Merge branch 'master' into fix/logstream-deprecation-executeShellCmd

2024-10-15 13:36:05 +02:00
parent 9655c15815 56f656343d
commit cf2210bf7c
1164 changed files with 18990 additions and 9211 deletions
@@ -0,0 +1,5 @@
+---
+'@backstage/cli': minor
+---
+
+The `repo test` command will no longer default to watch mode if the `--since` flag is provided.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-react': patch
+---
+
+Add `overridableComponent` `BackstageTemplateStepperClassKey` to template stepper to enable custom styling
@@ -0,0 +1,9 @@
+---
+'@backstage/plugin-catalog-backend-module-incremental-ingestion': patch
+'@backstage/plugin-catalog-backend-module-msgraph': patch
+'@backstage/plugin-search-backend-module-catalog': patch
+'@backstage/plugin-search-backend-module-elasticsearch': patch
+'@backstage/plugin-search-backend-module-techdocs': patch
+---
+
+Remove extension points from `/alpha` export, they're available from the main package already
@@ -0,0 +1,7 @@
+---
+'@backstage/backend-defaults': patch
+'@backstage/plugin-catalog-backend-module-puppetdb': patch
+'@backstage/plugin-scaffolder-react': patch
+---
+
+Small tweaks to API reports to make them valid
@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-test-utils': patch
+---
+
+Disable the built-in `SignInPage` in `createExtensionTester` in order to not mess with existing tests
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-defaults': patch
+---
+
+Sensitive internal fields on `BackstageCredentials` objects are now defined as read-only properties in order to minimize risk of leakage.
@@ -0,0 +1,6 @@
+---
+'@backstage/backend-app-api': patch
+'@backstage/backend-defaults': patch
+---
+
+Plugin lifecycle shutdown hooks are now performed before root lifecycle shutdown hooks.
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-defaults': patch
+---
+
+The database manager now attempts to close any database connections in a root lifecycle shutdown hook.
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-defaults': patch
+---
+
+The task scheduler now attempts to abort any tasks if it detects that Backstage is being shut down.
@@ -0,0 +1,5 @@
+---
+'@backstage/create-app': patch
+---
+
+Bumped create-app version.
@@ -0,0 +1,18 @@
+---
+'@backstage/plugin-auth-backend-module-cloudflare-access-provider': patch
+'@backstage/plugin-auth-backend-module-vmware-cloud-provider': patch
+'@backstage/plugin-auth-backend-module-atlassian-provider': patch
+'@backstage/plugin-auth-backend-module-bitbucket-provider': patch
+'@backstage/plugin-auth-backend-module-microsoft-provider': patch
+'@backstage/plugin-auth-backend-module-onelogin-provider': patch
+'@backstage/plugin-auth-backend-module-aws-alb-provider': patch
+'@backstage/plugin-auth-backend-module-gcp-iap-provider': patch
+'@backstage/plugin-auth-backend-module-github-provider': patch
+'@backstage/plugin-auth-backend-module-gitlab-provider': patch
+'@backstage/plugin-auth-backend-module-google-provider': patch
+'@backstage/plugin-auth-backend-module-oauth2-provider': patch
+'@backstage/plugin-auth-backend-module-oidc-provider': patch
+'@backstage/plugin-auth-backend-module-okta-provider': patch
+---
+
+Updated configuration schema to include the new `allowedDomains` option for the `emailLocalPartMatchingUserEntityName` sign-in resolver.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-backend': patch
+---
+
+handle step.if: false
@@ -0,0 +1,5 @@
+---
+'@backstage/cli': patch
+---
+
+The `scaffolder-module` template has been updated to use a more modern layout and new testing utilities for scaffolder actions.
@@ -0,0 +1,7 @@
+---
+'@backstage/backend-app-api': patch
+'@backstage/backend-defaults': patch
+'@backstage/backend-test-utils': patch
+---
+
+build(deps): bump `cookie` from 0.6.0 to 0.7.0
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder': patch
+---
+
+Add tests for the `TemplateEditorToolbarTemplatesMenu` component.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-search-backend': patch
+---
+
+Fix to schema to allow arbitrary query parameters.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-backend-module-gitlab': patch
+---
+
+GitLab MR: introduce 'skip' commit action.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-node': patch
+---
+
+Added a new `allowedDomains` option for the common `emailLocalPartMatchingUserEntityName` sign-in resolver.
@@ -0,0 +1,8 @@
+---
+'@backstage/backend-dynamic-feature-service': patch
+---
+
+Enhance and simplify the activation of the dynamic plugins feature:
+
+- The dynamic plugins service (which implements the `DynamicPluginsProvider`) is restored, since it is required for plugins to depend on it in order to get the details of loaded dynamic plugins (possibly with loading errors to be surfaced in some UI).
+- A new all-in-one feature loader (`dynamicPluginsFeatureLoader`) is provided that allows a 1-liner activation of both the dynamic features and additional services or plugins required to have the dynamic plugins work correctly with dynamic plugins config schemas. Previous service factories or feature loaders are deprecated.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder': patch
+---
+
+Add tests for the new pages header navigation.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-search-backend-module-techdocs': minor
+---
+
+Refactor TechDocs collator, enable clients to override the mkdocs search index transformer, so that per document properties (like tags) can be added to Backstage search index.
@@ -0,0 +1,5 @@
+---
+'@backstage/core-components': patch
+---
+
+It is possible to define a custom error element to be shown when sign in fails
@@ -0,0 +1,5 @@
+---
+'@backstage/cli': patch
+---
+
+The check for `react-dom/client` will now properly always run from the target directory.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder': patch
+---
+
+Fix behavior of scaffolder entity pickers (EntityPicker, MultiEntityPicker, MyGroupsPicker) to not auto-fill and disable the field if there is only a single value option and the field is not required.
@@ -0,0 +1,5 @@
+---
+'@backstage/cli': patch
+---
+
+feat: experimentally support using rspack instead under `EXPERIMENTAL_RSPACK` env flag
@@ -0,0 +1,8 @@
+---
+'@backstage/backend-dynamic-feature-service': patch
+---
+
+Enhance the API of the `DynamicPluginProvider` (available as a service) to:
+
+- expose the new `getScannedPackage()` method that returns the `ScannedPluginPackage` from which a given plugin has been loaded,
+- add an optional `includeFailed` argument in the plugins list retrieval methods, to include the plugins that could be successfully loaded (`false` by default).
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-dynamic-feature-service': patch
+---
+
+Allow passing an async module loader in the `DynamicPluginsFeatureLoaderOptions`.
@@ -0,0 +1,11 @@
+---
+'@backstage/plugin-scaffolder-backend-module-confluence-to-markdown': patch
+'@backstage/plugin-scaffolder-backend-module-cookiecutter': patch
+'@backstage/plugin-scaffolder-backend-module-gitlab': patch
+'@backstage/plugin-scaffolder-backend-module-rails': patch
+'@backstage/plugin-scaffolder-backend-module-sentry': patch
+'@backstage/plugin-scaffolder-backend-module-yeoman': patch
+'@backstage/plugin-search-backend-module-stack-overflow-collator': patch
+---
+
+Updated installation instructions in README to not include `/alpha`.
@@ -0,0 +1,32 @@
+---
+'@backstage/plugin-search-backend-module-elasticsearch': minor
+'@backstage/plugin-scaffolder-backend': minor
+'@backstage/plugin-techdocs-backend': minor
+'@backstage/plugin-catalog-backend': minor
+'@backstage/plugin-search-backend': minor
+'@backstage/plugin-catalog-backend-module-incremental-ingestion': patch
+'@backstage/plugin-catalog-backend-module-bitbucket-server': patch
+'@backstage/plugin-catalog-backend-module-bitbucket-cloud': patch
+'@backstage/plugin-events-backend-module-bitbucket-cloud': patch
+'@backstage/plugin-catalog-backend-module-msgraph': patch
+'@backstage/plugin-search-backend-module-techdocs': patch
+'@backstage/plugin-catalog-backend-module-gerrit': patch
+'@backstage/plugin-catalog-backend-module-github': patch
+'@backstage/plugin-catalog-backend-module-gitlab': patch
+'@backstage/plugin-events-backend-module-aws-sqs': patch
+'@backstage/plugin-search-backend-module-catalog': patch
+'@backstage/plugin-search-backend-module-explore': patch
+'@backstage/plugin-catalog-backend-module-azure': patch
+'@backstage/plugin-events-backend-module-gerrit': patch
+'@backstage/plugin-events-backend-module-azure': patch
+'@backstage/plugin-catalog-backend-module-aws': patch
+'@backstage/plugin-search-backend-module-pg': patch
+'@backstage/plugin-user-settings-backend': patch
+'@backstage/plugin-kubernetes-backend': patch
+'@backstage/plugin-permission-backend': patch
+'@backstage/plugin-events-backend': patch
+'@backstage/plugin-proxy-backend': patch
+'@backstage/plugin-app-backend': patch
+---
+
+The export for the new backend system at the `/alpha` export is now also available via the main entry point, which means that you can remove the `/alpha` suffix from the import.
@@ -0,0 +1,5 @@
+---
+'@backstage/create-app': patch
+---
+
+Remove some dependencies that aren't required anymore
@@ -0,0 +1,6 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Added migration `20241003170511_alter_target_in_locations.js` to change the target column in the `locations` table to TEXT type.
+Added a hash for the key column in the `refresh_keys` table.
@@ -0,0 +1,5 @@
+---
+'@backstage/cli': patch
+---
+
+The backend plugin template for the `new` command has been updated to provide more guidance and use a more modern structure.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend-module-incremental-ingestion': patch
+---
+
+Turn down the logging level on most "all is well" type log messages
@@ -0,0 +1,5 @@
+---
+'@backstage/cli': patch
+---
+
+Tweaked the new package feature detection to not be active when building backend packages.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-home': minor
+---
+
+**BREAKING** Implement usage of unused `limit` query parameter in visits API `.list()` function
@@ -0,0 +1,8 @@
+---
+'@backstage/repo-tools': patch
+---
+
+Fix issues with warnings in API reports not being checked or reported.
+
+Due to the recent version bump of API Extractor you may now see a lot of `ae-undocumented` warnings,
+these can be ignored using the `-o` option, for example, `backstage-repo-tools api-reports -o ae-undocumented,ae-wrong-input-file-type`.
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-test-utils': patch
+---
+
+The `createMockDirectory` cleanup strategy has been changed, no longer requiring it to be called outside individual tests.
@@ -1,5 +1,5 @@
 {
-  "mode": "pre",
+  "mode": "exit",
  "tag": "next",
  "initialVersions": {
    "example-app": "0.2.101",
@@ -195,24 +195,37 @@
    "@internal/scaffolder": "0.0.1"
  },
  "changesets": [
+    "angry-cycles-call",
    "angry-mayflies-collect",
    "angry-windows-decide",
    "big-rules-nail",
    "breezy-bulldogs-smell",
    "brown-frogs-walk",
+    "calm-owls-move",
    "chair-fairs-drive",
    "chilled-dolphins-join",
+    "chilled-melons-smash",
    "clever-paws-stare",
    "cold-nails-rescue",
+    "crash-loop-baby",
+    "crash-loop-honey",
+    "crash-loop-yeah",
    "create-app-1727774359",
+    "create-app-1728387650",
+    "cuddly-stingrays-smell",
    "curly-foxes-brake",
+    "curly-tomatoes-reply",
    "cyan-cooks-sing",
    "cyan-peaches-lay",
    "cyan-vans-study",
+    "dependabot-a3fd85a",
    "dry-frogs-drum",
    "early-drinks-kneel",
    "early-sloths-cross",
+    "eight-clocks-complain",
    "eight-steaks-chew",
+    "eighty-mice-turn",
+    "eleven-beds-play",
    "eleven-pugs-hear",
    "fair-chairs-drive",
    "famous-bobcats-remain",
@@ -220,15 +233,23 @@
    "five-gorillas-pay",
    "five-turkeys-taste",
    "flat-eels-exist",
+    "flat-seals-type",
+    "fluffy-dolphins-battle",
    "fluffy-pears-cry",
    "four-moons-watch",
+    "friendly-coins-approve",
    "friendly-cougars-return",
    "funny-rocks-train",
    "fuzzy-elephants-tease",
    "giant-kiwis-retire",
    "gold-pots-end",
+    "great-eagles-repair",
    "green-bottles-live",
+    "green-cooks-sort",
    "happy-ligers-think",
+    "healthy-shoes-judge",
+    "healthy-years-search",
+    "heavy-ties-tell",
    "honest-impalas-rescue",
    "hungry-buckets-repair",
    "large-hats-reply",
@@ -236,27 +257,57 @@
    "light-rats-travel",
    "long-humans-hunt",
    "loud-hotels-tan",
+    "lovely-bees-walk",
    "nasty-lamps-greet",
+    "neat-geckos-end",
    "nice-badgers-travel",
+    "olive-walls-wave",
    "polite-days-flash",
+    "poor-dodos-wait",
+    "pretty-buses-repair",
    "pretty-plants-hammer",
+    "purple-toys-heal",
    "quiet-dingos-bathe",
+    "quiet-needles-impress",
+    "rare-crabs-cheat",
+    "rare-rabbits-flow",
    "renovate-156753b",
+    "renovate-7874fad",
+    "renovate-85a184e",
+    "renovate-87a3bd2",
+    "renovate-9f7136b",
+    "renovate-f88b005",
    "rich-deers-attend",
    "rich-needles-collect",
+    "rotten-camels-deny",
    "rude-apricots-eat",
+    "sharp-lamps-fix",
    "shy-olives-swim",
+    "shy-plants-retire",
+    "silly-geckos-learn",
+    "silly-readers-build",
+    "slimy-ravens-end",
    "slow-gorillas-thank",
    "slow-trees-compare",
+    "small-donkeys-attack",
+    "smart-jobs-sit",
    "sour-grapes-trade",
    "sour-phones-fix",
+    "stale-ravens-clap",
    "stale-roses-serve",
    "strange-bees-attack",
    "strong-monkeys-melt",
    "sweet-chicken-smash",
+    "ten-apes-turn",
+    "ten-rings-look",
+    "thick-tables-give",
    "thirty-pets-fry",
+    "thirty-pianos-mix",
    "tiny-pugs-kick",
+    "tough-fireants-itch",
    "tough-pillows-sip",
+    "tricky-shoes-lie",
+    "twenty-cups-knock",
    "two-plums-fail",
    "weak-bottles-cross"
  ]
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-app': patch
+---
+
+Added missing default `SignInPageExtension` which by default uses guest auth, missing `ApiExtensions` for `scmAuth`
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend-module-vmware-cloud-provider': minor
+---
+
+**BREAKING**: The `profileEmailMatchingUserEntityEmail` sign-in resolver has been removed as it was using an insecure fallback for resolving user identities. See https://backstage.io/docs/auth/identity-resolver#sign-in-without-users-in-the-catalog for how to create a custom sign-in resolver if needed as a replacement.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Add configuration parameters for deferred stitcher
@@ -0,0 +1,6 @@
+---
+'@backstage/plugin-scaffolder-react': patch
+'@backstage/plugin-scaffolder': patch
+---
+
+Scaffolder task routes require read permission to access. The tasks list option in the scaffolder page context menu only shows with permission.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-backend-module-gitlab': minor
+---
+
+declare correct type (number) for publish:gitlab output.projectId
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-test-utils': patch
+---
+
+Minor doc string changes
@@ -0,0 +1,5 @@
+---
+'@backstage/cli': patch
+---
+
+Updated the Vite implementation behind the `EXPERIMENTAL_VITE` flag to work with more recent versions of Backstage.
@@ -0,0 +1,11 @@
+---
+'@backstage/plugin-home-react': patch
+'@backstage/plugin-home': patch
+'@backstage/plugin-scaffolder-react': patch
+'@backstage/plugin-scaffolder': patch
+---
+
+Updated dependency `@rjsf/utils` to `5.21.2`.
+Updated dependency `@rjsf/core` to `5.21.2`.
+Updated dependency `@rjsf/material-ui` to `5.21.2`.
+Updated dependency `@rjsf/validator-ajv8` to `5.21.2`.
@@ -0,0 +1,15 @@
+---
+'@backstage/backend-defaults': patch
+'@backstage/cli': patch
+'@backstage/integration': patch
+'@backstage/plugin-catalog-backend-module-github': patch
+'@backstage/plugin-catalog-backend': patch
+'@backstage/plugin-catalog-import': patch
+'@backstage/plugin-scaffolder-backend-module-confluence-to-markdown': patch
+'@backstage/plugin-scaffolder': patch
+'@backstage/plugin-techdocs-module-addons-contrib': patch
+'@backstage/plugin-techdocs-node': patch
+'@backstage/plugin-techdocs': patch
+---
+
+Updated dependency `git-url-parse` to `^15.0.0`.
@@ -0,0 +1,5 @@
+---
+'@backstage/repo-tools': patch
+---
+
+Updated dependency `@useoptic/optic` to `^1.0.0`.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-search-backend-module-explore': patch
+---
+
+Updated dependency `@backstage-community/plugin-explore-common` to `^0.0.6`.
@@ -0,0 +1,5 @@
+---
+'@backstage/codemods': patch
+---
+
+Updated dependency `@types/jscodeshift` to `^0.12.0`.
@@ -0,0 +1,6 @@
+---
+'@backstage/cli': patch
+'@backstage/plugin-scaffolder-backend': patch
+---
+
+Updated dependency `esbuild` to `^0.24.0`.
@@ -0,0 +1,7 @@
+---
+'@backstage/plugin-kubernetes-cluster': patch
+'@backstage/plugin-kubernetes-react': patch
+'@backstage/plugin-kubernetes': patch
+---
+
+Updated dependency `@kubernetes-models/apimachinery` to `^2.0.0`.
@@ -0,0 +1,5 @@
+---
+'@backstage/cli': patch
+---
+
+Running `repo lint` with the `--successCache` flag now respects `.gitinore`, and it ignores projects without a `lint` script.
@@ -0,0 +1,5 @@
+---
+'@backstage/create-app': patch
+---
+
+Tweak `Dockerfile` to fix deprecated syntax.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-user-settings': patch
+---
+
+`useUserProfile` will now use the user's picture stored in the catalog as a fallback if the identity provider doesn't return a picture.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Adds the ability to disable catalog processing `catalog.processingInterval: false` in `app-config`
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-defaults': patch
+---
+
+Fix for backend shutdown hanging during local development due to SQLite connection shutdown never resolving.
@@ -0,0 +1,6 @@
+---
+'@backstage/plugin-techdocs': minor
+'@backstage/theme': minor
+---
+
+Adds support for custom background colors in code blocks and inline code within TechDocs.
@@ -0,0 +1,13 @@
+---
+'@backstage/backend-defaults': patch
+---
+
+The default root HTTP service implementation will now pretty-print JSON responses in development.
+
+If you are overriding the `rootHttpRouterServiceFactory` with a `configure` function that doesn't call `applyDefaults`, you can introduce this functionality by adding the following snippet inside `configure`:
+
+```ts
+if (process.env.NODE_ENV === 'development') {
+  app.set('json spaces', 2);
+}
+```
@@ -2,6 +2,6 @@
 '@backstage/cli': patch
 ---

