feat: Backstage 1.50 (#1054)

Copilot · hairmare · web-flow · commit 65879cf266cc · 2026-05-03T22:48:59.000Z
Co-authored-by: hairmare &lt;116588+hairmare@users.noreply.github.com&gt;
diff --git a/.yarn/plugins/@yarnpkg/plugin-backstage.cjs b/.yarn/plugins/@yarnpkg/plugin-backstage.cjs
diff --git a/.yarnrc.yml b/.yarnrc.yml
@@ -1,8 +1,8 @@
 nodeLinker: node-modules
 
 plugins:
-  - checksum: 05b51f75814596aa3e15b296af3287240351c8b7f1df1e05c2ceedf7f3820627759605825fd932f1f7c3c3287b61b16f9e8195b0927a0f80345493f81376947a
+  - checksum: a6895be0b30a75db6fddafedff143f82ccbd74656bad97775c6a0b9eba6e6ea6b7d66a8e9d0c8505755a981e86b7c6c1c9334ead299a857cf8d6e243957b0bab
     path: .yarn/plugins/@yarnpkg/plugin-backstage.cjs
-    spec: "https://versions.backstage.io/v1/releases/1.49.3/yarn-plugin"
+    spec: "https://versions.backstage.io/v1/releases/1.50.4/yarn-plugin"
 
 yarnPath: .yarn/releases/yarn-4.13.0.cjs
diff --git a/Dockerfile b/Dockerfile
@@ -34,7 +34,7 @@ RUN yarn tsc
 RUN yarn build:backend
 
 # Stage 3 - Build the actual backend image and install production dependencies
-FROM ghcr.io/radiorabe/ubi9-minimal:0.11.4
+FROM ghcr.io/radiorabe/ubi9-minimal:0.11.5
 
 ENV APP_ROOT=/opt/app-root \
     # The $HOME is not set by default, but some applications need this variable
diff --git a/app-config.yaml b/app-config.yaml
@@ -17,6 +17,11 @@ app:
     - page:catalog:
         config:
           path: /
+    # Disable the nav items that we're manually rendering in packages/app/src/modules/nav/Sidebar.tsx
+    - nav-item:search: false
+    - nav-item:user-settings: false
+    - nav-item:catalog: false
+    - nav-item:scaffolder: false
 
 organization:
   name: Radio Bern RaBe
@@ -46,6 +51,12 @@ backend:
   database:
     client: better-sqlite3
     connection: ":memory:"
+  # see https://backstage.io/docs/ai/mcp-actions#actions-configuration for more details
+  actions:
+    pluginSources:
+      - auth
+      - catalog
+      - scaffolder
   # workingDirectory: /tmp # Use this to configure a working directory for the scaffolder, defaults to the OS temp-dir
 
 proxy:
@@ -96,6 +107,18 @@ auth:
       production:
         clientId: ${AUTH_GITHUB_CLIENT_ID}
         clientSecret: ${AUTH_GITHUB_CLIENT_SECRET}
+  # see https://backstage.io/docs/ai/mcp-actions#client-id-metadata-documents
+  # to learn more about client id metadata documents
+  experimentalClientIdMetadataDocuments:
+    enabled: false
+    # Optional: restrict which `client_id` URLs are allowed (defaults to ['*'])
+    # allowedClientIdPatterns:
+    #   - 'https://example.com/*'
+    #   - 'https://*.trusted-domain.com/*'
+    # Optional: restrict which redirect URIs are allowed (defaults to ['*'])
+    # allowedRedirectUriPatterns:
+    #   - 'http://localhost:*'
+    #   - 'https://*.example.com/*'
 
