Backstage - v1.2.0

Security

These are the release notes for the v1.2.0 release of Backstage.

A huge thanks to the whole team of maintainers and contributors as well as the amazing Backstage Community for the hard work in getting this release developed and done.

Highlights

TechDocs

The TechDocs addon framework is now generally available! See the TechDocs Addons documentation for more information on how to customize your views.

New plugin: ADR

The new @backstage/plugin-adr lets you track your active ADRs inside Backstage! Contributed by @kuangp

New Plugin: CodeScene plugin

The CodeScene Backstage plugin exposes a page component that will list the existing projects and their analysis data on your CodeScene instance. Contributed by @julio #10777

New plugin: plugin-catalog-backend-module-gerrit

Gerrit integration is here! See docs on gerrit discovery and gerrit locations for more information.
Contributed by @anicke #10669

Integrations

Bitbucket Server and Bitbucket Cloud have been split up internally as the feature sets differ slightly, new scaffolder actions and integrations config has been added to accommodate a gradual migration. Contributed by @pjungermann

Backend-common

Server-to-server authentication tokens issued from a TokenManager (specifically, ServerTokenManager) now has an expiry time set, for one hour in the future from when issued. This improves security. The ability to pass in and validate tokens that either have a missing exp claim, or an exp claim that expired in the past, is now deprecated. Trying to do so will lead to logged warnings, and in a future release will instead lead to errors.
#11262

Kubernetes

Added support for oidc as authProvider for kubernetes authentication and added an optional oidcTokenProvider config value. This will allow users to authenticate to kubernetes clusters using ID tokens obtained from the configured auth provider in their Backstage instance. Contributed by @dbravovmw(https://github.com/dbravovmw). #11328(https://github.com/backstage/backstage/pull/11328)

Misc

The TaskScheduleDefinition of the backend task scheduler has been updated to also accept an options object containing duration information in the form of days, hours, seconds and so on. This allows for scheduling without importing luxon. #11245
Added the ability to render a custom component when an entity is not found #11047

Security Fixes

@backstage/plugin-scaffolder-backend-module-rails, please upgrade to the latest version if you are using this module.

Upgrade path

We recommend that you keep your Backstage project up to date with this latest release. For more guidance on how to upgrade, check out the documentation for keeping Backstage updated.

Links and References

Below you can find a list of links and references to help you learn about and start using this new release.

Sign up for our newsletter if you want to be informed about what is happening in the world of Backstage.


Security

Security wording was detected, but no CVEs were found.

Details

date
May 17, 2022, 11:07 a.m.
name
v1.2.0
type
Minor
👇
Register or login to:
  • 🔍View and search all Backstage releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or