Merge branch 'master' into gitlab-repo-owner-picker

Signed-off-by: asheen <sergeantnumnumz@gmail.com>
2026-05-12 10:48:17 -04:00
parent f6c794ae08 ab690eea30
commit fe6b868308
2167 changed files with 90409 additions and 18036 deletions
@@ -1,7 +0,0 @@
---
-'@backstage/backend-plugin-api': minor
-'@backstage/backend-defaults': patch
-'@backstage/backend-test-utils': patch
---
-
-Added support for typed `examples` on actions registered via the actions registry. Action authors can now provide examples with compile-time-checked `input` and `output` values that match their schema definitions.
@@ -0,0 +1,8 @@
+---
+'@backstage/core-components': patch
+'@backstage/ui': patch
+'@backstage/plugin-notifications': patch
+'@backstage/plugin-scaffolder-backend-module-github': patch
+---
+
+Added missing dependencies that were previously only available transitively.
@@ -0,0 +1,5 @@
+---
+'@backstage/eslint-plugin': minor
+---
+
+Added a new `no-self-package-imports` lint rule, enabled as `error` in the recommended config, that reports when a package imports itself by its own name instead of using a relative path. This pattern causes circular initialization errors in bundled ESM and with `jest.requireActual`.
@@ -0,0 +1,5 @@
+---
+'@backstage/errors': patch
+---
+
+Added explicit `name` property to `ServiceUnavailableError` for consistency with all other error classes, making it resilient to minification.
@@ -1,5 +0,0 @@
---
-'@backstage/app-defaults': patch
---
-
-Added `FetchMiddlewares.clarifyFailures()` to the default fetch API middleware stack.
@@ -0,0 +1,17 @@
+---
+'@backstage/plugin-app': patch
+---
+
+The `app/routes` redirect config now supports path parameter substitution in the `to` target. Named params (`:userId`) and splat params (`*`) captured by the `from` path are replaced in the `to` string before navigating, making it possible to express redirects like:
+
+```yaml
+app:
+  extensions:
+    - app/routes:
+        config:
+          redirects:
+            - from: /users/:userId
+              to: /profile/:userId
+            - from: /old-docs
+              to: /docs/*
+```
@@ -1,17 +0,0 @@
---
-'@backstage/plugin-app': patch
---
-
-Added support for configuring URL redirects on the `app/routes` extension. Redirects can be configured through `app-config` as an array of `{from, to}` path pairs, which will cause navigation to the `from` path to be redirected to the `to` path.
-
-For example:
-
-```yaml
-app:
-  extensions:
-    - app/routes:
-        config:
-          redirects:
-            - from: /old-path
-              to: /new-path
-```
@@ -0,0 +1,14 @@
+---
+'@backstage/integration-aws-node': minor
+---
+
+Added `webIdentityTokenFile` to `AwsIntegrationAccountConfig` and
+`AwsIntegrationDefaultAccountConfig`. When set along with a `roleName`,
+`DefaultAwsCredentialsManager` retrieves credentials by calling
+`AssumeRoleWithWebIdentity` (via `fromTokenFile`) using the file's
+contents as the web identity token. The file is re-read on each
+credential refresh.
+
+The validator rejects combining `webIdentityTokenFile` with
+`accessKeyId`/`secretAccessKey`, `profile`, or `externalId`, and
+rejects setting it without a `roleName`.
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-test-utils': patch
+---
+
+Added a new tracing service mock to be leveraged in tests
@@ -0,0 +1,6 @@
+---
+'@backstage/backend-plugin-api': patch
+'@backstage/backend-defaults': patch
+---
+
+Adds an alpha `TracingService` to provide a unified interface for emitting trace spans across Backstage plugins.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-backend': major
+---
+
+Add explicit memory management to SecureTemplater usage
@@ -0,0 +1,22 @@
+---
+'@backstage/plugin-scaffolder-react': minor
+'@backstage/plugin-scaffolder': minor
+---
+
+Added experimental BUI (Backstage UI) form theme for scaffolder forms. All default field extensions render BUI variants when enabled.
+
+**Extension config:**
+
+```yaml
+app:
+  extensions:
+    - sub-page:scaffolder/templates:
+        config:
+          enableBackstageUi: true
+```
+
+**JSX props:**
+
+```tsx
+<ScaffolderPage formProps={{ EXPERIMENTAL_theme: 'bui' }} />
+```
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': patch
+---
+
+Added `isPending` prop to Alert, Button, ButtonIcon, Table, and TableRoot as a replacement for the `loading` prop, aligning with React Aria naming conventions. The `loading` prop is now deprecated but still supported as an alias. CSS selectors now use `data-ispending` instead of `data-loading` for styling pending states; `data-loading` is still emitted for backward compatibility but will be removed alongside the `loading` prop.
+
+**Affected components:** Alert, Button, ButtonIcon, Table, TableRoot
@@ -0,0 +1,24 @@
+---
+'@backstage/ui': patch
+---
+
+Added a public `--bui-bg-inherit` CSS variable that resolves to the background
+color of the nearest enclosing bg provider (`Box`, `Flex`, `Grid`, `Card`,
+`Accordion`, or any element with a `data-bg` attribute), falling back to
+`--bui-bg-app`. Use it from CSS for sticky or fixed elements that need to match
+their surrounding surface without hardcoding a specific level.
+
+```css
+.searchBarContainer {
+  position: sticky;
+  top: 0;
+  background-color: var(--bui-bg-inherit);
+}
+```
+
+As part of this change, the `data-bg` painting rules previously duplicated in
+`Box`, `Flex`, `Grid`, `Accordion`, and `Card` have been centralized into a
+single source in `core.css`. Painting and component behavior are unchanged for
+all existing usages, with one minor expansion: any element with a `data-bg`
+attribute (including provider elements and any element that sets it directly)
+is now painted, not only `Box`/`Flex`/`Grid`/`Card`/`Accordion` elements.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog': patch
---
-
-Disabled the default page layout header for the catalog entity page in the new frontend system. The entity page already renders its own header through the `EntityHeader` extension, so the page layout header was redundant.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-backend': patch
---
-
-Improved catalog entity filter query performance by switching from `IN (subquery)` to `EXISTS (correlated subquery)` patterns. This enables PostgreSQL semi-join optimizations and fixes `NOT IN` NULL-semantics pitfalls by using `NOT EXISTS` instead.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-graph': patch
---
-
-Added `title` and `icon` to the new frontend system plugin definition.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-import': patch
---
-
-Added `title` and `icon` to the new frontend system plugin definition.
@@ -0,0 +1,9 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Improved the performance of the `catalog_entities_count` metric.
+
+The legacy Prometheus and OpenTelemetry observable gauges previously each ran their own copy of the per-kind count query against the `search` table on every metrics scrape. On large catalogs this could pile up faster than the queries completed, contending for buffers and stalling the database.
+
+The two callbacks now share a single query result with a short in-process TTL cache, and the underlying query reads from `final_entities` instead of `search`, avoiding the bitmap heap scans that dominated the previous form. The emitted labels and values are unchanged.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-backend': patch
---
-
-Reduced search table write churn during stitching by syncing only changed rows instead of doing a full delete and re-insert. On Postgres this uses a single writable CTE, on MySQL a temporary table merge with deadlock retry, and on SQLite the previous bulk replace.
@@ -1,24 +0,0 @@
---
-'@backstage/ui': minor
---
-
-**BREAKING**: The `Header` component's `tabs` prop now uses `HeaderNavTabItem[]` instead of `HeaderTab[]`. Tabs render as a `<nav>` element with links and optional dropdown menus instead of `role="tablist"`. A new `activeTabId` prop controls which tab is highlighted.
-
-**Migration:**
-
-```diff
- import { Header, type HeaderTab } from '@backstage/ui';
-+ import { Header, type HeaderNavTabItem } from '@backstage/ui';
-
-  // Tabs no longer support matchStrategy — active state is controlled via activeTabId
- const tabs: HeaderTab[] = [
-   { id: 'overview', label: 'Overview', href: '/overview', matchStrategy: 'prefix' },
-+ const tabs: HeaderNavTabItem[] = [
-+   { id: 'overview', label: 'Overview', href: '/overview' },
-  ];
-
- <Header title="My Page" tabs={tabs} />
-+ <Header title="My Page" tabs={tabs} activeTabId="overview" />
-```
-
-**Affected components:** Header
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-app': patch
+---
+
+Migrated React Aria imports from individual packages (`@react-aria/toast`, `@react-aria/button`, `@react-stately/toast`) to the monopackages (`react-aria`, `react-stately`).
@@ -0,0 +1,8 @@
+---
+'@backstage/ui': patch
+'@backstage/plugin-app': patch
+'@backstage/plugin-app-visualizer': patch
+'@backstage/plugin-notifications': patch
+---
+
+Tightened React Aria dependency version ranges from `^` to `~` to prevent unintended minor version upgrades.
@@ -1,5 +0,0 @@
---
-'@backstage/core-app-api': minor
---
-
-Added `FetchMiddlewares.clarifyFailures()` which replaces the uninformative "TypeError: Failed to fetch" with a message that includes the request method and URL.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-scaffolder-backend': minor
---
-
-Added a new `execute-template` actions registry action that executes a scaffolder template with provided input values and returns a task ID for tracking progress.
@@ -1,7 +0,0 @@
---
-'@backstage/ui': patch
---
-
-Added RangeSlider component for selecting numeric ranges.
-
-**Affected components:** RangeSlider
@@ -0,0 +1,5 @@
+---
+'@backstage/core-components': patch
+---
+
+Added stable DOM markers to the legacy Page and Header so adjacent layout components can coordinate spacing without relying on generated class names.
@@ -0,0 +1,5 @@
+---
+'@backstage/create-app': patch
+---
+
+Bumped create-app version.
@@ -0,0 +1,5 @@
+---
+'@backstage/create-app': patch
+---
+
+Bumped create-app version.
@@ -0,0 +1,5 @@
+---
+'@backstage/create-app': patch
+---
+
+Pinned the Jest version range in app templates to `~30.2.0` to prevent automatic upgrades to Jest 30.4.x, which requires Node.js v24.9+ and breaks tests on Node 22.
@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-app-api': patch
+---
+
+Internal cleanup of routing utilities.
@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-test-utils': patch
+---
+
+Removed internal `mockWithApiFactory` helper in favor of using `attachMockApiFactory` directly.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-scaffolder-react': patch
---
-
-build(deps): bump `flatted` from 3.4.1 to 3.4.2
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-notifications-backend-module-email': patch
---
-
-build(deps): bump `nodemailer` from 7.0.13 to 8.0.4
@@ -1,5 +0,0 @@
---
-'@backstage/cli-common': patch
---
-
-chore(deps): bump `undici` from 7.22.0 to 7.24.0
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-devtools': patch
+---
+
+Scheduled Tasks page now refreshes its table automatically after a task is triggered or cancelled, so the updated status is visible without reloading the browser.
@@ -1,5 +0,0 @@
---
-'@backstage/ui': minor
---
-
-**BREAKING**: Dropped support for React 17. The minimum supported React version is now 18.
@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-test-utils': patch
+---
+
+Added support for `ExternalRouteRef` in the `mountedRoutes` option of `renderInTestApp` and `renderTestApp`.
@@ -1,7 +0,0 @@
---
-'@backstage/ui': patch
---
-
-Made `SearchAutocomplete` background-aware. The input now adapts its background color based on its parent container's background level.
-
-**Affected components:** SearchAutocomplete
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog': patch
+---
+
+Fixed an issue where navigating to an unknown sub-path on an entity page (for example `/catalog/default/component/foo/blob`) would silently render the first available route. Unknown paths now show the standard not-found page instead.
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-app-api': minor
+---
+
+Added `ExtensionPointFactoryMiddleware` type and `createExtensionPointFactoryMiddleware` helper to reimplement extension point outputs at backend creation time.
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-defaults': patch
+---
+
+Exported `defaultServiceFactories` to allow use with `createSpecializedBackend` for advanced configuration like `extensionPointFactoryMiddleware`.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Simplified the entity facets aggregation from `COUNT(DISTINCT entity_id)` to `COUNT(*)`. The unique constraint on `(entity_id, key, value)` guarantees each entity appears at most once per search row group, making the `DISTINCT` unnecessary. This allows the database to use a simpler aggregation plan.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Improved the performance of the entity facets endpoint when filters are applied. The filtered entity set is now combined with the search table through an inner join rather than a `WHERE entity_id IN (subquery)`. Results are unchanged; on large catalogs the query planner is able to choose dramatically cheaper plans, with measured improvements ranging from roughly 1.2× on already-fast cases to 7× or more on high-cardinality facets.
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': patch
+---
+
+Added support for grouping options into sections in the Select component. You can now pass section objects with a `title` and a nested `options` array alongside (or instead of) regular options to render grouped dropdowns with section headers.
+
+**Affected components:** Select
@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-defaults': patch
+---
+
+Invalid feature flag declarations are now treated as warnings rather than errors, letting the app load normally.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-backend': minor
+---
+
+Updated the `list-scaffolder-tasks` action to support the new "status" filter parameter, allowing the action to return tasks matching a specific status.
@@ -0,0 +1,11 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Fixed several database migration `down` functions that were not properly reversible, causing the SQL report to show warnings:
+
+- `20241003170511_alter_target_in_locations.js`: both `up` and `down` now include `.notNullable()` when altering the `locations.target` column, preventing the `NOT NULL` constraint from being accidentally dropped when widening the column type from `varchar(255)` to `text`.
+- `20220116144621_remove_legacy.js`: the `down` function now properly recreates the three dropped legacy tables (`entities`, `entities_search`, `entities_relations`) with correct columns and indices.
+- `20210302150147_refresh_state.js`: the `down` function now drops dependent tables in the correct order (avoiding a FK constraint violation) and fixes a typo where the table was referred to as `references` instead of `refresh_state_references`.
+- `20201005122705_add_entity_full_name.js`: the `down` function now drops the `full_name` column from `entities` (not `entities_search`), and restores the `entities_unique_name` index with the correct column order `(kind, name, namespace)`.
+- `20200702153613_entities.js`: the `down` function now uses `table.integer('generation')` instead of `table.string('generation')`, restoring the correct column type.
@@ -1,7 +0,0 @@
---
-'@backstage/ui': patch
---
-
-Fixed `Avatar` becoming elliptical in flex layouts by preventing it from shrinking.
-
-**Affected components:** Avatar
@@ -1,5 +0,0 @@
---
-'@backstage/backend-defaults': patch
---
-
-Fixed `AwsS3UrlReader` failing to read files from S3 buckets configured with custom endpoint hosts. When an integration was configured with a specific endpoint like `https://bucket-1.s3.eu-central-1.amazonaws.com`, the URL parser incorrectly fell through to the non-AWS code path, always defaulting the region to `us-east-1` instead of extracting it from the hostname.
@@ -1,7 +0,0 @@
---
-'@backstage/ui': patch
---
-
-Fixed relative `href` resolution for BUI link components. Relative paths like `../other` are now correctly turned into absolute paths before reaching the React Aria layer, ensuring client-side navigation goes to the right place.
-
-**Affected components:** ButtonLink, Card, CellProfile, CellText, Link, ListRow, MenuItem, MenuListBoxItem, Row, SearchAutocompleteItem, Tab, Tag
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': patch
+---
+
+Disabled `Card` scroll shadow in browsers that don't support `animation-timeline: scroll()`. Prevents the shadow from being always visible over the `CardBody` when there's nothing to scroll or the body is not scrolled.
+
+**Affected components:** Card
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': patch
+---
+
+Fixed `CardBody` showing an unwanted scrollbar when constrained below the scroll shadow height.
+
+**Affected components:** Card
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-react': patch
---
-
-Fixed a UI flicker in the catalog entity list where changing a filter would briefly flash stale data before showing the new results.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Added missing description to the `type` parameter on the `unregister-entity` MCP action.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-backend': patch
---
-
-Fixed a deadlock in the catalog processing loop that occurred when running multiple replicas. The `getProcessableEntities` method used `SELECT ... FOR UPDATE SKIP LOCKED` to prevent concurrent processors from claiming the same rows, but the call was not wrapped in a transaction, so the row locks were released before the subsequent `UPDATE` executed. This allowed multiple replicas to select and update overlapping rows, causing PostgreSQL deadlock errors (code 40P01).
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog': patch
---
-
-Fixed the catalog table briefly showing an empty loading state when changing filters. The table now keeps displaying stale results until new data arrives.
@@ -0,0 +1,10 @@
+---
+'@backstage/frontend-plugin-api': patch
+'@backstage/catalog-model': patch
+'@backstage/core-plugin-api': patch
+'@backstage/plugin-catalog-node': patch
+'@backstage/plugin-kubernetes-common': patch
+'@backstage/plugin-kubernetes-node': patch
+---
+
+Removed a handful of internal imports that referenced the package by its own name. Value imports were switched to relative paths, and type-only imports to `import type`. These self-referential imports could trigger circular initialization errors in bundled ESM and when the package was loaded via `jest.requireActual` — most visibly `Cannot access '_AppRootElementBlueprintesm' before initialization` from `@backstage/frontend-plugin-api`. There are no user-facing API changes.
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': patch
+---
+
+Fixed dark mode background for Dialog component by correcting the theme attribute selector from `data-theme` to `data-theme-mode`.
+
+**Affected components:** Dialog
@@ -0,0 +1,5 @@
+---
+'@backstage/cli-module-build': patch
+---
+
+Fixed config path resolution for the embedded-postgres database client detection to resolve paths relative to the target package directory rather than the workspace root.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-catalog-react': patch
---
-
-Fixed `EntityInfoCard` header overflowing on narrow screens.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-catalog-backend': patch
+---
+
+Fixed a performance regression in the `/entity-facets` endpoint when filters or permission conditions are applied, by routing the EXISTS-based filter through `final_entities` instead of correlating against the much larger `search` table.
@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-test-utils': patch
+---
+
+Added explicit type annotations to `.map()` callback parameters in `renderInTestApp` to avoid implicit `any` errors with newer TypeScript versions.
@@ -0,0 +1,5 @@
+---
+'@backstage/cli-node': patch
+---
+
+Fixed a bug in `PackageGraph.listChangedPackages` where removed dependencies were not detected during lockfile analysis. The dependency graph from the previous lockfile was not being merged, causing transitive dependency removals to be missed.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-org': patch
---
-
-Fixed `GroupProfileCard` and `UserProfileCard` content overflowing on narrow screens.
@@ -0,0 +1,5 @@
+---
+'@backstage/backend-defaults': patch
+---
+
+Fixed scheduler `sleep` firing immediately for durations longer than ~24.8 days, caused by Node.js `setTimeout` overflowing its 32-bit millisecond limit.
@@ -1,5 +0,0 @@
---
-'@backstage/create-app': patch
---
-
-Various fixes for the `create-app` template: reorganizing sidebar items, removing redundant config and code, and adding a documentation example.
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': patch
+---
+
+Fixed an issue where the active tab indicator would disappear shortly after page load for uncontrolled Tabs.
+
+**Affected components:** Tabs
@@ -1,5 +0,0 @@
---
-'@backstage/frontend-plugin-api': patch
---
-
-Fixed `FlattenedMessages` type to avoid excessive type instantiation depth in TypeScript 6 when using `createTranslationRef` with the `translations` option.
@@ -0,0 +1,8 @@
+---
+'@backstage/plugin-catalog-backend-module-gitlab': patch
+'@backstage/plugin-kubernetes-backend': patch
+'@backstage/plugin-scaffolder-backend': patch
+'@backstage/plugin-scaffolder': patch
+---
+
+Fixed spelling mistakes in internal code
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-home': patch
+---
+
+Fixed widgets not being movable or resizable after saved edits. Previously, entering edit mode didn't restore `isDraggable` and `isResizable`.
@@ -1,26 +0,0 @@
---
-'@backstage/plugin-auth-node': minor
---
-
-**BREAKING**: Refactored `SignInResolverFactoryOptions` to use a schema-first generic pattern, following Zod's [recommended approach](https://zod.dev/library-authors?id=how-to-accept-user-defined-schemas#how-to-accept-user-defined-schemas) for writing generic functions. The type parameters changed from `<TAuthResult, TOptionsOutput, TOptionsInput>` to `<TAuthResult, TSchema extends ZodType>`.
-
-This fixes "Type instantiation is excessively deep and possibly infinite" errors that occurred when the Zod version in a user's project did not align with the one in Backstage core.
-
-If you use `createSignInResolverFactory` without explicit type parameters (the typical usage), no changes are needed:
-
-```ts
-// This usage is unchanged
-createSignInResolverFactory({
-  optionsSchema: z.object({ domain: z.string() }).optional(),
-  create(options = {}) {
-    /* ... */
-  },
-});
-```
-
-If you reference `SignInResolverFactoryOptions` with explicit type parameters, update as follows:
-
-```diff
- SignInResolverFactoryOptions<MyAuthResult, MyOutput, MyInput>
-+ SignInResolverFactoryOptions<MyAuthResult, typeof mySchema>
-```
@@ -1,5 +0,0 @@
---
-'@backstage/frontend-plugin-api': patch
---
-
-Refactored the internal `createSchemaFromZod` helper to use a schema-first generic pattern, replacing the `ZodSchema<TOutput, ZodTypeDef, TInput>` constraint with `TSchema extends ZodType`. This avoids "excessively deep" type inference errors when multiple Zod copies are resolved.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-search-backend': patch
+---
+
+Added action for search backend to query search engine using the actions registry
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-techdocs': patch
+---
+
+Made the TechDocs sidebar positioning at tablet breakpoints configurable via CSS custom properties, allowing apps with custom sidebar widths to override the defaults. The available properties are `--techdocs-sidebar-closed-offset-pinned`, `--techdocs-sidebar-closed-offset-collapsed`, and `--techdocs-sidebar-open-translate`.
@@ -1,5 +0,0 @@
---
-'@backstage/frontend-app-api': patch
---
-
-Wrapped extension permission authorization in a try/catch to surface errors as `ForwardedError` with a clear message.
@@ -0,0 +1,5 @@
+---
+'@techdocs/cli': minor
+---
+
+Add support for disabling external font downloads via techdocs-cli `techdocs-cli generate --disableExternalFonts`, useful for air-gapped Backstage instances.
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': minor
+---
+
+Add support for flex item props (`grow`, `shrink`, and `basis`) to `Box`, `Card`, `Grid`, and `Flex` itself.
+
+**Affected components:** Box, Card, Grid, Flex
@@ -1,5 +0,0 @@
---
-'@backstage/cli-module-test-jest': patch
---
-
-Minor error message update
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-techdocs': patch
---
-
-Migrated the TechDocs alpha plugin pages to use BUI components. The index page and reader page now use BUI `Header` and `Container` instead of legacy `Page`/`Content`/`ContentHeader` wrappers. Added a `SupportButton` as a plugin header action. Changed plugin title to "Documentation" and icon to `RiArticleLine`.
@@ -0,0 +1,8 @@
+---
+'@backstage/integration': patch
+---
+
+Fixed two issues in the GitLab integration's fetch behavior:
+
+- The internal fetch wrapper was passing `mode: 'same-origin'` on every request. This had no practical effect server-side, but would have caused cross-origin requests to be rejected when the integration is used from a browser. Requests now use the default fetch mode and work correctly in both browser and Node environments.
+- When retries are configured, transient network errors (such as dropped connections or DNS hiccups) are now retried using the same `maxRetries` and exponential delay as retryable HTTP status codes. Previously, a thrown fetch error would propagate immediately on the first failure regardless of the retry configuration. Caller-initiated aborts continue to surface immediately without being retried.
@@ -0,0 +1,5 @@
+---
+'@backstage/ui': patch
+---
+
+Updated React Aria dependencies to v1.17.0 and migrated imports from individual `@react-aria/*` and `@react-stately/*` packages to the monopackages (`react-aria`, `react-stately`). This fixes a type resolution error for `@react-types/table` that occurred in new app installations.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-node': patch
+---
+
+Added optional `status` filter to `ScaffolderService.listTasks`, allowing callers to retrieve tasks matching a specific status.
@@ -1,7 +0,0 @@
---
-'@backstage/ui': patch
---
-
-Added `aria-hidden` to the `PluginHeader` icon to prevent screen readers from announcing decorative plugin icons.
-
-**Affected components:** PluginHeader
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': patch
+---
+
+Added `description`, `tags`, and `metadata` props to the `Header` component. The `description` prop accepts a markdown string with support for inline links. The `tags` prop renders a row of text or link items above the title. The `metadata` prop renders key-value pairs below the description. The `breadcrumbs` prop has been deprecated and will be removed in a future release.
+
+**Affected components:** Header
@@ -0,0 +1,9 @@
+---
+'@backstage/ui': minor
+---
+
+Added a `sticky` prop to the `Header` component. When `true`, the title-and-actions bar stays fixed to the top of its scroll container while the rest of the header (tags, description, metadata) scrolls away. The sticky bar background color automatically matches the container surface using the bg-consumer system.
+
+**BREAKING**: Removed the main header class from the `Header` component. Custom styles that target this class should be updated to target the component sections that remain.
+
+**Affected components:** Header
@@ -1,7 +0,0 @@
---
-'@backstage/ui': patch
---
-
-Added support for disabling pagination in `useTable` complete mode by setting `paginationOptions: { type: 'none' }`. This skips data slicing and produces `pagination: { type: 'none' }` in `tableProps`, removing the need for consumers to manually override the pagination prop on `Table`. Also fixed complete mode not reacting to dynamic changes in `paginationOptions.pageSize`.
-
-**Affected components:** `useTable`
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': patch
+---
+
+Fixed Table with row selection creating phantom scroll height on ancestor elements by establishing a containing block for visually-hidden checkbox inputs.
+
+**Affected components:** Table, TableRoot
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-app': patch
---
-
-Updated the `PageLayout` swap to pass a clickable `titleLink` on the `PluginHeader`, resolved from the plugin's root route ref.
@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-app-api': patch
+---
+
+Invalid feature flag declarations no longer crash the app during bootstrap. They are now reported through the error collector and skipped, letting the rest of the app load normally.
@@ -0,0 +1,6 @@
+---
+'@backstage/plugin-techdocs-backend': minor
+'@backstage/plugin-techdocs-node': minor
+---
+
+Add support for disabling external font downloads via app-config option `techdocs.generator.mkdocs.disableExternalFonts`, useful for air-gapped Backstage instances.
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-kubernetes': patch
---
-
-Added `title` and `icon` to the new frontend system plugin definition.
@@ -1,5 +0,0 @@
---
-'@backstage/core-components': patch
---
-
-Resolved DOM nesting warning in OAuthRequestDialog by rendering secondary text as block-level spans.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-scaffolder-backend': minor
+---
+
+Added `always()` and `failure()` status check functions for scaffolder steps. These functions can be used in the if field of a step to control execution after failures. `always()` ensures a step runs regardless of previous step outcomes, while `failure()` runs a step only when a previous step has failed.
@@ -0,0 +1,17 @@
+---
+'@backstage/ui': patch
+'@backstage/plugin-api-docs': patch
+'@backstage/plugin-app': patch
+'@backstage/plugin-app-visualizer': patch
+'@backstage/plugin-auth': patch
+'@backstage/plugin-catalog-graph': patch
+'@backstage/plugin-catalog-import': patch
+'@backstage/plugin-catalog-react': patch
+'@backstage/plugin-notifications': patch
+'@backstage/plugin-org': patch
+'@backstage/plugin-scaffolder': patch
+'@backstage/plugin-signals': patch
+'@backstage/plugin-techdocs': patch
+---
+
+Limited `@remixicon/react` dependency to versions below 4.9.0 due to a license change in that release.
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': patch
+---
+
+Fix `Card href=...` not showing a focus indicator on keyboard navigation. `Link` now composes `useFocusRing`, emits `data-focus-visible`, and renders a `--bui-ring` outline when keyboard-focused. The Card's existing focus-ring CSS matches when the trigger is focused.
+
+_Affected components_: Card, Link
@@ -1,5 +0,0 @@
---
-'@backstage/plugin-auth-backend': patch
---
-
-Fixed CIMD redirect URI matching to allow any port for localhost addresses per RFC 8252 Section 7.3. Native CLI clients use ephemeral ports for OAuth callbacks, which are now accepted when the registered redirect URI uses a localhost address.
@@ -1,5 +0,0 @@
---
-'@backstage/frontend-plugin-api': patch
---
-
-Added `titleLink` prop to `PageLayoutProps` so the plugin header title can link back to the plugin root.
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-kubernetes-react': patch
+---
+
+Added optional clustersCacheTtlMs option to KubernetesBackendClient that caches getClusters() responses for the specified duration, avoiding repeated /clusters requests when multiple proxy calls resolve cluster auth in quick succession.
@@ -0,0 +1,7 @@
+---
+'@backstage/ui': patch
+---
+
+Added invalid-state styling for Checkbox and corresponding Storybook variants for verification.
+
+**Affected components:** Checkbox, CheckboxGroup
--- a/Show More
+++ b/Show More