Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 15, 2025

Bumps the npm_and_yarn group with 2 updates in the / directory: @backstage/plugin-permission-backend and @backstage/plugin-scaffolder-backend.
Bumps the npm_and_yarn group with 2 updates in the /packages/backend directory: @backstage/plugin-permission-backend and @backstage/plugin-scaffolder-backend.

Updates @backstage/plugin-permission-backend from 0.5.55 to 0.6.0

Changelog

Sourced from @​backstage/plugin-permission-backend's changelog.

0.6.0

Minor Changes

  • 78eaa50: Improved validation for the /authorize endpoint when a resourceRef is provided alongside a basic permission. Additionally, introduced a clearer error message for cases where users attempt to directly evaluate conditional permissions.

Patch Changes

  • Updated dependencies
    • @​backstage/backend-plugin-api@​1.3.0
    • @​backstage/plugin-auth-node@​0.6.2
    • @​backstage/plugin-permission-node@​0.9.1
    • @​backstage/config@​1.3.2
    • @​backstage/errors@​1.2.7
    • @​backstage/plugin-permission-common@​0.8.4
Commits

Updates @backstage/plugin-scaffolder-backend from 1.33.0 to 2.1.1

Release notes

Sourced from @​backstage/plugin-scaffolder-backend's releases.

v1.44.0

These are the release notes for the v1.44.0 release of Backstage.

A huge thanks to the whole team of maintainers and contributors as well as the amazing Backstage Community for all the hard work in getting this release developed and done.

Highlights

Scaffolder Backend 3.0

BREAKING:

Removal of deprecated types and interfaces: CreateWorkerOptions, CurrentClaimedTask, DatabaseTaskStore, TaskManager, etc.

The TaskBroker interface now requires the cancel, recoverTasks, and retry methods to be implemented. If your implementation of TaskBroker doesn’t use these methods, you can replace them with a no-op () => void function. Please reach out to us in an issue as we're thinking about completely removing the TaskBroker extension point soon and would like to hear your use cases for the upcoming re-architecture of the scaffolder-backend plugin.

The scaffolderActionsExtensionPoint has been moved from /alpha to the main export.

// before
import { scaffolderActionsExtensionPoint } from '@backstage/plugin-scaffolder-node/alpha';
// after
import { scaffolderActionsExtensionPoint } from '@​backstage/plugin-scaffolder-node';

DEPRECATION:

We're going to be working on refactoring a lot of the internals of the Scaffolder backend plugin, and with that come a lot of deprecations and removals for public types that are making these things hard.

If you're using these types, please reach out to us either on Discord or a GitHub issue with your use cases.

  • SerializedTask, SerializedTaskEvent, TaskBroker, TaskContext, TaskBrokerDispatchOptions, TaskBrokerDispatchResult, TaskCompletionState, TaskEventType, TaskFilter, TaskFilters, TaskStatus are the types that have now been marked as deprecated, and will be removed in a future release.

Design System: Backstage Theme

BREAKING Removed the built-in CssBaseline from UnifiedThemeProvider. If your Backstage instance looks broken after this update, you likely forgot to add our new Backstage UI global CSS. To do that, please import @backstage/ui/css/styles.css in packages/app/src/index.tsx:

import '@backstage/ui/css/styles.css';

This change also removes the noCssBaseline prop, which became redundant.

Design System: Backstage UI

NEW

Adding a new Dialog component to Backstage UI. Contributed by @​ssjoblad in #31371 Added new virtualized, maxWidth and maxHeight props to Menu, MenuListBox, MenuAutocomplete and MenuAutocompleteListBox to allow for virtualization of long lists inside menus.

... (truncated)

Changelog

Sourced from @​backstage/plugin-scaffolder-backend's changelog.

@​backstage/plugin-scaffolder-backend

3.0.0

Major Changes

  • 9b81a90: BREAKING - Removing the deprecated types and interfaces, there's no replacement for these types, and hopefully not currently used as they offer no value with the plugin being on the new backend system and no way to consume them.

    Affected types: CreateWorkerOptions, CurrentClaimedTask, DatabaseTaskStore, DatabaseTaskStoreOptions, TaskManager, TaskStore, TaskStoreCreateTaskOptions, TaskStoreCreateTaskResult, TaskStoreEmitOptions, TaskStoreListEventsOptions, TaskStoreRecoverTaskOptions, TaskStoreShutDownTaskOptions, TaskWorker and TemplateActionRegistry.

Patch Changes

  • f222a2e: Fixed distributed actions not being visible in the scaffolder template actions.

    Depending on the plugin startup order, some of the distributed actions were not being registered correctly, causing them to be invisible in the scaffolder template actions list.

