[johnnyhuy]

Summary

• Upgraded Backstage from 1.55.3 to 1.56.5 via yarn backstage-cli versions:bump
• Upgrade helper: https://backstage.github.io/upgrade-helper/?from=1.55.3&to=1.56.5&yarnPlugin=1

Template changes

Applied:

• Root package.json - added the vanilla template resolution "@yarnpkg/core": "4.9.1". Kept the existing local resolutions on top (got: npm:11.8.2 for the upstream patch: packaging bug, isolated-vm, @types/react, @types/react-dom).

Kept back, with reasons:

• .github/workflows/ci.yml - template pins actions/checkout, actions/setup-node and actions/cache to new SHAs. This repo does not carry the vanilla ci.yml - it runs its own build.yml, publish.yml and release.yml - so there was nothing to apply it to.
• app-config.yaml - template change is comment-only in the new-frontend page:catalog / page:home extension block. This repo's app-config.yaml does not carry that block, so there was nothing to apply.
• Root package.json jest pins (jest and @jest/environment-jsdom-abstract to ^30.5.0) - this repo does not declare those deps at root - it runs Jest 29 via @backstage/cli - so the pins do not map. Wider root drift (TypeScript, Prettier config, workspaces format) predates this jump and is out of scope for this patch bump.

Dedup note: a stale local branch opencode/backstage-upgrade-1.56.2 had an uncommitted, unpushed 1.56.2 bump. It had no PR and no remote branch, so I discarded it, rebased onto current main and redid the bump to 1.56.5 here.

Verification

• mise run install - passed (existing peer warnings only, no got patch ENOENT)
• mise run lint - passed
• mise run test - passed, 6 suites passed and 1 skipped, 37 tests passed and 1 skipped

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​backstage/​plugin-permission-backend-module-allow-all-policy@​0.2.23 ⏵ 0.2.24
	npm/​@​backstage/​plugin-catalog-backend-module-scaffolder-entity-model@​0.2.24 ⏵ 0.2.25	+1
	npm/​@​backstage/​plugin-permission-react@​0.5.5 ⏵ 0.5.6
	npm/​@​backstage/​plugin-permission-backend@​0.7.16 ⏵ 0.7.17				-1
	npm/​@​backstage/​plugin-scaffolder-backend-module-notifications@​0.1.26 ⏵ 0.1.27
	npm/​@​backstage/​plugin-techdocs-module-addons-contrib@​1.1.40 ⏵ 1.1.41
	npm/​@​backstage/​plugin-auth-backend-module-gitlab-provider@​0.4.7 ⏵ 0.4.8	-1
	npm/​@​backstage/​plugin-auth-backend-module-github-provider@​0.5.7 ⏵ 0.5.8
	npm/​@​backstage/​integration-react@​1.2.22 ⏵ 1.2.23
	npm/​@​backstage/​plugin-permission-common@​0.9.12
	npm/​@​backstage/​plugin-permission-node@​0.11.5
	npm/​@​backstage/​plugin-catalog-common@​1.2.1
	npm/​@​backstage/​plugin-auth-node@​0.7.7
	npm/​@​backstage/​cli-defaults@​0.1.6 ⏵ 0.1.7			+1
	npm/​@​backstage/​plugin-signals-backend@​0.3.19 ⏵ 0.3.20			+3
	npm/​@​backstage/​plugin-search-react@​1.11.8 ⏵ 1.11.9	+1
	npm/​@​backstage/​plugin-techdocs-react@​1.3.15 ⏵ 1.4.0			+1
	npm/​@​backstage/​plugin-scaffolder-common@​2.3.1
	npm/​@​backstage/​plugin-search-backend@​2.1.7 ⏵ 2.1.8
	npm/​@​backstage/​app-defaults@​1.7.12 ⏵ 1.7.13				-1
	npm/​@​backstage/​plugin-scaffolder-backend-module-github@​0.10.0 ⏵ 0.10.1				-1
	npm/​@​backstage/​config@​1.3.10
	npm/​@​backstage/​plugin-notifications@​0.6.0 ⏵ 0.6.1			+1
	npm/​@​backstage/​dev-utils@​1.1.27 ⏵ 1.1.28
	npm/​@​backstage/​frontend-plugin-api@​0.18.1 ⏵ 0.18.2			+1		-19
	npm/​@​backstage/​plugin-signals@​0.0.35 ⏵ 0.0.36			+1
	npm/​@​backstage/​core-plugin-api@​1.12.10 ⏵ 1.12.11	+1		+1
	npm/​@​backstage/​ui@​0.18.0 ⏵ 0.19.0	+1		+1
	npm/​@​backstage/​test-utils@​1.7.22 ⏵ 1.7.23			+1
	npm/​@​backstage/​plugin-search-backend-module-techdocs@​0.4.18 ⏵ 0.4.19
	npm/​@​backstage/​plugin-techdocs@​1.18.2 ⏵ 1.19.0			+1
	npm/​@​backstage/​backend-plugin-api@​1.11.0
See 27 more rows in the dashboard

View full report