Merge branch 'master' into devtools-bui-config

2026-04-01 08:30:32 +05:30
parent 9e88f0ce40 5407b5dd0a
commit 4e265fec15
2246 changed files with 88302 additions and 19645 deletions
@@ -26,7 +26,7 @@ Optional description with code examples.

 Migration instructions (breaking changes only).

-**Affected components:** button, card
+**Affected components:** Button, Card
 ```

 **Required:**
@@ -40,7 +40,7 @@ Migration instructions (breaking changes only).
 ```markdown
 Fixed button hover state

-**Affected components:** button
+**Affected components:** Button
 ```

 ````markdown
@@ -56,7 +56,7 @@ Update imports:
 ```
 ````

-**Affected components:** table
+**Affected components:** Table

 ```

@@ -0,0 +1,7 @@
+---
+'@backstage/backend-plugin-api': minor
+'@backstage/backend-defaults': patch
+'@backstage/backend-test-utils': patch
+---
+
+Added support for typed `examples` on actions registered via the actions registry. Action authors can now provide examples with compile-time-checked `input` and `output` values that match their schema definitions.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-scaffolder-backend-module-gitlab': patch
---
-
-Added `maskedAndHidden` option to `gitlab:projectVariable:create` and `publish:gitlab` action to support creating GitLab project variables that are both masked and hidden. Updated gitbeaker to version 43.8.0 for proper type support.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-backend': minor
---
-
-Added `query-catalog-entities` action to the catalog backend actions registry. Supports predicate-based filtering with `$all`, `$any`, `$not`, `$exists`, `$in`, `$contains`, and `$hasPrefix` operators.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-auth-backend': patch
---
-
-Added `who-am-i` action to the auth backend actions registry. Returns the catalog entity and user info for the currently authenticated user.
@@ -1,5 +0,0 @@
---
-'@backstage/core-compat-api': patch
---
-
-Added `withApis`, which is a Higher-Order Component for providing APIs as props to a component via `useApiHolder`.
@@ -0,0 +1,5 @@
+---
+'@backstage/cli-module-new': patch
+---
+
+Rename the legacy `frontend-plugin` to `frontend-plugin-legacy`
@@ -0,0 +1,5 @@
+---
+'@backstage/app-defaults': patch
+---
+
+Added `FetchMiddlewares.clarifyFailures()` to the default fetch API middleware stack.
@@ -0,0 +1,17 @@
+---
+'@backstage/plugin-app': patch
+---
+
+Added support for configuring URL redirects on the `app/routes` extension. Redirects can be configured through `app-config` as an array of `{from, to}` path pairs, which will cause navigation to the `from` path to be redirected to the `to` path.
+
+For example:
+
+```yaml
+app:
+  extensions:
+    - app/routes:
+        config:
+          redirects:
+            - from: /old-path
+              to: /new-path
+```
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-defaults': patch
+---
+
+Refactored auditor severity log level mappings to use `zod/v4` with schema-driven defaults and type inference.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend-module-azure': patch
+---
+
+Add Azure DevOps SCM event translation layer for instant catalog reprocessing.
@@ -1,5 +0,0 @@
---
-'@backstage/ui': patch
---
-
-Made Accordion a `bg` provider so nested components like Button auto-increment their background level. Updated `useDefinition` to resolve `bg` `propDef` defaults for provider components.
@@ -1,5 +0,0 @@
---
-'@backstage/repo-tools': patch
---
-
-Fixed `generate-catalog-info` command failing with "too many arguments" when invoked by lint-staged via the pre-commit hook.
@@ -1,6 +0,0 @@
---
-'@backstage/plugin-search-react': patch
-'@backstage/plugin-search': patch
---
-
-Fixes the search component not registering the first search on navigate to the search page.
@@ -1,5 +0,0 @@
---
-'@backstage/ui': patch
---
-
-Added interactive support to the `Card` component. Pass `onPress` to make the entire card surface pressable, or `href` to make it navigate to a URL. A transparent overlay handles the interaction while nested buttons and links remain independently clickable.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-api-docs': patch
---
-
-Fixed invisible text in parameter input fields when using dark mode in OpenAPI definition pages
@@ -1,11 +0,0 @@
---
-'@backstage/ui': patch
---
-
-Added analytics capabilities to the component library. Components with navigation behavior (Link, ButtonLink, Tab, MenuItem, Tag, Row) now fire analytics events on click when a `BUIProvider` is present.
-
-New exports: `BUIProvider`, `useAnalytics`, `getNodeText`, and associated types (`AnalyticsTracker`, `UseAnalyticsFn`, `BUIProviderProps`, `AnalyticsEventAttributes`).
-
-Components with analytics support now accept a `noTrack` prop to suppress event firing.
-
-**Affected components:** Link, ButtonLink, Tab, MenuItem, Tag, Row
@@ -1,5 +0,0 @@
---
-'@backstage/cli': patch
---
-
-Updated dependency `bfj` to `^9.0.2`.
@@ -0,0 +1,11 @@
+---
+'@backstage/plugin-catalog-backend': patch
+'@backstage/cli-module-auth': patch
+'@backstage/cli-module-build': patch
+'@backstage/cli-module-test-jest': patch
+'@backstage/cli': patch
+'@backstage/ui': patch
+'@backstage/repo-tools': patch
+---
+
+Bumped `glob` dependency from v7/v8/v11 to v13 to address security vulnerabilities in older versions. Bumped `rollup` from v4.27 to v4.59+ to fix a high severity path traversal vulnerability (GHSA-mw96-cpmx-2vgc).
@@ -1,5 +0,0 @@
---
-'@backstage/ui': patch
---
-
-Fixed neutral-1 hover & pressed state in light mode.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-scaffolder-backend-module-gitlab': patch
---
-
-Added new `gitlab:group:access` scaffolder action to add or remove users and groups as members of GitLab groups. The action supports specifying members via `userIds` and/or `groupIds` array parameters, configurable access levels (Guest, Reporter, Developer, Maintainer, Owner), and defaults to the 'add' action when not specified.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-backend': minor
---
-
-Added support for predicate-based filtering on the `/entities/by-refs` endpoint via the `query` field in the request body. Supports `$all`, `$any`, `$not`, `$exists`, `$in`, `$contains`, and `$hasPrefix` operators.
@@ -1,5 +0,0 @@
---
-'@backstage/catalog-client': minor
---
-
-Added support for the `query` field in `getEntitiesByRefs` requests, enabling predicate-based filtering with `$all`, `$any`, `$not`, `$exists`, `$in`, `$contains`, and `$hasPrefix` operators.
@@ -1,7 +0,0 @@
---
-'@backstage/ui': patch
---
-
-Migrated all components from `useStyles` to `useDefinition` hook. Exported `OwnProps` types for each component, enabling better type composition for consumers.
-
-**Affected components:** Avatar, Checkbox, Container, Dialog, FieldError, FieldLabel, Flex, FullPage, Grid, HeaderPage, Link, Menu, PasswordField, PluginHeader, Popover, RadioGroup, SearchField, Select, Skeleton, Switch, Table, TablePagination, Tabs, TagGroup, Text, TextField, ToggleButton, ToggleButtonGroup, Tooltip, VisuallyHidden
@@ -1,7 +0,0 @@
---
-'@backstage/ui': patch
---
-
-Fixed interactive cards so that CardBody can scroll when the card has a constrained height. Previously, the overlay element blocked scroll events.
-
-**Affected components:** Card
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog': patch
+---
+
+Disabled the default page layout header for the catalog entity page in the new frontend system. The entity page already renders its own header through the `EntityHeader` extension, so the page layout header was redundant.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Improved catalog entity filter query performance by switching from `IN (subquery)` to `EXISTS (correlated subquery)` patterns. This enables PostgreSQL semi-join optimizations and fixes `NOT IN` NULL-semantics pitfalls by using `NOT EXISTS` instead.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-graph': patch
+---
+
+Added `title` and `icon` to the new frontend system plugin definition.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-import': patch
+---
+
+Added `title` and `icon` to the new frontend system plugin definition.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Reduced search table write churn during stitching by syncing only changed rows instead of doing a full delete and re-insert. On Postgres this uses a single writable CTE, on MySQL a temporary table merge with deadlock retry, and on SQLite the previous bulk replace.
@@ -0,0 +1,24 @@
+---
+'@backstage/ui': minor
+---
+
+**BREAKING**: The `Header` component's `tabs` prop now uses `HeaderNavTabItem[]` instead of `HeaderTab[]`. Tabs render as a `<nav>` element with links and optional dropdown menus instead of `role="tablist"`. A new `activeTabId` prop controls which tab is highlighted.
+
+**Migration:**
+
+```diff
+- import { Header, type HeaderTab } from '@backstage/ui';
+ import { Header, type HeaderNavTabItem } from '@backstage/ui';
+
+  // Tabs no longer support matchStrategy — active state is controlled via activeTabId
+- const tabs: HeaderTab[] = [
+-   { id: 'overview', label: 'Overview', href: '/overview', matchStrategy: 'prefix' },
+ const tabs: HeaderNavTabItem[] = [
+   { id: 'overview', label: 'Overview', href: '/overview' },
+  ];
+
+- <Header title="My Page" tabs={tabs} />
+ <Header title="My Page" tabs={tabs} activeTabId="overview" />
+```
+
+**Affected components:** Header
@@ -1,7 +0,0 @@
---
-'@backstage/ui': patch
---
-
-Removed the `transition` on `Container` padding to prevent an unwanted animation when the viewport is resized.
-
-Affected components: Container
@@ -0,0 +1,5 @@
+---
+'@backstage/core-app-api': minor
+---
+
+Added `FetchMiddlewares.clarifyFailures()` which replaces the uninformative "TypeError: Failed to fetch" with a message that includes the request method and URL.
@@ -1,5 +0,0 @@
---
-'@backstage/cli-common': patch
---
-
-The `findOwnRootDir` utility now searches for the monorepo root by traversing up the directory tree looking for a `package.json` with `workspaces`, instead of assuming a fixed `../..` relative path. If no workspaces root is found during this traversal, `findOwnRootDir` now throws to enforce stricter validation of the repository layout.
@@ -1,28 +0,0 @@
---
-'@backstage/cli-common': minor
---
-
-Added `targetPaths` and `findOwnPaths` as replacements for `findPaths`, with a cleaner separation between target project paths and package-relative paths.
-
-To migrate existing `findPaths` usage:
-
-```ts
-// Before
-import { findPaths } from '@backstage/cli-common';
-const paths = findPaths(__dirname);
-
-// After — for target project paths (cwd-based):
-import { targetPaths } from '@backstage/cli-common';
-// paths.targetDir    → targetPaths.dir
-// paths.targetRoot   → targetPaths.rootDir
-// paths.resolveTarget('src')      → targetPaths.resolve('src')
-// paths.resolveTargetRoot('yarn.lock') → targetPaths.resolveRoot('yarn.lock')
-
-// After — for package-relative paths:
-import { findOwnPaths } from '@backstage/cli-common';
-const own = findOwnPaths(__dirname);
-// paths.ownDir       → own.dir
-// paths.ownRoot      → own.rootDir
-// paths.resolveOwn('config/jest.js')    → own.resolve('config/jest.js')
-// paths.resolveOwnRoot('tsconfig.json') → own.resolveRoot('tsconfig.json')
-```
@@ -1,5 +0,0 @@
---
-'@backstage/cli-common': patch
---
-
-Fixed `runCheck` to ignore stdio of the spawned process, preventing unwanted output from leaking to the terminal.
@@ -1,5 +0,0 @@
---
-'@backstage/cli': patch
---
-
-Internal refactor of CLI modularization, moving individual commands to be implemented with cleye.
@@ -1,5 +0,0 @@
---
-'@backstage/cli': patch
---
-
-Internal refactor of the CLI command registration
@@ -1,5 +0,0 @@
---
-'@backstage/cli': patch
---
-
-Internal refactor to use new concurrency utilities from `@backstage/cli-node`.
@@ -1,5 +0,0 @@
---
-'@backstage/cli': patch
---
-
-Internal refactor to move shared utilities into their consuming modules, reducing cross-module dependencies.
@@ -1,5 +0,0 @@
---
-'@backstage/cli-node': patch
---
-
-Added `toString()` method to `Lockfile` for serializing lockfiles back to string format.
@@ -1,5 +0,0 @@
---
-'@backstage/cli-node': patch
---
-
-Added `runConcurrentTasks` and `runWorkerQueueThreads` utilities, moved from the `@backstage/cli` internal code.
@@ -1,5 +0,0 @@
---
-'@backstage/cli': minor
---
-
-**BREAKING**: The `migrate package-exports` command has been removed. Use `repo fix` instead.
@@ -1,5 +0,0 @@
---
-'@backstage/repo-tools': patch
---
-
-Updated the CLI report parser to support cleye-style help output, and strip ANSI escape codes from captured output.
@@ -1,5 +0,0 @@
---
-'@backstage/cli': patch
---
-
-Internal refactor to split `loadCliConfig` into separate implementations for the build and config CLI modules, removing a cross-module dependency.
@@ -1,9 +0,0 @@
---
-'@backstage/cli': patch
---
-
-Added `translations export` and `translations import` commands for managing translation files.
-
-The `translations export` command discovers all `TranslationRef` definitions across frontend plugin dependencies and exports their default messages as JSON files. The `translations import` command generates `TranslationResource` wiring code from translated JSON files, ready to be plugged into the app.
-
-Both commands support a `--pattern` option for controlling the message file layout, for example `--pattern '{lang}/{id}.json'` for language-based directory grouping.
@@ -1,5 +0,0 @@
---
-'@backstage/cli': patch
---
-
-Migrated internal versioning utilities to use `@backstage/cli-node` instead of a local implementation.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-backend': minor
+---
+
+Added a new `execute-template` actions registry action that executes a scaffolder template with provided input values and returns a task ID for tracking progress.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-devtools': patch
---
-
-Fixed URL encoding of task IDs for the trigger feature (tasks that contained a "/" in their ID were not triggered)
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': patch
+---
+
+Added RangeSlider component for selecting numeric ranges.
+
+**Affected components:** RangeSlider
@@ -1,5 +0,0 @@
---
-'@backstage/core-app-api': patch
---
-
-Added `BUIProvider` from `@backstage/ui` to the app shell provider tree, enabling BUI components to fire analytics events through the Backstage analytics system.
@@ -1,6 +0,0 @@
---
-'@backstage/plugin-techdocs-backend': patch
-'@backstage/plugin-techdocs-node': patch
---
-
-Added `techdocs.generator.mkdocs.dangerouslyAllowAdditionalKeys` configuration option to explicitly bypass MkDocs configuration key restrictions. This enables support for additional MkDocs configuration keys beyond the default safe allow list, such as the `hooks` key which some MkDocs plugins require.
@@ -0,0 +1,5 @@
+---
+'@backstage/create-app': patch
+---
+
+Bumped create-app version.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-techdocs-node': patch
---
-
-Removed `INHERIT` from the `ALLOWED_MKDOCS_KEYS` set to address a security concern with MkDocs configuration inheritance.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-scaffolder': patch
---
-
-Removed check for deprecated `bitbucket` integration from `repoPickerValidation` function used by the `RepoUrlPicker`, it now validates the `bitbucketServer` and `bitbucketCloud` integrations instead.
@@ -1,21 +0,0 @@
---
-'@backstage/ui': minor
---
-
-**BREAKING**: Simplified the neutral background prop API for container components. The explicit `neutral-1`, `neutral-2`, `neutral-3`, and `neutral-auto` values have been removed from `ProviderBg`. They are replaced by a single `'neutral'` value that always auto-increments from the parent context, making it impossible to skip or pin to an explicit neutral level.
-
-**Migration:**
-
-Replace any explicit `bg="neutral-1"`, `bg="neutral-2"`, `bg="neutral-3"`, or `bg="neutral-auto"` props with `bg="neutral"`. To achieve a specific neutral level in stories or tests, use nested containers — each additional `bg="neutral"` wrapper increments by one level.
-
-```tsx
-// Before
-<Box bg="neutral-2">...</Box>
-
-// After
-<Box bg="neutral">
-  <Box bg="neutral">...</Box>
-</Box>
-```
-
-**Affected components:** Box, Flex, Grid, Card, Accordion, Popover, Tooltip, Dialog, Menu
@@ -1,5 +0,0 @@
---
-'@backstage/backend-defaults': minor
---
-
-The scheduler service now uses the metrics service to create metrics, providing plugin-scoped attribution.
@@ -1,5 +0,0 @@
---
-'@backstage/repo-tools': minor
---
-
-Added support for OpenAPI 3.1 to all `schema openapi` commands. The commands now auto-detect the OpenAPI version from the spec file and use the appropriate generator, supporting both OpenAPI 3.0.x and 3.1.x specifications.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-react': patch
+---
+
+build(deps): bump `flatted` from 3.4.1 to 3.4.2
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-notifications-backend-module-email': patch
+---
+
+build(deps): bump `nodemailer` from 7.0.13 to 8.0.4
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-techdocs': patch
---
-
-chore(deps): bump `dompurify` from 3.3.1 to 3.3.2
@@ -0,0 +1,5 @@
+---
+'@backstage/cli-common': patch
+---
+
+chore(deps): bump `undici` from 7.22.0 to 7.24.0
@@ -1,11 +0,0 @@
---
-'@backstage/backend-defaults': patch
-'@backstage/cli': patch
-'@backstage/eslint-plugin': patch
-'@backstage/repo-tools': patch
-'@backstage/plugin-auth-backend': patch
-'@backstage/plugin-catalog-backend-module-github': patch
-'@backstage/plugin-catalog-backend': patch
---
-
-build(deps): bump `minimatch` from 9.0.5 to 10.2.1
@@ -1,5 +0,0 @@
---
-'@backstage/frontend-test-utils': patch
---
-
-Deprecated standalone mock API exports in favor of the `mockApis` namespace. This includes the mock classes (`MockAlertApi`, `MockAnalyticsApi`, `MockConfigApi`, `MockErrorApi`, `MockFetchApi`, `MockFeatureFlagsApi`, `MockPermissionApi`, `MockStorageApi`, `MockTranslationApi`), their option types (`MockErrorApiOptions`, `MockFeatureFlagsApiOptions`), and the `ErrorWithContext` type. `MockFetchApiOptions` is kept as a non-deprecated export. Use the `mockApis` namespace instead, for example `mockApis.alert()` or `mockApis.alert.mock()`.
@@ -1,5 +0,0 @@
---
-'@backstage/frontend-plugin-api': patch
---
-
-Deprecated `NavItemBlueprint`. Nav items are now automatically inferred from `PageBlueprint` extensions based on their `title` and `icon` params.
@@ -1,5 +0,0 @@
---
-'@backstage/frontend-plugin-api': patch
---
-
-Deprecated `withApis`, use the `withApis` export from `@backstage/core-compat-api` instead.
@@ -0,0 +1,5 @@
+---
+'@backstage/ui': minor
+---
+
+**BREAKING**: Dropped support for React 17. The minimum supported React version is now 18.
@@ -1,8 +0,0 @@
---
-'@backstage/core-plugin-api': patch
-'@backstage/core-app-api': patch
-'@backstage/frontend-plugin-api': patch
-'@backstage/frontend-app-api': patch
---
-
-Add optional `description` field to plugin-level feature flags.
@@ -1,16 +0,0 @@
---
-'@backstage/ui': minor
---
-
-**BREAKING**: Removed `--bui-bg-popover` CSS token. Popover, Tooltip, Menu, and Dialog now use `--bui-bg-app` for their outer shell and `Box bg="neutral-1"` for content areas, providing better theme consistency and eliminating a redundant token.
-
-**Migration:**
-
-Replace any usage of `--bui-bg-popover` with `--bui-bg-neutral-1` (for content surfaces) or `--bui-bg-app` (for outer shells):
-
-```diff
- background: var(--bui-bg-popover);
-+ background: var(--bui-bg-neutral-1);
-```
-
-**Affected components:** Popover, Tooltip, Menu, Dialog
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': patch
+---
+
+Made `SearchAutocomplete` background-aware. The input now adapts its background color based on its parent container's background level.
+
+**Affected components:** SearchAutocomplete
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-api-docs': patch
---
-
-Added default entity content groups for the API docs entity content tabs. The API definition tab defaults to the `documentation` group and the APIs tab defaults to the `development` group.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-techdocs': patch
---
-
-Added `documentation` as the default entity content group for the TechDocs entity content tab.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog': minor
---
-
-Added support for group alias IDs and configurable content ordering on the entity page. Groups can now declare `aliases` so that content targeting an aliased group is included in the group. A new `defaultContentOrder` option (default `title`) controls how content items within each group are sorted, with support for both a page-level default and per-group overrides.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-react': minor
---
-
-Added `aliases` and `contentOrder` fields to `EntityContentGroupDefinition`, allowing groups to declare alias IDs and control the sort order of their content items.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-react': minor
---
-
-Exported `useEntityRefLink` hook that returns a function for generating entity page URLs from entity references.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-backend': minor
---
-
-Added support for predicate-based filtering on the `/entity-facets` endpoint via a new `POST` method. Supports `$all`, `$any`, `$not`, `$exists`, `$in`, `$contains`, and `$hasPrefix` operators.
@@ -1,5 +0,0 @@
---
-'@backstage/catalog-client': minor
---
-
-Added support for the `query` field in `getEntityFacets` requests, enabling predicate-based filtering with `$all`, `$any`, `$not`, `$exists`, `$in`, `$contains`, and `$hasPrefix` operators.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-notifications-backend-module-slack': minor
---
-
-Add an extension for custom Slack message layouts
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-scaffolder-backend': patch
---
-
-Removed `@backstage/plugin-scaffolder-backend-module-bitbucket` from `package.json` as the package itself has been deprecated and the code deleted.
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': patch
+---
+
+Fixed `Avatar` becoming elliptical in flex layouts by preventing it from shrinking.
+
+**Affected components:** Avatar
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-defaults': patch
+---
+
+Fixed `AwsS3UrlReader` failing to read files from S3 buckets configured with custom endpoint hosts. When an integration was configured with a specific endpoint like `https://bucket-1.s3.eu-central-1.amazonaws.com`, the URL parser incorrectly fell through to the non-AWS code path, always defaulting the region to `us-east-1` instead of extracting it from the hostname.
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': patch
+---
+
+Fixed relative `href` resolution for BUI link components. Relative paths like `../other` are now correctly turned into absolute paths before reaching the React Aria layer, ensuring client-side navigation goes to the right place.
+
+**Affected components:** ButtonLink, Card, CellProfile, CellText, Link, ListRow, MenuItem, MenuListBoxItem, Row, SearchAutocompleteItem, Tab, Tag
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-react': patch
+---
+
+Fixed a UI flicker in the catalog entity list where changing a filter would briefly flash stale data before showing the new results.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Fixed a deadlock in the catalog processing loop that occurred when running multiple replicas. The `getProcessableEntities` method used `SELECT ... FOR UPDATE SKIP LOCKED` to prevent concurrent processors from claiming the same rows, but the call was not wrapped in a transaction, so the row locks were released before the subsequent `UPDATE` executed. This allowed multiple replicas to select and update overlapping rows, causing PostgreSQL deadlock errors (code 40P01).
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog': patch
+---
+
+Fixed the catalog table briefly showing an empty loading state when changing filters. The table now keeps displaying stale results until new data arrives.
@@ -1,5 +0,0 @@
---
-'@backstage/frontend-plugin-api': patch
---
-
-Fixed inconsistent `JSX.Element` type reference in the `DialogApiDialog.update` method signature.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-react': patch
+---
+
+Fixed `EntityInfoCard` header overflowing on narrow screens.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog': patch
---
-
-Fixed entity page tab groups not respecting the ordering from the `groups` configuration.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-scaffolder-react': patch
---
-
-Added back `formFieldsApiRef` and `ScaffolderFormFieldsApi` as alpha exports.
@@ -1,5 +0,0 @@
---
-'@backstage/frontend-plugin-api': patch
---
-
-Made the `pluginId` property optional in the `FrontendFeature` type, allowing plugins published against older versions of the framework to be used without type errors.
@@ -1,7 +0,0 @@
---
-'@backstage/backend-defaults': patch
-'@backstage/backend-test-utils': patch
-'@backstage/plugin-mcp-actions-backend': patch
---
-
-Fixed error forwarding in the actions registry so that known errors like `InputError` and `NotFoundError` thrown by actions preserve their original status codes and messages instead of being wrapped in `ForwardedError` and coerced to 500.
@@ -1,5 +0,0 @@
---
-'@backstage/module-federation-common': patch
---
-
-Fixed the `@mui/material/styles` shared dependency key by removing a trailing slash that caused module resolution failures with MUI package exports.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-org': patch
+---
+
+Fixed `GroupProfileCard` and `UserProfileCard` content overflowing on narrow screens.
@@ -1,5 +0,0 @@
---
-'@backstage/repo-tools': patch
---
-
-Fixed prettier existence checks in OpenAPI commands to use `fs.pathExists` instead of checking the resolved path string, which was always truthy.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-scaffolder-backend': patch
---
-
-Fixed a security vulnerability where secrets could bypass log redaction when transformed through Nunjucks filters in scaffolder templates.
@@ -1,5 +0,0 @@
---
-'@backstage/integration': patch
---
-
-Fixed a security vulnerability where path traversal sequences in SCM URLs could be used to access unintended API endpoints using server-side integration credentials.
@@ -0,0 +1,5 @@
+---
+'@backstage/create-app': patch
+---
+
+Various fixes for the `create-app` template: reorganizing sidebar items, removing redundant config and code, and adding a documentation example.
@@ -1,7 +0,0 @@
---
-'@backstage/ui': patch
---
-
-Fixed tab `matchStrategy` matching to ignore query parameters and hash fragments in tab `href` values. Previously, tabs with query params in their `href` (e.g., `/page?group=foo`) would never show as active since matching compared the full `href` string against `location.pathname` which never includes query params.
-
-**Affected components:** Tabs, PluginHeader
@@ -1,5 +0,0 @@
---
-'@backstage/frontend-test-utils': patch
---
-
-Fixed type inference of `TestApiPair` when using tuple syntax by wrapping `MockWithApiFactory` in `NoInfer`.
@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-plugin-api': patch
+---
+
+Fixed `FlattenedMessages` type to avoid excessive type instantiation depth in TypeScript 6 when using `createTranslationRef` with the `translations` option.
--- a/Show More
+++ b/Show More