-Added a new `--successCache` option to the `backstage-cli repo lint` command. The cache keeps track of successful lint runs and avoids re-running linting of individual packages if they haven't changed. This option is primarily intended to be used in CI.
+Added a new `--successCache` option to the `backstage-cli repo test` and `backstage-cli repo lint` commands. The cache keeps track of successful runs and avoids re-running for individual packages if they haven't changed. This option is intended only to be used in CI.

-In addition a `--successCacheDir` option has also been added to be able to override the default cache directory.
+In addition a `--successCacheDir <path>` option has also been added to be able to override the default cache directory.
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-openapi-utils': minor
+---
+
+Improved support for OpenAPI validation during Jest tests. Now, OpenAPI validation can happen as you are writing your Jest tests - you no longer have to run `repo schema openapi test`.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Update catalog search table in transaction
@@ -0,0 +1,5 @@
+---
+'@backstage/cli': patch
+---
+
+Disabled parsing of input source maps in the SWC transform for Jest.
@@ -0,0 +1,5 @@
+---
+'@backstage/catalog-client': patch
+---
+
+Add missing doc string to API
@@ -0,0 +1,14 @@
+---
+'@backstage/test-utils': minor
+'@backstage/frontend-test-utils': patch
+---
+
+Added a `mockApis` export, which will replace the `MockX` API implementation classes and their related types. This is analogous with the backend's `mockServices`.
+
+**DEPRECATED** several old helpers:
+
+- Deprecated `MockAnalyticsApi`, please use `mockApis.analytics` instead.
+- Deprecated `MockConfigApi`, please use `mockApis.config` instead.
+- Deprecated `MockPermissionApi`, please use `mockApis.permission` instead.
+- Deprecated `MockStorageApi`, please use `mockApis.storage` instead.
+- Deprecated `MockTranslationApi`, please use `mockApis.translation` instead.
@@ -0,0 +1,5 @@
+---
+'@backstage/core-plugin-api': patch
+---
+
+Fixing issue with types for `ParamKeys` leading to type mismatches across versions
@@ -0,0 +1,6 @@
+---
+'@backstage/core-components': patch
+'@backstage/plugin-auth-node': patch
+---
+
+Fix authentication error handling using redirect flow via `enableExperimentalRedirectFlow` config. If an error is caught during authentication, the user is redirected back to app origin with `error` query parameter containing the error message.
@@ -90,7 +90,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4

      # Identify comment to be updated
      - name: Find comment for API Changes
@@ -18,7 +18,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          # Fetch the commit that's merged into the base rather than the target ref
          # This will let us diff only the contents of the PR, without fetching more history
@@ -46,7 +46,7 @@ jobs:
          cat ${{ github.event_path }} > event.json

      - name: Upload Artifacts
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
        with:
          name: preview-spec
          path: |
@@ -27,7 +27,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          # Fetch the commit that's merged into the base rather than the target ref
          # This will let us diff only the contents of the PR, without fetching more history
@@ -28,7 +28,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          ref: '${{ github.event.pull_request.merge_commit_sha }}'

@@ -32,7 +32,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

      - name: use node.js ${{ matrix.node-version }}
        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
@@ -68,7 +68,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

      - name: use node.js ${{ matrix.node-version }}
        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
@@ -209,7 +209,7 @@ jobs:
      INTEGRATION_TEST_AZURE_TOKEN: ${{ secrets.INTEGRATION_TEST_AZURE_TOKEN }}

    steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
      - name: fetch master branch
        run: git fetch origin master

@@ -233,11 +233,20 @@ jobs:
      - name: verify release
        run: node scripts/verify-release.js

+      # Use the lower-level cache actions for the success cache, so that we can store the cache even on failed builds
+      - name: restore backstage-cli cache
+        uses: actions/cache/restore@v4
+        with:
+          path: .cache/backstage-cli
+          key: ${{ runner.os }}-v${{ matrix.node-version }}-backstage-cli-${{ github.run_id }}
+          restore-keys: |
+            ${{ runner.os }}-v${{ matrix.node-version }}-backstage-cli-
+
      - name: lint changed packages
-        run: yarn backstage-cli repo lint --since origin/master --successCache
+        run: yarn backstage-cli repo lint --since origin/master --successCache --successCacheDir .cache/backstage-cli

      - name: test changed packages
-        run: yarn backstage-cli repo test --maxWorkers=3 --workerIdleMemoryLimit=1300M --since origin/master
+        run: yarn backstage-cli repo test --maxWorkers=3 --workerIdleMemoryLimit=1300M --since origin/master --successCache --successCacheDir .cache/backstage-cli
        env:
          BACKSTAGE_TEST_DISABLE_DOCKER: 1
          BACKSTAGE_TEST_DATABASE_POSTGRES16_CONNECTION_STRING: postgresql://postgres:postgres@localhost:${{ job.services.postgres16.ports[5432] }}
@@ -245,6 +254,14 @@ jobs:
          BACKSTAGE_TEST_DATABASE_MYSQL8_CONNECTION_STRING: mysql://root:root@localhost:${{ job.services.mysql8.ports[3306] }}/ignored
          BACKSTAGE_TEST_CACHE_REDIS7_CONNECTION_STRING: redis://localhost:${{ job.services.redis.ports[6379] }}

+      # Always save success cache even if there were failures, that way it can be used in re-triggered builds
+      - name: save backstage-cli cache
+        uses: actions/cache/save@v4
+        if: always()
+        with:
+          path: .cache/backstage-cli
+          key: ${{ runner.os }}-v${{ matrix.node-version }}-backstage-cli-${{ github.run_id }}
+
      # We run the test cases before verifying the specs to prevent any failing tests from causing errors.
      - name: verify openapi specs against test cases
        run: yarn backstage-repo-tools repo schema openapi test
@@ -25,7 +25,7 @@ jobs:
          egress-policy: audit

      - name: checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          path: backstage
          ref: ${{ github.event.client_payload.version && env.RELEASE_VERSION || github.ref }}
@@ -54,7 +54,7 @@ jobs:
          result-encoding: string

      - name: checkout latest release
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          ref: refs/tags/${{ steps.find-release.outputs.result }}

@@ -73,7 +73,7 @@ jobs:
        run: yarn build:api-docs

      - name: upload API reference
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
        with:
          name: stable-reference
          path: docs/reference/
@@ -96,7 +96,7 @@ jobs:
          egress-policy: audit

      - name: checkout master
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

      - name: use node.js 18.x
        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
@@ -113,7 +113,7 @@ jobs:
        run: yarn build:api-docs

      - name: upload API reference
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
        with:
          name: next-reference
          path: docs/reference/
@@ -130,7 +130,7 @@ jobs:
        working-directory: storybook

      - name: storybook upload
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
        with:
          name: storybook
          path: storybook/dist/
@@ -170,7 +170,7 @@ jobs:

      # Stable docs
      - name: checkout latest release
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          ref: refs/tags/${{ needs.stable.outputs.release }}

@@ -198,7 +198,7 @@ jobs:

      # Next docs
      - name: checkout master
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          clean: false

@@ -68,7 +68,7 @@ jobs:
      INTEGRATION_TEST_AZURE_TOKEN: ${{ secrets.INTEGRATION_TEST_AZURE_TOKEN }}

    steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

      - name: use node.js ${{ matrix.node-version }}
        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
@@ -93,8 +93,16 @@ jobs:
      - name: validate config
        run: yarn backstage-cli config:check --lax

+      - name: backstage-cli cache
+        uses: actions/cache@v4
+        with:
+          path: .cache/backstage-cli
+          key: ${{ runner.os }}-v${{ matrix.node-version }}-backstage-cli-${{ github.run_id }}
+          restore-keys: |
+            ${{ runner.os }}-v${{ matrix.node-version }}-backstage-cli-
+
      - name: lint
-        run: yarn backstage-cli repo lint --successCache
+        run: yarn backstage-cli repo lint --successCache --successCacheDir .cache/backstage-cli

      - name: type checking and declarations
        run: yarn tsc:full
@@ -107,12 +115,7 @@ jobs:

      - name: test (and upload coverage)
        run: |
-          yarn backstage-cli repo test --maxWorkers=3 --workerIdleMemoryLimit=1300M --coverage
-          # bash <(curl -s https://codecov.io/bash)
-          # Upload code coverage for some specific flags. Also see .codecov.yml
-          # bash <(curl -s https://codecov.io/bash) -f packages/core-app-api/coverage/* -F core-app-api
-          # bash <(curl -s https://codecov.io/bash) -f packages/core-components/coverage/* -F core-components
-          # bash <(curl -s https://codecov.io/bash) -f packages/core-plugin-api/coverage/* -F core-plugin-api
+          yarn backstage-cli repo test --maxWorkers=3 --workerIdleMemoryLimit=1300M --coverage --successCache --successCacheDir .cache/backstage-cli
        env:
          BACKSTAGE_TEST_DISABLE_DOCKER: 1
          BACKSTAGE_TEST_DATABASE_POSTGRES16_CONNECTION_STRING: postgresql://postgres:postgres@localhost:${{ job.services.postgres16.ports[5432] }}
@@ -30,7 +30,7 @@ jobs:
        run: |
          mkdir -p ./pr
          echo $PR_NUMBER > ./pr/pr_number
-      - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
+      - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
        with:
          name: pr_number-${{ github.event.pull_request.number }}
          path: pr/
@@ -34,7 +34,7 @@ jobs:
          egress-policy: audit

      - name: 'Checkout code'
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          persist-credentials: false

@@ -58,7 +58,7 @@ jobs:
      # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
      # format to the repository Actions tab.
      - name: 'Upload artifact'
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
+        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
        with:
          name: SARIF file
          path: results.sarif
@@ -14,7 +14,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          # Fetch changes to previous commit - required for 'only_changed' in Prettier action
          fetch-depth: 0
@@ -16,7 +16,7 @@ jobs:
          egress-policy: audit

      - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          fetch-depth: 2
          ref: ${{ github.head_ref }}
@@ -13,7 +13,7 @@ jobs:
          egress-policy: audit

      - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          # 'v' prefix is added here for the tag, we keep it out of the manifest logic
          ref: v${{ github.event.client_payload.version }}
@@ -35,7 +35,7 @@ jobs:

      # Checkout backstage/versions into /backstage/versions, which is where store the output
      - name: Checkout versions
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          repository: backstage/versions
          path: versions
@@ -16,7 +16,7 @@ jobs:
          egress-policy: audit

      - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          fetch-depth: 2
          ref: ${{ github.head_ref }}
@@ -16,7 +16,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

      - name: use node.js 18.x
        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
@@ -29,7 +29,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
      - name: Monitor and Synchronize Snyk Policies
        uses: snyk/actions/node@cdb760004ba9ea4d525f2e043745dfe85bb9077e # master
        with:
@@ -18,7 +18,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          fetch-depth: 20000
          fetch-tags: true
@@ -24,7 +24,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
      - name: Use Node.js 18.x
        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
        with:
@@ -47,7 +47,7 @@ jobs:
          egress-policy: audit

      - name: Checkout repository
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          # We must fetch at least the immediate parents so that if this is
          # a pull request then we can checkout the head.
@@ -16,7 +16,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

      # Vale does not support file excludes, so we use the script to generate a list of files instead
      # The action also does not allow args or a local config file to be passed in, so the files array
@@ -45,7 +45,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

      - name: Configure Git
        run: |
@@ -34,7 +34,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
      - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
        with:
          python-version: '3.9'
@@ -42,7 +42,7 @@ jobs:
          git config --global core.autocrlf false
          git config --global core.eol lf

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

      - name: Configure Git
        run: |
@@ -19,7 +19,7 @@ jobs:
          egress-policy: audit

      - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

      - name: Install Fossa
        run: "curl -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install.sh | bash"
@@ -28,7 +28,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

      - name: use node.js 18.x
        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
@@ -19,7 +19,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

      - name: Use Node.js 18.x
        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
@@ -32,7 +32,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
        with:
          fetch-depth: 0 # Required to retrieve git history

@@ -51,7 +51,7 @@ jobs:

      - run: yarn build-storybook

-      - uses: chromaui/action@f4e60a7072abcac4203f4ca50613f28e199a52ba # v11
+      - uses: chromaui/action@bbbf288765438d5fd2be13e1d80d542a39e74108 # v11
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          # projectToken intentionally shared to allow collaborators to run Chromatic on forks
@@ -33,7 +33,7 @@ jobs:
        with:
          egress-policy: audit

-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

      - name: use node.js ${{ matrix.node-version }}
        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
@@ -55,7 +55,7 @@ jobs:
        run: yarn lint:type-deps

      - name: test
-        run: yarn backstage-cli repo test --maxWorkers=3 --workerIdleMemoryLimit=1300M
+        run: yarn backstage-cli repo test --maxWorkers=3 --workerIdleMemoryLimit=1300M --successCache
        env:
          BACKSTAGE_TEST_DISABLE_DOCKER: 1

@@ -58,6 +58,6 @@ If your Backstage plugin lives outside of the [Backstage main repository](https:

 ### Report identified issues

-It’s important to remember that automated checks can only catch a small number of accessibility issues, therefore we also encourage you to conduct manual testing of your plugins using Assistive technology (screen readers, alternative navigation, and screen magnifiers are a few examples).
+It’s important to remember that automated checks can only catch a small number of accessibility issues, therefore, we also encourage you to conduct manual testing of your plugins using Assistive technology (screen readers, alternative navigation, and screen magnifiers are a few examples).

 If you have identified accessibility issues and don’t have time to contribute a fix, please open an issue over at [Backstage Issues](https://github.com/backstage/backstage/issues) to let us know.
@@ -49,9 +49,7 @@ auth:
        scope: ${AUTH_ATLASSIAN_SCOPES}
        signIn:
          resolvers:
-            # typically you would pick one of these
-            - resolver: emailMatchingUserEntityProfileEmail
-            - resolver: emailLocalPartMatchingUserEntityName
+            # See https://backstage.io/docs/auth/atlassian/provider#resolvers for more resolvers
            - resolver: usernameMatchingUserEntityName
 ```

@@ -25,9 +25,8 @@ auth:
      region: 'us-west-2'
      signIn:
        resolvers:
-          # typically you would pick one of these
+          # See https://backstage.io/docs/auth/aws-alb/provider#resolvers for more resolvers
          - resolver: emailMatchingUserEntityProfileEmail
-          - resolver: emailLocalPartMatchingUserEntityName
 ```

 Ensure that you have set the signer correctly. It is also recommended that you restrict your target groups' security policy to only accept connections from that ALB.
@@ -39,11 +39,8 @@ auth:
        clientSecret: ${AUTH_BITBUCKET_CLIENT_SECRET}
        signIn:
          resolvers:
-            # typically you would pick one of these
-            - resolver: emailMatchingUserEntityProfileEmail
-            - resolver: emailLocalPartMatchingUserEntityName
+            # See https://backstage.io/docs/auth/bitbucket/provider#resolvers for more resolvers
            - resolver: userIdMatchingUserEntityAnnotation
-            - resolver: usernameMatchingUserEntityAnnotation
 ```

 The Bitbucket provider is a structure with two configuration keys:
@@ -41,8 +41,8 @@ auth:
      # This picks what sign in resolver(s) you want to use.
      signIn:
        resolvers:
+          # See https://backstage.io/docs/auth/cloudflare/provider#resolvers for more resolvers
          - resolver: emailMatchingUserEntityProfileEmail
-          - resolver: emailLocalPartMatchingUserEntityName
 ```

 This config section must be in place for the provider to load at all.
--- a/Show More
+++ b/Show More