Merge branch 'main' into update-tekton-k8s-deps

.github/CODEOWNERS

@@ -37,6 +37,7 @@ yarn.lock                                           @backstage/community-plugins
 /workspaces/keycloak                                @backstage/community-plugins-maintainers  @AndrienkoAleksandr @schultzp2020 @dzemanov
 /workspaces/kiali                                   @backstage/community-plugins-maintainers  @aljesusg @josunect @leandroberetta
 /workspaces/linguist                                @backstage/community-plugins-maintainers  @awanlin
+/workspaces/manage                                  @backstage/community-plugins-maintainers  @grantila
 /workspaces/matomo                                  @backstage/community-plugins-maintainers  @yashoswalyo @deshmukhmayur @riginoommen
 /workspaces/mend                                    @backstage/community-plugins-maintainers  @dariuszsobkowicz
 /workspaces/mta                                     @backstage/community-plugins-maintainers  @ibolton336

.github/workflows/release_workspace_version.yml

@@ -0,0 +1,189 @@
+name: Prior Version Release Workspace
+
+on:
+  # ADDED: Only trigger on PR closed event on workspace/** branch.
+  #        The assumption is that branch protection rules and CODEOWNERS are configured.
+
+  pull_request:
+    types:
+      - closed
+    branches:
+      - 'workspace/**'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+
+jobs:
+    # ADDED: Checks if PR is a Version Packages PR on workspace/** branch
+    #        and validates PR title, author, branch and merged status.
+  check-merged-pr:
+    name: Check if PR is a Version Packages PR on workspace/** branch
+    runs-on: ubuntu-latest
+    outputs:
+        is_version_pr: ${{ steps.check_pr.outputs.is_version_pr }}
+        workspace_name: ${{ steps.extract_workspace.outputs.workspace_name }}
+    steps:
+        - name: Check PR title, author, branch and merged status
+          id: check_pr
+          run: |
+              if [[ "${{ github.event.pull_request.title }}" == Version*Packages* \
+              && "${{ github.event.pull_request.user.login }}" == "backstage-service" ]] \
+              && [[ "${{ github.event.pull_request.head.ref }}" == maintenance-changesets-release/* ]] \
+              && [[ "${{ github.event.pull_request.merged }}" == "true" ]]; then
+                echo "is_version_pr=true" >> $GITHUB_ENV
+              else
+                echo "is_version_pr=false" >> $GITHUB_ENV
+                exit 1
+              fi
+            # ADDED: Extracts workspace name from branch, ensuring it is a workspace/** branch
+        - name: Extract Workspace name from branch
+          id: extract_workspace
+          run: |
+              WORKSPACE_NAME=$(echo "${{ github.ref }}" | cut -d'/' -f2)
+              echo "workspace_name=$WORKSPACE_NAME" >> $GITHUB_ENV
+
+        - name: Verify workspace match
+          run: |
+              PR_WORKSPACE=$(echo "${{ github.event.pull_request.head.ref }}" | cut -d'/' -f2)
+              if [[ "$PR_WORKSPACE" != "${{ env.workspace_name }}" ]]; then
+                echo "Workspace mismatch: PR workspace ($PR_WORKSPACE) does not match target branch workspace (${{ env.workspace_name }})"
+                exit 1
+              fi
+
+  changesets-pr:
+    name: Update Version Packages PR for ${{ needs.check-merged-pr.outputs.workspace_name }} on branch ${{ github.ref }}
+    runs-on: ubuntu-latest
+    needs: check-merged-pr
+    defaults:
+      run:
+        working-directory: ./workspaces/${{ needs.check-merged-pr.outputs.workspace_name }}
+    env:
+      CI: true
+      NODE_OPTIONS: --max-old-space-size=4096
+    outputs:
+      needs_release: ${{ steps.release_check.outputs.needs_release }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+        with:
+         ref: ${{ github.ref }}
+
+      - name: Verify maintenance-changesets-release branch does not exist
+        run: |
+          if git ls-remote --exit-code origin "refs/heads/maintenance-changesets-release/${{ needs.check-merged-pr.outputs.workspace_name }}"; then
+            echo "Error: maintenance-changesets-release/${{ needs.check-merged-pr.outputs.workspace_name }} branch already exists. Please clean up the branch before proceeding."
+            exit 1
+          fi
+
+      - name: Set up Node
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
+        with:
+          node-version: 20
+          registry-url: https://registry.npmjs.org/ # Needed for auth
+
+      - name: Get yarn cache directory path
+        id: yarn-cache-dir-path
+        run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
+
+      - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
+        id: yarn-cache # use this to check for `cache-hit` (`steps.yarn-cache.outputs.cache-hit != 'true'`)
+        with:
+          path: ${{ steps.yarn-cache-dir-path.outputs.dir }}
+          key: ${{ runner.os }}-yarn-${{ hashFiles(format('workspaces/${0}/**/yarn.lock', needs.check-merged-pr.outputs.workspace_name)) }}
+          restore-keys: |
+            ${{ runner.os }}-yarn-
+
+      - name: yarn install
+        run: yarn install --immutable
+
+      - name: Fetch previous commit for release check
+        run: git fetch origin '${{ github.event.before }}'
+
+      - name: Fetch the commit that triggered the workflow (used by backstage/changesets-action)
+        run: git fetch origin ${{ github.sha }}
+        continue-on-error: true
+
+      - name: Check if release
+        id: release_check
+        run: |
+          yarn install
+          node scripts/ci/check-if-release.js
+        working-directory: ./
+        env:
+          WORKSPACE_NAME: ${{ needs.check-merged-pr.outputs.workspace_name }}
+          COMMIT_SHA_BEFORE: '${{ github.event.before }}'
+
+      - name: Update Version Packages (${{ needs.check-merged-pr.outputs.workspace_name }}) PR
+        id: changesets-pr
+        if: steps.release_check.outputs.needs_release != 'true'
+        uses: backstage/changesets-action@291bfc1f76d1dcfbf967f5810dc0423592eae09a # v2.3.1
+        with:
+          title: Version Packages (${{ needs.check-merged-pr.outputs.workspace_name }})
+          cwd: workspaces/${{ needs.check-merged-pr.outputs.workspace_name }}
+          version: yarn changeset version
+          versionBranch: maintenance-changesets-release/${{ needs.check-merged-pr.outputs.workspace_name }}
+          skipRootChangelogUpdate: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.GH_SERVICE_ACCOUNT_TOKEN }}
+
+  release:
+    name: Prior Version Release workspace ${{ needs.check-merged-pr.outputs.workspace_name }} on branch ${{ github.ref }}
+    runs-on: ubuntu-latest
+    needs: changesets-pr
+    if: needs.changesets-pr.outputs.needs_release == 'true'
+    defaults:
+      run:
+        working-directory: ./workspaces/${{ needs.check-merged-pr.outputs.workspace_name }}
+    env:
+      CI: true
+      NODE_OPTIONS: --max-old-space-size=4096
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+        with:
+          ref: ${{ github.ref }}
+      - name: Set up Node
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
+        with:
+          node-version: 20
+          registry-url: https://registry.npmjs.org/  # Needed for auth
+
+      - name: Install root dependencies
+        run: yarn install --immutable
+        working-directory: ${{ github.workspace }}
+
+      - name: Get yarn cache directory path
+        id: yarn-cache-dir-path
+        run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
+
+      - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
+        id: yarn-cache # use this to check for `cache-hit` (`steps.yarn-cache.outputs.cache-hit != 'true'`)
+        with:
+            path: ${{ steps.yarn-cache-dir-path.outputs.dir }}
+            key: ${{ runner.os }}-yarn-${{ hashFiles(format('workspaces/${0}/**/yarn.lock', needs.check-merged-pr.outputs.workspace_name)) }}
+            restore-keys: |
+                ${{ runner.os }}-yarn-
+      - name: yarn install
+        run: yarn install --immutable
+
+      - name: Compile TypeScript
+        run: yarn tsc:full
+
+      - name: Build all packages
+        run: yarn build:all
+
+      # CHANGED: Publish with tag "maintenance" to avoid overwriting the latest npm tag
+      - name: publish
+        run: |
+          yarn config set -H 'npmAuthToken' "${{secrets.NPM_TOKEN}}"
+          yarn workspaces foreach -v --no-private --include "${{ needs.check-merged-pr.outputs.workspace_name }}" npm publish --access public --tolerate-republish --tag "maintenance"
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Create tag
+        working-directory: ${{ github.workspace }}/scripts/ci
+        run: node create-tag.js
+        env:
+            WORKSPACE_NAME: ${{ needs.check-merged-pr.outputs.workspace_name }}
+            GITHUB_TOKEN: ${{ secrets.GH_SERVICE_ACCOUNT_TOKEN }}

docs/plugin-maintainers-guide.md

@@ -0,0 +1,54 @@
+# Plugin Maintainer Guide
+
+## Table of Contents
+
+- [Plugin Maintainer Guide](#plugin-maintainer-guide)
+  - [Table of Contents](#table-of-contents)
+  - [Maintaining and patching an older release line](#maintaining-and-patching-an-older-release-line)
+    - [Patching an older release](#patching-an-older-release)
+
+## Maintaining and patching an older release line
+
+It may be necessary to patch a prior release line of a plugin when users depend on an older, but stable version and while a newer, incompatible, major version of the plugin exists. Typically for these older releases, only major bugs and security issues will need to be remediated. Not every plugin will need this workflow.
+
+This guide will describe the steps needed to release on an older version.
+
+### Patching an older release
+
+When patching an older release, follow the steps below to ensure the correct workflow is applied:
+
+1. Request a `workspace/${workspace}` branch by asking one of the [@backstage/community-plugins-maintainers](https://github.com/orgs/backstage/teams/community-plugins-maintainers).
+
+   - Ensure that a branch named `workspace/${workspace}` exists, with appropriate branch protections in place. This branch will be used for patch releases.
+   - The `${workspace}` should correspond to the specific plugin or component you are patching.
+
+2. Reset the `workspace` branch:
+
+   - Reset the `workspace/${workspace}` branch to the version of the plugin you need to patch.
+   - You can use the autogenerated version tags from previous releases to pinpoint the prior release version to apply the patch.
+
+3. Apply your commits:
+
+   - Apply the necessary patch fixes or security updates.
+   - Do not manually bump the version in `package.json`. The version bump must be handled via changesets.
+
+4. Submit a PR following the required workflow:
+
+   - Open a pull request with your changes against the `workspace/${workspace}` branch.
+   - Ensure the PR:
+     - Contains only necessary fixes.
+     - Includes a changeset.
+
+5. Merge the PR to trigger the release workflow:
+
+   - The PR must meet these conditions to be merged:
+     - The PR title starts with "Version Packages" (automatically generated by changesets).
+     - The PR originates from a `maintenance-changesets-release/${workspace}` branch.
+     - The PR is authored by `backstage-service`.
+     - The PR is merged, not just closed.
+   - Once merged, the release workflow will automatically trigger, building and publishing the new release.
+
+6. Confirm the release:
+   - Once the workflow completes, a new version will be published.
+   - A new Git tag will be created, which can be used for future patches.
+   - The release will be tagged as "maintenance" in the package registry to avoid overwriting latest stable versions.

workspaces/manage/.changeset/README.md

@@ -0,0 +1,8 @@
+# Changesets
+
+Hello and welcome! This folder has been automatically generated by `@changesets/cli`, a build tool that works
+with multi-package repos, or single-package repos to help you version and publish your code. You can
+find the full documentation for it [in our repository](https://github.com/changesets/changesets)
+
+We have a quick list of common questions to get you started engaging with this project in
+[our documentation](https://github.com/changesets/changesets/blob/main/docs/common-questions.md)

workspaces/manage/.changeset/config.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://unpkg.com/@changesets/[email protected]/schema.json",
+  "changelog": "@changesets/cli/changelog",
+  "commit": false,
+  "fixed": [],
+  "linked": [],
+  "access": "public",
+  "baseBranch": "main",
+  "updateInternalDependencies": "patch",
+  "privatePackages": {
+    "tag": false,
+    "version": false
+  }
+}

workspaces/manage/.dockerignore

@@ -0,0 +1,8 @@
+.git
+.yarn/cache
+.yarn/install-state.gz
+node_modules
+packages/*/src
+packages/*/node_modules
+plugins
+*.local.yaml

workspaces/manage/.editorconfig

@@ -0,0 +1,10 @@
+root = true
+
+[*]
+end_of_line = lf
+insert_final_newline = true
+
+[*.{js,json,yml}]
+charset = utf-8
+indent_style = space
+indent_size = 2

workspaces/manage/.eslintignore

@@ -0,0 +1 @@
+playwright.config.ts

workspaces/manage/.eslintrc.js

@@ -0,0 +1 @@
+module.exports = require('../../.eslintrc.cjs');

workspaces/manage/.gitignore

@@ -0,0 +1,54 @@
+# macOS
+.DS_Store
+
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+
+# Coverage directory generated when running tests with coverage
+coverage
+
+# Dependencies
+node_modules/
+
+# Yarn 3 files
+.pnp.*
+.yarn/*
+!.yarn/patches
+!.yarn/plugins
+!.yarn/releases
+!.yarn/sdks
+!.yarn/versions
+
+# Node version directives
+.nvmrc
+
+# dotenv environment variables file
+.env
+.env.test
+
+# Build output
+dist
+dist-types
+
+# Temporary change files created by Vim
+*.swp
+
+# MkDocs build output
+site
+
+# Local configuration files
+*.local.yaml
+
+# Sensitive credentials
+*-credentials.yaml
+
+# vscode database functionality support files
+*.session.sql
+
+# E2E test reports
+e2e-test-report/

workspaces/manage/.prettierignore

@@ -0,0 +1,5 @@
+dist
+dist-types
+coverage
+.vscode
+.eslintrc.js

workspaces/manage/README.md

@@ -0,0 +1,22 @@
+# Manage page
+
+This plugin offers a place for developers to manage things they and their team own.
+
+Read the [documentation](./plugins/manage/README.md) for the frontend plugin.
+
+![Components tab](./plugins/manage/docs/components.png)
+
+## Packages
+
+- [manage](./plugins/manage/README.md) - The frontend plugin for the Manage page
+- [manage-module-tech-insights](./plugins/manage-module-tech-insights/README.md) - The tech insights module for the Manage plugin, to display tech insight checks in the entity tables, and/or display aggregated gauges.
+- [manage-react](./plugins/manage-react/README.md) - A module for extending the Manage page with custom components, features, entity table columns, etc.
+
+## Local Development
+
+To start the Backstage App, run:
+
+```sh
+yarn install
+yarn dev
+```