Version Packages

packages/backend-common/CHANGELOG.md

@@ -1,5 +1,33 @@
 # @backstage/backend-common
 
+## 0.8.2
+
+### Patch Changes
+
+- 92963779b: Omits the `upgrade-insecure-requests` Content-Security-Policy directive by default, to prevent automatic HTTPS request upgrading for HTTP-deployed Backstage sites.
+
+  If you previously disabled this using `false` in your `app-config.yaml`, this line is no longer necessary:
+
+  ```diff
+  backend:
+    csp:
+  -    upgrade-insecure-requests: false
+  ```
+
+  To keep the existing behavior of `upgrade-insecure-requests` Content-Security-Policy being _enabled_, add the key with an empty array as the value in your `app-config.yaml`:
+
+  ```diff
+  backend:
+  +  csp:
+  +    upgrade-insecure-requests: []
+  ```
+
+  Read more on [upgrade-insecure-requests here](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/upgrade-insecure-requests).
+
+- eda9dbd5f: Download archives as compressed tar files for Bitbucket to keep executable permissions.
+- Updated dependencies [eda9dbd5f]
+  - @backstage/integration@0.5.6
+
 ## 0.8.1
 
 ### Patch Changes

packages/backend-common/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@backstage/backend-common",
   "description": "Common functionality library for Backstage backends",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "main": "src/index.ts",
   "types": "src/index.ts",
   "private": false,
@@ -33,7 +33,7 @@
     "@backstage/config": "^0.1.5",
     "@backstage/config-loader": "^0.6.2",
     "@backstage/errors": "^0.1.1",
-    "@backstage/integration": "^0.5.3",
+    "@backstage/integration": "^0.5.6",
     "@google-cloud/storage": "^5.8.0",
     "@octokit/rest": "^18.5.3",
     "@types/cors": "^2.8.6",
@@ -76,7 +76,7 @@
     }
   },
   "devDependencies": {
-    "@backstage/cli": "^0.6.12",
+    "@backstage/cli": "^0.7.0",
     "@backstage/test-utils": "^0.1.12",
     "@types/archiver": "^5.1.0",
     "@types/compression": "^1.7.0",