diff --git a/.changeset/afraid-horses-lick.md b/.changeset/afraid-horses-lick.md new file mode 100644 index 0000000000..f2dfcf4ed6 --- /dev/null +++ b/.changeset/afraid-horses-lick.md @@ -0,0 +1,54 @@ +--- +'@backstage/app-defaults': patch +'@backstage/core-app-api': patch +'@backstage/core-components': patch +'@backstage/core-plugin-api': patch +'@backstage/dev-utils': patch +'@backstage/test-utils': patch +'@backstage/plugin-adr': patch +'@backstage/plugin-airbrake': patch +'@backstage/plugin-allure': patch +'@backstage/plugin-api-docs': patch +'@backstage/plugin-azure-devops': patch +'@backstage/plugin-badges': patch +'@backstage/plugin-bazaar': patch +'@backstage/plugin-catalog-graph': patch +'@backstage/plugin-catalog-import': patch +'@backstage/plugin-catalog-react': patch +'@backstage/plugin-catalog': patch +'@backstage/plugin-circleci': patch +'@backstage/plugin-cloudbuild': patch +'@backstage/plugin-code-climate': patch +'@backstage/plugin-code-coverage': patch +'@backstage/plugin-codescene': patch +'@backstage/plugin-cost-insights': patch +'@backstage/plugin-explore': patch +'@backstage/plugin-gcp-projects': patch +'@backstage/plugin-git-release-manager': patch +'@backstage/plugin-github-actions': patch +'@backstage/plugin-gitops-profiles': patch +'@backstage/plugin-graphiql': patch +'@backstage/plugin-home': patch +'@backstage/plugin-jenkins': patch +'@backstage/plugin-kafka': patch +'@backstage/plugin-kubernetes': patch +'@backstage/plugin-lighthouse': patch +'@backstage/plugin-org': patch +'@backstage/plugin-pagerduty': patch +'@backstage/plugin-permission-react': patch +'@backstage/plugin-rollbar': patch +'@backstage/plugin-scaffolder': patch +'@backstage/plugin-search-react': patch +'@backstage/plugin-search': patch +'@backstage/plugin-sentry': patch +'@backstage/plugin-shortcuts': patch +'@backstage/plugin-splunk-on-call': patch +'@backstage/plugin-tech-insights': patch +'@backstage/plugin-techdocs-addons-test-utils': patch +'@backstage/plugin-techdocs-react': patch +'@backstage/plugin-techdocs': patch +'@backstage/plugin-todo': patch +'@backstage/plugin-user-settings': patch +--- + +Updated React Router dependencies to be peer dependencies. diff --git a/.changeset/afraid-radios-boil.md b/.changeset/afraid-radios-boil.md new file mode 100644 index 0000000000..a9533d55c0 --- /dev/null +++ b/.changeset/afraid-radios-boil.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-catalog-backend-module-msgraph': patch +--- + +Fixed a bug in the `MicrosoftGraphEntityProvider` that ignored the `userExpand` and `groupExpand` configuration parameters diff --git a/.changeset/big-dolls-reflect.md b/.changeset/big-dolls-reflect.md new file mode 100644 index 0000000000..e57fb74e09 --- /dev/null +++ b/.changeset/big-dolls-reflect.md @@ -0,0 +1,6 @@ +--- +'@backstage/plugin-auth-node': patch +'@backstage/plugin-permission-node': patch +--- + +Minor update to tests diff --git a/.changeset/big-teachers-tell.md b/.changeset/big-teachers-tell.md new file mode 100644 index 0000000000..180a974e5e --- /dev/null +++ b/.changeset/big-teachers-tell.md @@ -0,0 +1,5 @@ +--- +'@backstage/test-utils': minor +--- + +Elements rendered in a test app are no longer wrapped in a `Routes` and `Route` element, as this is not compatible with React Router v6 stable. diff --git a/.changeset/blue-snakes-compete.md b/.changeset/blue-snakes-compete.md new file mode 100644 index 0000000000..73054554b1 --- /dev/null +++ b/.changeset/blue-snakes-compete.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-adr-backend': patch +--- + +Continue processing subsequent entities when an error occurs in collator diff --git a/.changeset/curly-hounds-wait.md b/.changeset/curly-hounds-wait.md new file mode 100644 index 0000000000..58ebfe89a3 --- /dev/null +++ b/.changeset/curly-hounds-wait.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-stack-overflow-backend': patch +--- + +Now requests all questions available using pagination. Default max page is set to 100, with a configurable `maxPage` option on the collator. diff --git a/.changeset/eleven-bees-marry.md b/.changeset/eleven-bees-marry.md new file mode 100644 index 0000000000..fb0a6fb32e --- /dev/null +++ b/.changeset/eleven-bees-marry.md @@ -0,0 +1,6 @@ +--- +'@backstage/backend-common': patch +--- + +Added a keep-alive refresh loop to the `DatabaseManager`, keeping the connection +pool up. diff --git a/.changeset/famous-hounds-sit.md b/.changeset/famous-hounds-sit.md new file mode 100644 index 0000000000..d6cc852ff0 --- /dev/null +++ b/.changeset/famous-hounds-sit.md @@ -0,0 +1,6 @@ +--- +'@backstage/backend-common': patch +--- + +The options part of `DatabaseManager.fromConfig` now accepts an optional logger +field. diff --git a/.changeset/famous-wombats-happen.md b/.changeset/famous-wombats-happen.md new file mode 100644 index 0000000000..9d8a2f0b0e --- /dev/null +++ b/.changeset/famous-wombats-happen.md @@ -0,0 +1,8 @@ +--- +'@backstage/plugin-cloudbuild': patch +'@backstage/plugin-scaffolder': patch +'@backstage/plugin-tech-insights': patch +'@backstage/plugin-techdocs': patch +--- + +Internal refactor to use more type safe code when dealing with route parameters. diff --git a/.changeset/flat-plums-shout.md b/.changeset/flat-plums-shout.md new file mode 100644 index 0000000000..250d6a1b35 --- /dev/null +++ b/.changeset/flat-plums-shout.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-catalog-backend': minor +--- + +Allow unknown typed location from being registered via the location service by configuration settings diff --git a/.changeset/flat-walls-kiss.md b/.changeset/flat-walls-kiss.md new file mode 100644 index 0000000000..ea2d2556ed --- /dev/null +++ b/.changeset/flat-walls-kiss.md @@ -0,0 +1,5 @@ +--- +'@backstage/create-app': patch +--- + +The Backstage packages and plugins have all been updated to support React Router v6 stable. The `create-app` template has not been migrated yet, but if you want to migrate your own app or plugins, check out the [migration guide](https://backstage.io/docs/tutorials/react-router-stable-migration). diff --git a/.changeset/funny-hounds-obey.md b/.changeset/funny-hounds-obey.md new file mode 100644 index 0000000000..065af245c7 --- /dev/null +++ b/.changeset/funny-hounds-obey.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-scaffolder': patch +--- + +Fixing bug when the workspace would not be automatically saved when using `allowedOwners` diff --git a/.changeset/gold-hounds-vanish.md b/.changeset/gold-hounds-vanish.md new file mode 100644 index 0000000000..d221f0f5e9 --- /dev/null +++ b/.changeset/gold-hounds-vanish.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-catalog-backend': minor +--- + +The search index now does retain fields that have a very long value, but in the form of just a null. This makes it possible to at least filter for their existence. diff --git a/.changeset/good-avocados-grow.md b/.changeset/good-avocados-grow.md new file mode 100644 index 0000000000..dcc685c36d --- /dev/null +++ b/.changeset/good-avocados-grow.md @@ -0,0 +1,5 @@ +--- +'@backstage/core-app-api': minor +--- + +Updated the routing system to be compatible with React Router v6 stable. diff --git a/.changeset/good-papayas-dress.md b/.changeset/good-papayas-dress.md new file mode 100644 index 0000000000..26062c8da8 --- /dev/null +++ b/.changeset/good-papayas-dress.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-scaffolder-backend': minor +--- + +Added `projectId` for gitlab projects to be displayed in the `gitlab:publish` output diff --git a/.changeset/great-cats-sit.md b/.changeset/great-cats-sit.md new file mode 100644 index 0000000000..abdf9cfb39 --- /dev/null +++ b/.changeset/great-cats-sit.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-catalog-backend': patch +--- + +Fixes a bug to be able to utilize refresh keys after the entity is loaded from cache diff --git a/.changeset/grumpy-kiwis-juggle.md b/.changeset/grumpy-kiwis-juggle.md new file mode 100644 index 0000000000..e303f8f674 --- /dev/null +++ b/.changeset/grumpy-kiwis-juggle.md @@ -0,0 +1,5 @@ +--- +'@backstage/cli': patch +--- + +Added a new `migrate react-router-deps` command to aid in the migration to React Router v6 stable. diff --git a/.changeset/heavy-ligers-laugh.md b/.changeset/heavy-ligers-laugh.md new file mode 100644 index 0000000000..71f8b99b12 --- /dev/null +++ b/.changeset/heavy-ligers-laugh.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-search-backend-node': patch +--- + +Fixed bug in LunrSearchEngine where stopwords in title is causing in-doc search not working diff --git a/.changeset/large-eagles-shop.md b/.changeset/large-eagles-shop.md new file mode 100644 index 0000000000..bd5bd2e28d --- /dev/null +++ b/.changeset/large-eagles-shop.md @@ -0,0 +1,10 @@ +--- +'@backstage/plugin-airbrake-backend': patch +'@backstage/plugin-catalog-backend-module-bitbucket-server': patch +'@backstage/plugin-dynatrace': patch +'@backstage/plugin-periskop-backend': patch +'@backstage/plugin-stack-overflow-backend': patch +'@backstage/plugin-vault-backend': patch +--- + +Switched to using node-fetch instead of cross-fetch as is standard for our backend packages diff --git a/.changeset/large-trainers-float.md b/.changeset/large-trainers-float.md new file mode 100644 index 0000000000..b5d1d9be1d --- /dev/null +++ b/.changeset/large-trainers-float.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-catalog-react': patch +--- + +Properly handle free-text entity filtering in the case of empty tag arrays diff --git a/.changeset/loud-comics-search.md b/.changeset/loud-comics-search.md new file mode 100644 index 0000000000..27f5b3c5d9 --- /dev/null +++ b/.changeset/loud-comics-search.md @@ -0,0 +1,16 @@ +--- +'@backstage/plugin-tech-insights': minor +--- + +Added the possibility to display check results of different types on a single scorecard. + +- **BREAKING** Removed the `getScorecardsDefinition` method from the `TechInsightsApi` interface. Added the `getCheckResultRenderers` method that returns rendering components for given types. +- **BREAKING** The `CheckResultRenderer` type now exposes the `component` factory method that creates a React component used to display a result of a provided check result. +- The `TechInsightsClient` constructor accepts now the optional `renderers` parameter that can be used to inject a custom renderer. +- **BREAKING** The `title` parameter in the `EntityTechInsightsScorecardContent` and `EntityTechInsightsScorecardCard` components is now mandatory. +- The `jsonRulesEngineCheckResultRenderer` used to render `json-rules-engine` check results is exported. +- The `BooleanCheck` component that can be used to render other check results types is also exported. + +If you were overriding the `getScorecardsDefinition` method to adjust the rendering of check results, you should now provide a custom renderer using `renderers` parameter in the `TechInsightsClient` class. + +See the [README](https://github.com/backstage/backstage/tree/master/plugins/tech-insights/README.md) for more details. diff --git a/.changeset/lovely-ants-invite.md b/.changeset/lovely-ants-invite.md new file mode 100644 index 0000000000..688850f776 --- /dev/null +++ b/.changeset/lovely-ants-invite.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-scaffolder-backend': patch +--- + +Applied the fix from version 1.5.1 of this package, which is part of the v1.5.1 release of Backstage. diff --git a/.changeset/many-rules-raise.md b/.changeset/many-rules-raise.md new file mode 100644 index 0000000000..40a26a85fe --- /dev/null +++ b/.changeset/many-rules-raise.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-catalog-backend-module-ldap': patch +--- + +Added ae-dir LDAP vendor to correctly extract DN. diff --git a/.changeset/mean-tomatoes-visit.md b/.changeset/mean-tomatoes-visit.md new file mode 100644 index 0000000000..111063d805 --- /dev/null +++ b/.changeset/mean-tomatoes-visit.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-techdocs': patch +--- + +Updated the `TechDocsReaderPage` to be compatible with React Router v6 stable. diff --git a/.changeset/old-lemons-switch.md b/.changeset/old-lemons-switch.md new file mode 100644 index 0000000000..62f8d099b3 --- /dev/null +++ b/.changeset/old-lemons-switch.md @@ -0,0 +1,5 @@ +--- +'@backstage/core-components': patch +--- + +The `RoutedTabs` component has been updated to be compatible with React Router v6 stable. diff --git a/.changeset/popular-shirts-happen.md b/.changeset/popular-shirts-happen.md new file mode 100644 index 0000000000..137354fe2b --- /dev/null +++ b/.changeset/popular-shirts-happen.md @@ -0,0 +1,7 @@ +--- +'@backstage/plugin-permission-react': patch +--- + +**DEPRECATION**: The `PermissionedRoute` component has been deprecated in favor of the new `RequirePermission` component. This is because the usage pattern of `PermissionedRoute` is not compatible with React Router v6 stable. + +Embed the type from `react-router` instead of exporting it directly. diff --git a/.changeset/pre.json b/.changeset/pre.json index a2f1d9f8e8..8dfbaa58f6 100644 --- a/.changeset/pre.json +++ b/.changeset/pre.json @@ -172,44 +172,87 @@ "@backstage/plugin-xcmetrics": "0.2.28" }, "changesets": [ + "afraid-horses-lick", + "afraid-radios-boil", "beige-monkeys-add", "beige-pumas-tap", + "big-dolls-reflect", + "big-teachers-tell", + "blue-snakes-compete", "clever-beans-turn", "cold-frogs-kiss", + "curly-hounds-wait", "dry-games-end", "eight-spies-protect", + "eleven-bees-marry", + "famous-hounds-sit", + "famous-wombats-happen", "five-carrots-pay", + "flat-plums-shout", + "flat-walls-kiss", "fresh-rabbits-juggle", + "funny-hounds-obey", + "funny-years-speak", + "gold-hounds-vanish", + "good-avocados-grow", + "good-papayas-dress", "gorgeous-swans-kiss", + "great-cats-sit", + "grumpy-kiwis-juggle", "happy-kiwis-look", + "heavy-ligers-laugh", "hot-files-begin", "hot-suits-glow", "hungry-dogs-agree", + "large-eagles-shop", + "large-trainers-float", "lazy-snakes-film", "light-beans-share", + "loud-comics-search", + "lovely-ants-invite", "lucky-points-wash", + "many-rules-raise", + "mean-tomatoes-visit", + "metal-crabs-wash", "nervous-rivers-sneeze", + "old-lemons-switch", "old-tables-joke", + "popular-shirts-happen", + "red-numbers-suffer", + "renovate-16f36a0", + "renovate-4f0c2e3", + "renovate-58c2860", "renovate-7d3b357", "renovate-c98c336", + "renovate-f18a0fc", + "rich-cooks-camp", + "rich-melons-compete", "rotten-books-crash", "rude-books-rush", "shaggy-chicken-behave", + "shaggy-vans-repeat", "sharp-swans-suffer", "shiny-lobsters-fix", "silent-kings-live", "slimy-zebras-reply", + "small-lemons-brake", + "small-walls-promise", + "smooth-yaks-hug", "spicy-cherries-remember", "strong-games-kiss", "strong-planes-return", + "sweet-fishes-taste", + "tall-trains-remain", "tame-papayas-protect", "techdocs-jeans-wait", + "tender-ladybugs-relax", "tiny-oranges-thank", "tough-dolphins-smile", "two-planets-provide", "weak-yaks-learn", "wild-sheep-roll", "witty-cats-wink", + "witty-queens-happen", "young-trees-rescue" ] } diff --git a/.changeset/renovate-16f36a0.md b/.changeset/renovate-16f36a0.md new file mode 100644 index 0000000000..74c33ec0a7 --- /dev/null +++ b/.changeset/renovate-16f36a0.md @@ -0,0 +1,14 @@ +--- +'@backstage/backend-common': patch +'@backstage/plugin-app-backend': patch +'@backstage/plugin-graphql-backend': patch +'@backstage/plugin-kubernetes-backend': patch +'@backstage/plugin-vault-backend': patch +--- + +Updated dependency `helmet` to `^6.0.0`. + +Please note that these policies are no longer applied by default: + +helmet.contentSecurityPolicy no longer sets block-all-mixed-content directive by default +helmet.expectCt is no longer set by default. It can, however, be explicitly enabled. It will be removed in Helmet 7. diff --git a/.changeset/renovate-4f0c2e3.md b/.changeset/renovate-4f0c2e3.md new file mode 100644 index 0000000000..0aab9dc9a6 --- /dev/null +++ b/.changeset/renovate-4f0c2e3.md @@ -0,0 +1,13 @@ +--- +'@backstage/cli': minor +--- + +Updated dependency `eslint-plugin-jest` to `^27.0.0`. + +Note that this major update to the Jest plugin contains some breaking changes. +This means that some of your tests may start seeing some new lint errors. [Read +about them +here](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md#2700-2022-08-28). + +These are mostly possible to fix automatically. You can try to run `yarn backstage-cli repo lint --fix` in your repo root to have most or all of them +corrected. diff --git a/.changeset/renovate-58c2860.md b/.changeset/renovate-58c2860.md new file mode 100644 index 0000000000..a03ccdf6f8 --- /dev/null +++ b/.changeset/renovate-58c2860.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-jenkins-backend': patch +--- + +Updated dependency `jenkins` to `^1.0.0`. diff --git a/.changeset/renovate-f18a0fc.md b/.changeset/renovate-f18a0fc.md new file mode 100644 index 0000000000..6f17cb8c0f --- /dev/null +++ b/.changeset/renovate-f18a0fc.md @@ -0,0 +1,5 @@ +--- +'@backstage/cli': patch +--- + +Updated dependency `@types/minimatch` to `^5.0.0`. diff --git a/.changeset/rich-melons-compete.md b/.changeset/rich-melons-compete.md new file mode 100644 index 0000000000..68297159f7 --- /dev/null +++ b/.changeset/rich-melons-compete.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-gcalendar': patch +--- + +Upgrade `react-query:3` to `@tanstack/react-query:4` diff --git a/.changeset/shaggy-vans-repeat.md b/.changeset/shaggy-vans-repeat.md new file mode 100644 index 0000000000..fd865c702c --- /dev/null +++ b/.changeset/shaggy-vans-repeat.md @@ -0,0 +1,18 @@ +--- +'@backstage/create-app': patch +--- + +The options part of `DatabaseManager.fromConfig` now accepts an optional logger +field. You may want to supply that logger in your backend initialization code to +ensure that you can get relevant logging data when things happen related to the +connection pool. + +In `packages/backend/src/index.ts`: + +```diff + function makeCreateEnv(config: Config) { + const root = getRootLogger(); + ... +- const databaseManager = DatabaseManager.fromConfig(config); ++ const databaseManager = DatabaseManager.fromConfig(config, { logger: root }); +``` diff --git a/.changeset/shiny-walls-kiss.md b/.changeset/shiny-walls-kiss.md new file mode 100644 index 0000000000..0f13acb154 --- /dev/null +++ b/.changeset/shiny-walls-kiss.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-stack-overflow': patch +--- + +Create a front end API. diff --git a/.changeset/small-lemons-brake.md b/.changeset/small-lemons-brake.md new file mode 100644 index 0000000000..ac7906fc28 --- /dev/null +++ b/.changeset/small-lemons-brake.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-catalog-backend': patch +--- + +Include entity ref into error message when catalog policies fail diff --git a/.changeset/small-walls-promise.md b/.changeset/small-walls-promise.md new file mode 100644 index 0000000000..0455b0d776 --- /dev/null +++ b/.changeset/small-walls-promise.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-tech-insights-backend': patch +--- + +Changed the description of the `techdocsAnnotationFactName` fact. diff --git a/.changeset/smooth-yaks-hug.md b/.changeset/smooth-yaks-hug.md new file mode 100644 index 0000000000..d93176540f --- /dev/null +++ b/.changeset/smooth-yaks-hug.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-catalog-backend-module-github': patch +--- + +Added the ability to configure the host for the `GitHubEntityProvider` to use against GitHub Enterprise diff --git a/.changeset/sweet-fishes-taste.md b/.changeset/sweet-fishes-taste.md new file mode 100644 index 0000000000..8d1fcfc790 --- /dev/null +++ b/.changeset/sweet-fishes-taste.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-github-pull-requests-board': patch +--- + +Add optional `pullRequestLimit` prop to `EntityTeamPullRequestsCard` and `EntityTeamPullRequestsContent` to limit the number of PRs shown per repository. Excluding this prop will default the number of pull requests shown to 10 per repository (the existing functionality). diff --git a/.changeset/tall-trains-remain.md b/.changeset/tall-trains-remain.md new file mode 100644 index 0000000000..9a94672656 --- /dev/null +++ b/.changeset/tall-trains-remain.md @@ -0,0 +1,5 @@ +--- +'@backstage/core-app-api': patch +--- + +Updated `FlatRoutes` to be compatible with React Router v6 stable. diff --git a/.changeset/tender-ladybugs-relax.md b/.changeset/tender-ladybugs-relax.md new file mode 100644 index 0000000000..2aefa09dc0 --- /dev/null +++ b/.changeset/tender-ladybugs-relax.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-stack-overflow': patch +--- + +Support showing HTML entity references from the API response before rendering the question title to the list component. diff --git a/.changeset/witty-queens-happen.md b/.changeset/witty-queens-happen.md new file mode 100644 index 0000000000..969bd2c79e --- /dev/null +++ b/.changeset/witty-queens-happen.md @@ -0,0 +1,5 @@ +--- +'@backstage/plugin-adr': patch +--- + +Fix parsing of ADR location which includes a trailing slash diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e732e49b43..3bead8d569 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -33,7 +33,7 @@ jobs: registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@v0.5.3 + uses: backstage/actions/yarn-install@v0.5.5 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} @@ -63,7 +63,7 @@ jobs: registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@v0.5.3 + uses: backstage/actions/yarn-install@v0.5.5 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} @@ -181,7 +181,7 @@ jobs: registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@v0.5.3 + uses: backstage/actions/yarn-install@v0.5.5 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} diff --git a/.github/workflows/cron.yml b/.github/workflows/cron.yml index 6fd9fe2814..03105b753a 100644 --- a/.github/workflows/cron.yml +++ b/.github/workflows/cron.yml @@ -8,7 +8,7 @@ jobs: cron: runs-on: ubuntu-latest steps: - - uses: backstage/actions/cron@v0.5.3 + - uses: backstage/actions/cron@v0.5.5 with: app-id: ${{ secrets.BACKSTAGE_GOALIE_APPLICATION_ID }} private-key: ${{ secrets.BACKSTAGE_GOALIE_PRIVATE_KEY }} diff --git a/.github/workflows/deploy_nightly.yml b/.github/workflows/deploy_nightly.yml index fe234359dd..e776c47537 100644 --- a/.github/workflows/deploy_nightly.yml +++ b/.github/workflows/deploy_nightly.yml @@ -26,7 +26,7 @@ jobs: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@v0.5.3 + uses: backstage/actions/yarn-install@v0.5.5 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} diff --git a/.github/workflows/deploy_packages.yml b/.github/workflows/deploy_packages.yml index 6b505dfbf5..a2ffdbcbe3 100644 --- a/.github/workflows/deploy_packages.yml +++ b/.github/workflows/deploy_packages.yml @@ -67,7 +67,7 @@ jobs: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@v0.5.3 + uses: backstage/actions/yarn-install@v0.5.5 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} @@ -145,7 +145,7 @@ jobs: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@v0.5.3 + uses: backstage/actions/yarn-install@v0.5.5 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} diff --git a/.github/workflows/issue.yaml b/.github/workflows/issue.yaml index 58b1f725ad..0a8b243255 100644 --- a/.github/workflows/issue.yaml +++ b/.github/workflows/issue.yaml @@ -10,4 +10,4 @@ jobs: if: github.repository == 'backstage/backstage' steps: - name: Issue sync - uses: backstage/actions/issue-sync@v0.5.3 + uses: backstage/actions/issue-sync@v0.5.5 diff --git a/.github/workflows/pr-review-comment.yaml b/.github/workflows/pr-review-comment.yaml index fac7fd2fc4..4b1048da9b 100644 --- a/.github/workflows/pr-review-comment.yaml +++ b/.github/workflows/pr-review-comment.yaml @@ -35,7 +35,7 @@ jobs: const prNumber = artifact.name.slice('pr_number-'.length) console.log(`::set-output name=pr-number::${prNumber}`); - - uses: backstage/actions/re-review@v0.5.3 + - uses: backstage/actions/re-review@v0.5.5 with: app-id: ${{ secrets.BACKSTAGE_GOALIE_APPLICATION_ID }} private-key: ${{ secrets.BACKSTAGE_GOALIE_PRIVATE_KEY }} diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index 4fa8a60577..3fbac53400 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -18,7 +18,7 @@ jobs: if: github.repository == 'backstage/backstage' && ( github.event.pull_request || github.event.issue.pull_request ) steps: - name: PR sync - uses: backstage/actions/pr-sync@v0.5.3 + uses: backstage/actions/pr-sync@v0.5.5 with: github-token: ${{ secrets.GH_SERVICE_ACCOUNT_TOKEN }} app-id: ${{ secrets.BACKSTAGE_GOALIE_APPLICATION_ID }} diff --git a/.github/workflows/sync_code-formatting.yml b/.github/workflows/sync_code-formatting.yml index 45cf6dca3d..c37f8c578e 100644 --- a/.github/workflows/sync_code-formatting.yml +++ b/.github/workflows/sync_code-formatting.yml @@ -20,7 +20,7 @@ jobs: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@v0.5.3 + uses: backstage/actions/yarn-install@v0.5.5 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} diff --git a/.github/workflows/sync_snyk-github-issues.yml b/.github/workflows/sync_snyk-github-issues.yml index 1ac1ff3b2c..ae65e90ac0 100644 --- a/.github/workflows/sync_snyk-github-issues.yml +++ b/.github/workflows/sync_snyk-github-issues.yml @@ -22,7 +22,7 @@ jobs: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@v0.5.3 + uses: backstage/actions/yarn-install@v0.5.5 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} diff --git a/.github/workflows/verify_e2e-linux.yml b/.github/workflows/verify_e2e-linux.yml index d02c17c35f..0eedfd9d6b 100644 --- a/.github/workflows/verify_e2e-linux.yml +++ b/.github/workflows/verify_e2e-linux.yml @@ -47,7 +47,7 @@ jobs: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@v0.5.3 + uses: backstage/actions/yarn-install@v0.5.5 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} diff --git a/.github/workflows/verify_storybook.yml b/.github/workflows/verify_storybook.yml index 03a1b01c07..9c6e693ba4 100644 --- a/.github/workflows/verify_storybook.yml +++ b/.github/workflows/verify_storybook.yml @@ -35,7 +35,7 @@ jobs: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@v0.5.3 + uses: backstage/actions/yarn-install@v0.5.5 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} - name: storybook yarn install diff --git a/ADOPTERS.md b/ADOPTERS.md index 902952a90e..c740fe857c 100644 --- a/ADOPTERS.md +++ b/ADOPTERS.md @@ -171,7 +171,7 @@ _You can do this by using the [Adopter form](https://form.typeform.com/to/zcOaKi | [AEB](https://www.aeb.com/) | [David Fankhänel](mailto:dfl@aeb.com) | Central developer platform for creating new apps via templates, getting an overview via software catalog, etc | | [SALTO Systems](https://saltosystems.com) | [Ian Cowley](mailto:i.cowley@saltosystems.com) | Currently using Backstage as an internal documentation portal. | | [Lummo](https://lummo.com) | [Anjul Sahu](mailto:anjul@lummo.com) | We are building the internal developer portal using Backstage and bringing up all integrations and service information at one place. | -| [Frontside](https://frontside.com) | [Taras Mankovski](mailto:taras@frontside.com) | | +| [Frontside](https://frontside.com/backstage) | [Taras Mankovski](mailto:taras@frontside.com) | An active community member and contributor, Frontside offers both custom development as well as enterprise support services to help teams get the most out of Backstage for the long-run. | | [Stepstone](https://www.stepstone.com/en/) | [Neil Kennedy](mailto:neil.kennedy@stepstone.com) | StepStone is using Backstage to solve problems around ownership and visibility of our applications. We have thousands of repos, multiple legacy systems and a growing platform that is hard to maintain. Backstage is forming the centre of our push to embrace the chaos. | | [idwall](https://idwall.co) | [Rodrigo Catão Araujo](mailto:rodrigo@idwall.co) | Developer Portal for internal engineers to access service catalog, documentation, observability, infrastructure and internal tooling. | | [Jaguar Land Rover](https://www.jaguarlandrover.com) | [Josh Walker](mailto:jwalke18@jaguarlandrover.com) | Users can request a Gitlab user, which creates a commit with the Terraform code. | @@ -207,4 +207,6 @@ _You can do this by using the [Adopter form](https://form.typeform.com/to/zcOaKi | [Fanatics](https://www.fanaticsinc.com/) | [Rory Scott](mailto:rscott@fanatics.com) | Internal Portal consolidating documentation, making it easier to manage applications, internal developer community platform, and self-service cloud infrastructure + pipelines. | | [Appfolio](https://appfolio.com) | [Andy Vaughn](mailto:andy.vaughn@appfolio.com) | Internal software catalog, tech radar, documentation portal to disambiguate software and domain ownership, foster exploration of available developer platform services and tools, improve communication, democratize documentation and knowledge sharing, and coordinate the software lifecycle; all in service of a best-in-class developer experience. | | [isaac](https://isaac.com.br/) | [Leonardo Borges](mailto:leonardo.borges@isaac.com.br), [Ordilei Souza](mailto:ordilei.souza@isaac.com.br) | We're using Backstage as our Internal Developer Portal and main microservices catalog for mapping ownership, health and metrics for each one. | -| [Paraná Banco](https://site.paranabanco.com.br/) | [Joao Antunes](mailto:joaopma@pbtech.net.br) | Internal software catalog, documentation and ownership, improve communication, democratize documentation and knowledge sharing, and coordinate the software lifecycle; all in service of a best-in-class developer experience. | \ No newline at end of file +| [Paraná Banco](https://site.paranabanco.com.br/) | [Joao Antunes](mailto:joaopma@pbtech.net.br) | Internal software catalog, documentation and ownership, improve communication, democratize documentation and knowledge sharing, and coordinate the software lifecycle; all in service of a best-in-class developer experience. | +| [Stone](https://stone.com.br/) | [Levy Fialho](mailto:lfialho@stone.com.br) | We're using Backstage as our Credit Team Developer Portal and microservices catalog for mapping ownership. We are also using mkdocs for microservices documentation. | +| [REI](https://www.rei.com/) | [Jen Evans](mailto:jenevan@rei.com) | Developer portal focused on an enterprise-wide app catalog to track ownership and surface APIs. | diff --git a/cypress/yarn.lock b/cypress/yarn.lock index 2f1e0f0775..646342b0a2 100644 --- a/cypress/yarn.lock +++ b/cypress/yarn.lock @@ -1059,9 +1059,9 @@ type-fest@^0.21.3: integrity sha512-t0rzBq87m3fVcduHDUFhKmyyX+9eo6WQjZvf51Ea/M0Q7+T374Jp1aUiyUl0GKxp8M/OETVHSDvmkyPgvX+X2w== typescript@^4.1.3: - version "4.7.4" - resolved "https://registry.npmjs.org/typescript/-/typescript-4.7.4.tgz#1a88596d1cf47d59507a1bcdfb5b9dfe4d488235" - integrity sha512-C0WQT0gezHuw6AdY1M2jxUO83Rjf0HP7Sk1DtXj6j1EwkQNZrHAg2XPWlq62oqEhYvONq5pkC2Y9oPljWToLmQ== + version "4.8.2" + resolved "https://registry.npmjs.org/typescript/-/typescript-4.8.2.tgz#e3b33d5ccfb5914e4eeab6699cf208adee3fd790" + integrity sha512-C0I1UsrrDHo2fYI5oaCGbSejwX4ch+9Y5jTQELvovfmFkK3HHSZJB8MSJcWLmCUBzQBchCrZ9rMRV6GuNrvGtw== universalify@^2.0.0: version "2.0.0" diff --git a/docs/overview/roadmap.md b/docs/overview/roadmap.md index 2763f95a5a..2ac211bf97 100644 --- a/docs/overview/roadmap.md +++ b/docs/overview/roadmap.md @@ -111,5 +111,4 @@ guidelines to get started. If you have specific questions about the roadmap, please create an [issue](https://github.com/backstage/backstage/issues/new/choose), ping us on -[Discord](https://discord.gg/qxsEfa8Vq8), or [book -time](http://calendly.com/spotify-backstage) with the Spotify team. +[Discord](https://discord.gg/qxsEfa8Vq8), or [book time](https://info.backstage.spotify.com/office-hours) with the Spotify team. diff --git a/docs/publishing.md b/docs/publishing.md index a0d67b7d24..142e019fb2 100644 --- a/docs/publishing.md +++ b/docs/publishing.md @@ -55,6 +55,7 @@ process is used to release an emergency fix as version `6.5.1` in the patch rele of the repo in order to convert your changeset into package version bumps and changelog entries. Commit these changes as a second `"Generated release"` commit. - [ ] Create PR towards the base branch (`patch/v1.18.0`) containing the two commits. + - [ ] Add a PR body, it will be used as the release description. Typically something like "This release fixes ...". - [ ] Review/Merge the PR into `patch/v1.18.0`. This will automatically trigger a release. - [ ] Look up the new version of our package in the patch PR as well as the new release @@ -65,5 +66,5 @@ process is used to release an emergency fix as version `6.5.1` in the patch rele master branch as well. Create a PR that contains the following: - [ ] The fix, which you can likely cherry-pick from your patch branch: `git cherry-pick origin/patch/v1.18.0^` - - [ ] An updated `CHANGELOG.md` of all patched packages from the tip of the patch branch, `git checkout origin/patch/v1.18.0 -- {packages,plugins}/*/CHANGELOG.md`. + - [ ] An updated `CHANGELOG.md` of all patched packages from the tip of the patch branch, `git checkout origin/patch/v1.18.0 -- {packages,plugins}/*/CHANGELOG.md`. Note that if the patch happens after any next-line releases you'll need to restore those entries in the changelog, placing the patch release entry beneath any next-line release entries. - [ ] A changeset with the message "Applied the fix from version `6.5.1` of this package, which is part of the `v1.18.1` release of Backstage." diff --git a/docs/releases/v1.6.0-next.1-changelog.md b/docs/releases/v1.6.0-next.1-changelog.md new file mode 100644 index 0000000000..ba5d032ead --- /dev/null +++ b/docs/releases/v1.6.0-next.1-changelog.md @@ -0,0 +1,1171 @@ +# Release v1.6.0-next.1 + +## @backstage/cli@0.19.0-next.1 + +### Minor Changes + +- 1fe6823bb5: Updated dependency `eslint-plugin-jest` to `^27.0.0`. + + Note that this major update to the Jest plugin contains some breaking changes. + This means that some of your tests may start seeing some new lint errors. [Read + about them + here](https://github.com/jest-community/eslint-plugin-jest/blob/main/CHANGELOG.md#2700-2022-08-28). + + These are mostly possible to fix automatically. You can try to run `yarn backstage-cli repo lint --fix` in your repo root to have most or all of them + corrected. + +### Patch Changes + +- 817f3196f6: Added a new `migrate react-router-deps` command to aid in the migration to React Router v6 stable. +- 33fbd9f9a4: Updated dependency `@types/minimatch` to `^5.0.0`. + +## @backstage/core-app-api@1.1.0-next.1 + +### Minor Changes + +- a448fea691: Updated the routing system to be compatible with React Router v6 stable. + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- 70299c99d5: Updated `FlatRoutes` to be compatible with React Router v6 stable. +- Updated dependencies + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/test-utils@1.2.0-next.1 + +### Minor Changes + +- 817f3196f6: Elements rendered in a test app are no longer wrapped in a `Routes` and `Route` element, as this is not compatible with React Router v6 stable. + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-app-api@1.1.0-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-permission-react@0.4.5-next.1 + +## @backstage/plugin-auth-backend@0.16.0-next.1 + +### Minor Changes + +- 2fc41ebf07: Removed the previously deprecated class `AtlassianAuthProvider`. Please use `providers.atlassian.create(...)` instead. +- a291688bc5: Renamed the `RedirectInfo` type to `OAuthStartResponse` + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- e1ebaeb332: Cloudflare Access Provider: Add JWT to CloudflareAccessResult +- Updated dependencies + - @backstage/plugin-auth-node@0.2.5-next.1 + - @backstage/backend-common@0.15.1-next.1 + +## @backstage/plugin-catalog-backend@1.4.0-next.1 + +### Minor Changes + +- dd395335bc: Allow unknown typed location from being registered via the location service by configuration settings +- 651c9d6800: The search index now does retain fields that have a very long value, but in the form of just a null. This makes it possible to at least filter for their existence. + +### Patch Changes + +- ce77e78c93: Fixes a bug to be able to utilize refresh keys after the entity is loaded from cache +- 679f7c5e95: Include entity ref into error message when catalog policies fail +- Updated dependencies + - @backstage/plugin-permission-node@0.6.5-next.1 + - @backstage/backend-common@0.15.1-next.1 + +## @backstage/plugin-scaffolder-backend@1.6.0-next.1 + +### Minor Changes + +- 7db9613671: Added `projectId` for gitlab projects to be displayed in the `gitlab:publish` output + +### Patch Changes + +- 0d8d650e32: Applied the fix from version 1.5.1 of this package, which is part of the v1.5.1 release of Backstage. +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + - @backstage/plugin-catalog-backend@1.4.0-next.1 + +## @backstage/plugin-tech-insights@0.3.0-next.1 + +### Minor Changes + +- f7e99ac1d8: Added the possibility to display check results of different types on a single scorecard. + + - **BREAKING** Removed the `getScorecardsDefinition` method from the `TechInsightsApi` interface. Added the `getCheckResultRenderers` method that returns rendering components for given types. + - **BREAKING** The `CheckResultRenderer` type now exposes the `component` factory method that creates a React component used to display a result of a provided check result. + - The `TechInsightsClient` constructor accepts now the optional `renderers` parameter that can be used to inject a custom renderer. + - **BREAKING** The `title` parameter in the `EntityTechInsightsScorecardContent` and `EntityTechInsightsScorecardCard` components is now mandatory. + - The `jsonRulesEngineCheckResultRenderer` used to render `json-rules-engine` check results is exported. + - The `BooleanCheck` component that can be used to render other check results types is also exported. + + If you were overriding the `getScorecardsDefinition` method to adjust the rendering of check results, you should now provide a custom renderer using `renderers` parameter in the `TechInsightsClient` class. + + See the [README](https://github.com/backstage/backstage/tree/master/plugins/tech-insights/README.md) for more details. + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- 763fb81e82: Internal refactor to use more type safe code when dealing with route parameters. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/app-defaults@1.0.6-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-app-api@1.1.0-next.1 + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-permission-react@0.4.5-next.1 + +## @backstage/backend-common@0.15.1-next.1 + +### Patch Changes + +- c3c90280be: Added a keep-alive refresh loop to the `DatabaseManager`, keeping the connection + pool up. +- c3c90280be: The options part of `DatabaseManager.fromConfig` now accepts an optional logger + field. +- 60b85d8ade: Updated dependency `helmet` to `^6.0.0`. + + Please note that these policies are no longer applied by default: + + helmet.contentSecurityPolicy no longer sets block-all-mixed-content directive by default + helmet.expectCt is no longer set by default. It can, however, be explicitly enabled. It will be removed in Helmet 7. + +## @backstage/backend-test-utils@0.1.28-next.1 + +### Patch Changes + +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + - @backstage/cli@0.19.0-next.1 + +## @backstage/core-components@0.11.1-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- 37e8c5e128: The `RoutedTabs` component has been updated to be compatible with React Router v6 stable. +- Updated dependencies + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/core-plugin-api@1.0.6-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. + +## @backstage/create-app@0.4.31-next.1 + +### Patch Changes + +- c1f1a4c760: The Backstage packages and plugins have all been updated to support React Router v6 stable. The `create-app` template has not been migrated yet, but if you want to migrate your own app or plugins, check out the [migration guide](https://backstage.io/docs/tutorials/react-router-stable-migration). +- c3c90280be: The options part of `DatabaseManager.fromConfig` now accepts an optional logger + field. You may want to supply that logger in your backend initialization code to + ensure that you can get relevant logging data when things happen related to the + connection pool. + + In `packages/backend/src/index.ts`: + + ```diff + function makeCreateEnv(config: Config) { + const root = getRootLogger(); + ... + - const databaseManager = DatabaseManager.fromConfig(config); + + const databaseManager = DatabaseManager.fromConfig(config, { logger: root }); + ``` + +## @backstage/dev-utils@1.0.6-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/app-defaults@1.0.6-next.1 + - @backstage/core-app-api@1.1.0-next.1 + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/test-utils@1.2.0-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-adr@0.2.1-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- b489de83b1: Fix parsing of ADR location which includes a trailing slash +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + - @backstage/plugin-search-react@1.0.2-next.1 + +## @backstage/plugin-adr-backend@0.2.1-next.1 + +### Patch Changes + +- b489de83b1: Continue processing subsequent entities when an error occurs in collator +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + +## @backstage/plugin-airbrake@0.3.9-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/dev-utils@1.0.6-next.1 + - @backstage/test-utils@1.2.0-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-airbrake-backend@0.2.9-next.1 + +### Patch Changes + +- 148568b5c2: Switched to using node-fetch instead of cross-fetch as is standard for our backend packages +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + +## @backstage/plugin-allure@0.1.25-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-apache-airflow@0.2.2-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-api-docs@0.8.9-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + - @backstage/plugin-catalog@1.5.1-next.1 + +## @backstage/plugin-app-backend@0.3.36-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup + +- 60b85d8ade: Updated dependency `helmet` to `^6.0.0`. + + Please note that these policies are no longer applied by default: + + helmet.contentSecurityPolicy no longer sets block-all-mixed-content directive by default + helmet.expectCt is no longer set by default. It can, however, be explicitly enabled. It will be removed in Helmet 7. + +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + +## @backstage/plugin-auth-node@0.2.5-next.1 + +### Patch Changes + +- 9212439d15: Minor update to tests +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + +## @backstage/plugin-azure-devops@0.2.0-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-badges@0.2.33-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-bazaar@0.1.24-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + - @backstage/plugin-catalog@1.5.1-next.1 + - @backstage/cli@0.19.0-next.1 + +## @backstage/plugin-bitrise@0.1.36-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-catalog@1.5.1-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + - @backstage/plugin-search-react@1.0.2-next.1 + +## @backstage/plugin-catalog-backend-module-aws@0.1.9-next.1 + +### Patch Changes + +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + - @backstage/plugin-catalog-backend@1.4.0-next.1 + +## @backstage/plugin-catalog-backend-module-azure@0.1.7-next.1 + +### Patch Changes + +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + - @backstage/plugin-catalog-backend@1.4.0-next.1 + +## @backstage/plugin-catalog-backend-module-bitbucket@0.2.3-next.1 + +### Patch Changes + +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + - @backstage/plugin-catalog-backend@1.4.0-next.1 + +## @backstage/plugin-catalog-backend-module-bitbucket-cloud@0.1.3-next.1 + +### Patch Changes + +- Updated dependencies + - @backstage/plugin-catalog-backend@1.4.0-next.1 + +## @backstage/plugin-catalog-backend-module-bitbucket-server@0.1.1-next.1 + +### Patch Changes + +- 148568b5c2: Switched to using node-fetch instead of cross-fetch as is standard for our backend packages +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + - @backstage/plugin-catalog-backend@1.4.0-next.1 + +## @backstage/plugin-catalog-backend-module-gerrit@0.1.4-next.1 + +### Patch Changes + +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + - @backstage/plugin-catalog-backend@1.4.0-next.1 + +## @backstage/plugin-catalog-backend-module-github@0.1.7-next.1 + +### Patch Changes + +- 287a64bf97: Added the ability to configure the host for the `GitHubEntityProvider` to use against GitHub Enterprise +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + - @backstage/plugin-catalog-backend@1.4.0-next.1 + +## @backstage/plugin-catalog-backend-module-gitlab@0.1.7-next.1 + +### Patch Changes + +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + - @backstage/plugin-catalog-backend@1.4.0-next.1 + +## @backstage/plugin-catalog-backend-module-ldap@0.5.3-next.1 + +### Patch Changes + +- 7fa54c3c77: Added ae-dir LDAP vendor to correctly extract DN. +- Updated dependencies + - @backstage/plugin-catalog-backend@1.4.0-next.1 + +## @backstage/plugin-catalog-backend-module-msgraph@0.4.2-next.1 + +### Patch Changes + +- c1d32d2b76: Fixed a bug in the `MicrosoftGraphEntityProvider` that ignored the `userExpand` and `groupExpand` configuration parameters +- Updated dependencies + - @backstage/plugin-catalog-backend@1.4.0-next.1 + +## @backstage/plugin-catalog-backend-module-openapi@0.1.2-next.1 + +### Patch Changes + +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + - @backstage/plugin-catalog-backend@1.4.0-next.1 + +## @backstage/plugin-catalog-graph@0.2.21-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-catalog-graphql@0.3.13-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup + +## @backstage/plugin-catalog-import@0.8.12-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-catalog-react@1.1.4-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- a6d551fad9: Properly handle free-text entity filtering in the case of empty tag arrays +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-permission-react@0.4.5-next.1 + +## @backstage/plugin-cicd-statistics@0.1.11-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-circleci@0.3.9-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-cloudbuild@0.3.9-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- 763fb81e82: Internal refactor to use more type safe code when dealing with route parameters. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-code-climate@0.1.9-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-code-coverage@0.2.2-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-codescene@0.1.4-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-config-schema@0.1.32-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-cost-insights@0.11.31-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-dynatrace@0.2.0-next.1 + +### Patch Changes + +- 148568b5c2: Switched to using node-fetch instead of cross-fetch as is standard for our backend packages +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-explore@0.3.40-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + - @backstage/plugin-explore-react@0.0.21-next.1 + +## @backstage/plugin-explore-react@0.0.21-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-firehydrant@0.1.26-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-gcalendar@0.3.5-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- a69ac5b63a: Upgrade `react-query:3` to `@tanstack/react-query:4` +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-gcp-projects@0.3.28-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-git-release-manager@0.3.22-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-github-actions@0.5.9-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-github-deployments@0.1.40-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-github-pull-requests-board@0.1.3-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- 723113296b: Add optional `pullRequestLimit` prop to `EntityTeamPullRequestsCard` and `EntityTeamPullRequestsContent` to limit the number of PRs shown per repository. Excluding this prop will default the number of pull requests shown to 10 per repository (the existing functionality). +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-gitops-profiles@0.3.27-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-graphiql@0.2.41-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-graphql-backend@0.1.26-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup + +- 60b85d8ade: Updated dependency `helmet` to `^6.0.0`. + + Please note that these policies are no longer applied by default: + + helmet.contentSecurityPolicy no longer sets block-all-mixed-content directive by default + helmet.expectCt is no longer set by default. It can, however, be explicitly enabled. It will be removed in Helmet 7. + +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + - @backstage/plugin-catalog-graphql@0.3.13-next.1 + +## @backstage/plugin-home@0.4.25-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + - @backstage/plugin-stack-overflow@0.1.5-next.1 + +## @backstage/plugin-ilert@0.1.35-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-jenkins@0.7.8-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-jenkins-backend@0.1.26-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- 69ec1cf39f: Updated dependency `jenkins` to `^1.0.0`. +- Updated dependencies + - @backstage/plugin-auth-node@0.2.5-next.1 + - @backstage/backend-common@0.15.1-next.1 + +## @backstage/plugin-kafka@0.3.9-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-kubernetes@0.7.2-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + - @backstage/plugin-kubernetes-common@0.4.2-next.0 + +## @backstage/plugin-kubernetes-backend@0.7.2-next.1 + +### Patch Changes + +- 60b85d8ade: Updated dependency `helmet` to `^6.0.0`. + + Please note that these policies are no longer applied by default: + + helmet.contentSecurityPolicy no longer sets block-all-mixed-content directive by default + helmet.expectCt is no longer set by default. It can, however, be explicitly enabled. It will be removed in Helmet 7. + +- Updated dependencies + - @backstage/plugin-auth-node@0.2.5-next.1 + - @backstage/backend-common@0.15.1-next.1 + - @backstage/plugin-kubernetes-common@0.4.2-next.0 + +## @backstage/plugin-kubernetes-common@0.4.2-next.0 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup + +## @backstage/plugin-lighthouse@0.3.9-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-newrelic@0.3.27-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-newrelic-dashboard@0.2.2-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-org@0.5.9-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-pagerduty@0.5.2-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-periskop-backend@0.1.7-next.1 + +### Patch Changes + +- 148568b5c2: Switched to using node-fetch instead of cross-fetch as is standard for our backend packages +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + +## @backstage/plugin-permission-node@0.6.5-next.1 + +### Patch Changes + +- 9212439d15: Minor update to tests +- Updated dependencies + - @backstage/plugin-auth-node@0.2.5-next.1 + - @backstage/backend-common@0.15.1-next.1 + +## @backstage/plugin-permission-react@0.4.5-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. + +- 817f3196f6: **DEPRECATION**: The `PermissionedRoute` component has been deprecated in favor of the new `RequirePermission` component. This is because the usage pattern of `PermissionedRoute` is not compatible with React Router v6 stable. + + Embed the type from `react-router` instead of exporting it directly. + +- Updated dependencies + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-rollbar@0.4.9-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-rollbar-backend@0.1.33-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + +## @backstage/plugin-scaffolder@1.6.0-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- 763fb81e82: Internal refactor to use more type safe code when dealing with route parameters. +- a66d44b72b: Fixing bug when the workspace would not be automatically saved when using `allowedOwners` +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + - @backstage/plugin-permission-react@0.4.5-next.1 + +## @backstage/plugin-search@1.0.2-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + - @backstage/plugin-search-react@1.0.2-next.1 + +## @backstage/plugin-search-backend-module-pg@0.4.0-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + - @backstage/plugin-search-backend-node@1.0.2-next.1 + +## @backstage/plugin-search-backend-node@1.0.2-next.1 + +### Patch Changes + +- a1124adf5e: Fixed bug in LunrSearchEngine where stopwords in title is causing in-doc search not working +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + +## @backstage/plugin-search-react@1.0.2-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-sentry@0.4.2-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-shortcuts@0.3.1-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-splunk-on-call@0.3.33-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-stack-overflow@0.1.5-next.1 + +### Patch Changes + +- a720c44070: Support showing HTML entity references from the API response before rendering the question title to the list component. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-home@0.4.25-next.1 + +## @backstage/plugin-stack-overflow-backend@0.1.5-next.1 + +### Patch Changes + +- 79040f73f7: Now requests all questions available using pagination. Default max page is set to 100, with a configurable `maxPage` option on the collator. +- 148568b5c2: Switched to using node-fetch instead of cross-fetch as is standard for our backend packages + +## @backstage/plugin-tech-insights-backend@0.5.2-next.1 + +### Patch Changes + +- 12c6a07c2a: Changed the description of the `techdocsAnnotationFactName` fact. +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + +## @backstage/plugin-tech-radar@0.5.16-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-techdocs@1.3.2-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- 763fb81e82: Internal refactor to use more type safe code when dealing with route parameters. +- 817f3196f6: Updated the `TechDocsReaderPage` to be compatible with React Router v6 stable. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + - @backstage/plugin-search-react@1.0.2-next.1 + - @backstage/plugin-techdocs-react@1.0.4-next.1 + +## @backstage/plugin-techdocs-addons-test-utils@1.0.4-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-app-api@1.1.0-next.1 + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/test-utils@1.2.0-next.1 + - @backstage/plugin-catalog@1.5.1-next.1 + - @backstage/plugin-search-react@1.0.2-next.1 + - @backstage/plugin-techdocs-react@1.0.4-next.1 + - @backstage/plugin-techdocs@1.3.2-next.1 + +## @backstage/plugin-techdocs-react@1.0.4-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-todo@0.2.11-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + +## @backstage/plugin-user-settings@0.4.8-next.1 + +### Patch Changes + +- 817f3196f6: Updated React Router dependencies to be peer dependencies. +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## @backstage/plugin-vault-backend@0.2.2-next.1 + +### Patch Changes + +- 148568b5c2: Switched to using node-fetch instead of cross-fetch as is standard for our backend packages + +- 60b85d8ade: Updated dependency `helmet` to `^6.0.0`. + + Please note that these policies are no longer applied by default: + + helmet.contentSecurityPolicy no longer sets block-all-mixed-content directive by default + helmet.expectCt is no longer set by default. It can, however, be explicitly enabled. It will be removed in Helmet 7. + +- Updated dependencies + - @backstage/backend-common@0.15.1-next.1 + - @backstage/backend-test-utils@0.1.28-next.1 + +## @backstage/plugin-xcmetrics@0.2.29-next.1 + +### Patch Changes + +- d669d89206: Minor API signatures cleanup +- Updated dependencies + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + +## example-app@0.2.75-next.1 + +### Patch Changes + +- Updated dependencies + - @backstage/app-defaults@1.0.6-next.1 + - @backstage/core-app-api@1.1.0-next.1 + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/plugin-airbrake@0.3.9-next.1 + - @backstage/plugin-api-docs@0.8.9-next.1 + - @backstage/plugin-azure-devops@0.2.0-next.1 + - @backstage/plugin-badges@0.2.33-next.1 + - @backstage/plugin-catalog-graph@0.2.21-next.1 + - @backstage/plugin-catalog-import@0.8.12-next.1 + - @backstage/plugin-catalog-react@1.1.4-next.1 + - @backstage/plugin-circleci@0.3.9-next.1 + - @backstage/plugin-cloudbuild@0.3.9-next.1 + - @backstage/plugin-code-coverage@0.2.2-next.1 + - @backstage/plugin-cost-insights@0.11.31-next.1 + - @backstage/plugin-explore@0.3.40-next.1 + - @backstage/plugin-gcp-projects@0.3.28-next.1 + - @backstage/plugin-github-actions@0.5.9-next.1 + - @backstage/plugin-graphiql@0.2.41-next.1 + - @backstage/plugin-home@0.4.25-next.1 + - @backstage/plugin-jenkins@0.7.8-next.1 + - @backstage/plugin-kafka@0.3.9-next.1 + - @backstage/plugin-kubernetes@0.7.2-next.1 + - @backstage/plugin-lighthouse@0.3.9-next.1 + - @backstage/plugin-org@0.5.9-next.1 + - @backstage/plugin-pagerduty@0.5.2-next.1 + - @backstage/plugin-permission-react@0.4.5-next.1 + - @backstage/plugin-rollbar@0.4.9-next.1 + - @backstage/plugin-scaffolder@1.6.0-next.1 + - @backstage/plugin-search-react@1.0.2-next.1 + - @backstage/plugin-search@1.0.2-next.1 + - @backstage/plugin-sentry@0.4.2-next.1 + - @backstage/plugin-shortcuts@0.3.1-next.1 + - @backstage/plugin-tech-insights@0.3.0-next.1 + - @backstage/plugin-techdocs-react@1.0.4-next.1 + - @backstage/plugin-techdocs@1.3.2-next.1 + - @backstage/plugin-todo@0.2.11-next.1 + - @backstage/plugin-user-settings@0.4.8-next.1 + - @backstage/cli@0.19.0-next.1 + - @backstage/plugin-dynatrace@0.2.0-next.1 + - @backstage/plugin-apache-airflow@0.2.2-next.1 + - @backstage/plugin-gcalendar@0.3.5-next.1 + - @backstage/plugin-newrelic@0.3.27-next.1 + - @backstage/plugin-newrelic-dashboard@0.2.2-next.1 + - @backstage/plugin-tech-radar@0.5.16-next.1 + - @backstage/plugin-stack-overflow@0.1.5-next.1 + +## example-backend@0.2.75-next.1 + +### Patch Changes + +- Updated dependencies + - @backstage/plugin-auth-node@0.2.5-next.1 + - @backstage/plugin-permission-node@0.6.5-next.1 + - @backstage/backend-common@0.15.1-next.1 + - @backstage/plugin-catalog-backend@1.4.0-next.1 + - @backstage/plugin-auth-backend@0.16.0-next.1 + - @backstage/plugin-scaffolder-backend@1.6.0-next.1 + - @backstage/plugin-search-backend-node@1.0.2-next.1 + - @backstage/plugin-app-backend@0.3.36-next.1 + - @backstage/plugin-graphql-backend@0.1.26-next.1 + - @backstage/plugin-jenkins-backend@0.1.26-next.1 + - @backstage/plugin-rollbar-backend@0.1.33-next.1 + - @backstage/plugin-search-backend-module-pg@0.4.0-next.1 + - @backstage/plugin-kubernetes-backend@0.7.2-next.1 + - @backstage/plugin-tech-insights-backend@0.5.2-next.1 + - example-app@0.2.75-next.1 + +## example-backend-next@0.0.3-next.1 + +### Patch Changes + +- Updated dependencies + - @backstage/plugin-catalog-backend@1.4.0-next.1 + - @backstage/plugin-scaffolder-backend@1.6.0-next.1 + +## techdocs-cli-embedded-app@0.2.74-next.1 + +### Patch Changes + +- Updated dependencies + - @backstage/app-defaults@1.0.6-next.1 + - @backstage/core-app-api@1.1.0-next.1 + - @backstage/core-components@0.11.1-next.1 + - @backstage/core-plugin-api@1.0.6-next.1 + - @backstage/test-utils@1.2.0-next.1 + - @backstage/plugin-catalog@1.5.1-next.1 + - @backstage/plugin-techdocs-react@1.0.4-next.1 + - @backstage/plugin-techdocs@1.3.2-next.1 + - @backstage/cli@0.19.0-next.1 diff --git a/docs/tutorials/react-router-stable-migration.md b/docs/tutorials/react-router-stable-migration.md new file mode 100644 index 0000000000..9636345116 --- /dev/null +++ b/docs/tutorials/react-router-stable-migration.md @@ -0,0 +1,205 @@ +--- +id: react-router-stable-migration +title: React Router 6.0 Migration +description: Guide for how to migrate from React Router v6 beta to React Router v6 stable +--- + +Backstage has for a long time been using `react-router` version `6.0.0-beta.0`. +We adopted this unstable version because v6 had some new features that fit +really well with Backstage, particularly relative routing. Because we jumped on +this early and unstable version, we knew that we would at some point need a +breaking migration to the stable version of `react-router` v6, which is the +point we're at now! + +This migration is required but controlled by each app, meaning that you choose +when you want to migrate your app. There will however be some point in the +future where we drop support for the beta version of `react-router`, at which +time you would be forced to migrate. + +The stable version of React Router v6 brings a number of improvements and bug +fixes. Notably, the way that paths are resolved has been improved, which fixes a +bug where paths like `/catalog` and `/catalog-import` could get confused. + +## Migration + +### Step 1 - Upgrade to Backstage 1.6 + +The first Backstage release to support `react-router` v6 is `1.6`. You should upgrade to this version first before you start migrating. If you are an early bird and want to try out migration before that release, it is also shipped in `1.6.0-next.1`. + +### Step 2 - Move `react-router` to `peerDependencies` + +It's important that only one version of `react-router` is installed in the +project at a time. Similar to how the `react` version is handled, all plugins +and packages now declare a peer dependency on the React Router dependencies, +rather than a direct dependency. The only exception to this is the app package +(in `packages/app/package.json`), which has the direct dependencies that end up +deciding what version of React Router that you are using in your project. + +Your internal packages might specify a dependency on `react-router` or `react-router-dom` in their `package.json`, and it's important that those are converted to `peerDependencies` so that we can control the version of `react-router` in the app `package.json`. + +You can automate this step by running the following command: + +```bash +yarn backstage-cli migrate react-router-deps +``` + +For those interested in doing this manually, apply the below change to all `package.json` files except the one at `packages/app/package.json` or any other app packages. Skip moving any dependencies that don't already exist, and move both `dependencies` and `devDependencies`. + +```diff + dependencies { + ... +- "react-router-dom": "^6.0.0-beta.0", +- "react-router": "^6.0.0-beta.0" + }, + peerDependencies: { + ... ++ "react-router-dom": "6.0.0-beta.0 || ^6.3.0", ++ "react-router": "6.0.0-beta.0 || ^6.3.0" + }, +``` + +### Step 3 - Ensure that your external plugins are updated + +It's important that you also update your external plugins to their latest version as these will have to perform the same `peerDependencies` update. + +During this migration there may be external plugins that need updating. If you encounter any plugins outside of the `@backstage` scope that are incompatible with your installation, make sure to check for an existing issue or raise a new one at the plugin's GitHub repository. + +### Step 4 - Bump the React Router dependencies in your app. + +Now it's time to do the actual migration to the latest version of React Router. At this time of writing that is `6.3.0`, but that is of course a moving target. + +The first step is to modify `packages/app/package.json`: + +```diff +- "react-router": "6.0.0-beta.0", +- "react-router-dom": "6.0.0-beta.0", ++ "react-router": "^6.3.0", ++ "react-router-dom": "^6.3.0", +``` + +In case you happen to have multiple app packages in your project, apply the same change to all those packages. + +Once the change has been made, run `yarn install`, and then `yarn why react-router` to validate the installation. You should see the following line in the log as the only resulting entry: + +``` +=> Found "react-router@6.3.0" +``` + +If you see multiple entries, and especially `=> Found "react-router@6.0.0-beta.0"`, then your dependencies have not yet been fully migrated to support React Router v6 stable. Double check the steps above, using the information that the Yarn `why` command logged. Repeat the same process for `yarn why react-router-dom`. + +If you end up being stuck not being able to move your entire project to stable versions cleanly, then you can use Yarn `"resolutions"` overrides in your root `package.json`. Try to avoid this option as it may lead to hidden breakages at runtime, and verify any plugins that needed the override. A better option is likely to hold off migrating for a while until plugins have had time to be updated. + +### Step 5 - Breaking Changes + +For a new app created with `npx @backstage/create-app`, the above steps are all you need to do. If you have created internal plugins and customizations then be sure to review the breaking changes in the [React Router changelog](https://reactrouter.com/docs/en/v6/upgrading/reach#breaking-updates) and validate all parts of your app. We've summarized the most important breaking changes below. + +## Breaking Changes + +See [changelog](https://reactrouter.com/docs/en/v6/upgrading/reach#breaking-updates) for a full list of breaking changes. Below we highlight a couple of the most important ones. + +### Route paths + +`Route` components must always contain a `path` or `index` prop. + +```tsx + + {/* Invalid */} + } /> + + {/* Valid */} + } /> + + {/* Valid but discouraged due to incompatibility with react-router beta */} + } /> + +``` + +Absolute route paths within each `Routes` element must now match their own location, meaning that the following is invalid: + +```tsx + + + {/* INVALID, must be "/foo/bar" or "bar" */} + + +``` + +### Routes and Route components + +The `Routes` and `Route` component both received a large related breaking changes. It is no longer possible +to have anything but `Route` elements and React fragments be a child of a `Routes` element. This means that +structures like these: + +```tsx + + + ... + +``` + +need to be migrated to this: + +```tsx + + } /> + ... + +``` + +Somewhat related to the `Routes` change, it is no longer possible to render a +`Route` element by itself, outside of a `Routes` wrapper. Previously, rendering +such a `Route` element would cause the contents of its `element` prop to be +rendered instead, but it will now throw an error. + +### `PermissionedRoute` + +Because of the above change, the `PermissionedRoute` component no longer works in all situations with React Router v6 stable. It has been deprecated in favor of the new `RequirePermission` component, which can be placed anywhere in order to perform a permissions check. + +It's crucial that you update to `RequirePermission` at the same time as you update to React Router v6 stable as the `PermissionedRoute` component will no longer function. + +```diff +- } ++ ++ ++ ++ } + /> +``` + +### `` component + +When migrating over to React Router v6 stable, you might also see browser console warnings for the `Navigate` component. This will need to be wrapped up in a `Route` component with the `Navigate` component in the `element` prop. + +```diff +- ++ } /> +``` + +### `NavLink` + +The `NavLink` component no longer has the `activeClassName` and `activeStyle` props. Instead, the `className` and `style` props accept a callback that receives a boolean indicating whether the link is active. + +## For Plugin Authors + +There are a few things to keep in mind when migrating a published plugin. You of course need to make sure that dependencies on React Router are moved to `peerDependencies` as described above. +In addition, you need to make sure that your plugin truly is compatible with both versions of React Router at runtime. To help you achieve that, you can follow these additional guidelines: + +- Bump the version of `react-router` and `react-router-dom` in your own project to use the stable version. Place them in `devDependencies` if your plugin is a single package project. The stable version is more strict, so this is the better baseline to work from. +- Make sure all `Route` elements have a `path` prop. Do not use the new `index` props, as it is not supported by the beta version. Use `path="/"` for the index routes within a `Routes`. +- If you are using `NavLink`, use both the new and old APIs simultaneously, and work around any TypeScript errors. + +## Troubleshooting + +Check the browser console for React Router related error messages. + +Check `yarn.lock` for packages depending on older versions of `react-router`: + +```bash +yarn why react-router +``` diff --git a/microsite/blog/2020-06-22-backstage-service-catalog-alpha.md b/microsite/blog/2020-06-22-backstage-service-catalog-alpha.md index 4519f16d96..7f8fe01e11 100644 --- a/microsite/blog/2020-06-22-backstage-service-catalog-alpha.md +++ b/microsite/blog/2020-06-22-backstage-service-catalog-alpha.md @@ -51,4 +51,4 @@ As with most alpha releases, you should expect things to change quite a lot unti If you have feedback or questions, please open a [GitHub issue](https://github.com/backstage/backstage/issues), ping us on [Discord chat](https://discord.gg/EBHEGzX) or send us an email at [backstage-interest@spotify.com](mailto:backstage-interest@spotify.com) 🙏 -To get regular product updates and news about the Backstage community, sign up for the [Backstage newsletter](https://mailchi.mp/spotify/backstage-community). +To get regular product updates and news about the Backstage community, sign up for the [Backstage newsletter](https://info.backstage.spotify.com/newsletter_subscribe). diff --git a/microsite/blog/2020-08-05-announcing-backstage-software-templates.md b/microsite/blog/2020-08-05-announcing-backstage-software-templates.md index 0bf8d7e581..18bfa64c19 100644 --- a/microsite/blog/2020-08-05-announcing-backstage-software-templates.md +++ b/microsite/blog/2020-08-05-announcing-backstage-software-templates.md @@ -75,4 +75,4 @@ We have learned that one of the keys to getting these standards adopted is to ke If you have feedback or questions, please open a [GitHub issue](https://github.com/backstage/backstage/issues), ping us on [Discord chat](https://discord.gg/EBHEGzX) or send us an email at [backstage-interest@spotify.com](mailto:backstage-interest@spotify.com) 🙏 -To get regular product updates and news about the Backstage community, sign up for the [Backstage newsletter](https://mailchi.mp/spotify/backstage-community). +To get regular product updates and news about the Backstage community, sign up for the [Backstage newsletter](https://info.backstage.spotify.com/newsletter_subscribe). diff --git a/microsite/blog/2020-09-23-backstage-cncf-sandbox.md b/microsite/blog/2020-09-23-backstage-cncf-sandbox.md index 48a67e878c..70ef06f242 100644 --- a/microsite/blog/2020-09-23-backstage-cncf-sandbox.md +++ b/microsite/blog/2020-09-23-backstage-cncf-sandbox.md @@ -18,4 +18,4 @@ The Backstage community is healthy and growing quickly. Over [130 people](https: We’re excited to embark on this journey with the CNCF community. There’s so much great tech being built here, and it’s about time we share it to build even greater products, together. Entering into the CNCF Sandbox is just the first step. We are committed to working with the community to bring Backstage through the Incubation step, and finally all the way to becoming a Graduated, top-level project. -Thanks to everyone for your support so far. We hope you [join us](https://mailchi.mp/spotify/backstage-community) in this next chapter of Backstage's journey. If you have questions or feedback, feel free to [email](mailto:backstage-interest@spotify.com) me directly. +Thanks to everyone for your support so far. We hope you [join us](https://info.backstage.spotify.com/newsletter_subscribe) in this next chapter of Backstage's journey. If you have questions or feedback, feel free to [email](mailto:backstage-interest@spotify.com) me directly. diff --git a/microsite/blog/2021-06-22-spotify-backstage-is-growing.md b/microsite/blog/2021-06-22-spotify-backstage-is-growing.md index 2507192a4a..a12ddf7443 100644 --- a/microsite/blog/2021-06-22-spotify-backstage-is-growing.md +++ b/microsite/blog/2021-06-22-spotify-backstage-is-growing.md @@ -49,7 +49,7 @@ We’ve launched a new website at: [backstage.spotify.com](https://backstage.spo You’ll find a high-level introduction to the platform, tips and tricks tested by Spotify to accelerate developer effectiveness, and access to a group of partners that have scaled Backstage for numerous adopters. You can also use the site to book product overviews, demos, and technical deep dives with members of the Spotify team. -We will continue to post important product announcements, technical documentation, feature demos, and community news here on Backstage.io. ([Subscribe to the newsletter](https://mailchi.mp/spotify/backstage-community) to stay up to date.) And both contributors and adopting companies can continue to find around-the-clock/around-the-world technical support on [GitHub](https://github.com/backstage/backstage) and [Discord](https://discord.gg/MUpMjP2). +We will continue to post important product announcements, technical documentation, feature demos, and community news here on Backstage.io. ([Subscribe to the newsletter](https://info.backstage.spotify.com/newsletter_subscribe) to stay up to date.) And both contributors and adopting companies can continue to find around-the-clock/around-the-world technical support on [GitHub](https://github.com/backstage/backstage) and [Discord](https://discord.gg/MUpMjP2). ## Separate community sessions for adopters and contributors diff --git a/microsite/blog/2021-09-30-50-public-adopters.md b/microsite/blog/2021-09-30-50-public-adopters.md index 3e96cade69..6a4652b99f 100644 --- a/microsite/blog/2021-09-30-50-public-adopters.md +++ b/microsite/blog/2021-09-30-50-public-adopters.md @@ -41,5 +41,5 @@ If you are a Backstage enthusiast, please [join me][news] and the entire Backsta [da]: https://medium.com/dazn-tech/developer-experience-dx-at-dazn-e6de9a0208d2 [ex]: https://backstage.spotify.com/blog/community-session/firehydrant-expedia-loblaw/ [plugins]: https://backstage.io/plugins -[news]: https://mailchi.mp/spotify/backstage-community +[news]: https://info.backstage.spotify.com/newsletter_subscribe [gh]: https://github.com/backstage/backstage/blob/master/ADOPTERS.md diff --git a/microsite/blog/2022-08-23-backstage-security-audit.md b/microsite/blog/2022-08-23-backstage-security-audit.md new file mode 100644 index 0000000000..d81b9b1cf6 --- /dev/null +++ b/microsite/blog/2022-08-23-backstage-security-audit.md @@ -0,0 +1,41 @@ +--- +# prettier-ignore +title: Backstage Security Audit & Updates +author: Patrik Oldsberg, Spotify +authorURL: https://github.com/Rugvip +--- + +**TL;DR** Backstage’s security posture continues to mature! Today, we’re releasing a report from an independent security audit and the first version of the Backstage Threat Model. + +![Backstage Security Audit & Updates](assets/22-08-23/backstage-security-audit.png) + +As an [Incubating project](https://www.cncf.io/blog/2022/03/15/backstage-project-joins-the-cncf-incubator/) within the [Cloud Native Computing Foundation (CNCF)](https://www.cncf.io/), Backstage was fortunate enough to take advantage of a sponsored security audit. The [Open Source Technology Improvement Fund (OSTIF)](https://ostif.org/) sponsored the audit as part of its ongoing efforts to secure the open source software ecosystem, and the audit itself was performed by [X41 D-Sec](https://x41-dsec.de/). Our goal with the audit was to evaluate and improve Backstage’s security posture, focusing on the core Backstage framework and plugins. + + + +## Report Findings and Fixes + +The security audit and improvements concluded earlier this month, on August 18th. The audit **findings** totalled two critical, two high, five medium, and three low severity vulnerabilities, alongside 15 side findings with no direct security impact. As of the [Backstage 1.5 release](https://backstage.io/docs/releases/v1.5.0), eight out of the 12 main findings and many of the side findings are fully remedied. If you are a few versions behind there’s no need to worry though, most fixes were included in the 1.3 release. + +Out of the four findings that have yet to be fixed, three are related to rate limiting or internal DoS concerns. With the introduction of the Backstage Threat Model (more on that below), Backstage’s positioning states that this is outside the scope of the security concerns of Backstage. Rather, we trust internal users of Backstage to not intentionally sabotage the availability of the service. This is not to say that we will never aim to get these findings addressed, but we have pushed them to be potential future improvements as we focus our near-term efforts on improving the product in other ways. + +The last outstanding finding is to build out the capabilities of our service-to-service auth system. This is an area where the audit identified a couple of missing pieces in our early version of the implementation. We have since closed the gap by introducing token expiration, and will continue to work on this as we open up for more complex and hardened deployment patterns through the [evolution of the backend system](https://github.com/backstage/backstage/issues/11611). + +Another important finding was the potential for confusion and user impersonation due to most authentication providers having sign-in enabled by default. This finding reinforced our decision to switch sign-in to being disabled by default for all authentication providers, which was part of the [1.1 release](https://backstage.io/docs/releases/v1.1.0). + +Perhaps the most important outcome of this audit is that it helped us focus our efforts to keep improving the security of Backstage. It identified priority areas in both implementation and documentation for us going forward. One particular area that was pointed out in a finding is the documentation around the security model of Backstage deployment. There have been several efforts to highlight this in documentation, but it is still not clear enough. What we’ve been lacking is documentation that is completely dedicated towards detailing the security concerns of Backstage. That is why in addition to publishing the security audit report, we are also introducing the [Backstage Threat Model](https://backstage.io/docs/overview/threat-model). + +## Introducing the Backstage Threat Model + +The existing Backstage documentation has many security concerns interwoven within its text, but to find them all, you need to spend a lot of time reading. We previously lacked a one-stop-shop for readers that are interested in the security model and concerns of Backstage. So, we are happy to introduce the [Backstage Threat Model](https://backstage.io/docs/overview/threat-model), which closes this gap. The Threat Model outlines key security considerations for operators, developers, and security researchers. It is a living document that will evolve and expand alongside the Backstage project. + +The threat model document covers the trust model and roles involved in a typical Backstage setup, the responsibilities that fall on integrators of Backstage, and common configuration concerns across all Backstage projects. Beyond these three topics, it also dives deeper into a number of core features. The `auth`, `catalog`, `scaffolder`, and `techdocs` plugins are all covered separately with their individual security concerns. + +We’d like to point out a few key parts in case you are in a rush. Be sure to familiarize yourself with the integrator's responsibility to protect the Backstage installation from unauthorized access. If you ingest organizational data into the catalog and use that to sign in users, you’ll also want to check out the first halves of the authentication and catalog sections. + +## Links and References + +- [Full Audit Report](assets/22-08-23/X41-Backstage-Audit-2022.pdf) +- [Backstage Security Policy](https://github.com/backstage/backstage/blob/master/SECURITY.md) + +On behalf of the Backstage maintainers and community: thanks to the CNCF, OSTIF, and X41 D-Sec for the opportunity to improve the project. diff --git a/microsite/blog/assets/22-08-23/X41-Backstage-Audit-2022.pdf b/microsite/blog/assets/22-08-23/X41-Backstage-Audit-2022.pdf new file mode 100644 index 0000000000..e915ef81df Binary files /dev/null and b/microsite/blog/assets/22-08-23/X41-Backstage-Audit-2022.pdf differ diff --git a/microsite/blog/assets/22-08-23/backstage-security-audit.png b/microsite/blog/assets/22-08-23/backstage-security-audit.png new file mode 100644 index 0000000000..d45d43168c Binary files /dev/null and b/microsite/blog/assets/22-08-23/backstage-security-audit.png differ diff --git a/microsite/core/Footer.js b/microsite/core/Footer.js index f0917d3255..327e42f38a 100644 --- a/microsite/core/Footer.js +++ b/microsite/core/Footer.js @@ -48,7 +48,7 @@ class Footer extends React.Component { Community Sessions - + Subscribe to our newsletter CNCF Incubation diff --git a/microsite/core/HubSpotForm.js b/microsite/core/HubSpotForm.js new file mode 100644 index 0000000000..2905909ffe --- /dev/null +++ b/microsite/core/HubSpotForm.js @@ -0,0 +1,40 @@ +import React from 'react'; + +export class HubSpotForm extends React.Component { + render() { + return ( + <> + + + ); + } +} diff --git a/microsite/core/Typeform.js b/microsite/core/Typeform.js deleted file mode 100644 index c737d907f0..0000000000 --- a/microsite/core/Typeform.js +++ /dev/null @@ -1,21 +0,0 @@ -import React from 'react'; - -export function Typeform() { - return ( - <> -
-