 permission:
   enabled: true
@@ -116,3 +139,8 @@ catalog:
         schedule:
           frequency: { minutes: 30 }
           timeout: { minutes: 3 }
+
+# see https://backstage.io/docs/ai/mcp-actions for more details
+mcpActions:
+  name: 'RaBe Backstage' # defaults to "backstage"
+  description: 'Tools for managing your software catalog, creating new services from templates, and exploring your developer portal' # optional
diff --git a/backstage.json b/backstage.json
@@ -1,3 +1,3 @@
 {
-  "version": "1.49.3"
+  "version": "1.50.4"
 }
diff --git a/packages/app/e2e-tests/app.test.ts-snapshots/catalog-page-app-linux.png b/packages/app/e2e-tests/app.test.ts-snapshots/catalog-page-app-linux.png
diff --git a/packages/app/e2e-tests/app.test.ts-snapshots/login-auth-error-app-linux.png b/packages/app/e2e-tests/app.test.ts-snapshots/login-auth-error-app-linux.png
diff --git a/packages/app/e2e-tests/app.test.ts-snapshots/login-page-app-linux.png b/packages/app/e2e-tests/app.test.ts-snapshots/login-page-app-linux.png
diff --git a/packages/app/e2e-tests/app.test.ts-snapshots/settings-page-app-linux.png b/packages/app/e2e-tests/app.test.ts-snapshots/settings-page-app-linux.png
diff --git a/packages/app/package.json b/packages/app/package.json
@@ -15,9 +15,9 @@
     "lint": "backstage-cli package lint"
   },
   "dependencies": {
-    "@backstage-community/plugin-github-actions": "^0.21.1",
-    "@backstage-community/plugin-github-pull-requests-board": "^0.15.1",
-    "@backstage-community/plugin-todo": "^0.17.1",
+    "@backstage-community/plugin-github-actions": "^1.0.0",
+    "@backstage-community/plugin-github-pull-requests-board": "^1.0.0",
+    "@backstage-community/plugin-todo": "^0.20.0",
     "@backstage/cli": "backstage:^",
     "@backstage/core-app-api": "backstage:^",
     "@backstage/core-components": "backstage:^",
@@ -28,6 +28,7 @@
     "@backstage/plugin-api-docs": "backstage:^",
     "@backstage/plugin-app-react": "backstage:^",
     "@backstage/plugin-app-visualizer": "backstage:^",
+    "@backstage/plugin-auth": "backstage:^",
     "@backstage/plugin-catalog": "backstage:^",
     "@backstage/plugin-catalog-graph": "backstage:^",
     "@backstage/plugin-catalog-import": "backstage:^",
@@ -46,7 +47,7 @@
     "@backstage/ui": "backstage:^",
     "@material-ui/core": "^4.12.4",
     "@material-ui/icons": "^4.11.3",
-    "@roadiehq/backstage-plugin-github-insights": "^3.4.1",
+    "@roadiehq/backstage-plugin-github-insights": "^3.5.0",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "react-router": "^6.30.2",
diff --git a/packages/app/src/modules/auth/authModule.test.ts b/packages/app/src/modules/auth/authModule.test.ts
@@ -0,0 +1,40 @@
+/*
+ * Copyright Radio Bern RaBe
+ *
+ * SPDX-FileCopyrightText: 2026 Radio Bern RaBe <https://rabe.ch>
+ * SPDX-License-Identifier: AGPL-3.0-only
+ */
+
+import { getSignInProviders } from './signInProviders';
+
+describe('getSignInProviders', () => {
+  it('includes guest provider in development', () => {
+    const providers = getSignInProviders('development');
+
+    expect(providers).toContain('guest');
+  });
+
+  it('does not include guest provider in production', () => {
+    const providers = getSignInProviders('production');
+
+    expect(providers).not.toContain('guest');
+  });
+
+  it('includes guest provider when auth.environment is undefined', () => {
+    const providers = getSignInProviders(undefined);
+
+    expect(providers).toContain('guest');
+  });
+
+  it('always includes the OIDC provider as first entry', () => {
+    const providers = getSignInProviders('production');
+    const oidcProvider = providers[0];
+
+    expect(typeof oidcProvider).toBe('object');
+    expect(oidcProvider).toMatchObject({
+      id: 'oidc-auth-provider',
+      title: 'RaBe SSO',
+      message: 'Sign in with your RaBe Keycloak account',
+    });
+  });
+});
diff --git a/packages/app/src/modules/auth/authModule.tsx b/packages/app/src/modules/auth/authModule.tsx
@@ -17,12 +17,9 @@ import { SignInPageBlueprint } from '@backstage/plugin-app-react';
 import { SignInPage } from '@backstage/core-components';
 import { OAuth2 } from '@backstage/core-app-api';
 import { oidcAuthApiRef } from './oidcAuthApiRef';
+import { getSignInProviders } from './signInProviders';
 import type { SignInPageProps } from '@backstage/core-plugin-api';
 
