Skip to content

fix(deps): update rhdh lightspeed dependencies (minor)#3440

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/rhdh-lightspeed-dependencies-(minor)
Open

fix(deps): update rhdh lightspeed dependencies (minor)#3440
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/rhdh-lightspeed-dependencies-(minor)

Conversation

@renovate

@renovate renovate Bot commented Jun 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@backstage-community/plugin-rbac-backend (source) 7.12.4 → 7.13.0 age confidence
@patternfly/react-core 6.4.3 → 6.5.1 age confidence
@red-hat-developer-hub/backstage-plugin-theme (source) ^0.12.0 → ^0.14.0 age confidence
infinispan 0.13.0 → 0.15.0 age confidence
langsmith ^0.6.0 → ^0.7.0 age confidence
llama-stack-client ^0.5.0 → ^0.7.0 age confidence
msw (source) 2.12.10 → 2.14.6 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

backstage/community-plugins (@​backstage-community/plugin-rbac-backend)

v7.13.0

Compare Source

Minor Changes
  • 6a916a1: Backstage version bump to v1.50.4
Patch Changes

v7.12.5

Compare Source

Patch Changes

  • 39a3942: Hardens RBAC policy handling to prevent Casbin CSV poisoning and improve error visibility.

    Key fixes:

    • Rejects permission policy permission values containing " before persistence (prevents known CSV parse failures).
    • Rethrows loadPolicy failures after audit logging so mutation/read paths surface the root cause instead of secondary errors.
    • Improves policy API request validation and missing-role handling (400/404 where appropriate).
    • Validates default configured permissions/admin refs with the same stricter checks used by runtime write paths.
    • Strengthens conditional and plugin-id payload validation and aligns owner filtering behavior for default roles.

    Compatibility notes:

    • Requests/config entries using permission values with embedded " are now rejected.
    • Conditional policy payloads and conditional YAML ingestion now enforce limits.
    • Conditional permissionMapping must list distinct Backstage permission actions (no duplicates); at most one entry per supported action (create, read, update, delete, use).
    • Plugin ID registration payloads now enforce count/length/duplicate checks.
    • For larger existing payloads, limits are configurable via:
    • permission.rbac.validation.conditionalPolicies.maxConditionDepth
    • permission.rbac.validation.conditionalPolicies.maxConditionNodeCount
    • permission.rbac.validation.conditionalPolicies.maxCriteriaItems
    • permission.rbac.validation.conditionalPoliciesFile.maxBytes
    • permission.rbac.validation.conditionalPoliciesFile.maxDocuments

    Operational note:

    • CSV policy files are parsed line-by-line; malformed lines are skipped with warnings instead of aborting the entire file load.
patternfly/patternfly-react (@​patternfly/react-core)

v6.5.1

Compare Source

v6.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: patternfly/patternfly-react@v6.4.0...v6.5.0

redhat-developer/rhdh-plugins (@​red-hat-developer-hub/backstage-plugin-theme)

v0.14.7

Compare Source

Patch Changes
  • 4d80582: fix(RHDHBUGS-2291): use &.Mui-selected syntax for MuiBottomNavigationAction to resolve CSS specificity console warning

v0.14.5

Compare Source

Patch Changes
  • 82cc47d: Fixed the background color of myGroup sidebar submenu in light theme

v0.14.4

Compare Source

Patch Changes

v0.14.3

Compare Source

Patch Changes
  • 54b7c9e: style the active sidebar nav link (a[aria-current="page"]) so selected colors match the resolved navigation shell

v0.14.2

Compare Source

Patch Changes
  • ee1def6: Align the navigation sidebar with merged palette.navigation and rhdh.general colors, including submenu rows and selected/active BackstageSidebarItem states. Add rhdh.general.pageInsetBackgroundColor so the page inset shell can use its own color (defaults match the previous app bar fill; falls back to appBarBackgroundColor when unset). Main content area remains on mainSectionBackgroundColor.

v0.14.1

Compare Source

Patch Changes
  • 8d1eee2: Add missing font css reference so that the Red Hat font is used again.

v0.14.0

Compare Source

Minor Changes
  • 0b7c442: Add and export RHDH logo components as LogoFull and LogoIcon
  • 0b7c442: Backstage version bump to v1.49.2

v0.13.0

Compare Source

Minor Changes

v0.12.3

Compare Source

v0.12.2

Compare Source

v0.12.1

Compare Source

Patch Changes
  • 29042bc: Fixing the inconsitent edges of filter section on catalog page
infinispan/js-client (infinispan)

v0.15.0

Compare Source

What's Changed

Full Changelog: infinispan/js-client@v0.14.0...v0.15.0

v0.14.0

Compare Source

What's Changed

Full Changelog: infinispan/js-client@v0.13.0...v0.14.0

langchain-ai/langsmith-sdk (langsmith)

v0.7.7

Compare Source

What's Changed

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file lightspeed team/rhdh labels Jun 17, 2026
@renovate renovate Bot requested review from a team, karthikjeeyar, rohitkrai03 and yangcao77 as code owners June 17, 2026 16:04
@renovate renovate Bot added dependencies Pull requests that update a dependency file team/rhdh lightspeed labels Jun 17, 2026
@rhdh-gh-app

rhdh-gh-app Bot commented Jun 17, 2026 •
edited
Loading

Copy link
Copy Markdown

Changed Packages

Package Name Package Path Changeset Bump Current Version
backend workspaces/lightspeed/packages/backend none v0.0.59
@red-hat-developer-hub/backstage-plugin-lightspeed-backend workspaces/lightspeed/plugins/lightspeed-backend patch v2.9.1
@red-hat-developer-hub/backstage-plugin-lightspeed workspaces/lightspeed/plugins/lightspeed patch v2.9.1

@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 2e02bf7 to 5064d20 Compare June 17, 2026 16:05
@codecov

codecov Bot commented Jun 17, 2026 •
edited
Loading

Copy link
Copy Markdown

❌ 1 Tests Failed:

Tests completed Failed Passed Skipped
790 1 789 0
View the top 1 failed test(s) by shortest run time 
lightspeed router tests GET /v1/shields should load available shields without injecting user_id
Stack Traces | 0.038s run time 
Error: expect(received).toHaveLength(expected)

Expected length: 1
Received length: 2
Received array:  ["http://127.0.0.1:8080/v1/shields", "http://127.0.0.1:8080/v1/shields"]
    at Object.toHaveLength (.../src/service/router.test.ts:231:28)
    at processTicksAndRejections (node:internal/process/task_queues:103:5)

To view more test analytics, go to the Test Analytics Dashboard
📋 Got 3 mins? Take this short survey to help us improve Test Analytics.

@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 5064d20 to d89f32a Compare June 17, 2026 17:37
@renovate @rhdh-bot
fix(deps): update rhdh lightspeed dependencies (minor)
383fde8 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from d89f32a to 383fde8 Compare June 17, 2026 17:38
@sonarqubecloud

sonarqubecloud Bot commented Jun 17, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@karthikjeeyar karthikjeeyar Awaiting requested review from karthikjeeyar karthikjeeyar is a code owner

@rohitkrai03 rohitkrai03 Awaiting requested review from rohitkrai03 rohitkrai03 is a code owner

@yangcao77 yangcao77 Awaiting requested review from yangcao77 yangcao77 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file lightspeed team/rhdh workspace/lightspeed

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants