Merge branch 'master' of https://github.com/backstage/backstage into add-catalog-permissions

.changeset/blue-forks-cry.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend-module-aws-alb-provider': patch
+---
+
+Fix a bug where the signer was checked from the payload instead of the header

.changeset/breezy-flowers-dance.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-app-api': patch
+---
+
+Deprecate the `featureDiscoveryServiceFactory` in favor of using `@backstage/backend-defaults#discoveryFeatureLoader` instead.

.changeset/brown-actors-clap.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-plugin-api': minor
+---
+
+**BREAKING**: The deprecated identity and token manager services have been removed. This means that `coreServices.identity` and `coreServices.tokenManager` are gone, along with related types and utilities in other packages.

.changeset/brown-worms-sneeze.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-techdocs-react': patch
+---
+
+Fixed issue in useShadowRootElements which could lead to unlimited render loops

.changeset/calm-brooms-fail.md

@@ -0,0 +1,38 @@
+---
+'@backstage/backend-dynamic-feature-service': patch
+---
+
+Deprecate the `dynamicPluginsServiceRef`, `dynamicPluginsServiceFactory` and `dynamicPluginsServiceFactoryWithOptions` in favor of using the `dynamicPluginsFeatureDiscoveryLoader` to discover dynamic features in a new backend system.
+
+See usage examples below:
+
+Example using the `dynamicPluginsFeatureDiscoveryLoader` loader in a backend instance:
+
+```ts
+import { createBackend } from '@backstage/backend-defaults';
+import { dynamicPluginsFeatureDiscoveryLoader } from '@backstage/backend-dynamic-feature-service';
+//...
+
+const backend = createBackend();
+backend.add(dynamicPluginsFeatureDiscoveryLoader);
+//...
+backend.start();
+```
+
+Passing options to the `dynamicPluginsFeatureDiscoveryLoader` loader in a backend instance:
+
+```ts
+import { createBackend } from '@backstage/backend-defaults';
+import { dynamicPluginsFeatureDiscoveryLoader } from '@backstage/backend-dynamic-feature-service';
+import { myCustomModuleLoader } from './myCustomModuleLoader';
+//...
+
+const backend = createBackend();
+backend.add(
+  dynamicPluginsFeatureDiscoveryLoader({
+    moduleLoader: myCustomModuleLoader,
+  }),
+);
+//...
+backend.start();
+```

.changeset/cold-ways-protect.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-dynamic-feature-service': patch
+---
+
+Relax type check for a plugin's default export to also accept a BackendFeature defined as a function instead of an object

.changeset/cool-melons-check.md

@@ -0,0 +1,21 @@
+---
+'@backstage/frontend-test-utils': patch
+'@backstage/frontend-app-api': patch
+'@backstage/core-compat-api': patch
+'@backstage/plugin-catalog-import': patch
+'@backstage/plugin-catalog-graph': patch
+'@backstage/plugin-catalog-react': patch
+'@backstage/plugin-user-settings': patch
+'@backstage/plugin-search-react': patch
+'@backstage/plugin-kubernetes': patch
+'@backstage/plugin-scaffolder': patch
+'@backstage/plugin-api-docs': patch
+'@backstage/plugin-devtools': patch
+'@backstage/plugin-techdocs': patch
+'@backstage/plugin-catalog': patch
+'@backstage/plugin-search': patch
+'@backstage/plugin-home': patch
+'@backstage/plugin-org': patch
+---
+
+Updated exports to use the new type parameters for extensions and extension blueprints.

.changeset/cool-poems-hammer.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-search-react': patch
+---
+
+Slight type tweak to match newer React versions better

.changeset/cuddly-rocks-invent.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-dynamic-feature-service': minor
+---
+
+**BREAKING**: `dynamicPluginsServiceFactory` is no longer callable as a function. If you need to provide options to make a custom factory, use `dynamicPluginsSchemasServiceFactoryWithOptions` instead.

.changeset/curly-brooms-raise.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-search-backend': patch
+---
+
+Deprecate create router as the legacy backend system will no longer be supported.

.changeset/dry-beers-shake.md

@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-defaults': minor
+---
+
+Initial release of this package, which provides a default app setup through the `createApp` function. This replaces the existing `createApp` method from `@backstage/frontend-app-api`.

.changeset/dry-monkeys-mate.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-kubernetes-backend': patch
+---
+
+The `KubernetesBuilder` and its related types has been marked as deprecared. This backend should instead be initialized using the new backend system.

.changeset/eighty-tables-hope.md

@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-test-utils': patch
+---
+
+Internal update to add support for passing an `ApiRegistry` when creating the node tree

.changeset/famous-badgers-drop.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-test-utils': patch
+---
+
+Added missing service mock for `mockServices.rootConfig.mock`, and fixed the definition of `mockServices.rootHttpRouter.factory` to not have a duplicate callback.

.changeset/five-tigers-share.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-backend': patch
+---
+
+Found the issue during testing the clean up of the workspace for the database implementation.

.changeset/flat-kangaroos-push.md

@@ -0,0 +1,31 @@
+---
+'@backstage/frontend-plugin-api': minor
+---
+
+**BREAKING**: Updated the type parameters for `ExtensionDefinition` and `ExtensionBlueprint` to only have a single object parameter. The base type parameter is exported as `ExtensionDefinitionParameters` and `ExtensionBlueprintParameters` respectively. This is shipped as an immediate breaking change as we expect usage of these types to be rare, and it does not affect the runtime behavior of the API.
+
+This is a breaking change as it changes the type parameters. Existing usage can generally be updated as follows:
+
+- `ExtensionDefinition<any>` -> `ExtensionDefinition`
+- `ExtensionDefinition<any, any>` -> `ExtensionDefinition`
+- `ExtensionDefinition<TConfig>` -> `ExtensionDefinition<{ config: TConfig }>`
+- `ExtensionDefinition<TConfig, TConfigInput>` -> `ExtensionDefinition<{ config: TConfig, configInput: TConfigInput }>`
+
+If you need to infer the parameter you can use `ExtensionDefinitionParameters`, for example:
+
+```ts
+import {
+  ExtensionDefinition,
+  ExtensionDefinitionParameters,
+} from '@backstage/frontend-plugin-api';
+
+function myUtility<T extends ExtensionDefinitionParameters>(
+  ext: ExtensionDefinition<T>,
+): T['config'] {
+  // ...
+}
+```
+
+The same patterns apply to `ExtensionBlueprint`.
+
+This change is made to improve the readability of API references and ability to evolve the type parameters in the future.

.changeset/forty-toes-float.md

@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-test-utils': minor
+---
+
+**BREAKING**: The deprecated `.render()` method has been removed from the extension tester.

.changeset/four-parents-buy.md

@@ -0,0 +1,7 @@
+---
+'@backstage/frontend-app-api': minor
+---
+
+**BREAKING**: The `createSpecializedApp` function now creates a bare-bones app without any of the default app structure or APIs. To re-introduce this functionality if you need to use `createSpecializedApp` you can install the `app` plugin from `@backstage/plugin-app`.
+
+In addition, the `createApp` and `CreateAppFeatureLoader` exports are now deprecated as they are being moved to `@backstage/frontend-defaults`, which should be used instead.

.changeset/four-ties-raise.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-react': minor
+---
+
+Add `ui:backstage.review.name` option for custom item names on scaffolder review page, and also add support for rendering the `title` property instead of the key name.

.changeset/fresh-apes-dress.md

@@ -0,0 +1,8 @@
+---
+'@backstage/frontend-plugin-api': patch
+'@backstage/frontend-test-utils': patch
+'@backstage/frontend-app-api': patch
+'@backstage/plugin-app': minor
+---
+
+Introduce the `@backstage/plugin-app` package to hold all of the built-in extensions for easy consumption and overriding.

.changeset/fresh-bears-prove.md

@@ -0,0 +1,6 @@
+---
+'@backstage/cli': patch
+'@backstage/create-app': patch
+---
+
+Update templates to not refer to backend-common

.changeset/fresh-pumas-clean.md

@@ -0,0 +1,6 @@
+---
+'@backstage/plugin-app-backend': patch
+'@backstage/plugin-app-node': patch
+---
+
+Fixing dependency metadata with the new `@backstage/plugin-app` package

.changeset/friendly-days-march.md

@@ -0,0 +1,7 @@
+---
+'@backstage/frontend-plugin-api': patch
+---
+
+Added `createFrontendModule` as a replacement for `createExtensionOverrides`, which is now deprecated.
+
+Deprecated the `BackstagePlugin` and `FrontendFeature` type in favor of `FrontendPlugin` and `FrontendFeature` from `@backstage/frontend-app-api` respectively.

.changeset/friendly-months-march.md

@@ -0,0 +1,6 @@
+---
+'@backstage/frontend-app-api': patch
+'@backstage/core-compat-api': patch
+---
+
+Added support for new `FrontendPlugin` and `FrontendModule` types.

.changeset/funny-houses-rest.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-techdocs-backend': patch
+---
+
+The `createRouter` and its related types has been marked as deprecared. This backend should instead be initialized using the new backend system.

.changeset/fuzzy-mails-walk.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-plugin-api': patch
+---
+
+Deprecate the `featureDiscoveryServiceRef` in favor of using the new `discoveryFeatureLoader` instead.

.changeset/fuzzy-spies-share.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-signals-backend': patch
+---
+
+The `createRouter` and its related types has been marked as deprecared. This backend should instead be initialized using the new backend system.

.changeset/giant-jars-mix.md

@@ -0,0 +1,6 @@
+---
+'@backstage/create-app': patch
+'@backstage/plugin-devtools': patch
+---
+
+Minor dockerfile syntax update

.changeset/gorgeous-scissors-wave.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-app-api': patch
+---
+
+Updated the error message for missing service dependencies to include the plugin and module IDs.

.changeset/green-worms-rescue.md

@@ -0,0 +1,5 @@
+---
+'@backstage/cli': patch
+---
+
+Add `checks: 'read'` for default GitHub app permissions

.changeset/healthy-moons-drum.md

@@ -0,0 +1,9 @@
+---
+'@backstage/backend-plugin-api': minor
+---
+
+Removed the following deprecated exports
+
+- `BackendPluginConfig` use `CreateBackendPluginOptions`
+- `BackendModuleConfig` use `CreateBackendModuleOptions`
+- `ExtensionPointConfig` use `CreateExtensionPointOptions`

.changeset/heavy-suits-judge.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-user-settings-backend': patch
+---
+
+In preparation to stop supporting to the legacy backend system, the `createRouter` function is now deprecated and we strongly recommend you [migrate](https://backstage.io/docs/backend-system/building-backends/migrating) your backend to the new system.

.changeset/kind-moose-learn.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-app-api': minor
+---
+
+**BREAKING**: The deprecated `identityServiceFactory` and `tokenManagerServiceFactory` have been removed.

.changeset/kind-walls-speak.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-defaults': minor
+---
+
+**BREAKING**: The backwards compatibility with plugins using legacy auth through the token manager service has been removed. This means that instead of falling back to using the old token manager, requests towards plugins that don't support the new auth system will simply fail. Please make sure that all plugins in your deployment are hosted within a backend instance from the new backend system.

.changeset/large-poets-check.md

@@ -0,0 +1,11 @@
+---
+'@backstage/plugin-catalog-backend-module-bitbucket-cloud': patch
+'@backstage/plugin-search-backend-module-techdocs': patch
+'@backstage/plugin-search-backend-module-catalog': patch
+'@backstage/plugin-search-backend-module-explore': patch
+'@backstage/plugin-permission-node': patch
+'@backstage/plugin-signals-backend': patch
+'@backstage/plugin-auth-backend': patch
+---
+
+Internal refactor to remove dependencies on the identity and token manager services, which have been removed. Public APIs no longer require the identity service or token manager to be provided.

.changeset/loud-brooms-pull.md

@@ -0,0 +1,8 @@
+---
+'@backstage/catalog-client': patch
+'@backstage/plugin-catalog-backend': patch
+---
+
+Moved `getEntities` ordering to utilize database instead of having it inside catalog client
+
+Please note that the latest version of `@backstage/catalog-client` will not order the entities in the same way as before. This is because the ordering is now done in the database query instead of in the client. If you rely on the ordering of the entities, you may need to update your backend plugin or code to handle this change.

.changeset/lucky-sheep-cover.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-common': patch
+---
+
+The `legacyPlugin` and `makeLegacyPlugin` helpers now provide their own shim implementation of the identity and token manager services, as these services are being removed from the new backend system.

.changeset/metal-garlics-fetch.md

@@ -0,0 +1,6 @@
+---
+'@backstage/frontend-plugin-api': patch
+'@backstage/frontend-app-api': patch
+---
+
+Moved several implementations of built-in APIs from being hardcoded in the app to instead be provided as API extensions. This moves all API-related inputs from the `app` extension to the respective API extensions. For example, extensions created with `ThemeBlueprint` are now attached to the `themes` input of `api:app-theme` rather than the `app` extension.

.changeset/metal-rivers-grin.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-test-utils': patch
+---
+
+There is a new `mockErrorHandler` utility to help in mocking the error middleware in tests.

.changeset/mighty-cheetahs-call.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-defaults': patch
+---
+
+Move down the discovery config to be in the root

.changeset/nasty-tigers-knock.md

@@ -0,0 +1,37 @@
+---
+'@backstage/backend-common': patch
+'@backstage/backend-dynamic-feature-service': patch
+'@backstage/plugin-app-backend': patch
+'@backstage/plugin-catalog-backend-module-aws': patch
+'@backstage/plugin-catalog-backend-module-azure': patch
+'@backstage/plugin-catalog-backend-module-bitbucket-cloud': patch
+'@backstage/plugin-catalog-backend-module-bitbucket-server': patch
+'@backstage/plugin-catalog-backend-module-gerrit': patch
+'@backstage/plugin-catalog-backend-module-github': patch
+'@backstage/plugin-catalog-backend-module-gitlab': patch
+'@backstage/plugin-catalog-backend-module-incremental-ingestion': patch
+'@backstage/plugin-catalog-backend-module-msgraph': patch
+'@backstage/plugin-catalog-backend-module-puppetdb': patch
+'@backstage/plugin-catalog-backend': patch
+'@backstage/plugin-events-backend-module-aws-sqs': patch
+'@backstage/plugin-events-backend-module-azure': patch
+'@backstage/plugin-events-backend-module-bitbucket-cloud': patch
+'@backstage/plugin-events-backend-module-gerrit': patch
+'@backstage/plugin-events-backend-module-github': patch
+'@backstage/plugin-events-backend-module-gitlab': patch
+'@backstage/plugin-events-backend': patch
+'@backstage/plugin-kubernetes-backend': patch
+'@backstage/plugin-permission-backend': patch
+'@backstage/plugin-proxy-backend': patch
+'@backstage/plugin-scaffolder-backend': patch
+'@backstage/plugin-search-backend-module-catalog': patch
+'@backstage/plugin-search-backend-module-elasticsearch': patch
+'@backstage/plugin-search-backend-module-explore': patch
+'@backstage/plugin-search-backend-module-pg': patch
+'@backstage/plugin-search-backend-module-techdocs': patch
+'@backstage/plugin-search-backend': patch
+'@backstage/plugin-techdocs-backend': patch
+'@backstage/plugin-user-settings-backend': patch
+---
+
+Modules, plugins, and services are now `BackendFeature`, not a function that returns a feature.

.changeset/new-poets-unite.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-kubernetes': patch
+---
+
+Make k8s entity content appear on components & resources only by default in new FE system

.changeset/ninety-mayflies-raise.md

@@ -0,0 +1,6 @@
+---
+'@backstage/plugin-search-backend-module-elasticsearch': patch
+'@backstage/plugin-search-backend-module-pg': patch
+---
+
+Internal refactor to use `LoggerService` and `DatabaseService` instead of the legacy `Logger` and `PluginDatabaseManager` types.

.changeset/olive-phones-sniff.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-common': patch
+---
+
+Add `pg-format` as a dependency

.changeset/popular-cooks-camp.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-test-utils': minor
+---
+
+**BREAKING**: Removed service mocks for the identity and token manager services, which have been removed from `@backstage/backend-plugin-api`.

.changeset/pre.json

@@ -0,0 +1,271 @@
+{
+  "mode": "pre",
+  "tag": "next",
+  "initialVersions": {
+    "example-app": "0.2.100",
+    "@backstage/app-defaults": "1.5.10",
+    "example-app-next": "0.0.14",
+    "app-next-example-plugin": "0.0.14",
+    "example-backend": "0.0.29",
+    "@backstage/backend-app-api": "0.9.0",
+    "@backstage/backend-common": "0.24.0",
+    "@backstage/backend-defaults": "0.4.2",
+    "@backstage/backend-dev-utils": "0.1.5",
+    "@backstage/backend-dynamic-feature-service": "0.3.0",
+    "example-backend-legacy": "0.2.101",
+    "@backstage/backend-openapi-utils": "0.1.16",
+    "@backstage/backend-plugin-api": "0.8.0",
+    "@backstage/backend-test-utils": "0.5.0",
+    "@backstage/catalog-client": "1.6.6",
+    "@backstage/catalog-model": "1.6.0",
+    "@backstage/cli": "0.27.0",
+    "@backstage/cli-common": "0.1.14",
+    "@backstage/cli-node": "0.2.7",
+    "@backstage/codemods": "0.1.49",
+    "@backstage/config": "1.2.0",
+    "@backstage/config-loader": "1.9.0",
+    "@backstage/core-app-api": "1.14.2",
+    "@backstage/core-compat-api": "0.2.8",
+    "@backstage/core-components": "0.14.10",
+    "@backstage/core-plugin-api": "1.9.3",
+    "@backstage/create-app": "0.5.18",
+    "@backstage/dev-utils": "1.0.37",
+    "e2e-test": "0.2.19",
+    "@backstage/e2e-test-utils": "0.1.1",
+    "@backstage/errors": "1.2.4",
+    "@backstage/eslint-plugin": "0.1.8",
+    "@backstage/frontend-app-api": "0.8.0",
+    "@backstage/frontend-plugin-api": "0.7.0",
+    "@backstage/frontend-test-utils": "0.1.12",
+    "@backstage/integration": "1.14.0",
+    "@backstage/integration-aws-node": "0.1.12",
+    "@backstage/integration-react": "1.1.30",
+    "@backstage/release-manifests": "0.0.11",
+    "@backstage/repo-tools": "0.9.5",
+    "@techdocs/cli": "1.8.17",
+    "techdocs-cli-embedded-app": "0.2.99",
+    "@backstage/test-utils": "1.5.10",
+    "@backstage/theme": "0.5.6",
+    "@backstage/types": "1.1.1",
+    "@backstage/version-bridge": "1.0.8",
+    "yarn-plugin-backstage": "0.0.1",
+    "@backstage/plugin-api-docs": "0.11.8",
+    "@backstage/plugin-api-docs-module-protoc-gen-doc": "0.1.7",
+    "@backstage/plugin-app-backend": "0.3.72",
+    "@backstage/plugin-app-node": "0.1.23",
+    "@backstage/plugin-app-visualizer": "0.1.9",
+    "@backstage/plugin-auth-backend": "0.22.10",
+    "@backstage/plugin-auth-backend-module-atlassian-provider": "0.2.4",
+    "@backstage/plugin-auth-backend-module-aws-alb-provider": "0.1.15",
+    "@backstage/plugin-auth-backend-module-azure-easyauth-provider": "0.1.6",
+    "@backstage/plugin-auth-backend-module-bitbucket-provider": "0.1.6",
+    "@backstage/plugin-auth-backend-module-cloudflare-access-provider": "0.2.0",
+    "@backstage/plugin-auth-backend-module-gcp-iap-provider": "0.2.18",
+    "@backstage/plugin-auth-backend-module-github-provider": "0.1.20",
+    "@backstage/plugin-auth-backend-module-gitlab-provider": "0.1.20",
+    "@backstage/plugin-auth-backend-module-google-provider": "0.1.20",
+    "@backstage/plugin-auth-backend-module-guest-provider": "0.1.9",
+    "@backstage/plugin-auth-backend-module-microsoft-provider": "0.1.18",
+    "@backstage/plugin-auth-backend-module-oauth2-provider": "0.2.4",
+    "@backstage/plugin-auth-backend-module-oauth2-proxy-provider": "0.1.16",
+    "@backstage/plugin-auth-backend-module-oidc-provider": "0.2.4",
+    "@backstage/plugin-auth-backend-module-okta-provider": "0.0.16",
+    "@backstage/plugin-auth-backend-module-onelogin-provider": "0.1.4",
+    "@backstage/plugin-auth-backend-module-pinniped-provider": "0.1.17",
+    "@backstage/plugin-auth-backend-module-vmware-cloud-provider": "0.2.4",
+    "@backstage/plugin-auth-node": "0.5.0",
+    "@backstage/plugin-auth-react": "0.1.5",
+    "@backstage/plugin-bitbucket-cloud-common": "0.2.22",
+    "@backstage/plugin-catalog": "1.22.0",
+    "@backstage/plugin-catalog-backend": "1.25.0",
+    "@backstage/plugin-catalog-backend-module-aws": "0.4.0",
+    "@backstage/plugin-catalog-backend-module-azure": "0.2.0",
+    "@backstage/plugin-catalog-backend-module-backstage-openapi": "0.3.0",
+    "@backstage/plugin-catalog-backend-module-bitbucket-cloud": "0.3.0",
+    "@backstage/plugin-catalog-backend-module-bitbucket-server": "0.2.0",
+    "@backstage/plugin-catalog-backend-module-gcp": "0.2.0",
+    "@backstage/plugin-catalog-backend-module-gerrit": "0.2.0",
+    "@backstage/plugin-catalog-backend-module-github": "0.7.0",
+    "@backstage/plugin-catalog-backend-module-github-org": "0.2.0",
+    "@backstage/plugin-catalog-backend-module-gitlab": "0.4.0",
+    "@backstage/plugin-catalog-backend-module-gitlab-org": "0.1.0",
+    "@backstage/plugin-catalog-backend-module-incremental-ingestion": "0.5.0",
+    "@backstage/plugin-catalog-backend-module-ldap": "0.8.0",
+    "@backstage/plugin-catalog-backend-module-logs": "0.0.2",
+    "@backstage/plugin-catalog-backend-module-msgraph": "0.6.0",
+    "@backstage/plugin-catalog-backend-module-openapi": "0.1.41",
+    "@backstage/plugin-catalog-backend-module-puppetdb": "0.2.0",
+    "@backstage/plugin-catalog-backend-module-scaffolder-entity-model": "0.1.21",
+    "@backstage/plugin-catalog-backend-module-unprocessed": "0.4.10",
+    "@backstage/plugin-catalog-common": "1.0.26",
+    "@backstage/plugin-catalog-graph": "0.4.8",
+    "@backstage/plugin-catalog-import": "0.12.2",
+    "@backstage/plugin-catalog-node": "1.12.5",
+    "@backstage/plugin-catalog-react": "1.12.3",
+    "@backstage/plugin-catalog-unprocessed-entities": "0.2.7",
+    "@backstage/plugin-catalog-unprocessed-entities-common": "0.0.4",
+    "@backstage/plugin-config-schema": "0.1.58",
+    "@backstage/plugin-devtools": "0.1.17",
+    "@backstage/plugin-devtools-backend": "0.3.9",
+    "@backstage/plugin-devtools-common": "0.1.12",
+    "@backstage/plugin-events-backend": "0.3.10",
+    "@backstage/plugin-events-backend-module-aws-sqs": "0.4.0",
+    "@backstage/plugin-events-backend-module-azure": "0.2.9",
+    "@backstage/plugin-events-backend-module-bitbucket-cloud": "0.2.9",
+    "@backstage/plugin-events-backend-module-gerrit": "0.2.9",
+    "@backstage/plugin-events-backend-module-github": "0.2.9",
+    "@backstage/plugin-events-backend-module-gitlab": "0.2.9",
+    "@backstage/plugin-events-backend-test-utils": "0.1.33",
+    "@backstage/plugin-events-node": "0.3.9",
+    "@internal/plugin-todo-list": "1.0.30",
+    "@internal/plugin-todo-list-backend": "1.0.30",
+    "@internal/plugin-todo-list-common": "1.0.21",
+    "@backstage/plugin-home": "0.7.9",
+    "@backstage/plugin-home-react": "0.1.16",
+    "@backstage/plugin-kubernetes": "0.11.13",
+    "@backstage/plugin-kubernetes-backend": "0.18.4",
+    "@backstage/plugin-kubernetes-cluster": "0.0.14",
+    "@backstage/plugin-kubernetes-common": "0.8.2",
+    "@backstage/plugin-kubernetes-node": "0.1.17",
+    "@backstage/plugin-kubernetes-react": "0.4.2",
+    "@backstage/plugin-notifications": "0.3.0",
+    "@backstage/plugin-notifications-backend": "0.3.4",
+    "@backstage/plugin-notifications-backend-module-email": "0.2.0",
+    "@backstage/plugin-notifications-common": "0.0.5",
+    "@backstage/plugin-notifications-node": "0.2.4",
+    "@backstage/plugin-org": "0.6.28",
+    "@backstage/plugin-org-react": "0.1.27",
+    "@backstage/plugin-permission-backend": "0.5.47",
+    "@backstage/plugin-permission-backend-module-allow-all-policy": "0.1.20",
+    "@backstage/plugin-permission-common": "0.8.1",
+    "@backstage/plugin-permission-node": "0.8.1",
+    "@backstage/plugin-permission-react": "0.4.25",
+    "@backstage/plugin-proxy-backend": "0.5.4",
+    "@backstage/plugin-scaffolder": "1.24.0",
+    "@backstage/plugin-scaffolder-backend": "1.24.0",
+    "@backstage/plugin-scaffolder-backend-module-azure": "0.1.15",
+    "@backstage/plugin-scaffolder-backend-module-bitbucket": "0.2.13",
+    "@backstage/plugin-scaffolder-backend-module-bitbucket-cloud": "0.1.13",
+    "@backstage/plugin-scaffolder-backend-module-bitbucket-server": "0.1.13",
+    "@backstage/plugin-scaffolder-backend-module-confluence-to-markdown": "0.2.24",
+    "@backstage/plugin-scaffolder-backend-module-cookiecutter": "0.2.47",
+    "@backstage/plugin-scaffolder-backend-module-gcp": "0.1.1",
+    "@backstage/plugin-scaffolder-backend-module-gerrit": "0.1.15",
+    "@backstage/plugin-scaffolder-backend-module-gitea": "0.1.13",
+    "@backstage/plugin-scaffolder-backend-module-github": "0.4.1",
+    "@backstage/plugin-scaffolder-backend-module-gitlab": "0.4.5",
+    "@backstage/plugin-scaffolder-backend-module-notifications": "0.0.6",
+    "@backstage/plugin-scaffolder-backend-module-rails": "0.4.40",
+    "@backstage/plugin-scaffolder-backend-module-sentry": "0.1.31",
+    "@backstage/plugin-scaffolder-backend-module-yeoman": "0.3.7",
+    "@backstage/plugin-scaffolder-common": "1.5.5",
+    "@backstage/plugin-scaffolder-node": "0.4.9",
+    "@backstage/plugin-scaffolder-node-test-utils": "0.1.10",
+    "@backstage/plugin-scaffolder-react": "1.11.0",
+    "@backstage/plugin-search": "1.4.15",
+    "@backstage/plugin-search-backend": "1.5.15",
+    "@backstage/plugin-search-backend-module-catalog": "0.2.0",
+    "@backstage/plugin-search-backend-module-elasticsearch": "1.5.4",
+    "@backstage/plugin-search-backend-module-explore": "0.2.0",
+    "@backstage/plugin-search-backend-module-pg": "0.5.33",
+    "@backstage/plugin-search-backend-module-stack-overflow-collator": "0.2.0",
+    "@backstage/plugin-search-backend-module-techdocs": "0.2.0",
+    "@backstage/plugin-search-backend-node": "1.3.0",
+    "@backstage/plugin-search-common": "1.2.14",
+    "@backstage/plugin-search-react": "1.7.14",
+    "@backstage/plugin-signals": "0.0.9",
+    "@backstage/plugin-signals-backend": "0.1.9",
+    "@backstage/plugin-signals-node": "0.1.9",
+    "@backstage/plugin-signals-react": "0.0.4",
+    "@backstage/plugin-techdocs": "1.10.8",
+    "@backstage/plugin-techdocs-addons-test-utils": "1.0.37",
+    "@backstage/plugin-techdocs-backend": "1.10.10",
+    "@backstage/plugin-techdocs-common": "0.1.0",
+    "@backstage/plugin-techdocs-module-addons-contrib": "1.1.13",
+    "@backstage/plugin-techdocs-node": "1.12.9",
+    "@backstage/plugin-techdocs-react": "1.2.7",
+    "@backstage/plugin-user-settings": "0.8.11",
+    "@backstage/plugin-user-settings-backend": "0.2.22",
+    "@backstage/plugin-user-settings-common": "0.0.1",
+    "@backstage/plugin-app": "0.0.0"
+  },
+  "changesets": [
+    "big-spies-stare",
+    "blue-forks-cry",
+    "breezy-flowers-dance",
+    "brown-actors-clap",
+    "brown-boxes-arrive",
+    "brown-worms-sneeze",
+    "calm-brooms-fail",
+    "cold-ways-protect",
+    "cool-melons-check",
+    "cool-poems-hammer",
+    "cuddly-rocks-invent",
+    "curly-brooms-raise",
+    "dry-monkeys-mate",
+    "eighty-tables-hope",
+    "empty-coats-sparkle",
+    "five-tigers-share",
+    "flat-kangaroos-push",
+    "forty-toes-float",
+    "four-ties-raise",
+    "fresh-apes-dress",
+    "fresh-pumas-clean",
+    "funny-houses-rest",
+    "fuzzy-mails-walk",
+    "fuzzy-spies-share",
+    "giant-jars-mix",
+    "green-worms-rescue",
+    "healthy-moons-drum",
+    "heavy-suits-judge",
+    "hip-pandas-think",
+    "kind-moose-learn",
+    "kind-walls-speak",
+    "large-poets-check",
+    "lucky-sheep-cover",
+    "metal-garlics-fetch",
+    "metal-rivers-grin",
+    "mighty-days-kiss",
+    "nasty-tigers-knock",
+    "new-poets-unite",
+    "ninety-mayflies-raise",
+    "olive-phones-sniff",
+    "popular-cooks-camp",
+    "purple-cows-sing",
+    "purple-glasses-tease",
+    "rare-feet-melt",
+    "real-pants-rule",
+    "serious-cheetahs-help",
+    "sharp-fans-tan",
+    "sharp-items-study",
+    "sharp-mayflies-beg",
+    "shiny-zoos-film",
+    "short-moles-brush",
+    "silent-eyes-lie",
+    "six-goats-sort",
+    "six-humans-guess",
+    "sixty-rabbits-cheat",
+    "spicy-poems-hammer",
+    "spicy-vans-eat",
+    "sweet-cows-clean",
+    "swift-garlics-mix",
+    "swift-radios-enjoy",
+    "swift-seahorses-share",
+    "tame-hornets-shake",
+    "tasty-pigs-vanish",
+    "thick-walls-share",
+    "tiny-waves-provide",
+    "tough-peaches-kneel",
+    "tricky-apricots-film",
+    "twenty-clouds-melt",
+    "twenty-queens-grow",
+    "unlucky-cycles-clean",
+    "violet-jokes-tap",
+    "warm-boxes-grab-2",
+    "warm-boxes-grab",
+    "wild-buses-notice",
+    "wise-scissors-help",
+    "witty-years-cry",
+    "yellow-bees-hope"
+  ]
+}

.changeset/purple-cows-sing.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-plugin-api': minor
+---
+
+Removed deprecated `ServiceFactoryOrFunction` type.

.changeset/purple-glasses-tease.md

@@ -0,0 +1,11 @@
+---
+'@backstage/plugin-search-backend-module-techdocs': patch
+'@backstage/plugin-search-backend-module-catalog': patch
+'@backstage/plugin-search-backend-module-explore': patch
+---
+
+The following collator factories are deprecated, please [migrate](https://backstage.io/docs/backend-system/building-backends/migrating) to the new backend system and follow the instructions below to install collators via module:
+
+- `DefaultCatalogCollatorFactory`: https://github.com/backstage/backstage/blob/nbs10/search-deprecate-create-router/plugins/search-backend-module-catalog/README.md#installation;
+- `ToolDocumentCollatorFactory`: https://github.com/backstage/backstage/blob/nbs10/search-deprecate-create-router/plugins/search-backend-module-explore/README.md#installation;
+- `DefaultTechDocsCollatorFactory`: https://github.com/backstage/backstage/blob/nbs10/search-deprecate-create-router/plugins/search-backend-module-techdocs/README.md#installation.

.changeset/rare-feet-melt.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-user-settings-backend': patch
+---
+
+Replaced usage of the deprecated identity service with the new HTTP auth service for the new backend system.

.changeset/real-pants-rule.md

@@ -0,0 +1,7 @@
+---
+'@backstage/plugin-auth-backend-module-microsoft-provider': patch
+'@backstage/plugin-auth-backend': patch
+'@backstage/plugin-catalog-backend-module-msgraph': patch
+---
+
+Allow users without defined email to be ingested by the `msgraph` catalog plugin and add `userIdMatchingUserEntityAnnotation` sign-in resolver for the Microsoft auth provider to support sign-in for users without defined email.

.changeset/renovate-53b7d25.md

@@ -0,0 +1,6 @@
+---
+'@backstage/cli': patch
+'@backstage/plugin-scaffolder-backend': patch
+---
+
+Updated dependency `esbuild` to `^0.23.0`.

.changeset/renovate-93d032c.md

@@ -0,0 +1,5 @@
+---
+'@backstage/codemods': patch
+---
+
+Updated dependency `jscodeshift` to `^0.16.0`.

.changeset/rich-bees-tickle.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-defaults': patch
+---
+
+Wrap scheduled tasks from the scheduler core service now in OpenTelemetry spans

.changeset/rotten-crabs-hear.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-notifications-backend': patch
+---
+
+Validate notification link when new notification is created

.changeset/serious-spies-knock.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-kubernetes-backend': patch
+---
+
+Skip start without proper config

.changeset/sharp-fans-tan.md

@@ -0,0 +1,8 @@
+---
+'@backstage/plugin-scaffolder-react': patch
+---
+
+- Fix secret widget field not displaying as required.
+- Fix secret widget not able to be required inside nested objects.
+- Fix secret widget not able to be disabled.
+- Support `minLength` and `maxLength` properties for secret widget.

.changeset/sharp-items-study.md

@@ -0,0 +1,19 @@
+---
+'@backstage/backend-defaults': patch
+---
+
+Exports the `discoveryFeatureLoader` as a replacement for the deprecated `featureDiscoveryService`.
+The `discoveryFeatureLoader` is a new backend system [feature loader](https://backstage.io/docs/backend-system/architecture/feature-loaders/) that discovers backend features from the current `package.json` and its dependencies.
+Here is an example using the `discoveryFeatureLoader` loader in a new backend instance:
+
+```ts
+import { createBackend } from '@backstage/backend-defaults';
+import { discoveryFeatureLoader } from '@backstage/backend-defaults';
+//...
+
+const backend = createBackend();
+//...
+backend.add(discoveryFeatureLoader);
+//...
+backend.start();
+```

.changeset/shiny-zoos-film.md

@@ -0,0 +1,21 @@
+---
+'@backstage/plugin-signals': patch
+---
+
+Added a `SignalsDisplay` extension to allows the signals plugin to be installed in an app as follows:
+
+```tsx
+export default app.createRoot(
+  <>
+    <AlertDisplay transientTimeoutMs={2500} />
+    <OAuthRequestDialog />
+    <SignalsDisplay />
+    <AppRouter>
+      <VisitListener />
+      <Root>{routes}</Root>
+    </AppRouter>
+  </>,
+);
+```
+
+With this in place you can remove the explicit installation via the `plugins` option for `createApp`.

.changeset/short-moles-brush.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-backend': minor
+---
+
+`createRouter` and its related types has been marked as deprecared. This backend should instead be initialized using the new backend system.

.changeset/silent-eyes-lie.md

@@ -0,0 +1,5 @@
+---
+'@backstage/test-utils': minor
+---
+
+Added the icons option to the renderInTestApp function's TestAppOptions to be forwarded to the icons option of `createApp`.

.changeset/six-goats-sort.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend-module-gitlab': patch
+---
+
+Remove dependency on backend-common

.changeset/six-humans-guess.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-proxy-backend': patch
+---
+
+Deprecated `createRouter` and its router options in favour of the new backend system.

.changeset/sixty-rabbits-cheat.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-search-react': minor
+---
+
+Make use of the `useApp` hook to retrieve the specified search icon in the SearchBar

.changeset/smart-owls-sell.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-defaults': patch
+---
+
+Properly indent the config schema

.changeset/spicy-poems-hammer.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-techdocs-node': patch
+---
+
+As the `@backstage/backend-common` package is deprecated, we have updated the `techdocs-node` package to stop depending on it.

.changeset/spicy-vans-eat.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-app-api': patch
+---
+
+Fix feature loaders in CJS double-default nested builds

.changeset/sweet-cows-clean.md

@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-test-utils': patch
+---
+
+Added the ability to provide additional `extensions` and `features` to `renderInTestApp`

.changeset/swift-garlics-mix.md

@@ -0,0 +1,63 @@
+---
+'@backstage/backend-app-api': minor
+'@backstage/backend-common': minor
+'@backstage/backend-defaults': minor
+'@backstage/backend-plugin-api': minor
+'@backstage/backend-test-utils': minor
+'@backstage/plugin-auth-backend-module-atlassian-provider': minor
+'@backstage/plugin-auth-backend-module-aws-alb-provider': minor
+'@backstage/plugin-auth-backend-module-azure-easyauth-provider': minor
+'@backstage/plugin-auth-backend-module-bitbucket-provider': minor
+'@backstage/plugin-auth-backend-module-cloudflare-access-provider': minor
+'@backstage/plugin-auth-backend-module-gcp-iap-provider': minor
+'@backstage/plugin-auth-backend-module-github-provider': minor
+'@backstage/plugin-auth-backend-module-gitlab-provider': minor
+'@backstage/plugin-auth-backend-module-google-provider': minor
+'@backstage/plugin-auth-backend-module-guest-provider': minor
+'@backstage/plugin-auth-backend-module-microsoft-provider': minor
+'@backstage/plugin-auth-backend-module-oauth2-provider': minor
+'@backstage/plugin-auth-backend-module-oauth2-proxy-provider': minor
+'@backstage/plugin-auth-backend-module-oidc-provider': minor
+'@backstage/plugin-auth-backend-module-okta-provider': minor
+'@backstage/plugin-auth-backend-module-onelogin-provider': minor
+'@backstage/plugin-auth-backend-module-pinniped-provider': minor
+'@backstage/plugin-auth-backend-module-vmware-cloud-provider': minor
+'@backstage/plugin-auth-backend': minor
+'@backstage/plugin-catalog-backend-module-backstage-openapi': minor
+'@backstage/plugin-catalog-backend-module-gcp': minor
+'@backstage/plugin-catalog-backend-module-github-org': minor
+'@backstage/plugin-catalog-backend-module-gitlab-org': minor
+'@backstage/plugin-catalog-backend-module-ldap': minor
+'@backstage/plugin-catalog-backend-module-logs': minor
+'@backstage/plugin-catalog-backend-module-openapi': minor
+'@backstage/plugin-catalog-backend-module-scaffolder-entity-model': minor
+'@backstage/plugin-catalog-backend-module-unprocessed': minor
+'@backstage/plugin-devtools-backend': minor
+'@backstage/plugin-events-node': minor
+'@backstage/plugin-notifications-backend-module-email': minor
+'@backstage/plugin-notifications-backend': minor
+'@backstage/plugin-permission-backend-module-allow-all-policy': minor
+'@backstage/plugin-scaffolder-backend-module-azure': minor
+'@backstage/plugin-scaffolder-backend-module-bitbucket-cloud': minor
+'@backstage/plugin-scaffolder-backend-module-bitbucket-server': minor
+'@backstage/plugin-scaffolder-backend-module-bitbucket': minor
+'@backstage/plugin-scaffolder-backend-module-confluence-to-markdown': minor
+'@backstage/plugin-scaffolder-backend-module-cookiecutter': minor
+'@backstage/plugin-scaffolder-backend-module-gcp': minor
+'@backstage/plugin-scaffolder-backend-module-gerrit': minor
+'@backstage/plugin-scaffolder-backend-module-gitea': minor
+'@backstage/plugin-scaffolder-backend-module-github': minor
+'@backstage/plugin-scaffolder-backend-module-gitlab': minor
+'@backstage/plugin-scaffolder-backend-module-notifications': minor
+'@backstage/plugin-scaffolder-backend-module-rails': minor
+'@backstage/plugin-scaffolder-backend-module-sentry': minor
+'@backstage/plugin-scaffolder-backend-module-yeoman': minor
+'@backstage/plugin-search-backend-module-stack-overflow-collator': minor
+'@backstage/plugin-signals-backend': minor
+---
+
+**BREAKING**: The return values from `createBackendPlugin`, `createBackendModule`, and `createServiceFactory` are now simply `BackendFeature` and `ServiceFactory`, instead of the previously deprecated form of a function that returns them. For this reason, `createServiceFactory` also no longer accepts the callback form where you provide direct options to the service. This also affects all `coreServices.*` service refs.
+
+This may in particular affect tests; if you were effectively doing `createBackendModule({...})()` (note the parentheses), you can now remove those extra parentheses at the end. You may encounter cases of this in your `packages/backend/src/index.ts` too, where you add plugins, modules, and services. If you were using `createServiceFactory` with a function as its argument for the purpose of passing in options, this pattern has been deprecated for a while and is no longer supported. You may want to explore the new multiton patterns to achieve your goals, or moving settings to app-config.
+
+As part of this change, the `IdentityFactoryOptions` type was removed, and can no longer be used to tweak that service. The identity service was also deprecated some time ago, and you will want to [migrate to the new auth system](https://backstage.io/docs/tutorials/auth-service-migration) if you still rely on it.

.changeset/swift-radios-enjoy.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-common': patch
+---
+
+Internal refactor to re-declare the token manager service which was removed from `@backstage/backend-plugin-api`, but is still supported in this package for backwards compatibility.

.changeset/swift-seahorses-share.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend-module-incremental-ingestion': patch
+---
+
+Updated the README to include documentation for the new backend support

.changeset/tall-camels-march.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-signals': patch
+---
+
+Put a name on the `SignalsDisplay` component extension

.changeset/tame-hornets-shake.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-react': patch
+---
+
+Fix an issue where keys with duplicate final key parts are not all displayed in the `ReviewState`. Change the way the keys are formatted to include the full schema path, separated by `>`.

.changeset/tasty-pigs-vanish.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog': patch
+---
+
+Entity presentation api now only fetches fields that are required to display entity title

.changeset/thick-walls-share.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-backend-module-gerrit': patch
+---
+
+Added test cases for publish:gerrit action examples

.changeset/tiny-icons-sit.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-react': patch
+---
+
+Small internal fix to better work with recent `lodash` versions

.changeset/tiny-waves-provide.md

@@ -0,0 +1,7 @@
+---
+'@backstage/backend-plugin-api': patch
+'@backstage/backend-defaults': patch
+'@backstage/backend-common': patch
+---
+
+Allow the cache service to accept the human duration format for TTL

.changeset/tough-peaches-kneel.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Fixed an issue with the by-query call, where ordering by a field that does not exist on all entities led to not all results being returned

.changeset/tricky-apricots-film.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-signals-react': patch
+---
+
+Fix for `useSignal` returning the inverse value for `isSignalsAvailable`.

.changeset/twenty-clouds-melt.md

@@ -0,0 +1,64 @@
+---
+'@backstage/backend-defaults': minor
+---
+
+**BREAKING**: The default backend instance no longer provides implementations for the identity and token manager services, which have been removed from `@backstage/backend-plugin-api`.
+
+If you rely on plugins that still require these services, you can add them to your own backend by re-creating the service reference and factory.
+
+The following can be used to implement the identity service:
+
+```ts
+import {
+  coreServices,
+  createServiceFactory,
+  createServiceRef,
+} from '@backstage/backend-plugin-api';
+import {
+  DefaultIdentityClient,
+  IdentityApi,
+} from '@backstage/plugin-auth-node';
+
+backend.add(
+  createServiceFactory({
+    service: createServiceRef<IdentityApi>({ id: 'core.identity' }),
+    deps: {
+      discovery: coreServices.discovery,
+    },
+    async factory({ discovery }) {
+      return DefaultIdentityClient.create({ discovery });
+    },
+  }),
+);
+```
+
+The following can be used to implement the token manager service:
+
+```ts
+import { ServerTokenManager, TokenManager } from '@backstage/backend-common';
+import { createBackend } from '@backstage/backend-defaults';
+import {
+  coreServices,
+  createServiceFactory,
+  createServiceRef,
+} from '@backstage/backend-plugin-api';
+
+backend.add(
+  createServiceFactory({
+    service: createServiceRef<TokenManager>({ id: 'core.tokenManager' }),
+    deps: {
+      config: coreServices.rootConfig,
+      logger: coreServices.rootLogger,
+    },
+    createRootContext({ config, logger }) {
+      return ServerTokenManager.fromConfig(config, {
+        logger,
+        allowDisabledTokenManager: true,
+      });
+    },
+    async factory(_deps, tokenManager) {
+      return tokenManager;
+    },
+  }),
+);
+```

.changeset/twenty-queens-grow.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder': minor
+---
+
+Added EntityOwnerPicker component to the TemplateListPage to allow filtering on owner

.changeset/unlucky-cycles-clean.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-react': patch
+---
+
+Scaffolder review page shows static amount of asterisks for secret fields.

.changeset/violet-apricots-smoke.md

@@ -0,0 +1,5 @@
+---
+'@backstage/create-app': patch
+---
+
+Remove references to the `@backstage/backend-tasks` in versions of the `create-app` package, as it has been deprecated.

.changeset/violet-jokes-tap.md

@@ -0,0 +1,21 @@
+---
+'@backstage/frontend-plugin-api': patch
+'@backstage/frontend-app-api': patch
+---
+
+Added support for defining `replaces` in `createExtensionInput` which will allow extensions to redirect missing `attachTo` points to an input of the created extension.
+
+```ts
+export const AppThemeApi = ApiBlueprint.makeWithOverrides({
+  name: 'app-theme',
+  inputs: {
+    themes: createExtensionInput([ThemeBlueprint.dataRefs.theme], {
+      // attachTo: { id: 'app', input: 'themes'} will be redirected to this input instead
+      replaces: [{ id: 'app', input: 'themes' }],
+    }),
+  },
+  factory: () {
+    ...
+  }
+});
+```

.changeset/warm-boxes-grab-2.md

@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-plugin-api': patch
+---
+
+A new `apis` parameter has been added to `factory` for extensions. This is a way to access utility APIs without being coupled to the React context.

.changeset/warm-boxes-grab.md

@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-app-api': patch
+---
+
+Added the `root` extension the replace the `app` extension as the root of the app.

.changeset/wild-buses-notice.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-defaults': patch
+---
+
+Added the option to skip database migrations by setting `skipMigrations: true` in config. This can be done globally in the database config or by plugin id.

.changeset/wise-scissors-help.md

@@ -0,0 +1,8 @@
+---
+'@backstage/backend-defaults': patch
+'@backstage/backend-app-api': patch
+'@backstage/backend-common': patch
+'@backstage/backend-plugin-api': patch
+---
+
+Updates to the config schema to match reality

.changeset/witty-years-cry.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-permission-backend': patch
+---
+
+Deprecated `createRouter` and its router options in favour of the new backend system.

.changeset/yellow-bees-hope.md

@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-app-api': minor
+---
+
+Removed deprecated `icons` property passing to `createApp` and `createSpecializedApp`. Use `IconBundleBlueprint.make` to create extensions instead and include them in the app.

.github/renovate.json5

@@ -1,22 +1,17 @@
 {
   $schema: 'https://docs.renovatebot.com/renovate-schema.json',
-
   labels: ['dependencies'],
-
   extends: ['config:best-practices', ':gitSignOff'],
   // do not pin dev dependencies, which are part of the best-practices preset
   ignorePresets: [':pinDevDependencies', ':pinDigest', 'docker:pinDigests'],
-
   constraints: {
     // TODO(freben): Remove this later; it addresses a temporary issue in corepack
     // https://github.com/nodejs/corepack/issues/379
     // https://github.com/renovatebot/renovate/discussions/27465
     corepack: '0.24.1',
   },
-
-  // the default limit are 10 PRs
+  // the default limit is 10 PRs
   prConcurrentLimit: 20,
-
   postUpdateOptions: ['yarnDedupeHighest'],
   rangeStrategy: 'update-lockfile',
   ignoreDeps: [
@@ -26,19 +21,19 @@
   ],
   packageRules: [
     {
-      matchSourceUrlPrefixes: ['https://github.com/spotify/web-scripts'],
       groupName: 'Spotify web-scripts monorepo packages',
       rangeStrategy: 'replace',
+      matchSourceUrls: ['https://github.com/spotify/web-scripts{/,}**'],
     },
     {
-      matchSourceUrlPrefixes: ['https://github.com/microsoft/rushstack'],
       groupName: 'API Extractor / Rush Stack monorepo packages',
       rangeStrategy: 'replace',
+      matchSourceUrls: ['https://github.com/microsoft/rushstack{/,}**'],
     },
     {
-      matchSourceUrlPrefixes: ['https://github.com/gregberge/svgr'],
       groupName: 'SVGR monorepo packages',
       rangeStrategy: 'replace',
+      matchSourceUrls: ['https://github.com/gregberge/svgr{/,}**'],
     },
     // We update yarn packages manually as it's gzip'd and we don't want to pollute the repository too much.
     {

.github/workflows/api-breaking-changes-comment.yml

@@ -22,7 +22,7 @@ jobs:
       action: ${{ steps.event.outputs.ACTION }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
         with:
           disable-sudo: true
           egress-policy: block

.github/workflows/api-breaking-changes.yml

@@ -14,7 +14,7 @@ jobs:
     if: ${{ github.event_name != 'pull_request' || github.event.action != 'closed' }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
         with:
           egress-policy: audit
 
@@ -33,7 +33,7 @@ jobs:
           registry-url: https://registry.npmjs.org/
 
       - name: yarn install
-        uses: backstage/actions/yarn-install@772cef06641090d0095188e15c85647acdf0c250 # v0.6.11
+        uses: backstage/actions/yarn-install@3c138326f7fcbf253b88170c1f29bae8e975d47c # v0.6.14
         with:
           cache-prefix: linux-v18
 
@@ -46,7 +46,7 @@ jobs:
           cat ${{ github.event_path }} > event.json
 
       - name: Upload Artifacts
-        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4
+        uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4
         with:
           name: preview-spec
           path: |

.github/workflows/automate_area-labels.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
         with:
           egress-policy: audit
 

.github/workflows/automate_changeset_feedback.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
         with:
           egress-policy: audit
 
@@ -34,7 +34,7 @@ jobs:
           ref: 'refs/pull/${{ github.event.pull_request.number }}/merge'
       - name: fetch base
         run: git fetch --depth 1 origin ${{ github.base_ref }}
-      - uses: backstage/actions/changeset-feedback@772cef06641090d0095188e15c85647acdf0c250 # v0.6.11
+      - uses: backstage/actions/changeset-feedback@3c138326f7fcbf253b88170c1f29bae8e975d47c # v0.6.14
         name: Generate feedback
         with:
           diff-ref: 'origin/master'

.github/workflows/automate_merge_message.yml

@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
         with:
           egress-policy: audit
 

.github/workflows/automate_stale.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
         with:
           egress-policy: audit
 

.github/workflows/ci-noop.yml

@@ -40,7 +40,7 @@ jobs:
     name: Test ${{ matrix.node-version }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
         with:
           egress-policy: audit
 

.github/workflows/ci.yml

@@ -28,7 +28,7 @@ jobs:
     name: Install ${{ matrix.node-version }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
         with:
           egress-policy: audit
 
@@ -41,7 +41,7 @@ jobs:
           registry-url: https://registry.npmjs.org/ # Needed for auth
 
       - name: yarn install
-        uses: backstage/actions/yarn-install@772cef06641090d0095188e15c85647acdf0c250 # v0.6.11
+        uses: backstage/actions/yarn-install@3c138326f7fcbf253b88170c1f29bae8e975d47c # v0.6.14
         with:
           cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }}
 
@@ -64,7 +64,7 @@ jobs:
     name: Verify ${{ matrix.node-version }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
         with:
           egress-policy: audit
 
@@ -77,7 +77,7 @@ jobs:
           registry-url: https://registry.npmjs.org/ # Needed for auth
 
       - name: yarn install
-        uses: backstage/actions/yarn-install@772cef06641090d0095188e15c85647acdf0c250 # v0.6.11
+        uses: backstage/actions/yarn-install@3c138326f7fcbf253b88170c1f29bae8e975d47c # v0.6.14
         with:
           cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }}
 
@@ -222,7 +222,7 @@ jobs:
           registry-url: https://registry.npmjs.org/ # Needed for auth
 
       - name: yarn install
-        uses: backstage/actions/yarn-install@772cef06641090d0095188e15c85647acdf0c250 # v0.6.11
+        uses: backstage/actions/yarn-install@3c138326f7fcbf253b88170c1f29bae8e975d47c # v0.6.14
         with:
           cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }}
 

.github/workflows/cron.yml

@@ -10,11 +10,11 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
         with:
           egress-policy: audit
 
-      - uses: backstage/actions/cron@772cef06641090d0095188e15c85647acdf0c250 # v0.6.11
+      - uses: backstage/actions/cron@3c138326f7fcbf253b88170c1f29bae8e975d47c # v0.6.14
         with:
           app-id: ${{ secrets.BACKSTAGE_GOALIE_APPLICATION_ID }}
           private-key: ${{ secrets.BACKSTAGE_GOALIE_PRIVATE_KEY }}

.github/workflows/deploy_docker-image.yml

@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
+        uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1
         with:
           egress-policy: audit
 
@@ -37,7 +37,7 @@ jobs:
           registry-url: https://registry.npmjs.org/ # Needed for auth
 
       - name: yarn install
-        uses: backstage/actions/yarn-install@772cef06641090d0095188e15c85647acdf0c250 # v0.6.11
+        uses: backstage/actions/yarn-install@3c138326f7fcbf253b88170c1f29bae8e975d47c # v0.6.14
         with:
           cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }}
 
@@ -51,14 +51,14 @@ jobs:
         working-directory: ./example-app
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
+        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3.3.0
+        uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1
 
       - name: Build and push
         uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0