Skip to content

fix(deps): update rhdh lightspeed dependencies (minor)#3440

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/rhdh-lightspeed-dependencies-(minor)
Open

fix(deps): update rhdh lightspeed dependencies (minor)#3440
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/rhdh-lightspeed-dependencies-(minor)

Conversation

@renovate

@renovate renovate Bot commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@backstage-community/plugin-rbac-backend (source) 7.12.47.13.0 age confidence
@patternfly/react-core 6.4.36.5.1 age confidence
@playwright/test (source) 1.60.01.61.0 age confidence
@red-hat-developer-hub/backstage-plugin-theme (source) ^0.12.0^0.14.0 age confidence
infinispan 0.13.00.15.0 age confidence
langsmith ^0.6.0^0.7.0 age confidence
llama-stack-client ^0.5.0^0.7.0 age confidence
msw (source) 2.12.102.14.6 age confidence

Release Notes

backstage/community-plugins (@​backstage-community/plugin-rbac-backend)

v7.13.0

Compare Source

Minor Changes
  • 6a916a1: Backstage version bump to v1.50.4
Patch Changes

v7.12.5

Compare Source

Patch Changes
  • 39a3942: Hardens RBAC policy handling to prevent Casbin CSV poisoning and improve error visibility.

    Key fixes:

    • Rejects permission policy permission values containing " before persistence (prevents known CSV parse failures).
    • Rethrows loadPolicy failures after audit logging so mutation/read paths surface the root cause instead of secondary errors.
    • Improves policy API request validation and missing-role handling (400/404 where appropriate).
    • Validates default configured permissions/admin refs with the same stricter checks used by runtime write paths.
    • Strengthens conditional and plugin-id payload validation and aligns owner filtering behavior for default roles.

    Compatibility notes:

    • Requests/config entries using permission values with embedded " are now rejected.
    • Conditional policy payloads and conditional YAML ingestion now enforce limits.
    • Conditional permissionMapping must list distinct Backstage permission actions (no duplicates); at most one entry per supported action (create, read, update, delete, use).
    • Plugin ID registration payloads now enforce count/length/duplicate checks.
    • For larger existing payloads, limits are configurable via:
    • permission.rbac.validation.conditionalPolicies.maxConditionDepth
    • permission.rbac.validation.conditionalPolicies.maxConditionNodeCount
    • permission.rbac.validation.conditionalPolicies.maxCriteriaItems
    • permission.rbac.validation.conditionalPoliciesFile.maxBytes
    • permission.rbac.validation.conditionalPoliciesFile.maxDocuments

    Operational note:

    • CSV policy files are parsed line-by-line; malformed lines are skipped with warnings instead of aborting the entire file load.
patternfly/patternfly-react (@​patternfly/react-core)

v6.5.1

Compare Source

v6.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: patternfly/patternfly-react@v6.4.0...v6.5.0

microsoft/playwright (@​playwright/test)

v1.61.0

Compare Source

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();

// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
  id: credentialId,
  userHandle,
  privateKey,
  publicKey,
});
await context.credentials.install();

const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();
New APIs
Network
Browser and Screencast
  • New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.
  • New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions.
  • The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser.
Test runner
  • The testOptions.video option now supports the same set of modes as trace: new 'on-all-retries', 'retain-on-first-failure' and 'retain-on-failure-and-retries' values. See the video modes table for which runs are recorded and kept in each mode.
  • Supported expect.soft.poll(...).
  • New fullConfig.argv — a snapshot of process.argv from the runner process, handy for reading custom arguments passed after the -- separator.
  • New fullConfig.failOnFlakyTests mirrors the config option, so reporters can explain why a flaky run failed.
  • testInfo.errors now lists each sub-error of an AggregateError as a separate entry.
  • New -G command line shorthand for --grep-invert.
🛠️ Other improvements
  • Playwright now supports Ubuntu 26.04.
  • HAR and trace recordings now include WebSocket requests.
Browser Versions
  • Chromium 149.0.7827.55
  • Mozilla Firefox 151.0
  • WebKit 26.5

This version was also tested against the following stable channels:

  • Google Chrome 149
  • Microsoft Edge 149
redhat-developer/rhdh-plugins (@​red-hat-developer-hub/backstage-plugin-theme)

v0.14.7

Compare Source

Patch Changes
  • 4d80582: fix(RHDHBUGS-2291): use &.Mui-selected syntax for MuiBottomNavigationAction to resolve CSS specificity console warning

v0.14.5

Compare Source

Patch Changes
  • 82cc47d: Fixed the background color of myGroup sidebar submenu in light theme

v0.14.4

Compare Source

Patch Changes

v0.14.3

Compare Source

Patch Changes
  • 54b7c9e: style the active sidebar nav link (a[aria-current="page"]) so selected colors match the resolved navigation shell

v0.14.2

Compare Source

Patch Changes
  • ee1def6: Align the navigation sidebar with merged palette.navigation and rhdh.general colors, including submenu rows and selected/active BackstageSidebarItem states. Add rhdh.general.pageInsetBackgroundColor so the page inset shell can use its own color (defaults match the previous app bar fill; falls back to appBarBackgroundColor when unset). Main content area remains on mainSectionBackgroundColor.

v0.14.1

Compare Source

Patch Changes
  • 8d1eee2: Add missing font css reference so that the Red Hat font is used again.

v0.14.0

Compare Source

Minor Changes
  • 0b7c442: Add and export RHDH logo components as LogoFull and LogoIcon
  • 0b7c442: Backstage version bump to v1.49.2

v0.13.0

Compare Source

Minor Changes

v0.12.3

Compare Source

v0.12.2

Compare Source

[v0.12.1](

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file lightspeed team/rhdh labels Jun 17, 2026
@renovate renovate Bot requested review from a team, karthikjeeyar, rohitkrai03 and yangcao77 as code owners June 17, 2026 16:04
@renovate renovate Bot added dependencies Pull requests that update a dependency file team/rhdh lightspeed labels Jun 17, 2026
@rhdh-gh-app

rhdh-gh-app Bot commented Jun 17, 2026

Copy link
Copy Markdown

Changed Packages

Package Name Package Path Changeset Bump Current Version
app-legacy workspaces/lightspeed/packages/app-legacy none v0.0.28
app workspaces/lightspeed/packages/app none v0.0.27
backend workspaces/lightspeed/packages/backend none v0.0.59
@red-hat-developer-hub/backstage-plugin-lightspeed-backend workspaces/lightspeed/plugins/lightspeed-backend patch v2.9.1
@red-hat-developer-hub/backstage-plugin-lightspeed workspaces/lightspeed/plugins/lightspeed patch v2.9.1

@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 2e02bf7 to 5064d20 Compare June 17, 2026 16:05
@codecov

codecov Bot commented Jun 17, 2026

Copy link
Copy Markdown

❌ 1 Tests Failed:

Tests completed Failed Passed Skipped
790 1 789 0
View the top 1 failed test(s) by shortest run time
lightspeed router tests GET /v1/shields should load available shields without injecting user_id
Stack Traces | 0.054s run time
Error: expect(received).toHaveLength(expected)

Expected length: 1
Received length: 2
Received array:  ["http://127.0.0.1:8080/v1/shields", "http://127.0.0.1:8080/v1/shields"]
    at Object.toHaveLength (.../src/service/router.test.ts:231:28)
    at processTicksAndRejections (node:internal/process/task_queues:104:5)

To view more test analytics, go to the Test Analytics Dashboard
📋 Got 3 mins? Take this short survey to help us improve Test Analytics.

@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 5064d20 to d89f32a Compare June 17, 2026 17:37
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from d89f32a to 383fde8 Compare June 17, 2026 17:38
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 383fde8 to 1a541cb Compare June 18, 2026 05:31
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 1a541cb to 73790d4 Compare June 18, 2026 05:31
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 73790d4 to 8380dba Compare June 18, 2026 05:51
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 8380dba to ca64056 Compare June 18, 2026 05:51
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from ca64056 to 0b547af Compare June 18, 2026 14:13
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 0b547af to 620792d Compare June 18, 2026 14:14
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 620792d to ad199cf Compare June 18, 2026 15:57
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from ad199cf to a65608d Compare June 18, 2026 15:57
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from a65608d to df85f49 Compare June 18, 2026 18:15
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from df85f49 to 7c3cff4 Compare June 18, 2026 18:15
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 7c3cff4 to fe983bd Compare June 18, 2026 20:21
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from fe983bd to 4b680ea Compare June 18, 2026 20:22
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 519b395 to 1481648 Compare June 19, 2026 10:39
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 1481648 to 26aeb70 Compare June 19, 2026 10:39
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 26aeb70 to ba9248c Compare June 19, 2026 13:47
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from ba9248c to 5f4f9ea Compare June 19, 2026 13:47
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 5f4f9ea to ec609c7 Compare June 19, 2026 17:13
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from ec609c7 to 0e672a7 Compare June 19, 2026 17:13
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 0e672a7 to d465a7a Compare June 19, 2026 18:43
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from d465a7a to c0d5407 Compare June 19, 2026 18:44
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from c0d5407 to 3929825 Compare June 19, 2026 20:03
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 3929825 to 2c70af3 Compare June 19, 2026 20:03
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 2c70af3 to a6d145b Compare June 19, 2026 20:23
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from a6d145b to fc5c5ee Compare June 19, 2026 20:23
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from fc5c5ee to fb22859 Compare June 19, 2026 20:52
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from fb22859 to 83a50ae Compare June 19, 2026 20:53
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 83a50ae to 950fac6 Compare June 19, 2026 21:05
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 950fac6 to 5f8ce56 Compare June 19, 2026 21:05
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 5f8ce56 to eb1de55 Compare June 19, 2026 21:14
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from eb1de55 to 29f6df6 Compare June 19, 2026 21:14
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 29f6df6 to ccd5544 Compare June 19, 2026 21:26
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from ccd5544 to 3875785 Compare June 19, 2026 21:27
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 3875785 to 5cf2032 Compare June 19, 2026 21:37
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 5cf2032 to d16943e Compare June 19, 2026 21:37
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from d16943e to 25284e9 Compare June 19, 2026 21:48
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 25284e9 to 544b5bf Compare June 19, 2026 21:49
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 544b5bf to 43d902f Compare June 19, 2026 22:00
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 43d902f to 641e8fd Compare June 19, 2026 22:00
@renovate renovate Bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from 641e8fd to ea0fa6d Compare June 19, 2026 22:11
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@rhdh-bot rhdh-bot force-pushed the renovate/rhdh-lightspeed-dependencies-(minor) branch from ea0fa6d to 9982379 Compare June 19, 2026 22:11
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file lightspeed team/rhdh workspace/lightspeed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants