paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 39 Packages Projects Releases Wiki Activity
74,233 Commits 1 Branch 0 Tags
master
Commit Graph

13075 Commits

Author SHA1 Message Date
Ben Lambert 5af48e77af feat(scaffolder): Migrate scaffolder to use permissions registry (#33740) 
* feat(scaffolder-node): add PermissionResourceRef definitions for scaffolder resource types

Signed-off-by: benjdlambert <ben@blam.sh>

* feat(scaffolder-backend): migrate to PermissionsRegistryService with fallback

Signed-off-by: benjdlambert <ben@blam.sh>

* feat(scaffolder-backend): wire permissionsRegistry in ScaffolderPlugin

Signed-off-by: benjdlambert <ben@blam.sh>

* test(scaffolder-backend): verify permissions metadata endpoint returns all scaffolder permissions

Signed-off-by: benjdlambert <ben@blam.sh>

* chore: add changesets for scaffolder permissions registry migration

Signed-off-by: benjdlambert <ben@blam.sh>

* chore: format scaffolder-node alpha exports

Signed-off-by: benjdlambert <ben@blam.sh>

* fix: correct scaffolder-node changeset to patch for sub-1.0 package

Signed-off-by: benjdlambert <ben@blam.sh>

* refactor(scaffolder-backend): simplify by removing fallback path and making permissionsRegistry required

Signed-off-by: benjdlambert <ben@blam.sh>

* chore: update scaffolder-node API report

Signed-off-by: benjdlambert <ben@blam.sh>

---------

Signed-off-by: benjdlambert <ben@blam.sh>
 2026-04-06 19:10:43 +02:00
Fredrik Adelöw dd48192606 Merge pull request #33410 from lokeshkaki/feat/bitbucket-cloud-scm-events 
feat(catalog-backend-module-bitbucket-cloud): add Bitbucket Cloud SCM event translation and bridge wiring
 2026-04-06 11:15:13 +02:00
Kurt King ea0d31a1bc Merge branch 'master' of https://github.com/backstage/backstage into migrate-google-pubsub-alpha-metrics 2026-04-04 13:33:39 -06:00
Fredrik Adelöw 98d9a75dc2 Merge pull request #33632 from wpessers/feat/github-catalog-backend-extensiont/add-retry-to-github-client 
feat(catalog): add retries to octokit client
 2026-04-04 17:20:22 +02:00
Patrik Oldsberg 205c8c8dc1 Merge pull request #33714 from backstage/rugvip/dev-db 
cli: experimental embedded-postgres support for local dev
 2026-04-03 21:07:15 +02:00
Erik Miller f399a7acab feat(notifications-slack): add scope-based message update support 
When a Backstage notification is re-sent with the same scope, the
notifications backend updates the existing DB record and sets
notification.updated. Previously, the SlackNotificationProcessor always
called chat.postMessage(), creating duplicate Slack messages.

This adds database-backed scope-based update support:

- New slack_message_timestamps table to persist Slack message ts values
  keyed by (scope, channel)
- After each chat.postMessage(), store the response ts in the database
- When postProcess receives a notification with updated set and a
  matching stored ts, use chat.update() instead of chat.postMessage()
- Scope context is passed as parameters through the call chain to avoid
  race conditions with concurrent postProcess calls
- Scheduled daily cleanup of old timestamp records (24h retention)
- New messagesUpdated metrics counter for observability
- Graceful degradation when no database is provided
- Explicitly picks only supported fields for chat.update calls

Signed-off-by: Erik Miller <erik.miller@gusto.com>
 2026-04-03 09:03:18 -07:00
renovate[bot] e32a4cabb4 chore(deps): update dependency ws to v8.20.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-03 09:03:17 -07:00
renovate[bot] e92809bc90 chore(deps): update dependency react-hook-form to v7.72.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-03 09:03:17 -07:00
Kurt King eacf362bd8 Migrate to MetricsService 
Signed-off-by: Kurt King <kurtaking@gmail.com>
 2026-04-02 23:47:59 -06:00
Kurt King b37a79ef5b Merge branch 'master' of https://github.com/backstage/backstage into migrate-scaffolder-to-metrics-service 2026-04-02 22:47:04 -06:00
Fredrik Adelöw b8158ed1bf Merge pull request #33726 from backstage/renovate/npm-lodash-vulnerability 2026-04-03 06:31:28 +02:00
Roland Fuszenecker c69e03ce3d feat(backend-defaults): add AWS RDS IAM authentication support for PostgreSQL 
Signed-off-by: Roland Fuszenecker <roland.fuszenecker@seon.io>
 2026-04-02 15:34:02 +02:00
renovate[bot] 4acb606f21 chore(deps): update dependency lodash to v4.18.1 [security] 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-02 10:39:07 +00:00
dependabot[bot] 6dc116caf1 chore(deps): Bump lodash-es from 4.17.23 to 4.18.1 
Bumps [lodash-es](https://github.com/lodash/lodash) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1)

