chore(deps): bump the backstage group across 1 directory with 13 updates by dependabot[bot] · Pull Request #202 · buildkite/backstage-plugin

dependabot · 2026-04-18T03:07:07Z

Bumps the backstage group with 8 updates in the / directory:

Package	From	To
@backstage/catalog-model	`1.7.6`	`1.8.0`
@backstage/config	`1.3.6`	`1.3.7`
@backstage/core-compat-api	`0.5.7`	`0.5.10`
@backstage/frontend-defaults	`0.3.6`	`0.5.1`
@backstage/frontend-plugin-api	`0.13.4`	`0.16.1`
@backstage/cli	`0.35.4`	`0.36.1`
@backstage/dev-utils	`1.1.19`	`1.1.22`
@backstage/test-utils	`1.7.14`	`1.7.17`

Updates @backstage/catalog-model from 1.7.6 to 1.8.0

Changelog

Sourced from @backstage/catalog-model's changelog.

1.8.0

Minor Changes

e5fcfcb: Added a new catalog model layer system that allows plugins to declare and extend catalog entity kinds, annotations, labels, tags, and relations using JSON Schema. The new createCatalogModelLayer API provides a builder for composing model definitions, and a compileCatalogModel function validates and merges them into a unified model. Built-in entity kinds now include model layer definitions.

Patch Changes

Updated dependencies

@backstage/errors@1.3.0

1.7.8-next.0

Patch Changes

Updated dependencies

@backstage/errors@1.3.0-next.0

1.7.7

Patch Changes

a49a40d: Updated dependency zod to ^3.25.76 || ^4.0.0 & migrated to /v3 or /v4 imports.

Commits

See full diff in compare view

Updates @backstage/config from 1.3.6 to 1.3.7

Changelog

Sourced from @backstage/config's changelog.

1.3.7

Patch Changes

Updated dependencies

@backstage/errors@1.3.0

1.3.7-next.0

Patch Changes

Updated dependencies

@backstage/errors@1.3.0-next.0

Commits

See full diff in compare view

Updates @backstage/core-compat-api from 0.5.7 to 0.5.10

Changelog

Sourced from @backstage/core-compat-api's changelog.

0.5.10

Patch Changes

77ab7d5: Hide the default page header for pages created through the compatibility wrappers, since legacy plugins already render their own headers.

49397c1: Removed unnecessary type argument from internal createRouteRef call.

Updated dependencies

@backstage/errors@1.3.0

@backstage/plugin-catalog-react@2.1.2

@backstage/frontend-plugin-api@0.16.0

@backstage/filter-predicates@0.1.2

@backstage/core-plugin-api@1.12.5

@backstage/plugin-app-react@0.2.2

0.5.10-next.2

Patch Changes

Updated dependencies

@backstage/errors@1.3.0-next.0

@backstage/plugin-catalog-react@2.1.2-next.2

@backstage/core-plugin-api@1.12.5-next.2

@backstage/filter-predicates@0.1.2-next.0

@backstage/frontend-plugin-api@0.16.0-next.2

0.5.10-next.1

Patch Changes

77ab7d5: Hide the default page header for pages created through the compatibility wrappers, since legacy plugins already render their own headers.

49397c1: Removed unnecessary type argument from internal createRouteRef call.

Updated dependencies

@backstage/plugin-catalog-react@2.1.2-next.1

@backstage/frontend-plugin-api@0.16.0-next.1

@backstage/core-plugin-api@1.12.5-next.1

@backstage/plugin-app-react@0.2.2-next.1

0.5.10-next.0

Patch Changes

Updated dependencies

@backstage/plugin-catalog-react@2.1.1-next.0

@backstage/frontend-plugin-api@0.15.2-next.0

@backstage/core-plugin-api@1.12.5-next.0

@backstage/plugin-app-react@0.2.2-next.0

@backstage/errors@1.2.7

@backstage/filter-predicates@0.1.1

@backstage/types@1.2.2

@backstage/version-bridge@1.0.12

... (truncated)

Commits

See full diff in compare view

Updates @backstage/core-components from 0.18.6 to 0.18.9

Changelog

Sourced from @backstage/core-components's changelog.

0.18.9

Patch Changes

482ceed: Migrated from assertError to toError for error handling.

320eed3: Resolved DOM nesting warning in OAuthRequestDialog by rendering secondary text as block-level spans.

58b9f3f: Use Backstage Link component for markdown anchor rendering to ensure consistent internal and external link behavior.

Updated dependencies

@backstage/errors@1.3.0

@backstage/theme@0.7.3

@backstage/config@1.3.7

@backstage/core-plugin-api@1.12.5

0.18.9-next.1

Patch Changes

482ceed: Migrated from assertError to toError for error handling.

58b9f3f: Use Backstage Link component for markdown anchor rendering to ensure consistent internal and external link behavior.

Updated dependencies

@backstage/errors@1.3.0-next.0

@backstage/theme@0.7.3-next.0

@backstage/config@1.3.7-next.0

@backstage/core-plugin-api@1.12.5-next.2

0.18.9-next.0

Patch Changes

320eed3: Resolved DOM nesting warning in OAuthRequestDialog by rendering secondary text as block-level spans.

Updated dependencies

@backstage/core-plugin-api@1.12.5-next.0

@backstage/config@1.3.6

@backstage/errors@1.2.7

@backstage/theme@0.7.2

@backstage/version-bridge@1.0.12

0.18.8

Patch Changes

e26e3de: The login request dialog now handles auth provider icons passed as IconElement in addition to IconComponent.

8e09233: Fixed the shared Progress component to provide an accessible name for its loading indicator by default.

8b1a847: Fixed Table component layout when both filters and title props are used together. The filter controls now use a dedicated CSS class (filterControls) instead of incorrectly reusing the root container class.

3f36ce1: Clarified the IconElement sizing contract for the new frontend system and aligned legacy system icon rendering with the new icon API.

0be2541: Promoted the plugin's translation ref to the stable package entry point. It was previously only available through the alpha entry point.

a49a40d: Updated dependency zod to ^3.25.76 || ^4.0.0 & migrated to /v3 or /v4 imports.

470f72d: The LogViewer component from @backstage/core-components now supports downloading logs if a callback is passed to onDownloadLogs

Updated dependencies

@backstage/core-plugin-api@1.12.4

... (truncated)

Commits

See full diff in compare view

Updates @backstage/core-plugin-api from 1.12.2 to 1.12.5

Changelog

Sourced from @backstage/core-plugin-api's changelog.

1.12.5

Patch Changes

Updated dependencies

@backstage/errors@1.3.0

@backstage/frontend-plugin-api@0.16.0

@backstage/config@1.3.7

1.12.5-next.2

Patch Changes

Updated dependencies

@backstage/errors@1.3.0-next.0

@backstage/config@1.3.7-next.0

@backstage/frontend-plugin-api@0.16.0-next.2

1.12.5-next.1

Patch Changes

Updated dependencies

@backstage/frontend-plugin-api@0.16.0-next.1

1.12.5-next.0

Patch Changes

Updated dependencies

@backstage/frontend-plugin-api@0.15.2-next.0

@backstage/config@1.3.6

@backstage/errors@1.2.7

@backstage/types@1.2.2

@backstage/version-bridge@1.0.12

1.12.4

Patch Changes

d911b72: Updated createApiRef to preserve the direct config call without deprecation warnings while staying compatible with the new frontend API ref typing.

59752a2: Deprecated AlertApi, AlertMessage, and alertApiRef in favor of the new ToastApi from @backstage/frontend-plugin-api.

0452d02: Add optional description field to plugin-level feature flags.

a49a40d: Updated dependency zod to ^3.25.76 || ^4.0.0 & migrated to /v3 or /v4 imports.

fe848e0: Changed useApiHolder to return an empty ApiHolder instead of throwing when used outside of an API context.

Updated dependencies

@backstage/frontend-plugin-api@0.15.0

1.12.4-next.1

... (truncated)

Commits

See full diff in compare view

Updates @backstage/frontend-defaults from 0.3.6 to 0.5.1

Changelog

Sourced from @backstage/frontend-defaults's changelog.

0.5.1

Patch Changes

Updated dependencies

@backstage/errors@1.3.0

@backstage/plugin-app@0.4.3

@backstage/frontend-plugin-api@0.16.0

@backstage/core-components@0.18.9

@backstage/frontend-app-api@0.16.2

@backstage/config@1.3.7

0.5.1-next.2

Patch Changes

Updated dependencies

@backstage/errors@1.3.0-next.0

@backstage/plugin-app@0.4.3-next.2

@backstage/core-components@0.18.9-next.1

@backstage/config@1.3.7-next.0

@backstage/frontend-app-api@0.16.2-next.2

@backstage/frontend-plugin-api@0.16.0-next.2

0.5.1-next.1

Patch Changes

Updated dependencies

@backstage/plugin-app@0.4.3-next.1

@backstage/frontend-plugin-api@0.16.0-next.1

@backstage/frontend-app-api@0.16.2-next.1

@backstage/core-components@0.18.9-next.0

0.5.1-next.0

Patch Changes

Updated dependencies

@backstage/plugin-app@0.4.3-next.0

@backstage/core-components@0.18.9-next.0

@backstage/frontend-plugin-api@0.15.2-next.0

@backstage/frontend-app-api@0.16.2-next.0

@backstage/config@1.3.6

@backstage/errors@1.2.7

0.5.0

Minor Changes

... (truncated)

Commits

See full diff in compare view

Updates @backstage/frontend-plugin-api from 0.13.4 to 0.16.1

Changelog

Sourced from @backstage/frontend-plugin-api's changelog.

@backstage/frontend-plugin-api

0.16.0

Minor Changes

fa55078: BREAKING: Removed the deprecated createSchemaFromZod helper. Use the new configSchema option instead. See the 1.50 migration documentation for more information.

49397c1: Simplified the type signature of createRouteRef by replacing the dual TParams/TParamKeys type parameters with a single TParamKey parameter. This is a breaking change for callers that explicitly provided type arguments, but most usage that relies on inference is unaffected.

Patch Changes

4c09967: Fixed the duplicate extension error message in createFrontendModule to correctly say "Module" instead of "Plugin".

e4804ab: Added open method to DialogApi that renders dialogs without any built-in dialog chrome, giving the caller full control over the dialog presentation. This avoids focus trap conflicts that occur when mixing components from different design libraries. The existing show and showModal methods are now deprecated in favor of open.

ddc5247: Fixed FlattenedMessages type to avoid excessive type instantiation depth in TypeScript 6 when using createTranslationRef with the translations option.

a2a6c3b: Added a new configSchema option for createExtension and createExtensionBlueprint that accepts direct schema values from any Standard Schema compatible library with JSON Schema support, such as zod v4 (zod@^4.0.0). The old config.schema option is now deprecated. Note that Zod v3 is not supported by the new configSchema option, including the zod/v4 subpath export which does not include JSON Schema conversion support. You must upgrade to the zod v4 package. See the 1.50 migration documentation for more information.

d66a3ec: Added titleLink prop to PageLayoutProps so the plugin header title can link back to the plugin root.

e220589: Removed the unnecessary need to use defineParams callback from PluginHeaderActionBlueprint. It still works, but is no longer required.

Updated dependencies

@backstage/errors@1.3.0

@backstage/filter-predicates@0.1.2

0.16.0-next.2

Patch Changes

Updated dependencies

@backstage/errors@1.3.0-next.0

@backstage/filter-predicates@0.1.2-next.0

0.16.0-next.1

Minor Changes

49397c1: Simplified the type signature of createRouteRef by replacing the dual TParams/TParamKeys type parameters with a single TParamKey parameter. This is a breaking change for callers that explicitly provided type arguments, but most usage that relies on inference is unaffected.

Patch Changes

ddc5247: Fixed FlattenedMessages type to avoid excessive type instantiation depth in TypeScript 6 when using createTranslationRef with the translations option.

fa55078: Refactored the internal createSchemaFromZod helper to use a schema-first generic pattern, replacing the ZodSchema<TOutput, ZodTypeDef, TInput> constraint with TSchema extends ZodType. This avoids "excessively deep" type inference errors when multiple Zod copies are resolved.

0.15.2-next.0

Patch Changes

d66a3ec: Added titleLink prop to PageLayoutProps so the plugin header title can link back to the plugin root.

e220589: Removed the unnecessary need to use defineParams callback from PluginHeaderActionBlueprint. It still works, but is no longer required.

Updated dependencies

@backstage/errors@1.2.7

@backstage/filter-predicates@0.1.1

@backstage/types@1.2.2

... (truncated)

Commits

See full diff in compare view

Updates @backstage/theme from 0.7.1 to 0.7.3

Changelog

Sourced from @backstage/theme's changelog.

0.7.3

Patch Changes

a0100d4: Fixes occasional duplication of v5 class name prefix for MUI 5 components.

Documentation added to explain how to resolve missing v5 prefix in class names when using MUI 5 components in main app.

0.7.3-next.0

Patch Changes

a0100d4: Fixes occasional duplication of v5 class name prefix for MUI 5 components.

Documentation added to explain how to resolve missing v5 prefix in class names when using MUI 5 components in main app.

0.7.2

Patch Changes

1c52dcc: add square shape

a7e0d50: Updated react-router-dom peer dependency to ^6.30.2 and explicitly disabled v7 future flags to suppress deprecation warnings.

0.7.2-next.1

Patch Changes

a7e0d50: Prepare for React Router v7 migration by updating to v6.30.2 across all NFS packages and enabling v7 future flags. Convert routes from splat paths to parent/child structure with Outlet components.

0.7.2-next.0

Patch Changes

1c52dcc: add square shape

Commits

See full diff in compare view

Updates @backstage/cli from 0.35.4 to 0.36.1

Changelog

Sourced from @backstage/cli's changelog.

0.36.1

Patch Changes

2e5c5f8: Bumped glob dependency from v7/v8/v11 to v13 to address security vulnerabilities in older versions. Bumped rollup from v4.27 to v4.59+ to fix a high severity path traversal vulnerability (GHSA-mw96-cpmx-2vgc).

482ceed: Migrated from assertError to toError for error handling.

a2f0c72: Removed the unused isDev export from the internal version module.

a7a14b7: Added DOM.AsyncIterable to the default lib in the shared TypeScript configuration, enabling standard async iteration support for DOM APIs such as FileSystemDirectoryHandle. This aligns behavior with TypeScript 6.0, where this lib is included in DOM by default.

Updated dependencies

@backstage/errors@1.3.0

@backstage/cli-module-build@0.1.1

@backstage/cli-module-test-jest@0.1.1

@backstage/cli-common@0.2.1

@backstage/cli-node@0.3.1

@backstage/eslint-plugin@0.2.3

@backstage/cli-defaults@0.1.1

0.36.1-next.2

Patch Changes

482ceed: Migrated from assertError to toError for error handling.

Updated dependencies

@backstage/errors@1.3.0-next.0

@backstage/cli-common@0.2.1-next.1

@backstage/cli-node@0.3.1-next.1

@backstage/cli-module-build@0.1.1-next.2

0.36.1-next.1

Patch Changes

2e5c5f8: Bumped glob dependency from v7/v8/v11 to v13 to address security vulnerabilities in older versions. Bumped rollup from v4.27 to v4.59+ to fix a high severity path traversal vulnerability (GHSA-mw96-cpmx-2vgc).

a7a14b7: Added DOM.AsyncIterable to the default lib in the shared TypeScript configuration, enabling standard async iteration support for DOM APIs such as FileSystemDirectoryHandle. This aligns behavior with TypeScript 6.0, where this lib is included in DOM by default.

Updated dependencies

@backstage/cli-module-build@0.1.1-next.1

@backstage/cli-module-test-jest@0.1.1-next.1

@backstage/eslint-plugin@0.2.3-next.0

0.36.1-next.0

Patch Changes

Updated dependencies

@backstage/cli-common@0.2.1-next.0

@backstage/cli-module-build@0.1.1-next.0

@backstage/cli-module-test-jest@0.1.1-next.0

@backstage/cli-node@0.3.1-next.0

@backstage/cli-defaults@0.1.1-next.0

@backstage/errors@1.2.7

... (truncated)

Commits

See full diff in compare view

Updates @backstage/core-app-api from 1.19.4 to 1.20.0

Changelog

Sourced from @backstage/core-app-api's changelog.

1.20.0

Minor Changes

400aa23: Added FetchMiddlewares.clarifyFailures() which replaces the uninformative "TypeError: Failed to fetch" with a message that includes the request method and URL.

Patch Changes

9244b70: The default auth implementation now checks for a logoutUrl in the logout response body. If the auth provider returns one (e.g. Auth0 federated logout), the browser is redirected to that URL to clear the provider's session cookies. This is backward compatible — providers that return an empty response are unaffected.

Updated dependencies

@backstage/ui@0.14.0

@backstage/config@1.3.7

@backstage/core-plugin-api@1.12.5

1.20.0-next.2

Patch Changes

9244b70: The default auth implementation now checks for a logoutUrl in the logout response body. If the auth provider returns one (e.g. Auth0 federated logout), the browser is redirected to that URL to clear the provider's session cookies. This is backward compatible — providers that return an empty response are unaffected.

Updated dependencies

@backstage/ui@0.14.0-next.2

@backstage/config@1.3.7-next.0

@backstage/core-plugin-api@1.12.5-next.2

1.20.0-next.1

Minor Changes

400aa23: Added FetchMiddlewares.clarifyFailures() which replaces the uninformative "TypeError: Failed to fetch" with a message that includes the request method and URL.

Patch Changes

Updated dependencies

@backstage/ui@0.14.0-next.1

@backstage/core-plugin-api@1.12.5-next.1

1.19.7-next.0

Patch Changes

Updated dependencies

@backstage/ui@0.14.0-next.0

@backstage/core-plugin-api@1.12.5-next.0

@backstage/config@1.3.6

@backstage/types@1.2.2

@backstage/version-bridge@1.0.12

1.19.6

Patch Changes

... (truncated)

Commits

c8a8aac Version Packages
ce632aa fix
8345a35 Version Packages (next)
91f340c Merge pull request #20653 from szubster/add-default-scopes-on-refresh
56baf87 core-app-api: test fixes for including default scopes in initial refresh
9ab0572 core-app-api: add core.type markers for AppRouter and FlatRoutes
89d13e5 Add current and defaultScopes when refreshing session
ec1dde6 switch to @testing-library/react 14
aa2ff48 switch react version ranges to full format
fb7a94f packages: rtl 13 fixes for tests
Additional commits viewable in compare view

Updates @backstage/dev-utils from 1.1.19 to 1.1.22

Changelog

Sourced from @backstage/dev-utils's changelog.

1.1.22

Patch Changes

Updated dependencies

@backstage/ui@0.14.0

@backstage/app-defaults@1.7.7

@backstage/theme@0.7.3

@backstage/catalog-model@1.8.0

@backstage/plugin-catalog-react@2.1.2

@backstage/core-app-api@1.20.0

@backstage/core-components@0.18.9

@backstage/core-plugin-api@1.12.5

@backstage/integration-react@1.2.17

1.1.22-next.2

Patch Changes

Updated dependencies

@backstage/ui@0.14.0-next.2

@backstage/theme@0.7.3-next.0

@backstage/core-app-api@1.20.0-next.2

@backstage/core-components@0.18.9-next.1

@backstage/plugin-catalog-react@2.1.2-next.2

@backstage/catalog-model@1.7.8-next.0

@backstage/core-plugin-api@1.12.5-next.2

@backstage/app-defaults@1.7.7-next.2

@backstage/integration-react@1.2.17-next.1

1.1.22-next.1

Patch Changes

Updated dependencies

@backstage/app-defaults@1.7.7-next.1

@backstage/ui@0.14.0-next.1

@backstage/core-app-api@1.20.0-next.1

@backstage/plugin-catalog-react@2.1.2-next.1

@backstage/core-components@0.18.9-next.0

@backstage/core-plugin-api@1.12.5-next.1

1.1.22-next.0

Patch Changes

Updated dependencies

@backstage/ui@0.14.0-next.0

@backstage/plugin-catalog-react@2.1.1-next.0

@backstage/core-components@0.18.9-next.0

... (truncated)

Commits

See full diff in compare view

Updates @backstage/eslint-plugin from 0.2.1 to 0.2.3

Changelog

Sourced from @backstage/eslint-plugin's changelog.

0.2.3

Patch Changes

df43b0e: Fixed no-mixed-plugin-imports rule to return null from non-fixable suggestion handlers and added an explicit SuggestionReportDescriptor[] type annotation, matching the stricter type checking in TypeScript 6.0.

0.2.3-next.0

Patch Changes

df43b0e: Fixed no-mixed-plugin-imports rule to return null from non-fixable suggestion handlers and added an explicit SuggestionReportDescriptor[] type annotation, matching the stricter type checking in TypeScript 6.0.

0.2.2

Patch Changes

6738cf0: build(deps): bump minimatch from 9.0.5 to 10.2.1

0.2.2-next.0

Patch Changes

6738cf0: build(deps): bump minimatch from 9.0.5 to 10.2.1

Commits

See full diff in compare view

Updates @backstage/test-utils from 1.7.14 to 1.7.17

Changelog

Sourced from @backstage/test-utils's changelog.

1.7.17

Patch Changes

Updated dependencies

@backstage/theme@0.7.3

@backstage/core-app-api@1.20.0

@backstage/plugin-permission-react@0.5.0

@backstage/config@1.3.7

@backstage/core-plugin-api@1.12.5

@backstage/plugin-permission-common@0.9.8

1.7.17-next.2

Patch Changes

Updated dependencies

@backstage/theme@0.7.3-next.0

@backstage/core-app-api@1.20.0-next.2

@backstage/config@1.3.7-next.0

@backstage/core-plugin-api@1.12.5-next.2

@backstage/plugin-permission-common@0.9.8-next.0

@backstage/plugin-permission-react@0.4.42-next.1

1.7.17-next.1

Patch Changes

Updated dependencies

@backstage/core-app-api@1.20.0-next.1

@backstage/core-plugin-api@1.12.5-next.1

1.7.17-next.0

Patch Changes

Updated dependencies

@backstage/core-app-api@1.19.7-next.0

@backstage/core-plugin-api@1.12.5-next.0

@backstage/config@1.3.6

@backstage/theme@0.7.2

@backstage/types@1.2.2

@backstage/plugin-permission-common@0.9.7

@backstage/plugin-permission-react@0.4.42-next.0

1.7.16

Patch Changes

Updated dependencies

... (truncated)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the backstage group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@backstage/catalog-model](https://github.com/backstage/backstage/tree/HEAD/packages/catalog-model) | `1.7.6` | `1.8.0` | | [@backstage/config](https://github.com/backstage/backstage/tree/HEAD/packages/config) | `1.3.6` | `1.3.7` | | [@backstage/core-compat-api](https://github.com/backstage/backstage/tree/HEAD/packages/core-compat-api) | `0.5.7` | `0.5.10` | | [@backstage/frontend-defaults](https://github.com/backstage/backstage/tree/HEAD/packages/frontend-defaults) | `0.3.6` | `0.5.1` | | [@backstage/frontend-plugin-api](https://github.com/backstage/backstage/tree/HEAD/packages/frontend-plugin-api) | `0.13.4` | `0.16.1` | | [@backstage/cli](https://github.com/backstage/backstage/tree/HEAD/packages/cli) | `0.35.4` | `0.36.1` | | [@backstage/dev-utils](https://github.com/backstage/backstage/tree/HEAD/packages/dev-utils) | `1.1.19` | `1.1.22` | | [@backstage/test-utils](https://github.com/backstage/backstage/tree/HEAD/packages/test-utils) | `1.7.14` | `1.7.17` | Updates `@backstage/catalog-model` from 1.7.6 to 1.8.0 - [Release notes](https://github.com/backstage/backstage/releases) - [Changelog](https://github.com/backstage/backstage/blob/master/packages/catalog-model/CHANGELOG.md) - [Commits](https://github.com/backstage/backstage/commits/v1.8.0/packages/catalog-model) Updates `@backstage/config` from 1.3.6 to 1.3.7 - [Release notes](https://github.com/backstage/backstage/releases) - [Changelog](https://github.com/backstage/backstage/blob/master/packages/config/CHANGELOG.md) - [Commits](https://github.com/backstage/backstage/commits/HEAD/packages/config) Updates `@backstage/core-compat-api` from 0.5.7 to 0.5.10 - [Release notes](https://github.com/backstage/backstage/releases) - [Changelog](https://github.com/backstage/backstage/blob/master/packages/core-compat-api/CHANGELOG.md) - [Commits](https://github.com/backstage/backstage/commits/HEAD/packages/core-compat-api) Updates `@backstage/core-components` from 0.18.6 to 0.18.9 - [Release notes](https://github.com/backstage/backstage/releases) - [Changelog](https://github.com/backstage/backstage/blob/master/packages/core-components/CHANGELOG.md) - [Commits](https://github.com/backstage/backstage/commits/HEAD/packages/core-components) Updates `@backstage/core-plugin-api` from 1.12.2 to 1.12.5 - [Release notes](https://github.com/backstage/backstage/releases) - [Changelog](https://github.com/backstage/backstage/blob/master/packages/core-plugin-api/CHANGELOG.md) - [Commits](https://github.com/backstage/backstage/commits/HEAD/packages/core-plugin-api) Updates `@backstage/frontend-defaults` from 0.3.6 to 0.5.1 - [Release notes](https://github.com/backstage/backstage/releases) - [Changelog](https://github.com/backstage/backstage/blob/master/packages/frontend-defaults/CHANGELOG.md) - [Commits](https://github.com/backstage/backstage/commits/HEAD/packages/frontend-defaults) Updates `@backstage/frontend-plugin-api` from 0.13.4 to 0.16.1 - [Release notes](https://github.com/backstage/backstage/releases) - [Changelog](https://github.com/backstage/backstage/blob/master/packages/frontend-plugin-api/CHANGELOG.md) - [Commits](https://github.com/backstage/backstage/commits/v0.16.1/packages/frontend-plugin-api) Updates `@backstage/theme` from 0.7.1 to 0.7.3 - [Release notes](https://github.com/backstage/backstage/releases) - [Changelog](https://github.com/backstage/backstage/blob/master/packages/theme/CHANGELOG.md) - [Commits](https://github.com/backstage/backstage/commits/HEAD/packages/theme) Updates `@backstage/cli` from 0.35.4 to 0.36.1 - [Release notes](https://github.com/backstage/backstage/releases) - [Changelog](https://github.com/backstage/backstage/blob/master/packages/cli/CHANGELOG.md) - [Commits](https://github.com/backstage/backstage/commits/v0.36.1/packages/cli) Updates `@backstage/core-app-api` from 1.19.4 to 1.20.0 - [Release notes](https://github.com/backstage/backstage/releases) - [Changelog](https://github.com/backstage/backstage/blob/master/packages/core-app-api/CHANGELOG.md) - [Commits](https://github.com/backstage/backstage/commits/v1.20.0/packages/core-app-api) Updates `@backstage/dev-utils` from 1.1.19 to 1.1.22 - [Release notes](https://github.com/backstage/backstage/releases) - [Changelog](https://github.com/backstage/backstage/blob/master/packages/dev-utils/CHANGELOG.md) - [Commits](https://github.com/backstage/backstage/commits/HEAD/packages/dev-utils) Updates `@backstage/eslint-plugin` from 0.2.1 to 0.2.3 - [Release notes](https://github.com/backstage/backstage/releases) - [Changelog](https://github.com/backstage/backstage/blob/master/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/backstage/backstage/commits/HEAD/packages/eslint-plugin) Updates `@backstage/test-utils` from 1.7.14 to 1.7.17 - [Release notes](https://github.com/backstage/backstage/releases) - [Changelog](https://github.com/backstage/backstage/blob/master/packages/test-utils/CHANGELOG.md) - [Commits](https://github.com/backstage/backstage/commits/HEAD/packages/test-utils) --- updated-dependencies: - dependency-name: "@backstage/catalog-model" dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backstage - dependency-name: "@backstage/config" dependency-version: 1.3.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backstage - dependency-name: "@backstage/core-compat-api" dependency-version: 0.5.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backstage - dependency-name: "@backstage/core-components" dependency-version: 0.18.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backstage - dependency-name: "@backstage/core-plugin-api" dependency-version: 1.12.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backstage - dependency-name: "@backstage/frontend-defaults" dependency-version: 0.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backstage - dependency-name: "@backstage/frontend-plugin-api" dependency-version: 0.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backstage - dependency-name: "@backstage/theme" dependency-version: 0.7.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backstage - dependency-name: "@backstage/cli" dependency-version: 0.36.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: backstage - dependency-name: "@backstage/core-app-api" dependency-version: 1.20.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: backstage - dependency-name: "@backstage/dev-utils" dependency-version: 1.1.22 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: backstage - dependency-name: "@backstage/eslint-plugin" dependency-version: 0.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: backstage - dependency-name: "@backstage/test-utils" dependency-version: 1.7.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: backstage ... Signed-off-by: dependabot[bot] <[email protected]>

socket-security · 2026-04-18T03:08:16Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@backstage/frontend-defaults@0.5.1
@backstage/core-compat-api@0.5.7 ⏵ 0.5.10		⁺¹
@backstage/config@1.3.6 ⏵ 1.3.7	⁺¹	⁺¹	⁺¹
@backstage/dev-utils@1.1.19 ⏵ 1.1.22
@backstage/frontend-plugin-api@0.16.1
@backstage/theme@0.7.1 ⏵ 0.7.3		⁺¹
@backstage/core-plugin-api@1.12.2 ⏵ 1.12.5	⁺¹	⁺¹	⁺¹
@backstage/test-utils@1.7.14 ⏵ 1.7.17
@backstage/catalog-model@1.7.6 ⏵ 1.8.0		⁺²	⁺¹
@backstage/core-app-api@1.19.4 ⏵ 1.20.0		⁺¹	⁺¹
@backstage/core-components@0.18.6 ⏵ 0.18.9	⁺¹	⁺¹
@backstage/cli@0.35.4 ⏵ 0.36.1	⁺⁷	^-2	⁺¹
@backstage/eslint-plugin@0.2.1 ⏵ 0.2.3			⁺¹

View full report

dependabot bot added the dependencies Pull requests that update a dependency file label Apr 18, 2026

dependabot bot requested a review from a team as a code owner April 18, 2026 03:07

dependabot bot added the dependencies Pull requests that update a dependency file label Apr 18, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the backstage group across 1 directory with 13 updates#202

chore(deps): bump the backstage group across 1 directory with 13 updates#202
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/backstage-e16b337cf4

dependabot bot commented on behalf of github Apr 18, 2026

Uh oh!

socket-security bot commented Apr 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Apr 18, 2026

1.8.0

Minor Changes

Patch Changes

1.7.8-next.0

Patch Changes

1.7.7

Patch Changes

1.3.7

Patch Changes

1.3.7-next.0

Patch Changes

0.5.10

Patch Changes

0.5.10-next.2

Patch Changes

0.5.10-next.1

Patch Changes

0.5.10-next.0

Patch Changes

0.18.9

Patch Changes

0.18.9-next.1

Patch Changes

0.18.9-next.0

Patch Changes

0.18.8

Patch Changes

1.12.5

Patch Changes

1.12.5-next.2

Patch Changes

1.12.5-next.1

Patch Changes

1.12.5-next.0

Patch Changes

1.12.4

Patch Changes

1.12.4-next.1

0.5.1

Patch Changes

0.5.1-next.2

Patch Changes

0.5.1-next.1

Patch Changes

0.5.1-next.0

Patch Changes

0.5.0

Minor Changes

@​backstage/frontend-plugin-api

0.16.0

Minor Changes

Patch Changes

0.16.0-next.2

Patch Changes

0.16.0-next.1

Minor Changes

Patch Changes

0.15.2-next.0

Patch Changes

0.7.3

Patch Changes

0.7.3-next.0

Patch Changes

0.7.2

Patch Changes

0.7.2-next.1

Patch Changes

0.7.2-next.0

Patch Changes

0.36.1

Patch Changes

0.36.1-next.2

Patch Changes

0.36.1-next.1

Patch Changes

0.36.1-next.0

Patch Changes

1.20.0

`@backstage/frontend-plugin-api`