-type SignInProvider =
-  | 'guest'
-  | { id: string; title: string; message: string; apiRef: typeof oidcAuthApiRef };
-
 const oidcApiExtension = ApiBlueprint.make({
   name: 'oidc',
   params: defineParams =>
@@ -53,20 +50,9 @@ const rabeSignInPage = SignInPageBlueprint.make({
     loader: async () => {
       const RabeSignInPage = (props: SignInPageProps) => {
         const configApi = useApi(configApiRef);
-        // Show Guest only in non-production environments (dev, CI).
-        // auth.environment is set to 'development' in app-config.yaml and
-        // overridden to 'production' in app-config.production.yaml.
-        const isDev =
-          configApi.getOptionalString('auth.environment') !== 'production';
-        const providers: SignInProvider[] = [
-          {
-            id: 'oidc-auth-provider',
-            title: 'RaBe SSO',
-            message: 'Sign in with your RaBe Keycloak account',
-            apiRef: oidcAuthApiRef,
-          },
-          ...(isDev ? (['guest'] as const) : []),
-        ];
+        const providers = getSignInProviders(
+          configApi.getOptionalString('auth.environment'),
+        );
         return <SignInPage {...props} providers={providers} />;
       };
       return RabeSignInPage;
diff --git a/packages/app/src/modules/auth/signInProviders.ts b/packages/app/src/modules/auth/signInProviders.ts
@@ -0,0 +1,31 @@
+/*
+ * Copyright Radio Bern RaBe
+ *
+ * SPDX-FileCopyrightText: 2026 Radio Bern RaBe <https://rabe.ch>
+ * SPDX-License-Identifier: AGPL-3.0-only
+ */
+
+import { oidcAuthApiRef } from './oidcAuthApiRef';
+
+export type SignInProvider =
+  | 'guest'
+  | {
+      id: string;
+      title: string;
+      message: string;
+      apiRef: typeof oidcAuthApiRef;
+    };
+
+export function getSignInProviders(authEnvironment?: string): SignInProvider[] {
+  const isDev = authEnvironment !== 'production';
+
+  return [
+    {
+      id: 'oidc-auth-provider',
+      title: 'RaBe SSO',
+      message: 'Sign in with your RaBe Keycloak account',
+      apiRef: oidcAuthApiRef,
+    },
+    ...(isDev ? (['guest'] as const) : []),
+  ];
+}
diff --git a/packages/app/src/modules/nav/Sidebar.tsx b/packages/app/src/modules/nav/Sidebar.tsx
@@ -12,7 +12,6 @@ import MenuIcon from '@material-ui/icons/Menu';
 import SearchIcon from '@material-ui/icons/Search';
 import { SidebarSearchModal } from '@backstage/plugin-search';
 import { UserSettingsSignInAvatar } from '@backstage/plugin-user-settings';
-import { NotificationsSidebarItem } from '@backstage/plugin-notifications';
 
 export const SidebarContent = NavContentBlueprint.make({
   params: {
@@ -41,8 +40,6 @@ export const SidebarContent = NavContentBlueprint.make({
           </SidebarGroup>
           <SidebarSpace />
           <SidebarDivider />
-          <NotificationsSidebarItem />
-          <SidebarDivider />
           <SidebarGroup
             label="Settings"
             icon={<UserSettingsSignInAvatar />}
diff --git a/packages/backend/package.json b/packages/backend/package.json
@@ -17,8 +17,8 @@
     "build-image": "docker build ../.. -f ../../Dockerfile --tag backstage"
   },
   "dependencies": {
-    "@backstage-community/plugin-catalog-backend-module-keycloak": "^3.17.2",
-    "@backstage-community/plugin-todo-backend": "^0.18.1",
+    "@backstage-community/plugin-catalog-backend-module-keycloak": "^3.19.1",
+    "@backstage-community/plugin-todo-backend": "^0.21.1",
     "@backstage/backend-defaults": "backstage:^",
     "@backstage/backend-plugin-api": "backstage:^",
     "@backstage/catalog-client": "backstage:^",
@@ -27,6 +27,7 @@
     "@backstage/plugin-app-backend": "backstage:^",
     "@backstage/plugin-auth-backend": "backstage:^",
     "@backstage/plugin-auth-backend-module-github-provider": "backstage:^",
+    "@backstage/plugin-auth-backend-module-guest-provider": "backstage:^",
     "@backstage/plugin-auth-backend-module-oidc-provider": "backstage:^",
     "@backstage/plugin-auth-node": "backstage:^",
     "@backstage/plugin-catalog-backend": "backstage:^",
@@ -36,6 +37,7 @@
     "@backstage/plugin-catalog-backend-module-scaffolder-entity-model": "backstage:^",
     "@backstage/plugin-catalog-backend-module-unprocessed": "backstage:^",
     "@backstage/plugin-devtools-backend": "backstage:^",
+    "@backstage/plugin-mcp-actions-backend": "backstage:^",
     "@backstage/plugin-notifications-backend": "backstage:^",
     "@backstage/plugin-permission-backend": "backstage:^",
     "@backstage/plugin-permission-common": "backstage:^",
@@ -52,7 +54,7 @@
     "@backstage/plugin-techdocs-backend": "backstage:^",
     "@internal/backstage-plugin-catalog-backend-module-transformer": "workspace:^",
     "@internal/backstage-plugin-permission-backend-module-rabe": "workspace:^",
-    "@roadiehq/scaffolder-backend-module-http-request": "^5.5.1",
+    "@roadiehq/scaffolder-backend-module-http-request": "^5.6.0",
     "app": "link:../app",
     "better-sqlite3": "^12.9.0",
     "dockerode": "^5.0.0",
diff --git a/packages/backend/src/index.ts b/packages/backend/src/index.ts
@@ -18,6 +18,7 @@ backend.add(
 backend.add(import('@backstage/plugin-auth-backend'));
 backend.add(import('@backstage/plugin-auth-backend-module-oidc-provider'));
 backend.add(import('@backstage/plugin-auth-backend-module-github-provider'));
+backend.add(import('@backstage/plugin-auth-backend-module-guest-provider'));
 
 // catalog plugin
 backend.add(import('@backstage/plugin-catalog-backend'));
@@ -50,4 +51,7 @@ backend.add(import('@backstage-community/plugin-todo-backend'));
 // dev plugin
 backend.add(import('@backstage/plugin-devtools-backend'));
 
+// mcp actions plugin
+backend.add(import('@backstage/plugin-mcp-actions-backend'));
+
 backend.start();
diff --git a/playwright.config.ts b/playwright.config.ts
@@ -21,13 +21,13 @@ import { generateProjects } from '@backstage/e2e-test-utils/playwright';
 export default defineConfig({
   timeout: 60_000,
   expect: {
-    timeout: 5_000,
+    timeout: 30_000,
   },
   // Run your local dev server before starting the tests
   webServer: [
     {
       command: 'yarn start app',
-      port: 3000,
+      url: 'http://localhost:3000',
       reuseExistingServer: !process.env.CI,
       timeout: 120_000,
     },
diff --git a/plugins/catalog-backend-module-transformer/package.json b/plugins/catalog-backend-module-transformer/package.json
@@ -28,7 +28,7 @@
     "postpack": "backstage-cli package postpack"
   },
   "dependencies": {
-    "@backstage-community/plugin-catalog-backend-module-keycloak": "^3.17.2",
+    "@backstage-community/plugin-catalog-backend-module-keycloak": "^3.19.1",
     "@backstage/backend-plugin-api": "backstage:^"
   },
   "devDependencies": {
diff --git a/yarn.lock b/yarn.lock

Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,3 @@`
`1`	`1`	`{`
`2`		`- "version": "1.49.3"`
	`2`	`+ "version": "1.50.4"`
`3`	`3`	`}`