Skip to content

fix(deps): update backstage core #962

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
secustor merged 3 commits into from
Jan 25, 2026
Merged

fix(deps): update backstage core #962

secustor merged 3 commits into from
Jan 25, 2026

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 4, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@backstage/backend-defaults (source) ^0.14.0 → ^0.15.0 age confidence dependencies minor
@backstage/cli (source) 0.35.1 → 0.35.2 age confidence devDependencies patch
@backstage/cli (source) 0.35.1 → 0.35.2 age confidence dependencies patch
@backstage/core-compat-api (source) 0.5.5 → 0.5.6 age confidence dependencies patch
@backstage/core-components (source) 0.18.4 → 0.18.5 age confidence dependencies patch
@backstage/frontend-defaults (source) 0.3.4 → 0.3.5 age confidence dependencies patch
@backstage/frontend-plugin-api (source) 0.13.2 → 0.13.3 age confidence dependencies patch
@backstage/frontend-test-utils (source) 0.4.2 → 0.4.4 age confidence devDependencies patch
@backstage/integration-react (source) 1.2.13 → 1.2.14 age confidence dependencies patch
@backstage/plugin-app-backend (source) 0.5.9 → 0.5.10 age confidence dependencies patch
@backstage/plugin-app-visualizer (source) 0.1.26 → 0.1.27 age confidence dependencies patch
@backstage/plugin-auth-backend (source) ^0.25.7 → ^0.26.0 age confidence dependencies minor
@backstage/plugin-auth-node (source) 0.6.10 → 0.6.11 age confidence dependencies patch
@backstage/plugin-catalog (source) 1.32.1 → 1.32.2 age confidence dependencies patch
@backstage/plugin-catalog-backend (source) 3.3.0 → 3.3.1 age confidence dependencies patch
@backstage/plugin-catalog-backend-module-logs (source) 0.1.17 → 0.1.18 age confidence dependencies patch
@backstage/plugin-catalog-backend-module-scaffolder-entity-model (source) 0.2.15 → 0.2.16 age confidence dependencies patch
@backstage/plugin-notifications (source) 0.5.12 → 0.5.13 age confidence dependencies patch
@backstage/plugin-org (source) 0.6.47 → 0.6.48 age confidence dependencies patch
@backstage/plugin-permission-common (source) 0.9.3 → 0.9.4 age confidence dependencies patch
@backstage/plugin-permission-node (source) 0.10.7 → 0.10.8 age confidence dependencies patch
@backstage/plugin-scaffolder (source) 1.35.0 → 1.35.1 age confidence dependencies patch
@backstage/plugin-search (source) 1.5.1 → 1.5.3 age confidence dependencies patch
@backstage/plugin-search-backend (source) 2.0.9 → 2.0.10 age confidence dependencies patch
@backstage/plugin-signals (source) ^0.0.26 → ^0.0.27 age confidence dependencies patch
@backstage/plugin-user-settings (source) 0.8.30 → 0.8.31 age confidence dependencies patch
@backstage/ui (source) ^0.10.0 → ^0.11.0 age confidence dependencies minor
backstage/backstage 1.46.1 → 1.47.1 age confidence minor

Release Notes

backstage/backstage (@​backstage/backend-defaults)

v0.15.0

Compare Source

Minor Changes

  • 6fc00e6: Added action filtering support with glob patterns and attribute constraints.

    The ActionsService now supports filtering actions based on configuration. This allows controlling which actions are exposed to consumers like the MCP backend.

    Configuration example:

    backend:
  actions:
    pluginSources:
      - catalog
      - scaffolder
    filter:
      include:
        - id: 'catalog:*'
          attributes:
            destructive: false
        - id: 'scaffolder:*'
      exclude:
        - id: '*:delete-*'
        - attributes:
            readOnly: false

    Filtering logic:

    • include: Rules for actions to include. Each rule can specify an id glob pattern and/or attributes constraints. An action must match at least one rule to be included. If no include rules are specified, all actions are included by default.
    • exclude: Rules for actions to exclude. Takes precedence over include rules.
    • Each rule combines id and attributes with AND logic (both must match if specified).

  • 27f9061: BREAKING: The constructor for FetchUrlReader is now private. If you have to construct an instance of it, please use FetchUrlReader.fromConfig instead.

  • 27f9061: BREAKING: coreServices.urlReader now validates that redirect chains are subject to the allow list in reading.allow of your app config. If you were relying on redirects that pointed to URLs that were not allowlisted, you will now have to add those to your config as well.

    Example:

     backend:
   reading:
     allow:
       - host: example.com
+      - host: storage-api.example.com
Patch Changes

v0.14.1

Compare Source

Patch Changes
backstage/backstage (@​backstage/cli)

v0.35.2

Compare Source

Patch Changes
  • 320c6a9: Bump @swc/core to support ES2023 and ES2024
  • c0d7bf6: Added --include and --format options to backstage-cli info command for including additional packages via glob patterns and outputting as JSON or Text.
  • f6a5d2f: Fixed CSS module class name collisions when running multiple versions of packages simultaneously by using content-based hashing for class name generation.
  • 140cbc2: Added @backstage/backend-test-utils to backend package templates.
  • 4eeba9e: Upgrade zod-validation-error to version 4
  • 9ee5996: Bump minimum required @swc/core to avoid transpilation bug
  • Updated dependencies
backstage/backstage (@​backstage/core-compat-api)

v0.5.6

Compare Source

Patch Changes
backstage/backstage (@​backstage/core-components)

v0.18.5

Compare Source

Patch Changes
  • a723b8a: The MarkdownContent component now handles HTML content the same way as GitHub when rendering GitHub-flavored Markdown
  • c671db9: Fixed bug in Table component where the toolbar layout would break when both a title and filters were present.
  • 55a9dc2: Update colour token again in ItemCardHeader to respect theme definition.
backstage/backstage (@​backstage/frontend-defaults)

v0.3.5

Compare Source

Patch Changes
backstage/backstage (@​backstage/frontend-plugin-api)

v0.13.3

Compare Source

Patch Changes

  • 3bd2a1a: Updated documentation for createApiRef to clarify the role of the ID in specifying the owning plugin of an API.

  • 9ccf84e: The following blueprints are being restricted to only be used in app plugin overrides and modules. They are being moved to the @backstage/plugin-app-react package and have been deprecated:

    • AppRootWrapperBlueprint
    • IconBundleBlueprint
    • NavContentBlueprint
    • RouterBlueprint
    • SignInPageBlueprint
    • SwappableComponentBlueprint
    • ThemeBlueprint
    • TranslationBlueprint

  • 4554a4e: Added an alpha PluginWrapperBlueprint exported from @backstage/frontend-plugin-api/alpha, which can install components that will wrap all plugin elements.

  • 872eb91: Upgrade zod-to-json-schema to latest version

backstage/backstage (@​backstage/frontend-test-utils)

v0.4.4

Compare Source

@​backstage/backend-common@​0.4.2

Patch Changes
  • 5ecd50f: Fix HTTPS certificate generation and add new config switch, enabling it simply by setting backend.https = true. Also introduces caching of generated certificates in order to avoid having to add a browser override every time the backend is restarted.
  • 00042e7: Moving the Git actions to isomorphic-git instead of the node binding version of nodegit
  • 0829ff1: Tweaked development log formatter to include extra fields at the end of each log line
  • 036a843: Provide support for on-prem azure devops
  • Updated dependencies [ad5c56f]
  • Updated dependencies [036a843]

@​backstage/cli@​0.4.5

Patch Changes
  • 37a7d26: Use consistent file extensions for JS output when building packages.
  • 818d45e: Fix detection of external package child directories
  • 0588be0: Add backend:bundle command for bundling a backend package with dependencies into a deployment archive.
  • b8abdda: Add color to output from versions:bump in order to make it easier to spot changes. Also highlight possible breaking changes and link to changelogs.
  • Updated dependencies [ad5c56f]

@​backstage/config-loader@​0.4.1

Patch Changes

  • ad5c56f: Deprecate $data and replace it with $include which allows for any type of json value to be read from external files. In addition, $include can be used without a path, which causes the value at the root of the file to be loaded.

    Most usages of $data can be directly replaced with $include, except if the referenced value is not a string, in which case the value needs to be changed. For example:

    # app-config.yaml
foo:
  $data: foo.yaml#myValue # replacing with $include will turn the value into a number
  $data: bar.yaml#myValue # replacing with $include is safe

# foo.yaml
myValue: 0xf00

# bar.yaml
myValue: bar

@​backstage/core-api@​0.2.9

Patch Changes
  • ab08923: Remove test dependencies from production package list

@​backstage/create-app@​0.3.2

Patch Changes

  • c2b52d9: Replace register-component plugin with new catalog-import plugin

  • fc6839f: Bump sqlite3 to v5.

    To apply this change to an existing app, change the version of sqlite3 in the dependencies of packages/backend/package.json:

         "pg": "^8.3.0",
-    "sqlite3": "^4.2.0",
+    "sqlite3": "^5.0.0",
     "winston": "^3.2.1"

    Note that the sqlite3 dependency may not be preset if you chose to use PostgreSQL when creating the app.

  • 8d68e4c: Removed the Circle CI sidebar item, since the target page does not exist.

    To apply this change to an existing app, remove "CircleCI" sidebar item from packages/app/src/sidebar.tsx, and the BuildIcon import if it is unused.

  • 1773a51: Removed lighthouse plugin from the default set up plugins, as it requires a separate Backend to function.

    To apply this change to an existing app, remove the following:

    1. The lighthouse block from app-config.yaml.
    2. The @backstage/plugin-lighthouse dependency from packages/app/package.json.
    3. The @backstage/plugin-lighthouse re-export from packages/app/src/plugins.ts.
    4. The Lighthouse sidebar item from packages/app/src/sidebar.tsx, and the RuleIcon import if it is unused.

@​backstage/integration@​0.1.5

Patch Changes
  • 036a843: Provide support for on-prem azure devops

@​backstage/techdocs-common@​0.3.2

Patch Changes

@​backstage/plugin-auth-backend@​0.2.9

Patch Changes

  • 0289a05: Add support for the majority of the Core configurations for Passport-SAML.

    These configuration keys are supported:

    • entryPoint
    • issuer
    • cert
    • privateKey
    • decryptionPvk
    • signatureAlgorithm
    • digestAlgorithm

    As part of this change, there is also a fix to the redirection behaviour when doing load balancing and HTTPS termination - the application's baseUrl is used to generate the callback URL. For properly configured Backstage installations, no changes are necessary, and the baseUrl is respected.

  • Updated dependencies [5ecd50f]

  • Updated dependencies [00042e7]

  • Updated dependencies [0829ff1]

  • Updated dependencies [036a843]

@​backstage/plugin-catalog@​0.2.10

Patch Changes

@​backstage/plugin-catalog-backend@​0.5.2

Patch Changes
  • 99be305: Fixed a bug where the catalog would read back all entities when adding a location that already exists.
  • 49d2016: Change location_update_log columns from nvarchar(255) to text
  • 73e75ea: Add processor for ingesting AWS accounts from AWS Organizations
  • 071711d: Remove sqlite3 as a dependency. You may need to add sqlite3 as a dependency of your backend if you were relying on this indirect dependency.
  • Updated dependencies [5ecd50f]
  • Updated dependencies [00042e7]
  • Updated dependencies [0829ff1]
  • Updated dependencies [036a843]

@​backstage/plugin-catalog-import@​0.3.3

Patch Changes

@​backstage/plugin-cost-insights@​0.5.5

Patch Changes
  • ab08923: Remove test dependencies from production package list

@​backstage/plugin-pagerduty@​0.2.5

Patch Changes
  • b7a1248: Optimize empty state image size.

@​backstage/plugin-rollbar-backend@​0.1.6

Patch Changes

@​backstage/plugin-scaffolder@​0.3.6

Patch Changes
  • 8e083f4: Bug fix: User can retry creating a new component if an error occurs, without having to reload the page.
  • 947d3c2: You can now maximize the logs into full-screen by clicking the button under each step of the job
  • Updated dependencies [9c09a36]

@​backstage/plugin-scaffolder-backend@​0.3.7

Patch Changes

@​backstage/plugin-search@​0.2.5

Patch Changes

@​backstage/plugin-sentry@​0.3.2

Patch Changes

@​backstage/plugin-tech-radar@​0.3.2

Patch Changes
  • ab08923: Remove test dependencies from production package list
  • bc90917: Updated example data in README.

@​backstage/plugin-techdocs-backend@​0.5.2

Patch Changes

example-app@​0.2.9

Patch Changes

v0.4.3

Compare Source

Patch Changes
backstage/backstage (@​backstage/integration-react)

v1.2.14

Compare Source

Patch Changes
backstage/backstage (@​backstage/plugin-app-backend)

v0.5.10

Compare Source

Patch Changes
backstage/backstage (@​backstage/plugin-app-visualizer)

v0.1.27

Compare Source

Patch Changes
backstage/backstage (@​backstage/plugin-auth-backend)

v0.26.0

Compare Source

Minor Changes
  • 7ffc873: Fix user_created_at migration causing SQLiteError regarding use of non-constants for defaults
Patch Changes
backstage/backstage (@​backstage/plugin-auth-node)

v0.6.11

Compare Source

Patch Changes
backstage/backstage (@​backstage/plugin-catalog)

v1.32.2

Compare Source

Patch Changes
backstage/backstage (@​backstage/plugin-catalog-backend)

v3.3.1

Compare Source

Patch Changes
backstage/backstage (@​backstage/plugin-catalog-backend-module-logs)

v0.1.18

Compare Source

Patch Changes
backstage/backstage (@​backstage/plugin-catalog-backend-module-scaffolder-entity-model)

v0.2.16

Compare Source

Patch Changes
backstage/backstage (@​backstage/plugin-notifications)

v0.5.13

Compare Source

Patch Changes
backstage/backstage (@​backstage/plugin-org)

v0.6.48

Compare Source

Patch Changes
backstage/backstage (@​backstage/plugin-permission-common)

v0.9.4

Compare Source

Patch Changes
  • 872eb91: Upgrade zod-to-json-schema to latest version
backstage/backstage (@​backstage/plugin-permission-node)

v0.10.8

Compare Source

Patch Changes
backstage/backstage (@​backstage/plugin-scaffolder)

v1.35.1

Compare Source

Patch Changes
backstage/backstage (@​backstage/plugin-search)

v1.5.3

Compare Source

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the renovate label Jan 4, 2026
@renovate renovate bot force-pushed the renovate/backstage-core branch from ca0182c to 1f5f82e Compare January 5, 2026 01:29
@renovate renovate bot force-pushed the renovate/backstage-core branch 3 times, most recently from b68c364 to 1f198f7 Compare January 20, 2026 20:00
@renovate renovate bot changed the title fix(deps): update dependency backstage/backstage to v1.46.2 fix(deps): update backstage core Jan 20, 2026
@renovate renovate bot force-pushed the renovate/backstage-core branch from 1f198f7 to b942b0c Compare January 25, 2026 15:57
@secustor secustor enabled auto-merge (squash) January 25, 2026 16:05
@secustor secustor merged commit 97465c9 into main Jan 25, 2026
4 checks passed
@secustor secustor deleted the renovate/backstage-core branch January 25, 2026 16:08
@secustor secustor mentioned this pull request Jan 25, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@secustor secustor secustor approved these changes

Assignees

No one assigned

Labels

renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@secustor