Merge branch 'master' into rugvip/capedeps

.changeset/angry-flowers-yawn.md

@@ -0,0 +1,29 @@
+---
+'@backstage/catalog-model': patch
+'@backstage/plugin-catalog-backend': patch
+---
+
+Adds a `backstage.io/managed-by-origin-location` annotation to all entities. It links to the
+location that was registered to the catalog and which emitted this entity. It has a different
+semantic than the existing `backstage.io/managed-by-location` annotation, which tells the direct
+parent location that created this entity.
+
+Consider this example: The Backstage operator adds a location of type `github-org` in the
+`app-config.yaml`. This setting will be added to a `bootstrap:boostrap` location. The processor
+discovers the entities in the following branch
+`Location bootstrap:bootstrap -> Location github-org:… -> User xyz`. The user `xyz` will be:
+
+```yaml
+apiVersion: backstage.io/v1alpha1
+kind: User
+metadata:
+  name: xyz
+  annotations:
+    # This entity was added by the 'github-org:…' location
+    backstage.io/managed-by-location: github-org:…
+    # The entity was added because the 'bootstrap:boostrap' was added to the catalog
+    backstage.io/managed-by-origin-location: bootstrap:bootstrap
+    # ...
+spec:
+  # ...
+```

.changeset/bright-icons-repair.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-kubernetes-backend': patch
+---
+
+Support HTTP 400 Bad Request from Kubernetes API

.changeset/bright-radios-eat.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-github-actions': minor
+---
+
+Support GHE

.changeset/calm-turtles-smoke.md

@@ -0,0 +1,7 @@
+---
+'@backstage/core': minor
+---
+
+Removed `InfoCard` variant `height100`, originally deprecated in [#2826](https://github.com/backstage/backstage/pull/2826).
+
+If your component still relies on this variant, simply replace it with `gridItem`.

.changeset/clever-timers-thank.md

@@ -0,0 +1,25 @@
+---
+'@backstage/backend-common': patch
+'@backstage/integration': patch
+---
+
+Add support for GitHub Apps authentication for backend plugins.
+
+`GithubCredentialsProvider` requests and caches GitHub credentials based on a repository or organization url.
+
+The `GithubCredentialsProvider` class should be considered stateful since tokens will be cached internally.
+Consecutive calls to get credentials will return the same token, tokens older than 50 minutes will be considered expired and reissued.
+`GithubCredentialsProvider` will default to the configured access token if no GitHub Apps are configured.
+
+More information on how to create and configure a GitHub App to use with backstage can be found in the documentation.
+
+Usage:
+
+```javascript
+const credentialsProvider = new GithubCredentialsProvider(config);
+const { token, headers } = await credentialsProvider.getCredentials({
+  url: 'https://github.com/',
+});
+```
+
+Updates `GithubUrlReader` to use the `GithubCredentialsProvider`.

.changeset/cool-horses-applaud.md

@@ -0,0 +1,6 @@
+---
+'@backstage/plugin-catalog': patch
+---
+
+Derive the list of to-delete entities in the `UnregisterEntityDialog` from the `backstage.io/managed-by-origin-location` annotation.
+The dialog also rejects deleting entities that are created by the `bootstrap:bootstrap` location.

.changeset/cost-insights-careless-coins-pretend.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-cost-insights': patch
+---
+
+bug(cost-insights): Remove entity count when none present

.changeset/eleven-tables-tease.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-import': patch
+---
+
+Modifying import functionality to register existing catalog-info.yaml if one exists in given GitHub repository

.changeset/fair-geckos-collect.md

@@ -0,0 +1,16 @@
+---
+'@backstage/create-app': patch
+---
+
+Due to a package name change from `@kyma-project/asyncapi-react` to
+`@asyncapi/react-component` the jest configuration in the root `package.json`
+has to be updated:
+
+```diff
+   "jest": {
+     "transformModules": [
+-      "@kyma-project/asyncapi-react
++      "@asyncapi/react-component"
+     ]
+   }
+```

.changeset/friendly-flies-fly.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Change AWS Account type from Component to Resource

.changeset/green-coins-confess.md

@@ -0,0 +1,40 @@
+---
+'@backstage/create-app': patch
+---
+
+Migrate to using `FlatRoutes` from `@backstage/core` for the root app routes.
+
+This is the first step in migrating applications as mentioned here: https://backstage.io/docs/plugins/composability#porting-existing-apps.
+
+To apply this change to an existing app, switch out the `Routes` component from `react-router` to `FlatRoutes` from `@backstage/core`.
+This also allows you to remove any `/*` suffixes on the route paths. For example:
+
+```diff
+import {
+   OAuthRequestDialog,
+   SidebarPage,
+   createRouteRef,
++  FlatRoutes,
+ } from '@backstage/core';
+ import { AppSidebar } from './sidebar';
+-import { Route, Routes, Navigate } from 'react-router';
++import { Route, Navigate } from 'react-router';
+ import { Router as CatalogRouter } from '@backstage/plugin-catalog';
+...
+         <AppSidebar />
+-        <Routes>
++        <FlatRoutes>
+...
+           <Route
+-            path="/catalog/*"
++            path="/catalog"
+             element={<CatalogRouter EntityPage={EntityPage} />}
+           />
+-          <Route path="/docs/*" element={<DocsRouter />} />
++          <Route path="/docs" element={<DocsRouter />} />
+...
+           <Route path="/settings" element={<SettingsRouter />} />
+-        </Routes>
++        </FlatRoutes>
+       </SidebarPage>
+```

.changeset/healthy-comics-drive.md

@@ -0,0 +1,6 @@
+---
+'@backstage/plugin-catalog': patch
+---
+
+Display the owner, system, and domain as links to the entity pages in the about card.
+Only display fields in the about card that are applicable to the entity kind.

.changeset/healthy-crews-remember.md

@@ -0,0 +1,19 @@
+---
+'@backstage/create-app': patch
+---
+
+fix routing and config for user-settings plugin
+
+To make the corresponding change in your local app, add the following in your App.tsx
+
+```
+import { Router as SettingsRouter } from '@backstage/plugin-user-settings';
+...
+<Route path="/settings" element={<SettingsRouter />} />
+```
+
+and the following to your plugins.ts:
+
+```
+export { plugin as UserSettings } from '@backstage/plugin-user-settings';
+```

.changeset/khaki-icons-trade.md

@@ -0,0 +1,26 @@
+---
+'@backstage/backend-common': patch
+---
+
+1. URL Reader's `readTree` method now returns an `etag` in the response along with the blob. The etag is an identifier of the blob and will only change if the blob is modified on the target. Usually it is set to the latest commit SHA on the target.
+
+`readTree` also takes an optional `etag` in its options and throws a `NotModifiedError` if the etag matches with the etag of the resource.
+
+So, the `etag` can be used in building a cache when working with URL Reader.
+
+An example -
+
+```ts
+const response = await reader.readTree(
+  'https://github.com/backstage/backstage',
+);
+
+const etag = response.etag;
+
+// Will throw a new NotModifiedError (exported from @backstage/backstage-common)
+await reader.readTree('https://github.com/backstage/backstage', {
+  etag,
+});
+```
+
+2. URL Reader's readTree method can now detect the default branch. So, `url:https://github.com/org/repo/tree/master` can be replaced with `url:https://github.com/org/repo` in places like `backstage.io/techdocs-ref`.

.changeset/loud-kids-dance.md

@@ -0,0 +1,5 @@
+---
+'@backstage/cli': patch
+---
+
+Append `-credentials.yaml` to credentials file generated by `backstage-cli create-github-app` and display warning about sensitive contents.

.changeset/lovely-pants-battle.md

@@ -0,0 +1,7 @@
+---
+'@backstage/plugin-fossa': patch
+---
+
+Request a sorted response list to select the project with the correct title. The FOSSA API
+matches title searches with "starts with" so previously it used the response for `my-project-part`
+if you searched for `my-project`.

.changeset/nervous-mails-repair.md

@@ -0,0 +1,5 @@
+---
+'@backstage/integration': patch
+---
+
+Fix GitLab API base URL and add it by default to the gitlab.com host

.changeset/orange-avocados-work.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Refuse to remove the bootstrap location

.changeset/proud-news-impress.md

@@ -0,0 +1,55 @@
+---
+'@backstage/core': minor
+---
+
+Removed deprecated `router.registerRoute` method in `createPlugin`.
+
+Deprecated `router.addRoute` method in `createPlugin`.
+
+Replace usage of the above two components with a routable extension.
+
+For example, given the following:
+
+```ts
+import { createPlugin } from '@backstage/core';
+import { MyPage } from './components/MyPage';
+import { rootRoute } from './routes';
+
+export const plugin = createPlugin({
+  id: 'my-plugin',
+  register({ router }) {
+    router.addRoute(rootRoute, MyPage);
+  },
+});
+```
+
+Migrate to
+
+```ts
+import { createPlugin, createRoutableExtension } from '@backstage/core';
+import { rootRoute } from './routes';
+
+export const plugin = createPlugin({
+  id: 'my-plugin',
+  routes: {
+    root: rootRoute,
+  },
+});
+
+export const MyPage = plugin.provide(
+  createRoutableExtension({
+    component: () => import('./components/MyPage').then(m => m.MyPage),
+    mountPoint: rootRoute,
+  }),
+);
+```
+
+And then use `MyPage` like this in the app:
+
+```tsx
+<FlatRoutes>
+...
+  <Route path='/my-path' element={<MyPage />}>
+...
+</FlatRoutes>
+```

.changeset/purple-olives-destroy.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-common': patch
+---
+
+URL Reader: Use API response headers for archive filename in readTree. Fixes bug for users with hosted Bitbucket.

.changeset/rich-geckos-lie.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-api-docs': patch
+---
+
+Update `@asyncapi/react-component` to 0.18.2

.changeset/rich-turtles-roll.md

@@ -0,0 +1,19 @@
+---
+'@backstage/backend-common': minor
+---
+
+Remove fallback option from `UrlReaders.create` and `UrlReaders.default`, as well as the default fallback reader.
+
+To be able to read data from endpoints outside of the configured integrations, you now need to explicitly allow it by
+adding an entry in the `backend.reading.allow` list. For example:
+
+```yml
+backend:
+  baseUrl: ...
+  reading:
+    allow:
+      - host: example.com
+      - host: '*.examples.org'
+```
+
+Apart from adding the above configuration, most projects should not need to take any action to migrate existing code. If you do happen to have your own fallback reader configured, this needs to be replaced with a reader factory that selects a specific set of URLs to work with. If you where wrapping the existing fallback reader, the new one that handles the allow list is created using `FetchUrlReader.factory`.

.changeset/spoon-fork.md

@@ -0,0 +1,12 @@
+---
+'@backstage/create-app': patch
+---
+
+Add `*-credentials.yaml` to gitignore to prevent accidental commits of sensitive credential information.
+
+To apply this change to an existing installation, add these lines to your `.gitignore`
+
+```gitignore
+# Sensitive credentials
+*-credentials.yaml
+```

.changeset/spotty-moons-tap.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Reduce log noise on locations refresh

.changeset/strong-ligers-lay.md

@@ -0,0 +1,6 @@
+---
+'@backstage/plugin-catalog': patch
+---
+
+Display systems in catalog table and make both owner and system link to the entity pages.
+The owner field is now taken from the relations of the entity instead of its spec.

.changeset/swift-baboons-refuse.md

@@ -0,0 +1,53 @@
+---
+'@backstage/create-app': patch
+---
+
+use `fromConfig` for all scaffolder helpers, and use the url protocol for app-config location entries.
+
+To apply this change to your local installation, replace the contents of your `packages/backend/src/plugins/scaffolder.ts` with the following contents:
+
+```ts
+import {
+  CookieCutter,
+  createRouter,
+  Preparers,
+  Publishers,
+  CreateReactAppTemplater,
+  Templaters,
+  CatalogEntityClient,
+} from '@backstage/plugin-scaffolder-backend';
+import { SingleHostDiscovery } from '@backstage/backend-common';
+import type { PluginEnvironment } from '../types';
+import Docker from 'dockerode';
+
+export default async function createPlugin({
+  logger,
+  config,
+}: PluginEnvironment) {
+  const cookiecutterTemplater = new CookieCutter();
+  const craTemplater = new CreateReactAppTemplater();
+  const templaters = new Templaters();
+  templaters.register('cookiecutter', cookiecutterTemplater);
+  templaters.register('cra', craTemplater);
+
+  const preparers = await Preparers.fromConfig(config, { logger });
+  const publishers = await Publishers.fromConfig(config, { logger });
+
+  const dockerClient = new Docker();
+
+  const discovery = SingleHostDiscovery.fromConfig(config);
+  const entityClient = new CatalogEntityClient({ discovery });
+
+  return await createRouter({
+    preparers,
+    templaters,
+    publishers,
+    logger,
+    config,
+    dockerClient,
+    entityClient,
+  });
+}
+```
+
+This will ensure that the `scaffolder-backend` package can add handlers for the `url` protocol which is becoming the standard when registering entities in the `catalog`

.changeset/techdocs-glasses-wonder.md

@@ -0,0 +1,5 @@
+---
+'@backstage/techdocs-common': patch
+---
+
+TechDocs backend now streams files through from Google Cloud Storage to the browser, improving memory usage.

.changeset/twelve-ants-sort.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend': patch
+---
+
+Add AWS ALB OIDC reverse proxy authentication provider

.changeset/unlucky-cougars-grin.md

@@ -0,0 +1,9 @@
+---
+'@backstage/create-app': patch
+---
+
+Remove the `@types/helmet` dev dependency from the app template. This
+dependency is now unused as the package `helmet` brings its own types.
+
+To update your existing app, simply remove the `@types/helmet` dependency from
+the `package.json` of your backend package.

.changeset/warm-months-bake.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-lighthouse': patch
+---
+
+Fix display of floating point precision errors in card category scores

.changeset/wild-cats-end.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Update the @azure/msal-node dependency to 1.0.0-beta.3.

.changeset/wise-mice-invite.md

@@ -0,0 +1,5 @@
+---
+'@backstage/backend-common': minor
+---
+
+Remove support for HTTPS certificate generation parameters. Use `backend.https = true` instead.

.changeset/yellow-ties-switch.md

@@ -0,0 +1,5 @@
+---
+'@backstage/catalog-model': minor
+---
+
+The catalog no longer attempts to merge old and new annotations, when updating an entity from a remote location. This was a behavior that was copied from kubernetes, and catered to use cases where you wanted to use HTTP POST to update an entity in-place, outside of what the refresh loop does. This has proved to be a mistake, because as a side effect, the refresh loop effectively is unable to ever delete annotations when they are removed from source YAML. This is obviously a breaking change, but we believe that this is not a behavior that is relied upon in the wild, and it has never been an actually supported use flow of the catalog. We therefore choose to break the behavior outright, and instead just store updated annotations verbatim - just like we already do for example for labels