Skip to content

fix(deps): update backstage monorepo - #165

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/backstage-monorepo
Open

fix(deps): update backstage monorepo#165
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/backstage-monorepo

Conversation

@renovate

@renovate renovate Bot commented Aug 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@backstage/backend-defaults (source) ^0.17.5 → ^0.18.0 age confidence
@backstage/backend-plugin-api (source) 1.9.3 → 1.10.1 age confidence
@backstage/backend-test-utils (source) 1.11.5 → 1.11.7 age confidence
@backstage/catalog-client (source) 1.16.1 → 1.16.2 age confidence
@backstage/catalog-model (source) 1.9.0 → 1.10.1 age confidence
@backstage/cli (source) 0.36.4 → 0.36.6 age confidence
@backstage/cli-defaults (source) 0.1.4 → 0.1.6 age confidence
@backstage/config (source) 1.3.8 → 1.3.9 age confidence
@backstage/core-components (source) 0.18.12 → 0.18.14 age confidence
@backstage/core-plugin-api (source) 1.12.8 → 1.12.10 age confidence
@backstage/frontend-defaults (source) 0.5.4 → 0.5.6 age confidence
@backstage/frontend-plugin-api (source) ^0.17.3 → ^0.18.0 age confidence
@backstage/plugin-app-backend (source) 0.5.16 → 0.5.18 age confidence
@backstage/plugin-app-react (source) 0.2.5 → 0.2.7 age confidence
@backstage/plugin-auth-backend (source) ^0.29.2 → ^0.30.0 age confidence
@backstage/plugin-auth-backend-module-guest-provider (source) 0.2.21 → 0.2.23 age confidence
@backstage/plugin-auth-node (source) 0.7.3 → 0.7.6 age confidence
@backstage/plugin-catalog (source) 2.0.7 → 2.0.9 age confidence
@backstage/plugin-catalog-backend (source) 3.8.1 → 3.9.1 age confidence
@backstage/plugin-catalog-backend-module-scaffolder-entity-model (source) 0.2.22 → 0.2.24 age confidence
@backstage/plugin-catalog-common (source) 1.1.10 → 1.2.0 age confidence
@backstage/plugin-catalog-node (source) 2.2.3 → 2.2.5 age confidence
@backstage/plugin-catalog-react (source) 3.2.0 → 3.2.3 age confidence
@backstage/plugin-notifications (source) ^0.5.19 → ^0.6.0 age confidence
@backstage/plugin-notifications-backend (source) 0.6.7 → 0.6.9 age confidence
@backstage/plugin-notifications-node (source) 0.2.28 → 0.2.30 age confidence
@backstage/plugin-permission-backend (source) 0.7.14 → 0.7.16 age confidence
@backstage/plugin-permission-backend-module-allow-all-policy (source) 0.2.21 → 0.2.23 age confidence
@backstage/plugin-permission-common (source) 0.9.9 → 0.9.11 age confidence
@backstage/plugin-permission-node (source) 0.11.2 → 0.11.4 age confidence
@backstage/plugin-search (source) 1.7.6 → 1.7.8 age confidence
@backstage/plugin-search-backend (source) 2.1.4 → 2.1.7 age confidence
@backstage/plugin-search-backend-module-catalog (source) 0.3.17 → 0.3.19 age confidence
@backstage/plugin-search-backend-node (source) 1.4.6 → 1.4.8 age confidence
@backstage/plugin-search-common (source) 1.2.24 → 1.2.25 age confidence
@backstage/plugin-search-react (source) 1.11.6 → 1.11.8 age confidence
@backstage/plugin-signals (source) ^0.0.33 → ^0.0.35 age confidence
@backstage/plugin-signals-backend (source) 0.3.17 → 0.3.19 age confidence
@backstage/plugin-user-settings (source) 0.9.5 → 0.9.7 age confidence
@backstage/test-utils (source) 1.7.20 → 1.7.22 age confidence
@backstage/ui (source) ^0.17.0 → ^0.18.0 age confidence

Release Notes

backstage/backstage (@​backstage/backend-defaults)

v0.18.0

Compare Source

Minor Changes
  • 2e07985: Add schemaPrefix configuration for pluginDivisionMode: schema. Allows prefixing PostgreSQL schema names to avoid conflicts with existing schemas.
Patch Changes
  • fe6ace6: Fixed AwsS3UrlReader and AwsCodeCommitUrlReader to resolve account-specific AWS credentials when an assume role ARN is configured, enabling support for webIdentityTokenFile and accountDefaults in environments without default AWS credentials.
  • 45d760b: Improve action handling consistency.
  • 8d71644: Reduced PostgreSQL connection churn during backend startup when many plugins initialize databases or schemas.
  • 416be1b: Updated Harness URL reading to validate cross-origin redirect destinations
    against backend.reading.allow.
  • c59472e: Plugin route registration now rejects paths that differ only by letter casing,
    and HTTP credentials are resolved independently for each plugin service instance.
  • 5aac521: Improved service credential handling during plugin-to-plugin delegation.
  • 61449ae: Reduced PostgreSQL startup connections when multiple plugins share a database by reusing the database existence check.
  • 55f30b8: Reduced scheduler database polling overhead by batching readiness checks for global tasks registered by each plugin into one query per poll cycle on each backend instance.
  • 8b3c83e: Improved input validation and path handling for cloud storage URL readers.
  • 61d97c0: Improved input validation for cloud storage URL readers.
  • e895def: Fixed handling of GitLab URLs for instances configured with a relative base path.
  • f6f339e: Fixed redundant signing-key requests when concurrently authenticating the first incoming requests from a plugin. Concurrent requests now share the same key cache, including when retrying after an initial fetch failure.
  • e13e278: Updated URL reader allow list matching so configured paths match either the exact path or paths below it at a segment boundary.
  • e3b587c: Improve authentication reliability during signing key rotation by performing budgeted JWKS reloads when a newly published key is requested during the remote key set cooldown.
  • Updated dependencies

v0.17.8

Compare Source

v0.17.7

Compare Source

Patch Changes
backstage/backstage (@​backstage/backend-plugin-api)

v1.10.1

Compare Source

Patch Changes

v1.10.0

Compare Source

Minor Changes
  • 74d8cbf: Added coreServices.rootSystemMetadata, a new stable public service for reading metadata about the running Backstage system, including a list of installed plugins. Previously only available as an alpha API, it is now part of the standard coreServices namespace.
Patch Changes
backstage/backstage (@​backstage/backend-test-utils)

v1.11.7

Compare Source

Patch Changes

v1.11.6

Compare Source

Patch Changes
backstage/backstage (@​backstage/catalog-client)

v1.16.2

Compare Source

Patch Changes
backstage/backstage (@​backstage/catalog-model)

v1.10.1

Compare Source

Patch Changes
  • 736d84e: Use locale-insensitive Unicode casing for consistent string handling across environments.
  • 61809fe: Allow independently registered catalog model sources to share identical layers, while reporting a clear error for conflicting layers with the same ID.
  • 78656f8: Fixed several issues in the alpha catalog model layer system. Schema updates now preserve sibling field validation when changing a property named type, support deleting inherited fields and constraints, and retain literal JSON values in const and default. Kind schemas without an explicit root type retain their fields, and invalid combined schemas are rejected during model compilation. Empty kind descriptions and reverse relation titles are now applied correctly.

v1.10.0

Compare Source

Minor Changes
  • ad18743: Added marketplace spec type to the @alpha AiResource kind, representing a curated registry of plugins for discovery and distribution. Marketplaces reference their contained plugins via spec.plugins entity references, generating hasPart catalog relations.
  • f501302: Added plugin spec type to the @alpha AiResource kind, representing a packaged collection of skills distributed as a unit. Plugins reference their contained skills via spec.skills entity references, generating hasPart catalog relations.
  • 0b9b3bf: Added optional allowedTools, license, and compatibility fields to the @alpha AiResource skill spec, aligned with the agentskills.io specification.
Patch Changes
  • 9a6955c: Corrected catalog relation generation to honor declared kind combinations, and completed reverse relations for existing AiResource fields.
backstage/backstage (@​backstage/cli)

v0.36.6

Compare Source

Patch Changes

v0.36.5

Compare Source

Patch Changes
backstage/backstage (@​backstage/cli-defaults)

v0.1.6

Compare Source

Patch Changes

v0.1.5

Compare Source

Patch Changes
backstage/backstage (@​backstage/config)

v1.3.9

Compare Source

Patch Changes
  • 1134d4b: Fixed reading a duration from configuration so that an all-zero ISO 8601 duration (such as PT0S) now yields a consistent zero value instead of an empty result.
backstage/backstage (@​backstage/core-components)

v0.18.14

Compare Source

Patch Changes
  • b80a9f3: Added an onCopyLog prop to the LogViewer component that renders a copy button in the toolbar, allowing users to copy all log content to the clipboard.
  • 736d84e: Use locale-insensitive Unicode casing for consistent string handling across environments.
  • a15bac8: Added an optional variant prop to CopyTextButton to allow configuring its visual style (primary, secondary, or tertiary).
  • c0ebaa7: chore(deps): bump js-yaml from 4.3.1 to 4.3.2
  • bfb6497: Fixed CopyTextButton showing its tooltip on hover/focus instead of only after the user clicks to copy the text.
  • 279fdf6: Declared the DOM Testing Library dependency required by React Testing Library.
  • f2b5407: Updated dependency react-idle-timer to 5.7.3.
  • d9a949e: Added support for rendering custom link elements inside HeaderIconLinkRow.
  • Updated dependencies

v0.18.13

Compare Source

Patch Changes

  • 226817d: chore(deps): bump js-yaml from 4.2.0 to 4.3.0

  • a4759e6: Migrated tests from MSW v1 to MSW v2.

  • 96cd953: Fixed the DependencyGraph component to avoid a jarring initial render where nodes briefly pile up at overlapping positions before animating into place. The graph content is now hidden until node measurements are complete and the layout has fully settled, then revealed at the correct positions with transitions suppressed for the first frame.

    Also fixed a containerRef recreation chain where every graph dimension change caused the container measurement callback to be recreated and re-triggered, producing unnecessary re-renders during initial layout.

  • Updated dependencies

backstage/backstage (@​backstage/core-plugin-api)

v1.12.10

Compare Source

Patch Changes

v1.12.9

Compare Source

Patch Changes
  • 9fcfbc9: Fixed a performance issue where all components using analytics, including every link, would rerender unnecessarily whenever a surrounding analytics context rendered again without its attributes having changed, for example when a URL query parameter changed on an entity page.
  • Updated dependencies
backstage/backstage (@​backstage/frontend-defaults)

v0.5.6

Compare Source

Patch Changes

v0.5.5

Compare Source

Patch Changes
backstage/backstage (@​backstage/frontend-plugin-api)

v0.18.1

Compare Source

Patch Changes
  • 024c0ef: Updated internal type imports to avoid circular declaration chunks in package builds.
  • bd6cf43: Fixed a bug where overriding a plugin extension with withOverrides moved the overridden extension to the end of the plugin's extension list. This caused overridden extensions to lose their original position, for example making an overridden sub page tab move to the end of the tabs on its page. Overridden extensions now keep their original order, while extensions that don't override an existing one are appended at the end.
  • Updated dependencies

v0.18.0

Compare Source

Minor Changes
  • 907793c: BREAKING: Removed the deprecated config.schema option for extensions and extension blueprints. Use the top-level configSchema option with Standard Schema-compatible schema values, such as Zod v4.
Patch Changes
  • e156f1e: Added support for using a SubRouteRef as the parent of another SubRouteRef. Child paths are combined with ancestor paths at creation, and nested sub-routes inherit parameters from their complete ancestor chain.
backstage/backstage (@​backstage/plugin-app-backend)

v0.5.18

Compare Source

Patch Changes

v0.5.17

Compare Source

Patch Changes
backstage/backstage (@​backstage/plugin-app-react)

v0.2.7

Compare Source

Patch Changes

v0.2.6

Compare Source

Patch Changes
backstage/backstage (@​backstage/plugin-auth-backend)

v0.30.1

Compare Source

Patch Changes

v0.30.0

Compare Source

Minor Changes

  • 274acc5: BREAKING: The OAuth redirect URI and client ID metadata document allowlists now match patterns against each URL component separately instead of against the full URL string. Wildcards no longer match across the host and path boundary, patterns must include an explicit protocol and are otherwise rejected as invalid configuration instead of being silently ignored, and redirect URIs that contain embedded credentials are always rejected.

    A wildcard port also no longer implicitly matches every path: a pattern such as http://localhost:* now only matches the root path. Use http://localhost:*/* to allow any port and any path. The built-in loopback defaults have been updated accordingly, so this only affects explicitly configured patterns.

Patch Changes
  • 4e884d2: Skip SSRF protection for CIMD metadata fetches when the client_id matches an exact (non-wildcard) entry in allowedClientIdPatterns. Exact patterns mean the administrator explicitly listed a specific URL, so the DNS resolution is trusted. Wildcard patterns still enforce the SSRF check to protect against attacker-controlled subdomains resolving to internal addresses.
  • a995892: Allow ChatGPT Codex clients to use Client ID Metadata Documents by default.
  • 827989d: Fixed the built-in CLI client being rejected when allowedClientIdPatterns is configured for Client ID Metadata Documents.
  • Updated dependencies
backstage/backstage (@​backstage/plugin-auth-backend-module-guest-provider)

v0.2.23

[Compare Source](https://redirect.github.com/backstage/backstage/compare/a4bdc49ed664661bc69fe42bfaebcf24dc96e6b3...231

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/backstage-monorepo branch 2 times, most recently from a7596b6 to b275ae3 Compare August 25, 2026 21:56
@renovate
renovate Bot force-pushed the renovate/backstage-monorepo branch 2 times, most recently from 8b29273 to 25efef0 Compare August 29, 2026 10:37
@renovate
renovate Bot force-pushed the renovate/backstage-monorepo branch from 25efef0 to 12f4a82 Compare September 9, 2026 20:55
@renovate
renovate Bot force-pushed the renovate/backstage-monorepo branch from 12f4a82 to 8f3f6cc Compare September 15, 2026 20:15
@renovate

renovate Bot commented Sep 15, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock
➤ YN0000: · Yarn 4.18.0
➤ YN0000: ┌ Resolution step
➤ YN0016: │ @backstage/plugin-notifications@npm:^0.6.0: All versions satisfying "^0.6.0" are quarantined
➤ YN0000: └ Completed in 1s 155ms
➤ YN0000: · Failed with errors in 1s 186ms

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants