01 +02:00
backstage-goalie[bot] 461a3d3320 Merge pull request #34358 from backstage/renovate/stoplight-spectral-rulesets-1.x-lockfile 
Update dependency @stoplight/spectral-rulesets to v1.22.3
 2026-05-25 11:05:14 +00:00
Vincenzo Scamporlino bfef8b7b20 Merge pull request #34327 from backstage/unprocessed-entities 
Unprocessed entities: update installation instructions
 2026-05-25 12:46:21 +02:00
Fredrik Adelöw 7b7981b4a3 Reduce to only the effective change: matchPackagePatterns → matchPackageNames 
Renovate deprecated matchPackagePatterns. The new matchPackageNames
accepts regex patterns wrapped in / delimiters. All other changes
in this PR (quote style, comment removal) were cosmetic and have
been reverted.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
 2026-05-25 12:21:41 +02:00
renovate[bot] 602fb33799 chore(deps): update dependency @stoplight/spectral-rulesets to v1.22.3 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-25 10:17:52 +00:00
Fredrik Adelöw 17cce350b3 Merge pull request #34219 from backstage/renovate/embedded-postgres-18.x 
Update dependency embedded-postgres to v18.3.0-beta.17
 2026-05-25 12:09:39 +02:00
Fredrik Adelöw 2b2184a26d Merge pull request #34245 from backstage/renovate/ghcr.io-devcontainers-features-common-utils-2.x 
Update ghcr.io/devcontainers/features/common-utils Docker tag to v2.5.9
 2026-05-25 12:08:05 +02:00
Fredrik Adelöw 4b78a21ba5 Merge pull request #34279 from backstage/renovate/chromaui-action-digest 
Update chromaui/action digest to 7aca53e
 2026-05-25 12:07:01 +02:00
Fredrik Adelöw 5e438e0db0 Merge pull request #34253 from backstage/renovate/actions-setup-node-6.x 
Update actions/setup-node action to v6.4.0
 2026-05-25 12:06:46 +02:00
Fredrik Adelöw 0432ce67a3 Merge pull request #34302 from backstage/dependabot/npm_and_yarn/workspaces/ui/vm2-3.11.5 
chore(deps): Bump vm2 from 3.10.5 to 3.11.5 in /workspaces/ui
 2026-05-25 12:05:57 +02:00
Fredrik Adelöw 445d10130e Merge pull request #34304 from backstage/dependabot/npm_and_yarn/workspaces/ui/fast-uri-3.1.2 
chore(deps): Bump fast-uri from 3.1.0 to 3.1.2 in /workspaces/ui
 2026-05-25 12:05:01 +02:00
Fredrik Adelöw a073460c13 Merge pull request #34333 from backstage/dependabot/npm_and_yarn/microsite/tootallnate/once-2.0.1 
chore(deps): bump @tootallnate/once from 2.0.0 to 2.0.1 in /microsite
 2026-05-25 12:04:20 +02:00
Fredrik Adelöw faef6493e7 Merge pull request #34332 from backstage/dependabot/npm_and_yarn/tootallnate/once-2.0.1 
chore(deps): bump @tootallnate/once from 1.1.2 to 2.0.1
 2026-05-25 12:03:54 +02:00
Fredrik Adelöw 6fdfcb3cb0 Merge pull request #34306 from backstage/dependabot/npm_and_yarn/ws-8.20.1 
chore(deps): Bump ws from 8.20.0 to 8.20.1
 2026-05-25 12:03:16 +02:00
Fredrik Adelöw b746c2807f Merge pull request #34354 from officialasishkumar/fix-proxied-signin-base64url-token 
fix(core-components): decode url-safe base64 tokens in proxy sign-in
 2026-05-25 12:00:29 +02:00
Asish Kumar 8add9b992d fix(core-components): decode url-safe base64 tokens in proxy sign-in 
The proxy-based sign-in page derived the session expiry from the JWT by
decoding its payload with `window.atob`, which only accepts the standard
base64 alphabet. JWTs are encoded using base64url (RFC 7515), so any
token whose payload contained '-' or '_' raised a decoding error and
broke sign-in. Translate the payload back to the standard alphabet and
restore its padding before decoding.

Signed-off-by: Asish Kumar <officialasishkumar@gmail.com>
 2026-05-25 05:30:56 +05:30
Asish Kumar def82d4d5e fix(backend-defaults): use ipKeyGenerator for rate limiter keys 
The built-in rate limiter derived its key directly from `req.ip`, which
express-rate-limit 8.x rejects with an ERR_ERL_KEY_GEN_IPV6 validation
error. A raw IPv6 address used as a rate limiting key would let a client
bypass the limit by rotating through addresses in its allotted block, so
the library now requires its `ipKeyGenerator` helper to normalize the
address. Wrap the resolved client address in that helper so the limiter
starts cleanly and groups IPv6 clients by their address block.

Signed-off-by: Asish Kumar <officialasishkumar@gmail.com>
 2026-05-25 05:21:28 +05:30
dependabot[bot] e0889a3f8e chore(deps): bump qs from 6.15.1 to 6.15.2 
Bumps [qs](https://github.com/ljharb/qs) from 6.15.1 to 6.15.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ljharb/qs/compare/v6.15.1...v6.15.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.15.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-23 12:27:32 +00:00
Fredrik Adelöw 6fa1cacfbe Merge pull request #34347 from koalaty-code/ingestions-last-error-column-type 
fix(catalog-incremental): use text for ingestions.last_error column type
 2026-05-23 12:16:16 +02:00
Adam Letizia e846874385 fix(catalog-incremental): use text for ingestions.last_error column type 
Signed-off-by: Adam Letizia <LetiziaAdam@JohnDeere.com>
 2026-05-22 14:21:55 -05:00
Matthew Clarke 7092722057 perf(kubernetes-backend): pool HTTPS agents per cluster in KubernetesFetcher (#34344) 
* refactor(kubernetes-backend): boy-scout KubernetesFetcher

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Matthew Clarke <mclarke@spotify.com>

* fix(kubernetes-backend): restore dynamic imports for @kubernetes/client-node

The package is ESM-only and must be loaded via dynamic import() to work
in Jest's CommonJS transform. Reverts to the original inline
await import() pattern while keeping the agent pooling and refactoring.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Matthew Clarke <mclarke@spotify.com>

---------

Signed-off-by: Matthew Clarke <mclarke@spotify.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-05-22 17:59:54 +00:00
renovate[bot] 699b15678b Update actions/setup-node action to v6.4.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-22 17:18:40 +00:00
renovate[bot] 01e3e3d32f Update chromaui/action digest to 7aca53e 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-05-22 17:18:27 +00:00