Bump @backstage/plugin-scaffolder-backend from 1.23.0 to 3.1.5 in /backstage

[dependabot]

Bumps @backstage/plugin-scaffolder-backend from 1.23.0 to 3.1.5.

Release notes

Sourced from @​backstage/plugin-scaffolder-backend's releases.

v1.55.0-next.2

See docs/releases/v1.55.0-next.2-changelog.md for more information.

v1.55.0-next.1

See docs/releases/v1.55.0-next.1-changelog.md for more information.

v1.55.0-next.0

See docs/releases/v1.55.0-next.0-changelog.md for more information.

v1.54.7

This patch release improves OAuth profile normalization when processing email verification information.

v1.54.6

This patch release includes a collection of validation, permission handling, and robustness improvements across Backstage.

Scaffolder

• Improved task visibility, ordering, retry behavior, permission evaluation, error handling, log redaction, and handling of internal task data.
• Added the opt-in scaffolder.requireScmUserCredentials setting for requiring user-provided credentials in supported GitHub, GitLab, Bitbucket, and Azure DevOps actions.
• Improved repository path and attachment handling in Bitbucket and Confluence actions.

TechDocs

• Improved MkDocs configuration validation and sanitization.
• Improved validation of source trees, published files, and served TechDocs content.
• Improved handling of MkDocs configuration files and additional templates.

TechDocs installations should also use pymdown-extensions version 10.21.3 or newer, normally by upgrading to mkdocs-techdocs-core version 1.7.0 or newer.

Catalog and integrations

• Improved catalog placeholder paths, property permissions, and location type restrictions.
• Improved URL reader allow-list matching and cloud storage path handling.
• Improved handling of GitLab installations with relative base paths and organization discovery scopes.
• Improved catalog location handling for AWS S3 and Azure Blob Storage.

Backend services and authentication

• Improved plugin-to-plugin service credential delegation and backend action handling.
• OIDC profiles now include email addresses only when the identity provider marks them as verified.
• Improved proxy request path handling.
• Improved validation of catalog-provided Kubernetes cluster authentication and Kubernetes resource responses.

v1.54.5

This patch release fixes the following issues:

• Fixed the catalog import owner autocomplete to write canonical group entity references instead of display names to generated catalog-info.yaml files.
• Fixed catalog pages opened from ownership cards to normalize legacy bare owner filters before rendering, preventing entity reference errors.
• Fixed ownership card links to filter the catalog by canonical owner entity references instead of mutable presentation titles.

... (truncated)

Changelog

Sourced from @​backstage/plugin-scaffolder-backend's changelog.

@​backstage/plugin-scaffolder-backend

4.2.0-next.2

Patch Changes

• 3bb3710: Improved task worker resilience by backing off repeated database claim failures, containing unexpected task execution errors, and preventing new work from being claimed during graceful shutdown.
• Updated dependencies
  • @​backstage/config@​1.3.9-next.0
  • @​backstage/plugin-scaffolder-node@​0.13.7-next.2
  • @​backstage/plugin-catalog-node@​2.2.5-next.1
  • @​backstage/backend-plugin-api@​1.10.1-next.1
  • @​backstage/integration@​2.1.2-next.1
  • @​backstage/plugin-permission-common@​0.9.11-next.0
  • @​backstage/plugin-permission-node@​0.11.4-next.1
  • @​backstage/plugin-scaffolder-common@​2.3.0-next.2

4.2.0-next.1

Minor Changes

• bbba6b5: Added the scaffolder.requireScmUserCredentials configuration option to require user-provided credentials for supported SCM mutation and fetch actions.

Patch Changes

• 7fba55a: Removed user entity references from scaffolder task count metrics to avoid exposing user identities and creating high-cardinality metric labels.
• b1256aa: Respect task read permission decisions when listing scaffolder tasks.
• 15fa029: Restrict task list ordering to supported fields.
• be0a75a: Exclude internal task data from task responses.
• f389dd2: Improve denied scaffolder action error handling.
• 2eebeb7: Ensure task failure details use the configured log redactions.
• 84ebbb9: Fixed log redaction for transformed secret values used to iterate Scaffolder steps.
• b4172dd: Restrict task retries to terminal states.
• ee9c48d: Fixed matching of action input values in scaffolder permission policies.
• 79f0b91: Fixed the scaffolder task worker silently giving up after a transient failure. A single error while picking up a task, such as a dropped database connection, would stop the backend from running any further software templates for the rest of its lifetime. New tasks stayed queued indefinitely with no error shown to the user and no failing health check, and the only way to recover was to restart the backend. Picking up tasks is now retried instead.
• Updated dependencies
  • @​backstage/plugin-scaffolder-common@​2.3.0-next.1
  • @​backstage/integration@​2.1.2-next.0
  • @​backstage/backend-openapi-utils@​0.7.2-next.0
  • @​backstage/plugin-permission-node@​0.11.4-next.0
  • @​backstage/plugin-scaffolder-node@​0.13.7-next.1
  • @​backstage/backend-plugin-api@​1.10.1-next.0
  • @​backstage/plugin-catalog-node@​2.2.5-next.0
  • @​backstage/plugin-events-node@​0.4.26-next.0

4.1.0-next.0

Minor Changes

• 1a705ca: Applied templateDryRunPermission to inline Software Template dry runs and the corresponding backend action. Permission policies that deny unknown permissions must explicitly allow scaffolder.template.dry-run to retain existing dry-run access.

... (truncated)

Commits

• See full diff in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[VictoriaBeilsten-Edmands]

@dependabot rebase