Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 26, 2025

Bumps @backstage/plugin-scaffolder-backend from 1.19.2 to 2.1.1.

Release notes

Sourced from @​backstage/plugin-scaffolder-backend's releases.

v1.46.0-next.0

See docs/releases/v1.46.0-next.0-changelog.md for more information.

v1.45.1

This release fixes an issue where multiple versions of @backstage/frontend-plugin-api could lead to a .withContext is not a function crash.

v1.45.0

These are the release notes for the v1.45.0 release of Backstage.

A huge thanks to the whole team of maintainers and contributors as well as the amazing Backstage Community for the hard work in getting this release developed and done.

Highlights

Backstage UI: Breaking Changes + New Components

Multiple components migrated from Base UI to React Aria Components including Avatar, Checkbox, and removal of the Collapsible component in favour of Accordion.

Check the CHANGELOG.md for more migration guides on any breaking changes that come with these latest updates.

BREAKING: ldapjs -> ldapts

Moved from deprecated ldapjs dependency to ldapts, with breaking changes to custom transformer types and search options.

Contributed by @​ganives in #30594

Check the CHANGELOG.md for more migration guides on any breaking changes that come with these latest updates.

NFS: Plugin-Relative Extension Attachments

Added support for plugin-relative attachTo declarations for extension definitions, allowing extensions to attach to other extensions of a particular kind in the same plugin rather than requiring exact extension IDs.

NFS: Forwards Compatibility for Route Refs

It is now possible to use route references from the old frontend system directly in the new one. That means there's no longer a need to use convertLegacyRouteRef or convertLegacyRouteRefs to re-use route refs in implementations for the new system. This both simplifies migration, and reduces risk for cross system issues while partially migrated.

This requires no immediate action on your part. As long as a plugin intends to support the old system, it can still keep defining its route refs using the old system without issues. And calling convertLegacyRouteRef or convertLegacyRouteRefs does not cause problems.

Configurable Dynamic Client Registration Token Expiration

Allow configuring dynamic client registration token expiration with config auth.experimentalDynamicClientRegistration.tokenExpiration. Maximum expiration for the DCR token is 24 hours. Default expiration is 1 hour. Contributed by @​drodil in #31278

Support for Bitbucket Cloud API tokens

Since Bitbucket Cloud is phasing out support for the appPassword tokens, you can now instead specify the more modern API tokens using the token field of your Bitbucket config.

Support for PostgreSQL 18

The default setup for TestDatabases will start running tests against PG14 and PG18 where available, instead of PG13 and PG17 as previously. If you pass in explicit database IDs to your test database instance, those will still be respected.

coreServices.rootInstanceMetadata is stable

... (truncated)

Changelog

Sourced from @​backstage/plugin-scaffolder-backend's changelog.

@​backstage/plugin-scaffolder-backend

3.1.0-next.0

Minor Changes

  • a4cd405: Add defaultEnvironment config to scaffolder to enable more flexible and custom templates. Now it's possible enable access to default parameters and secrets in templates, improving security and reducing complexity.

Patch Changes

  • 8f4aded: Fixing OpenAPI definition
  • Updated dependencies
    • @​backstage/plugin-auth-node@​0.6.10-next.0
    • @​backstage/backend-defaults@​0.14.0-next.0
    • @​backstage/backend-plugin-api@​1.5.1-next.0
    • @​backstage/integration@​1.18.3-next.0
    • @​backstage/plugin-permission-node@​0.10.7-next.0
    • @​backstage/backend-openapi-utils@​0.6.4-next.0
    • @​backstage/plugin-catalog-backend-module-scaffolder-entity-model@​0.2.15-next.0
    • @​backstage/plugin-catalog-node@​1.20.1-next.0
    • @​backstage/plugin-events-node@​0.4.18-next.0
    • @​backstage/plugin-scaffolder-backend-module-azure@​0.2.16-next.0
    • @​backstage/plugin-scaffolder-backend-module-bitbucket@​0.3.17-next.0
    • @​backstage/plugin-scaffolder-backend-module-bitbucket-cloud@​0.2.16-next.0
    • @​backstage/plugin-scaffolder-backend-module-bitbucket-server@​0.2.16-next.0
    • @​backstage/plugin-scaffolder-backend-module-gerrit@​0.2.16-next.0
    • @​backstage/plugin-scaffolder-backend-module-gitea@​0.2.16-next.0
    • @​backstage/plugin-scaffolder-backend-module-github@​0.9.3-next.0
    • @​backstage/plugin-scaffolder-backend-module-gitlab@​0.10.1-next.0
    • @​backstage/plugin-scaffolder-node@​0.12.2-next.0
    • @​backstage/plugin-bitbucket-cloud-common@​0.3.5-next.0
    • @​backstage/plugin-scaffolder-common@​1.7.4-next.0
    • @​backstage/config@​1.3.6
    • @​backstage/catalog-model@​1.7.6
    • @​backstage/errors@​1.2.7
    • @​backstage/types@​1.2.2
    • @​backstage/plugin-permission-common@​0.9.3

3.0.1

Patch Changes

  • 05f60e1: Refactored constructor parameter properties to explicit property declarations for compatibility with TypeScript's erasableSyntaxOnly setting. This internal refactoring maintains all existing functionality while ensuring TypeScript compilation compatibility.
  • Updated dependencies
    • @​backstage/backend-defaults@​0.13.1
    • @​backstage/plugin-catalog-node@​1.20.0
    • @​backstage/plugin-scaffolder-backend-module-bitbucket-cloud@​0.2.15
    • @​backstage/plugin-scaffolder-backend-module-bitbucket@​0.3.16
    • @​backstage/plugin-bitbucket-cloud-common@​0.3.4
    • @​backstage/integration@​1.18.2

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@backstage/plugin-scaffolder-backend](https://github.com/backstage/backstage/tree/HEAD/plugins/scaffolder-backend) from 1.19.2 to 2.1.1.
- [Release notes](https://github.com/backstage/backstage/releases)
- [Changelog](https://github.com/backstage/backstage/blob/master/plugins/scaffolder-backend/CHANGELOG.md)
- [Commits](https://github.com/backstage/backstage/commits/HEAD/plugins/scaffolder-backend)

---
updated-dependencies:
- dependency-name: "@backstage/plugin-scaffolder-backend"
  dependency-version: 2.1.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 26, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 26, 2025 23:01
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 26, 2025
@github-actions github-actions bot enabled auto-merge (squash) November 26, 2025 23:01
@github-actions github-actions bot requested a review from diegoluisi November 26, 2025 23:01
@github-actions
Copy link
Contributor

I'm not approving this PR because it includes a major update of a dependency used in production

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants