[release-v1.16][npm]: Bump the major group across 5 directories with 42 updates

[dependabot]

Bumps the major group with 32 updates in the /backstage directory:

Package	From	To
@spotify/prettier-config	12.0.0	15.0.0
concurrently	8.2.2	9.2.1
lerna	7.4.2	9.0.5
node-gyp	9.4.1	12.2.0
prettier	2.8.8	3.8.1
@backstage/plugin-catalog-react	1.9.1	2.0.0
react	17.0.2	19.2.4
react-dom	17.0.2	19.2.4
@types/react-dom	17.0.26	19.2.3
react-router	6.20.1	7.13.1
react-router-dom	6.20.1	7.13.1
@testing-library/jest-dom	5.17.0	6.9.1
@testing-library/react	12.1.5	16.3.2
@testing-library/dom	8.20.1	10.4.1
cross-env	7.0.3	10.1.0
@backstage/plugin-catalog-backend	1.22.0	3.4.0
@backstage/plugin-scaffolder-backend	1.19.1	3.1.4
@backstage/plugin-search-backend	1.4.7	2.0.12
@backstage/plugin-techdocs-backend	1.9.0	2.1.5
better-sqlite3	9.2.2	12.6.2
dockerode	3.3.5	4.0.9
@types/dockerode	3.3.23	4.0.1
@types/express-serve-static-core	4.17.41	5.1.1
@types/luxon	2.4.0	3.7.1
@backstage/backend-plugin-api	0.6.18	1.7.0
@backstage/plugin-catalog-node	1.12.0	2.0.0
node-fetch	2.7.0	3.3.2
yn	4.0.0	5.1.0
@janus-idp/cli	1.8.7	3.7.0
msw	1.3.2	2.12.10
supertest	6.3.3	7.2.2
@types/supertest	2.0.16	7.2.0

Bumps the major group with 9 updates in the /backstage/packages/app directory:

Package	From	To
@backstage/plugin-catalog-react	1.21.6	2.0.0
react	17.0.2	19.2.4
react-dom	17.0.2	19.2.4
react-router	6.30.3	7.13.1
react-router-dom	6.30.3	7.13.1
@testing-library/jest-dom	5.17.0	6.9.1
@testing-library/react	12.1.5	16.3.2
@testing-library/dom	8.20.1	10.4.1
cross-env	7.0.3	10.1.0

Bumps the major group with 10 updates in the /backstage/packages/backend directory:

Package	From	To
node-gyp	9.4.1	12.2.0
@backstage/plugin-catalog-backend	1.32.1	3.4.0
@backstage/plugin-scaffolder-backend	1.33.0	3.1.4
@backstage/plugin-search-backend	1.8.2	2.0.12
@backstage/plugin-techdocs-backend	1.11.6	2.1.5
better-sqlite3	9.6.0	12.6.2
dockerode	3.3.5	4.0.9
@types/dockerode	3.3.47	4.0.1
@types/express-serve-static-core	4.19.8	5.1.1
@types/luxon	2.4.0	3.7.1

Bumps the major group with 9 updates in the /backstage/plugins/knative-event-mesh-backend directory:

Package	From	To
express	4.22.1	5.2.1
@backstage/backend-plugin-api	0.6.21	1.7.0
@backstage/plugin-catalog-node	1.20.1	2.0.0
node-fetch	2.7.0	3.3.2
yn	4.0.0	5.1.0
@janus-idp/cli	1.19.1	3.7.0
@types/supertest	2.0.16	7.2.0
msw	1.3.5	2.12.10
supertest	6.3.4	7.2.2

Bumps the major group with 4 updates in the /backstage/plugins/knative-event-mesh-backend/dist-dynamic directory: express, @types/express, node-fetch and yn.

Updates @spotify/prettier-config from 12.0.0 to 15.0.0

Release notes

Sourced from @​spotify/prettier-config's releases.

v15.0.0

15.0.0 (2023-05-18)

chore

• deps: upgrade dependencies (ef060c7)
• node: upgrade required Node version to 18 (9528841)

BREAKING CHANGES

• node: Node bump from v14 to v18
• deps: TypeScript bump from v4 to v5, Jest bump from v28 to v29

v14.1.6

14.1.6 (2023-02-14)

Bug Fixes

• update dependencies (5c7d2ed)

v14.1.5

14.1.5 (2023-01-30)

Bug Fixes

• update dependencies (32226e3)

v14.1.4

14.1.4 (2023-01-19)

Bug Fixes

• update dependencies (ecac663)

v14.1.3

14.1.3 (2022-12-07)

Bug Fixes

• dependency updates (98dcee7)

v14.1.2

14.1.2 (2022-12-02)

... (truncated)

Changelog

Sourced from @​spotify/prettier-config's changelog.

15.0.0 (2023-05-18)

chore

• deps: upgrade dependencies (ef060c7)
• node: upgrade required Node version to 18 (9528841)

BREAKING CHANGES

• node: Node bump from v14 to v18
• deps: TypeScript bump from v4 to v5, Jest bump from v28 to v29

14.1.6 (2023-02-14)

Bug Fixes

• update dependencies (5c7d2ed)

14.1.5 (2023-01-30)

Bug Fixes

• update dependencies (32226e3)

14.1.4 (2023-01-19)

Bug Fixes

• update dependencies (ecac663)

14.1.3 (2022-12-07)

Bug Fixes

• dependency updates (98dcee7)

14.1.2 (2022-12-02)

Bug Fixes

• web-scripts: security vulnerability in glob (a278f21)

14.1.1 (2022-11-25)

Bug Fixes

• precommit: add in --passWithNoTests flag to enable precommit hook to succeed with no tests (67cba2a), closes #1020

14.1.0 (2022-08-08)

... (truncated)

Commits

• 6d8c063 v15.0.0
• 6519dca Merge pull request #1128 from nlebrun-spotify/upgrade-dependencies
• 9528841 chore(node): upgrade required Node version to 18
• ef060c7 chore(deps): upgrade dependencies
• cfb9c66 v14.1.6
• 7b2160e Merge pull request #1105 from spotify/cut-new-release
• 5c7d2ed fix: update dependencies
• a31d65c Merge pull request #1100 from spotify/dependabot/npm_and_yarn/commitizen-4.3.0
• 07db5cf Merge pull request #1103 from spotify/dependabot/npm_and_yarn/http-cache-sema...
• 7925f32 Create catalog-info.yaml
• Additional commits viewable in compare view

Updates concurrently from 8.2.2 to 9.2.1

Release notes

Sourced from concurrently's releases.

v9.2.1

What's Changed

• chore: update eslint-plugin-simple-import-sort from v10 to v12 by @​noritaka1166 in open-cli-tools/concurrently#551
• chore: update eslint-config-prettier from v9 to v10 by @​noritaka1166 in open-cli-tools/concurrently#552
• Remove lodash by @​gustavohenke in open-cli-tools/concurrently#555
• chore: update coveralls-next from v4 to v5 by @​noritaka1166 in open-cli-tools/concurrently#557
• Replace jest with vitest by @​gustavohenke in open-cli-tools/concurrently#554
• Upgrade to pnpm v10 by @​paescuj in open-cli-tools/concurrently#558
• chore: remove unused eslint-plugin-jest by @​noritaka1166 in open-cli-tools/concurrently#559
• Minor dependency updates by @​paescuj in open-cli-tools/concurrently#560
• Migrate to ESLint v9 by @​paescuj in open-cli-tools/concurrently#561
• Update shell-quote to 1.8.3 by @​paescuj in open-cli-tools/concurrently#562
• Full coverage by @​paescuj in open-cli-tools/concurrently#563
• Update GH actions/workflows, enable NPM provenance by @​paescuj in open-cli-tools/concurrently#564

Full Changelog: open-cli-tools/concurrently@v9.2.0...v9.2.1

v9.2.0

What's Changed

• Bump esbuild from 0.23.1 to 0.25.0 in the npm_and_yarn group by @​dependabot in open-cli-tools/concurrently#528
• fix: don't throw when there are no commands by @​gustavohenke in open-cli-tools/concurrently#532
• docs: nicer quotes by @​IsaacLeeWebDev in open-cli-tools/concurrently#537
• Add --kill-timeout by @​gustavohenke in open-cli-tools/concurrently#540
• docs: fix typo by @​ldeveber in open-cli-tools/concurrently#542
• fix: correct typos in comments and documentation by @​noritaka1166 in open-cli-tools/concurrently#544
• refactor: use startsWith & simplify boolean expression by @​noritaka1166 in open-cli-tools/concurrently#543
• refactor: use optional chaining by @​noritaka1166 in open-cli-tools/concurrently#545
• Handle SIGPIPEs by @​gustavohenke in open-cli-tools/concurrently#547
• refactor: fix map and reduce as return values are not used by @​noritaka1166 in open-cli-tools/concurrently#546
• docs: fix typos in docs by @​noritaka1166 in open-cli-tools/concurrently#548
• chore: update jest from v29 to v30 by @​noritaka1166 in open-cli-tools/concurrently#549
• chore: update @​types/jest from v29 to v30 by @​noritaka1166 in open-cli-tools/concurrently#550

New Contributors

• @​IsaacLeeWebDev made their first contribution in open-cli-tools/concurrently#537
• @​ldeveber made their first contribution in open-cli-tools/concurrently#542
• @​noritaka1166 made their first contribution in open-cli-tools/concurrently#544

Full Changelog: open-cli-tools/concurrently@v9.1.2...v9.2.0

v9.1.2

What's Changed

• Add ability to have custom logger by @​mwood23 in open-cli-tools/concurrently#522

New Contributors

• @​mwood23 made their first contribution in open-cli-tools/concurrently#522

Full Changelog: open-cli-tools/concurrently@v9.1.1...v9.1.2

... (truncated)

Commits

• 414cd01 9.2.1
• 0dfedb0 Update GH actions/workflows, enable npm provenance (#564)
• ee81511 Remove obsolete tsdk config
• 09d3d7b Full coverage (#563)
• 8cfc6a6 Update shell-quote to 1.8.3 (#562)
• 4c403f8 Migrate to ESLint v9 (#561)
• 8bfcaf7 Minor dependency updates (#560)
• 389fec4 Enable watch mode & coverage for unit tests by default
• 7993ce6 chore: remove unused eslint-plugin-jest (#559)
• 58300f4 Remove obsolete .npmrc file
• Additional commits viewable in compare view

Updates lerna from 7.4.2 to 9.0.5

Release notes

Sourced from lerna's releases.

v9.0.5

9.0.5 (2026-02-28)

Bug Fixes

• bump minimatch from 3.0.5 to 3.1.4 (#4285) (2e3f99e)
• bump tar from 7.5.7 to 7.5.8 (#4273) (bdffd1d)

v9.0.4

9.0.4 (2026-02-10)

Bug Fixes

• bump tar to 7.5.7, rimraf to 6.1.2, @​npmcli/run-script to 10.0.3 (#4267) (43e3d46)

v9.0.3

9.0.3 (2025-11-27)

Bumped some dependencies to reduce audit warning noise.

NOTE: 9.0.2 does not exist because of a failed release

v9.0.1

9.0.1 (2025-11-14)

Bug Fixes

• expand version range to include nx v22.x (#4242) (0cca286)

v9.0.0

9.0.0 (2025-09-23)

Bug Fixes

• publish: ensure README file names are populated on package.json (#4211) (362875d)

Features

• support OIDC trusted publishing (d51e344)

OIDC trusted publishing is now supported by Lerna with no specification configuration required.

• A new guide has been added: https://lerna.js.org/docs/recipes/oidc-trusted-publishing
• A fully working example repo has been set up here https://github.com/JamesHenry/lerna-v9-oidc-publishing-example

BREAKING CHANGES

After updating we strongly recommend running lerna repair in your project. This will migrate your lerna.json to the latest and greatest and remove any outdated options.

... (truncated)

Changelog

Sourced from lerna's changelog.

9.0.5 (2026-02-28)

Bug Fixes

• bump minimatch from 3.0.5 to 3.1.4 (#4285) (2e3f99e)
• bump tar from 7.5.7 to 7.5.8 (#4273) (bdffd1d)

9.0.4 (2026-02-10)

Bug Fixes

• bump tar to 7.5.7, rimraf to 6.1.2, @​npmcli/run-script to 10.0.3 (#4267) (43e3d46)

9.0.3 (2025-11-27)

Note: Version bump only for package lerna

9.0.2 (2025-11-27)

Note: Version bump only for package lerna

9.0.1 (2025-11-14)

Bug Fixes

• expand version range to include nx v22.x (#4242) (0cca286)

9.0.0 (2025-09-23)

Bug Fixes

• publish: ensure README file names are populated on package.json (#4211) (362875d)

Features

• support OIDC trusted publishing (d51e344)

OIDC trusted publishing is now supported by Lerna with no specification configuration required.

• A new guide has been added: https://lerna.js.org/docs/recipes/oidc-trusted-publishing
• A fully working example repo has been set up here https://github.com/JamesHenry/lerna-v9-oidc-publishing-example

BREAKING CHANGES

After updating we strongly recommend running lerna repair in your project. This will migrate your lerna.json to the latest and greatest and remove any outdated options.

As this is a major release there are a few breaking changes to be aware of, which may or may not affect your lerna repos, depending on how you are using the tool.

• node v18 support is dropped because it is end of life

... (truncated)

Commits

• 85b9d95 chore(misc): publish 9.0.5
• 2e3f99e fix: bump minimatch from 3.0.5 to 3.1.4 (#4285)
• bdffd1d fix: bump tar from 7.5.7 to 7.5.8 (#4273)
• 5f3669c chore(misc): publish 9.0.4
• 43e3d46 fix: bump tar to 7.5.7, rimraf to 6.1.2, @​npmcli/run-script to 10.0.3 (#4267)
• 215ff00 chore(misc): publish 9.0.3
• b1b2166 chore(misc): publish 9.0.2
• 6c1ea96 chore(deps): bump js-yaml from 4.1.0 to 4.1.1 (#4245)
• 9df335a chore(misc): publish 9.0.1
• 0cca286 fix: expand version range to include nx v22.x (#4242)
• Additional commits viewable in compare view

Updates node-gyp from 9.4.1 to 12.2.0

Release notes

Sourced from node-gyp's releases.

v12.2.0

12.2.0 (2026-01-26)

Features

• include built package version in error logs (#3254) (ee9cbdd)
• update gyp-next to v0.21.1 (#3273) (888ff2c)

Bug Fixes

• cpu concurrency detection on some platforms (#3255) (f15b79a), closes #3191
• python is no longer a valid npm config setting (#3258) (c7c678f)
• Switch to URL instead of url.parse (#3256) (3f81949)
• Test Windows on Python 3.14, not 3.13 (#3262) (7b4f315)

Core

• deps: bump actions/checkout from 5 to 6 (#3248) (db5385c)

Doc

• add a note about changes in gyp folder (#3259) (a52bc81)
• correct typos (#3269) (0f2bc7d)
• remove obsolete Microsoft Node.js Guidelines link (#3268) (30cda26)
• update Python manual install instructions for Windows (#3265) (0407877)

Miscellaneous

• deps: upgrade tar to 7.5.4 to address CVE-2026-23950 (#3271) (7bf371c)

v12.1.0

12.1.0 (2025-11-12)

Features

• Add support for Visual Studio 2026 (18.x) (69e5fd2)
• Support for Visual Studio 2026 (18.x) (69e5fd2)

v12.0.0

12.0.0 (2025-11-10)

⚠ BREAKING CHANGES

... (truncated)

Changelog

Sourced from node-gyp's changelog.

12.2.0 (2026-01-26)

Features

• include built package version in error logs (#3254) (ee9cbdd)
• update gyp-next to v0.21.1 (#3273) (888ff2c)

Bug Fixes

• cpu concurrency detection on some platforms (#3255) (f15b79a), closes #3191
• python is no longer a valid npm config setting (#3258) (c7c678f)
• Switch to URL instead of url.parse (#3256) (3f81949)
• Test Windows on Python 3.14, not 3.13 (#3262) (7b4f315)

Core

• deps: bump actions/checkout from 5 to 6 (#3248) (db5385c)

Doc

• add a note about changes in gyp folder (#3259) (a52bc81)
• correct typos (#3269) (0f2bc7d)
• remove obsolete Microsoft Node.js Guidelines link (#3268) (30cda26)
• update Python manual install instructions for Windows (#3265) (0407877)

Miscellaneous

• deps: upgrade tar to 7.5.4 to address CVE-2026-23950 (#3271) (7bf371c)

12.1.0 (2025-11-12)

Features

• Add support for Visual Studio 2026 (18.x) (69e5fd2)
• Support for Visual Studio 2026 (18.x) (69e5fd2)

12.0.0 (2025-11-10)

⚠ BREAKING CHANGES

• align to npm 11 node engine range

Features

... (truncated)

Commits

• 878061f chore(main): release 12.2.0 (#3249)
• 7bf371c chore(deps): upgrade tar to 7.5.4 to address CVE-2026-23950 (#3271)
• 888ff2c feat: update gyp-next to v0.21.1 (#3273)
• 30cda26 readme: remove obsolete Microsoft Node.js Guidelines link (#3268)
• 0f2bc7d readme: correct typos (#3269)
• 0407877 readme: update Python manual install instructions for Windows (#3265)
• 3f81949 fix: Switch to URL instead of url.parse (#3256)
• 7b4f315 fix: Test Windows on Python 3.14, not 3.13 (#3262)
• a52bc81 doc: add a note about changes in gyp folder (#3259)
• c7c678f fix: python is no longer a valid npm config setting (#3258)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for node-gyp since your current version.

Updates prettier from 2.8.8 to 3.8.1

Release notes

Sourced from prettier's releases.

3.8.1

• Include available printers in plugin type declarations (#18706 by @​porada)

🔗 Changelog

3.8.0

• Support Angular v21.1

diff

🔗 Release note "Prettier 3.8: Support for Angular v21.1"

3.7.4

What's Changed

• Fix comment in union type gets duplicated by @​fisker in prettier/prettier#18393
• Fix unstable comment print in union type by @​fisker in prettier/prettier#18395
• Avoid quote around LWC interpolations by @​kovsu in prettier/prettier#18383

🔗 Changelog

3.7.3

What's Changed

• Fix prettier.getFileInfo() change that breaks VSCode extension by @​fisker in prettier/prettier#18375

🔗 Changelog

3.7.2

What's Changed

• Fix string print when switching quotes by @​fisker in prettier/prettier#18351
• Preserve quote for embedded HTML attribute values by @​kovsu in prettier/prettier#18352
• Fix comment in empty type literal by @​fisker in prettier/prettier#18364

🔗 Changelog

3.7.1

• Fix performance regression in doc printer (#18342 by @​fisker)

🔗 Changelog

3.7.0

diff

🔗 Release note

3.6.2

What's Changed

... (truncated)

Changelog

Sourced from prettier's changelog.

3.8.1

diff

Include available printers in plugin type declarations (#18706 by @​porada)

// Input
import * as prettierPluginEstree from "prettier/plugins/estree";
// Prettier 3.8.0
// Property 'printers' does not exist on type 'typeof import("prettier/plugins/estree")'. ts(2339)
prettierPluginEstree.printers.estree; //=> any
// Prettier 3.8.1
prettierPluginEstree.printers.estree; //=> Printer
prettierPluginEstree.printers["estree-json"]; //=> Printer

3.8.0

diff

🔗 Release Notes

3.7.4

diff

LWC: Avoid quote around interpolations (#18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>
<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>
<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;
</tr></table> 

... (truncated)

Commits

• 90983f4 Release 3.8.1
• 57f702f Include available printers in plugin type declarations (#18706)
• bece827 Revert change in release script
• 82a4ab2 Bump Prettier dependency to 3.8.0
• 5213ee4 Clean changelog_unreleased
• f95ad0f Comment out finished steps
• b2034e8 Fix release script
• 5824b15 Release 3.8.0
• 0433601 Add blog post for v3.8.0 (#18639)
• b04d05b Remove lint step from release script (#18415)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for prettier since your current version.

Updates @backstage/plugin-catalog-react from 1.9.1 to 2.0.0

Release notes

Sourced from @​backstage/plugin-catalog-react's releases.

v1.49.0-next.1

See docs/releases/v1.49.0-next.1-changelog.md for more information.

v1.49.0-next.0

See docs/releases/v1.49.0-next.0-changelog.md for more information.

v1.48.4

This release contains security fixes for @backstage/plugin-techdocs-node @backstage/integration and @backstage/plugin-scaffolder-backend

v1.48.3

This patch release fixes the following issues:

• Fixes the @mui/material/styles shared dependency key by removing a trailing slash that caused module resolution failures with MUI package exports.
• Fixes entity page tab groups not respecting the ordering from the groups configuration.

v1.48.2

This patch release includes the following fixes:

• Updated @microsoft/api-extractor to 7.57.3 (#32950)
• Add back formFieldsApiRef and ScaffolderFormFieldsApi alpha exports from @backstage/plugin-scaffolder (#32969)
• Perform search on first navigate (#32973)

v1.48.1

This patch release fixes the following issues:

• Add missing sharing extensions sidebar item in frontend system architecture docs
• Fix type compatibility for older plugins in FrontendFeature type

v1.48.0

These are the release notes for the v1.48.0 release of Backstage.

A huge thanks to the whole team of maintainers and contributors as well as the amazing Backstage Community for the hard work in getting this release developed and done.

Highlights

BREAKING ALPHA: Catalog extension points graduated

If you are providing custom processors and entity providers into the catalog, you will now note that several (but not quite all!) of those extension points have graduated out of alpha and into the regular stable exports.

Thus, if you are importing for example catalogProcessingExtensionPoint from @backstage/plugin-catalog-node/alpha, you now want to remove that /alpha suffix.

BREAKING: API restrictions in New Frontend System

In the 1.47 release a new behavior was introduced to the New Frontend System that limits the ability for plugins and modules to provide APIs to plugins other than themselves. For example, the scaffolder plugin could no longer install a custom CatalogApi implementation. This also applies to modules, where you now need to use a module explicitly targeting the 'app' plugin to for example override the ErrorApi.

In 1.47 this new behavior simply triggered a warning, but in this release the API overrides are instead rejected with an error.

Experimental Client ID Metadata Documents

With the latest MCP specification published in November, it outlined a new authorization method that’s going to take over from Dynamic Client Registration called Client ID Metadata Documents.

... (truncated)

Changelog

Sourced from @​backstage/plugin-catalog-react's changelog.

2.0.0

Minor Changes

• 0e9578d: Migrated UnregisterEntityDialog from Material UI to Backstage UI components.

• 491a06c: Add the ability to show icons for the tabs on the entity page (new frontend)

• b4e8249: Implemented support for the new queryLocations and streamLocations that allow paginated/streamed and filtered location queries

• 7feb83b: BREAKING ALPHA: All of the predicate types and functions have been moved to the @backstage/filter-predicates package.

  When moving into the more general package, they were renamed as follows:

  • EntityPredicate -> FilterPredicate
  • EntityPredicateExpression -> FilterPredicateExpression
  • EntityPredicatePrimitive -> FilterPredicatePrimitive
  • entityPredicateToFilterFunction -> filterPredicateToFilterFunction
  • EntityPredicateValue -> FilterPredicateValue

• e8258d0: BREAKING: Removed the 'summary' entity card type from EntityCardType. Users should migrate to using 'content' or 'info' card types instead.

  TypeScript will now show errors if you try to use type: 'summary' when creating entity cards.

• ac9bead: Added createTestEntityPage test utility for testing entity cards and content extensions in the new frontend system. This utility creates a test page extension that provides EntityProvider context and accepts entity extensions through input redirects:

  import { renderTestApp } from '@backstage/frontend-test-utils';
  import { createTestEntityPage } from '@backstage/plugin-catalog-react/testUtils';
  renderTestApp({
  extensions: [createTestEntityPage({ entity: myEntity }), myEntityCard],
  });

Patch Changes

• f523983: Fixes a bug where the EntityListProvider would not correctly hydrate query parameters if more than 20 were provided for the same key.
• 09a6aad: The catalogApiMock test utility now returns a MockWithApiFactory, allowing it to be passed directly to test utilities like renderTestApp and TestApiProvider without needing the [catalogApiRef, catalogApiMock()] tuple.
• 88dbd5e: fixed bug in UserListPicker by getting the kindParamater from the filters rather than from the queryParameters
• a7e0d50: Updated react-router-dom peer dependency to ^6.30.2 and explicitly disabled v7 future flags to suppress deprecation warnings.
• 69d880e: Bump to latest zod to ensure it has the latest features
• Updated dependencies
  • @​backstage/ui@​0.12.0
  • @​backstage/frontend-test-utils@​0.5.0
  • @​backstage/core-components@​0.18.7
  • @​backstage/core-compat-api@​0.5.8
  • @​backstage/frontend-plugin-api@​0.14.0
  • @​backstage/catalog-client@​1.13.0
  • @​backstage/core-plugin-api@​1.12.3
  • @​backstage/integration-react@​1.2.15
  • @​backstage/plugin-permission-react@​0.4.40
  • @​backstage/version-bridge@​1.0.12

... (truncated)

Commits

• See full diff in compare view

Updates @backstage/plugin-permission-react from 0.4.17 to 0.4.40

Changelog

Sourced from @​backstage/plugin-permission-react's changelog.

0.4.40

Patch Changes

• a7e0d50: Updated react-router-dom peer dependency to ^6.30.2 and explicitly disabled v7 future flags to suppress deprecation warnings.
• Updated dependencies
  • @​backstage/core-plugin-api@​1.12.3
  • @​backstage/plugin-permission-common@​0.9.6

0.4.40-next.1

Patch Changes

• a7e0d50: Prepare for React Router v7 migration by updating to v6.30.2 across all NFS packages and enabling v7 future flags. Convert routes from splat paths to parent/child structure with Outlet components.
• Updated dependencies
  • @​backstage/core-plugin-api@​1.12.3-next.1

0.4.40-next.0

Patch Changes

• Updated dependencies
  • @​backstage/core-plugin-api@​1.12.2-next.0
  • @​backstage/plugin-permission-common@​0.9.5-next.0
  • @​backstage/config@​1.3.6

0.4.39

Patch Changes

• Updated dependencies
  • @​backstage/core-plugin-api@​1.12.1

0.4.39-next.0

Patch Changes

• Updated dependencies
  • @​backstage/core-plugin-api@​1.12.1-next.0
  • @​backstage/config@​1.3.6
  • @​backstage/plugin-permission-common@​0.9.3

0.4.38

Patch Changes

• 05f60e1: Refactored constructor parameter properties to explicit property declarations for compatibility with TypeScript's erasableSyntaxOnly setting. This internal refactoring maintains all existing functionality while ensuring TypeScript compilation compatibility.
• Updated dependencies
  • @​backstage/core-plugin-api@​1.12.0
  • @​backstage/plugin-permission-common@​0.9.3

... (truncated)

Commits

• See full diff in compare view

Updates react from 17.0.2 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbageDescription has been truncated

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign creydr for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift-knative member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.