  • Updated dependencies

    • @​backstage/backend-defaults@​0.13.0
    • @​backstage/integration@​1.18.1
    • @​backstage/plugin-scaffolder-backend-module-bitbucket-server@​0.2.14
    • @​backstage/plugin-scaffolder-backend-module-bitbucket-cloud@​0.2.14
    • @​backstage/plugin-scaffolder-backend-module-bitbucket@​0.3.15
    • @​backstage/plugin-scaffolder-backend-module-gerrit@​0.2.14
    • @​backstage/plugin-scaffolder-backend-module-github@​0.9.1
    • @​backstage/plugin-scaffolder-backend-module-gitlab@​0.9.6
    • @​backstage/plugin-scaffolder-backend-module-azure@​0.2.14
    • @​backstage/plugin-scaffolder-backend-module-gitea@​0.2.14
    • @​backstage/plugin-scaffolder-node@​0.12.0
    • @​backstage/config@​1.3.5
    • @​backstage/plugin-bitbucket-cloud-common@​0.3.3
    • @​backstage/backend-openapi-utils@​0.6.2
    • @​backstage/backend-plugin-api@​1.4.4
    • @​backstage/plugin-auth-node@​0.6.8
    • @​backstage/plugin-catalog-backend-module-scaffolder-entity-model@​0.2.13
    • @​backstage/plugin-catalog-node@​1.19.1
    • @​backstage/plugin-events-node@​0.4.16
    • @​backstage/plugin-permission-common@​0.9.2
    • @​backstage/plugin-permission-node@​0.10.5
    • @​backstage/plugin-scaffolder-common@​1.7.2

3.0.0-next.1

Patch Changes

  • Updated dependencies
    • @​backstage/config@​1.3.4-next.0
    • @​backstage/backend-defaults@​0.13.0-next.1
    • @​backstage/integration@​1.18.1-next.1
    • @​backstage/backend-plugin-api@​1.4.4-next.0

... (truncated)

Commits

Updates @backstage/plugin-permission-backend from 0.5.55 to 0.6.0

Changelog

Sourced from @​backstage/plugin-permission-backend's changelog.

0.6.0

Minor Changes

  • 78eaa50: Improved validation for the /authorize endpoint when a resourceRef is provided alongside a basic permission. Additionally, introduced a clearer error message for cases where users attempt to directly evaluate conditional permissions.

Patch Changes

  • Updated dependencies
    • @​backstage/backend-plugin-api@​1.3.0
    • @​backstage/plugin-auth-node@​0.6.2
    • @​backstage/plugin-permission-node@​0.9.1
    • @​backstage/config@​1.3.2
    • @​backstage/errors@​1.2.7
    • @​backstage/plugin-permission-common@​0.8.4
Commits

Updates @backstage/plugin-permission-backend from 0.5.55 to 0.7.5

Changelog

Sourced from @​backstage/plugin-permission-backend's changelog.

0.6.0

Minor Changes

  • 78eaa50: Improved validation for the /authorize endpoint when a resourceRef is provided alongside a basic permission. Additionally, introduced a clearer error message for cases where users attempt to directly evaluate conditional permissions.

Patch Changes

  • Updated dependencies
    • @​backstage/backend-plugin-api@​1.3.0
    • @​backstage/plugin-auth-node@​0.6.2
    • @​backstage/plugin-permission-node@​0.9.1
    • @​backstage/config@​1.3.2
    • @​backstage/errors@​1.2.7
    • @​backstage/plugin-permission-common@​0.8.4
Commits

Updates @backstage/plugin-scaffolder-backend from 1.33.0 to 3.0.0

Release notes

Sourced from @​backstage/plugin-scaffolder-backend's releases.

v1.44.0

These are the release notes for the v1.44.0 release of Backstage.

A huge thanks to the whole team of maintainers and contributors as well as the amazing Backstage Community for all the hard work in getting this release developed and done.

Highlights

Scaffolder Backend 3.0

BREAKING:

Removal of deprecated types and interfaces: CreateWorkerOptions, CurrentClaimedTask, DatabaseTaskStore, TaskManager, etc.

The TaskBroker interface now requires the cancel, recoverTasks, and retry methods to be implemented. If your implementation of TaskBroker doesn’t use these methods, you can replace them with a no-op () => void function. Please reach out to us in an issue as we're thinking about completely removing the TaskBroker extension point soon and would like to hear your use cases for the upcoming re-architecture of the scaffolder-backend plugin.

The scaffolderActionsExtensionPoint has been moved from /alpha to the main export.

// before
import { scaffolderActionsExtensionPoint } from '@backstage/plugin-scaffolder-node/alpha';
// after
import { scaffolderActionsExtensionPoint } from '@​backstage/plugin-scaffolder-node';

DEPRECATION:

We're going to be working on refactoring a lot of the internals of the Scaffolder backend plugin, and with that come a lot of deprecations and removals for public types that are making these things hard.

If you're using these types, please reach out to us either on Discord or a GitHub issue with your use cases.

  • SerializedTask, SerializedTaskEvent, TaskBroker, TaskContext, TaskBrokerDispatchOptions, TaskBrokerDispatchResult, TaskCompletionState, TaskEventType, TaskFilter, TaskFilters, TaskStatus are the types that have now been marked as deprecated, and will be removed in a future release.

Design System: Backstage Theme

BREAKING Removed the built-in CssBaseline from UnifiedThemeProvider. If your Backstage instance looks broken after this update, you likely forgot to add our new Backstage UI global CSS. To do that, please import @backstage/ui/css/styles.css in packages/app/src/index.tsx:

import '@backstage/ui/css/styles.css';

This change also removes the noCssBaseline prop, which became redundant.

Design System: Backstage UI

NEW

Adding a new Dialog component to Backstage UI. Contributed by @​ssjoblad in #31371 Added new virtualized, maxWidth and maxHeight props to Menu, MenuListBox, MenuAutocomplete and MenuAutocompleteListBox to allow for virtualization of long lists inside menus.

... (truncated)

Changelog

Sourced from @​backstage/plugin-scaffolder-backend's changelog.

@​backstage/plugin-scaffolder-backend

3.0.0

Major Changes

  • 9b81a90: BREAKING - Removing the deprecated types and interfaces, there's no replacement for these types, and hopefully not currently used as they offer no value with the plugin being on the new backend system and no way to consume them.

    Affected types: CreateWorkerOptions, CurrentClaimedTask, DatabaseTaskStore, DatabaseTaskStoreOptions, TaskManager, TaskStore, TaskStoreCreateTaskOptions, TaskStoreCreateTaskResult, TaskStoreEmitOptions, TaskStoreListEventsOptions, TaskStoreRecoverTaskOptions, TaskStoreShutDownTaskOptions, TaskWorker and TemplateActionRegistry.

Patch Changes

  • f222a2e: Fixed distributed actions not being visible in the scaffolder template actions.

    Depending on the plugin startup order, some of the distributed actions were not being registered correctly, causing them to be invisible in the scaffolder template actions list.

  • Updated dependencies

    • @​backstage/backend-defaults@​0.13.0
    • @​backstage/integration@​1.18.1
    • @​backstage/plugin-scaffolder-backend-module-bitbucket-server@​0.2.14
    • @​backstage/plugin-scaffolder-backend-module-bitbucket-cloud@​0.2.14
    • @​backstage/plugin-scaffolder-backend-module-bitbucket@​0.3.15
    • @​backstage/plugin-scaffolder-backend-module-gerrit@​0.2.14
    • @​backstage/plugin-scaffolder-backend-module-github@​0.9.1
    • @​backstage/plugin-scaffolder-backend-module-gitlab@​0.9.6
    • @​backstage/plugin-scaffolder-backend-module-azure@​0.2.14
    • @​backstage/plugin-scaffolder-backend-module-gitea@​0.2.14
    • @​backstage/plugin-scaffolder-node@​0.12.0
    • @​backstage/config@​1.3.5
    • @​backstage/plugin-bitbucket-cloud-common@​0.3.3
    • @​backstage/backend-openapi-utils@​0.6.2
    • @​backstage/backend-plugin-api@​1.4.4
    • @​backstage/plugin-auth-node@​0.6.8
    • @​backstage/plugin-catalog-backend-module-scaffolder-entity-model@​0.2.13
    • @​backstage/plugin-catalog-node@​1.19.1
    • @​backstage/plugin-events-node@​0.4.16
    • @​backstage/plugin-permission-common@​0.9.2
    • @​backstage/plugin-permission-node@​0.10.5
    • @​backstage/plugin-scaffolder-common@​1.7.2

3.0.0-next.1

Patch Changes

  • Updated dependencies
    • @​backstage/config@​1.3.4-next.0
    • @​backstage/backend-defaults@​0.13.0-next.1
    • @​backstage/integration@​1.18.1-next.1
    • @​backstage/backend-plugin-api@​1.4.4-next.0

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…updates

Bumps the npm_and_yarn group with 2 updates in the / directory: [@backstage/plugin-permission-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/permission-backend) and [@backstage/plugin-scaffolder-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/scaffolder-backend).
Bumps the npm_and_yarn group with 2 updates in the /packages/backend directory: [@backstage/plugin-permission-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/permission-backend) and [@backstage/plugin-scaffolder-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/scaffolder-backend).


Updates `@backstage/plugin-permission-backend` from 0.5.55 to 0.6.0
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/permission-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/v0.6.0/plugins/permission-backend)

Updates `@backstage/plugin-scaffolder-backend` from 1.33.0 to 2.1.1
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/scaffolder-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/HEAD/plugins/scaffolder-backend)

Updates `@backstage/plugin-permission-backend` from 0.5.55 to 0.6.0
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/permission-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/v0.6.0/plugins/permission-backend)

Updates `@backstage/plugin-permission-backend` from 0.5.55 to 0.7.5
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/permission-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/v0.6.0/plugins/permission-backend)

Updates `@backstage/plugin-scaffolder-backend` from 1.33.0 to 3.0.0
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/scaffolder-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/HEAD/plugins/scaffolder-backend)

---
updated-dependencies:
- dependency-name: "@backstage/plugin-permission-backend"
  dependency-version: 0.6.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-scaffolder-backend"
  dependency-version: 2.1.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-permission-backend"
  dependency-version: 0.6.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-permission-backend"
  dependency-version: 0.7.5
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@backstage/plugin-scaffolder-backend"
  dependency-version: 3.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants