paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 32 Packages Projects Releases Wiki Activity
72,840 Commits 1 Branch 0 Tags
e22fc0af9c7fc094cdc3797d7df7927d8118ce37
Commit Graph

72840 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Rajib Quayum e22fc0af9c chore: update docs for MUI v5 class name prefix issue 
Signed-off-by: Rajib Quayum <rajibq@users.noreply.github.com>
 2026-04-03 10:01:25 -04:00
Rajib Quayum 2c541a782b fix: prevent occasional duplication of the MUI v5 prefix 
Signed-off-by: Rajib Quayum <rajibq@users.noreply.github.com>
 2026-04-03 09:29:06 -04:00
Rajib Quayum 51ee29bac7 chore: pulls in master 
Signed-off-by: Rajib Quayum <rajibq@users.noreply.github.com>
 2026-04-03 09:27:25 -04:00
Rajib Quayum a4dc401ac3 chore: revert all previous changes 
Signed-off-by: Rajib Quayum <rajibq@users.noreply.github.com>
 2026-04-03 09:24:04 -04:00
Riley Martine d5899c2362 Allow passing showArrowHeads to entity-card:catalog-graph/relations and /catalog-graph page (#33706) 
* Allow passing showArrowHeads to entity-card:catalog-graph/relations and /catalog-graph page

Signed-off-by: Riley Martine <rmartine@integralads.com>

* Update .changeset/nine-signs-end.md

Signed-off-by: Aramis Sennyey <159921952+aramissennyeydd@users.noreply.github.com>

---------

Signed-off-by: Riley Martine <rmartine@integralads.com>
Signed-off-by: Aramis Sennyey <159921952+aramissennyeydd@users.noreply.github.com>
Co-authored-by: Aramis Sennyey <159921952+aramissennyeydd@users.noreply.github.com>
 2026-04-03 12:34:45 +00:00
Fredrik Adelöw 3cdf048f77 Merge pull request #33534 from kurtaking/migrate-scaffolder-to-metrics-service 2026-04-03 09:19:45 +02:00
Kurt King b37a79ef5b Merge branch 'master' of https://github.com/backstage/backstage into migrate-scaffolder-to-metrics-service 2026-04-02 22:47:04 -06:00
Fredrik Adelöw b8158ed1bf Merge pull request #33726 from backstage/renovate/npm-lodash-vulnerability 2026-04-03 06:31:28 +02:00
Fredrik Adelöw a071c6b44d Merge pull request #33722 from backstage/dependabot/npm_and_yarn/lodash-es-4.18.1 2026-04-03 06:30:17 +02:00
Patrik Oldsberg 6e2d963126 Merge pull request #33712 from backstage/rugvip/catalog-nfs-catalog-index-page 
catalog: export CatalogIndexPage from alpha entry point
 2026-04-03 01:01:33 +02:00
Patrik Oldsberg 15660cfbf9 Merge pull request #33682 from backstage/github-support-app-no-org 
Fix GitHub app credentials for bare host URLs
 2026-04-03 00:58:55 +02:00
Johan Persson c193ef1f9f feat(catalog): add Kind field to About Card 
Signed-off-by: Johan Persson <johanopersson@gmail.com>
 2026-04-02 15:03:09 +02:00
Yata Rupesh 7d5a3a2567 Change accordion snippet height to auto for GroupMultipleOpen 
Signed-off-by: Yata Rupesh <99956608+RupeshRoyal@users.noreply.github.com>
 2026-04-02 14:19:14 +02:00
Patrik Oldsberg ee1531dca5 catalog: export CatalogIndexPage from alpha entry point 
Export NfsDefaultCatalogPage as CatalogIndexPage from the ./alpha entry
point along with CatalogIndexPageProps, CatalogTableRow, and
CatalogTableColumnsFunc. This allows adopters to use and customize the
catalog index page within a PageBlueprint in the new frontend system.

No changes to the stable main entry point API.

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
Made-with: Cursor
 2026-04-02 14:03:16 +02:00
renovate[bot] 4acb606f21 chore(deps): update dependency lodash to v4.18.1 [security] 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-02 10:39:07 +00:00
dependabot[bot] 6dc116caf1 chore(deps): Bump lodash-es from 4.17.23 to 4.18.1 
Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1)

---
updated-dependencies:
- dependency-name: lodash-es
  dependency-version: 4.18.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-02 07:45:22 +00:00
Patrik Oldsberg 7bc057e8b6 Merge pull request #33703 from backstage/feat/auth0-federated-logout 
feat(auth): support provider logout redirects, implement Auth0 federated logout
 2026-04-01 15:27:27 +02:00
Jonathan Roebuck 3bddf23896 refactor(auth0): use URL/URLSearchParams for logout URL construction 
Replace manual string concatenation with URL and URLSearchParams for
safer encoding and better readability.

Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-01 13:43:34 +01:00
Jonathan Roebuck 25e8a65b46 refactor(auth0): rename config key federated to federatedLogout 
The `federated` config key was ambiguous. Rename to `federatedLogout`
for clarity since it specifically controls federated logout behavior.

Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-01 13:41:06 +01:00
Jonathan Roebuck 7d002e83a5 fix(auth0): remove untestable app.baseUrl fallback test 
The origin header is always present in browser POST requests, making
the fallback scenario unreachable in practice.

Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-01 13:28:32 +01:00
Jonathan Roebuck e2d96b7140 chore: address PR feedback on changesets 
Add @backstage/plugin-app to core-app-api changeset, reword to avoid
internal export name, and downgrade auth-node bump to patch.

Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-04-01 13:09:59 +01:00
Jack Palmer 208cf5f922 fix(auth): add security hardening and federated config for Auth0 logout 
Add server-side URL validation for logoutUrl (HTTPS + localhost only),
origin validation on the logout endpoint, and a configurable `federated`
option (default false) for Auth0 provider logout. Includes comprehensive
test coverage for all security controls.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jack Palmer <jackpalmer@spotify.com>
 2026-04-01 13:06:43 +01:00
Jack Palmer 3532be4763 fix(auth): harden logout redirect with origin validation and protocol check 
Add origin allowlist validation in the OAuth logout handler (matching
the existing start/refresh pattern) and validate the logoutUrl protocol
on the frontend before redirecting. Also replace inline type annotation
with the named OAuthAuthenticatorLogoutResult type.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jack Palmer <jackpalmer@spotify.com>
 2026-04-01 13:06:43 +01:00
Jonathan Roebuck a07f0196e2 chore: update auth0 provider API report with domain and clientID fields 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
 2026-04-01 13:06:40 +01:00
Patrik Oldsberg b9fec1bdc8 Merge pull request #33642 from backstage/dist-workspace-pack-batching 
cli-module-build: pack packages in batches inside createDistWorkspace
 2026-04-01 11:54:21 +02:00
Fredrik Adelöw 9c953f9eff Merge pull request #32943 from Vivek1819/fix/scaffolder-markdown-links-new-tab 
fix(scaffolder): open markdown links in new tab for template outputs
 2026-04-01 11:49:20 +02:00
MT Lewis 8f174e18e9 cli-module-build: pack sequentially when cycles are detected in dependencies 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
 2026-04-01 09:48:11 +01:00
Peter Macdonald af968456de Merge pull request #33700 from Parsifal-M/docs/update-fe-skill 
docs: Update FE migration skill
 2026-04-01 09:35:57 +02:00
Fredrik Adelöw 49efae88e4 Merge pull request #33704 from backstage/freben/fix-docs-broken-links 
docs: fix broken links and anchors across documentation
 2026-04-01 09:02:46 +02:00
backstage-goalie[bot] 5407b5dd0a Merge pull request #33709 from backstage/renovate/axios-1.x-lockfile 
chore(deps): update dependency axios to v1.14.0
 2026-04-01 02:40:54 +00:00
renovate[bot] 93466ca419 chore(deps): update dependency axios to v1.14.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-01 01:10:56 +00:00
backstage-goalie[bot] 886fe58ff7 Merge pull request #33707 from backstage/renovate/modelcontextprotocol-sdk-1.x-lockfile 
chore(deps): update dependency @modelcontextprotocol/sdk to v1.28.0
 2026-04-01 00:59:48 +00:00
renovate[bot] a405d69bdd chore(deps): update dependency @modelcontextprotocol/sdk to v1.28.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-01 00:07:43 +00:00
backstage-goalie[bot] 2246288871 Merge pull request #33702 from backstage/renovate/aws-sdk-js-v3-monorepo 
chore(deps): update aws-sdk-js-v3 monorepo
 2026-04-01 00:01:51 +00:00
Fredrik Adelöw bb7768ba06 docs: fix broken links and anchors across documentation 
Fix ~30 broken links and anchors across the documentation site, including
incorrect relative paths, mismatched anchor names, zero-width characters
in URLs, and references to renamed or removed headings.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
 2026-03-31 18:43:40 +02:00
Fredrik Adelöw 8270f88fda Merge pull request #33559 from backstage/changeset-release/master 
Version Packages (next)
 2026-03-31 18:37:41 +02:00
Fredrik Adelöw f46363130c Update packages/core-components/src/components/MarkdownContent/MarkdownContent.tsx 
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
 2026-03-31 17:54:39 +02:00
github-actions[bot] a2cb332e25 Version Packages (next) 2026-03-31 15:30:51 +00:00
Patrik Oldsberg 292b6431a2 Merge pull request #33688 from backstage/fix-frontend-plugin-legacy-id 
Fix template name collision and export path in CLI new module
 2026-03-31 17:24:04 +02:00
Fredrik Adelöw 0449cf02fd Update packages/core-components/src/components/MarkdownContent/MarkdownContent.tsx 
Signed-off-by: Fredrik Adelöw <freben@gmail.com>
 2026-03-31 17:20:34 +02:00
Jonathan Roebuck 9244b70c57 chore: add changesets, update API reports, fix type errors 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
 2026-03-31 16:20:23 +01:00
Jonathan Roebuck 906f104f6b feat(core-app-api): redirect to provider logoutUrl on sign-out when available 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
 2026-03-31 16:20:23 +01:00
Jonathan Roebuck 97850d0ef1 feat(auth0): implement federated logout to clear Auth0 and IdP sessions 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
 2026-03-31 16:20:23 +01:00
Jonathan Roebuck 0ef5a03fb3 feat(auth-node): return logoutUrl in logout response when provided by authenticator 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
 2026-03-31 16:20:23 +01:00
Jonathan Roebuck fec31bdde5 feat(auth-node): add OAuthAuthenticatorLogoutResult type for provider logout redirects 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Jonathan Roebuck <jroebuck@spotify.com>
 2026-03-31 16:20:23 +01:00
Fredrik Adelöw 8a2a81fa1e Merge pull request #33687 from backstage/freben/bump-glob-rollup 
Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities
 2026-03-31 16:06:22 +02:00
renovate[bot] 0cbba8a528 chore(deps): update aws-sdk-js-v3 monorepo 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-31 14:06:03 +00:00
Fredrik Adelöw 739b655063 Merge pull request #33250 from backstage/renovate/use-sync-external-store-1.x 
chore(deps): update dependency @types/use-sync-external-store to v1
 2026-03-31 15:58:16 +02:00
Fredrik Adelöw 9ee88aeb59 Merge pull request #33170 from dbmdz/gitlab-repo-picker-improvements 
Gitlab repo picker improvements
 2026-03-31 15:55:10 +02:00
Fredrik Adelöw ad19cb040f Merge pull request #33629 from jonkoops/auditor-zod-v4-refactor 
refactor(backend-defaults): migrate internal Zod usage from v3 to v4
 2026-03-31 15:52:18 +02:00