---
updated-dependencies:
- dependency-name: lodash-es
  dependency-version: 4.18.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-02 07:45:22 +00:00
Patrik Oldsberg d80e59ce9e cli: bump embedded-postgres to 18.3.0-beta.16 
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
Made-with: Cursor
 2026-04-01 21:26:28 +02:00
Patrik Oldsberg 7bf4814173 cli: make embedded-postgres an optional peer dependency 
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
Made-with: Cursor
 2026-04-01 21:22:14 +02:00
wpessers cca9fc2bb6 feat(catalog): add retries to octokit client 
Signed-off-by: wpessers <warre.pessers@gmail.com>
 2026-04-01 14:23:55 +02:00
Patrik Oldsberg f14df56222 cli: experimental support for using embedded-postgres as dev DB 
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
Made-with: Cursor
 2026-04-01 12:57:49 +02:00
Hellgren Heikki 19a2a038aa feat(notifications): migrate to backstage ui 
migrated notifications plugin to use backstage ui instead
material ui.

Signed-off-by: Hellgren Heikki <heikki.hellgren@op.fi>
 2026-04-01 08:41:59 +03:00
renovate[bot] 93466ca419 chore(deps): update dependency axios to v1.14.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-01 01:10:56 +00:00
renovate[bot] a405d69bdd chore(deps): update dependency @modelcontextprotocol/sdk to v1.28.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-04-01 00:07:43 +00:00
backstage-goalie[bot] 2246288871 Merge pull request #33702 from backstage/renovate/aws-sdk-js-v3-monorepo 
chore(deps): update aws-sdk-js-v3 monorepo
 2026-04-01 00:01:51 +00:00
Fredrik Adelöw 8a2a81fa1e Merge pull request #33687 from backstage/freben/bump-glob-rollup 
Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities
 2026-03-31 16:06:22 +02:00
renovate[bot] 0cbba8a528 chore(deps): update aws-sdk-js-v3 monorepo 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-31 14:06:03 +00:00
Fredrik Adelöw 739b655063 Merge pull request #33250 from backstage/renovate/use-sync-external-store-1.x 
chore(deps): update dependency @types/use-sync-external-store to v1
 2026-03-31 15:58:16 +02:00
Fredrik Adelöw c3b4782b97 Merge pull request #33361 from lokeshkaki/feat/azure-scm-events 
feat(catalog-backend-module-azure): add Azure DevOps SCM event translation layer
 2026-03-31 15:03:26 +02:00
Fredrik Adelöw c5958fc175 Merge pull request #33362 from lokeshkaki/feat/gitlab-scm-events 
feat(catalog-backend-module-gitlab): add GitLab SCM event translation layer for catalog reprocessing
 2026-03-31 14:59:18 +02:00
Fredrik Adelöw 2e5c5f85b2 Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities 
Addresses the high severity rollup path traversal vulnerability
(GHSA-mw96-cpmx-2vgc) and the glob security advisory by upgrading
all instances across the monorepo. Updates code that used the legacy
callback-based glob API to use the modern promise/sync API.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
 2026-03-30 23:13:08 +02:00
Fredrik Adelöw 0419acede2 Revert "Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities" 
This reverts commit 6d76b1729b.

Signed-off-by: Fredrik Adelöw <freben@spotify.com>
 2026-03-30 23:11:17 +02:00
Fredrik Adelöw 6d76b1729b Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities 
Addresses the high severity rollup path traversal vulnerability
(GHSA-mw96-cpmx-2vgc) and the glob security advisory by upgrading
all instances across the monorepo. Updates code that used the legacy
callback-based glob API to use the modern promise/sync API.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
 2026-03-30 23:10:09 +02:00
Fredrik Adelöw d06ba3a58e Revert "Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities" 
This reverts commit 91b359ee5f.

Signed-off-by: Fredrik Adelöw <freben@spotify.com>
 2026-03-30 23:05:11 +02:00
Fredrik Adelöw 91b359ee5f Bump glob to v13 and rollup to v4.59+ to fix security vulnerabilities 
Addresses the high severity rollup path traversal vulnerability
(GHSA-mw96-cpmx-2vgc) and the glob security advisory by upgrading
all instances across the monorepo. Updates code that used the legacy
callback-based glob API to use the modern promise/sync API.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
 2026-03-30 23:02:37 +02:00
renovate[bot] 8ba5304b3f chore(deps): update dependency zod-to-json-schema to v3.25.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-30 20:55:51 +00:00
renovate[bot] 629351c6ad chore(deps): update dependency undici to v7.24.6 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-30 19:56:55 +00:00
renovate[bot] 722bcc3000 chore(deps): update dependency mini-css-extract-plugin to v2.10.2 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-30 18:37:07 +00:00
Patrik Oldsberg cd0a7b58cc Merge pull request #33581 from backstage/rugvip/dual-frontend-system-support 
plugins: add title and icon to NFS plugin definitions
 2026-03-30 17:26:05 +02:00
renovate[bot] c368cf3db7 chore(deps): update dependency @types/use-sync-external-store to v1 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-30 10:43:01 +00:00
Charles de Dreuille dc009ed8a9 Improve BUI manifest 
Signed-off-by: Charles de Dreuille <charles.dedreuille@gmail.com>
 2026-03-30 11:02:31 +01:00
Patrik Oldsberg 3c0b453d7e Revert NFS page variants, keep only title and icon additions 
Roll back the NFS page component changes (BuiHeader, headerVariant,
NfsCatalogGraphPage, NfsDefaultImportPage) from catalog-graph and
catalog-import plugins. Only the title and icon metadata additions to the
new frontend system plugin definitions are retained.

For the kubernetes plugin, replace the generic RiShipLine icon with a
proper Kubernetes helm wheel SVG icon from Simple Icons.

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
Made-with: Cursor
 2026-03-30 00:19:41 +02:00
renovate[bot] 299e189a3f chore(deps): update dependency path-to-regexp to v8.4.0 [security] 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-28 11:02:42 +00:00
Fredrik Adelöw 2905c5931d Remove unused jest-when dev dependency from scaffolder-backend-module-rails 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Fredrik Adelöw <freben@spotify.com>
 2026-03-28 11:16:00 +01:00
renovate[bot] 36949b832b chore(deps): update dependency ws to v8.20.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-27 20:32:00 +00:00
backstage-goalie[bot] 96882bbfb1 Merge pull request #33638 from backstage/renovate/react-hook-form-7.x-lockfile 
chore(deps): update dependency react-hook-form to v7.72.0
 2026-03-27 16:06:41 +00:00
renovate[bot] 67139fc330 chore(deps): update dependency react-hook-form to v7.72.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-27 15:17:09 +00:00
renovate[bot] a850cd02c3 chore(deps): update dependency @openapitools/openapi-generator-cli to v2.31.0 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
 2026-03-27 15:15:04 +00:00
backstage-goalie[bot] 805253de00 Merge pull request #33633 from backstage/renovate/faker-js-faker-10.x-lockfile 
chore(deps): update dependency @faker-js/faker to v10.4.0
 2026-03-27 15:04:28 +00:00
backstage-goalie[bot] cfbac0d386 Merge pull request #33631 from backstage/renovate/aws-sdk-js-v3-monorepo 
chore(deps): update aws-sdk-js-v3 monorepo
 2026-03-27 15:04:22 +00:00
backstage-goalie[bot] 6ffd191f4a Merge pull request #33622 from backstage/renovate/typedoc-0.x-lockfile 
chore(deps): update dependency typedoc to v0.28.18
 2026-03-27 15:04:15 +00:00
backstage-goalie[bot] a964bccd18 Merge pull request #33568 from backstage/renovate/rollup-plugin-dts-6.x-lockfile 
chore(deps): update dependency rollup-plugin-dts to v6.4.1
 2026-03-27 15:04:07 +00:00
dependabot[bot] 58510dee5c build(deps): bump brace-expansion from 1.1.12 to 1.1.13 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.12 to 1.1.13.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.13)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-03-27 14:30:59 +00:00