Bump @backstage/plugin-catalog from 1.20.0 to 2.0.5

[dependabot]

Bumps @backstage/plugin-catalog from 1.20.0 to 2.0.5.

Release notes

Sourced from @​backstage/plugin-catalog's releases.

v1.52.0-next.2

Oops 🧹

v1.52.0-next.1

See docs/releases/v1.52.0-next.1-changelog.md for more information.

v1.52.0-next.0

See docs/releases/v1.52.0-next.0-changelog.md for more information.

v1.51.1

This patch release fixes the following issues:

• Split queryEntities list and count queries to fix CTE materialization bottleneck
• Fix 406 response for repository/archive retrieval in gitlabUrlReader
• Restore runtime dependencies incorrectly demoted to devDependencies
• Fix msgraph userGroupMember filter error by filtering disabled users client-side

v1.51.0

These are the release notes for the v1.51.0 release of Backstage.

A huge thanks to the whole team of maintainers and contributors as well as the amazing Backstage Community for the hard work in getting this release developed and done.

Highlights

BREAKING: Removed deprecated NavItemBlueprint

The deprecated NavItemBlueprint has been removed from @backstage/frontend-plugin-api. Navigation items are now discovered from PageBlueprint extensions based on their title and icon params. If you were still using NavItemBlueprint, migrate by setting title and icon on the page extension instead. All built-in plugins have been updated accordingly.

Additionally, renderInTestApp from @backstage/frontend-test-utils no longer renders a sidebar or legacy nav-item extensions. The app nav extension is now disabled in the minimal test app shell.

BREAKING: Removed deprecated PortableSchema.schema property form

The deprecated property form of PortableSchema.schema has been removed from @backstage/frontend-plugin-api. The schema member is now a plain method that must be called as schema() — direct property access like schema.type or schema.properties is no longer supported.

BREAKING: Hardened OIDC default patterns

The default allowed patterns for CIMD and DCR in @backstage/plugin-auth-backend have been hardened. The previous permissive ['*'] wildcards have been replaced with specific defaults for known MCP clients. If you previously relied on the permissive defaults and have custom MCP clients, you will need to explicitly add their patterns to the allow list.

BREAKING: Cleaned up PolicyQueryUser type

The token and expiresInSeconds fields have been removed from PolicyQueryUser in @backstage/plugin-permission-node. These were previously deprecated in favor of credentials with coreServices.auth. The identity field has been deprecated. A new CachedUserInfoService with a 5-second TTL cache and in-flight request coalescing has been added to reduce repeated user info lookups.

BREAKING: Catalog entity pagination excludes entities without sort field

When paginating entities with an order field via /entities/by-query, entities that lack the order field are now excluded from both the result set and the totalItems count. Previously these entities appeared at the end via NULLS LAST, but cursor-based pagination could not actually reach them past the first page — the count over-reported the number of navigable entities.

BREAKING: Microsoft Graph disabled users filtered by default

The @backstage/plugin-catalog-backend-module-msgraph and @backstage/plugin-catalog-backend-module-msgraph-incremental providers now filter out disabled user accounts by default. The provider automatically applies an accountEnabled eq true filter, combining it with any custom user.filter you provide. If you need to ingest disabled accounts, set the filter to explicitly include them.

... (truncated)

Changelog

Sourced from @​backstage/plugin-catalog's changelog.

2.0.5

Patch Changes

• 728629c: Fixed an issue where navigating to an unknown sub-path on an entity page (for example /catalog/default/component/foo/blob) would silently render the first available route. Unknown paths now show the standard not-found page instead.
• 44d77e9: Removed separate nav item extensions. Sidebar entries are now provided via title and icon on each plugin's page extension.
• 0c5e41f: Removed unused dependencies that had no imports in source code.
• cad156e: Replaced old config schema values from existing extensions and blueprints.
• 085133f: The zod dependency has been bumped from ^3.25.76 || ^4.0.0 to ^4.0.0, since configSchema requires the full Zod v4 package for JSON Schema support.
• Updated dependencies
  • @​backstage/catalog-model@​1.9.0
  • @​backstage/core-components@​0.18.10
  • @​backstage/ui@​0.15.0
  • @​backstage/errors@​1.3.1
  • @​backstage/frontend-plugin-api@​0.17.0
  • @​backstage/core-plugin-api@​1.12.6
  • @​backstage/plugin-catalog-react@​3.0.0
  • @​backstage/core-compat-api@​0.5.11
  • @​backstage/plugin-techdocs-react@​1.3.11
  • @​backstage/plugin-search-react@​1.11.4
  • @​backstage/plugin-scaffolder-common@​2.2.0
  • @​backstage/catalog-client@​1.15.1
  • @​backstage/integration-react@​1.2.18
  • @​backstage/plugin-catalog-common@​1.1.10
  • @​backstage/plugin-permission-react@​0.5.1
  • @​backstage/plugin-search-common@​1.2.24

2.0.5-next.1

Patch Changes

• 728629c: Fixed an issue where navigating to an unknown sub-path on an entity page (for example /catalog/default/component/foo/blob) would silently render the first available route. Unknown paths now show the standard not-found page instead.
• Updated dependencies
  • @​backstage/ui@​0.15.0-next.3
  • @​backstage/plugin-scaffolder-common@​2.2.0-next.1
  • @​backstage/plugin-catalog-react@​2.1.5-next.1

2.0.5-next.0

Patch Changes

• 0c5e41f: Removed unused dependencies that had no imports in source code.
• cad156e: Replaced old config schema values from existing extensions and blueprints.
• 085133f: The zod dependency has been bumped from ^3.25.76 || ^4.0.0 to ^4.0.0, since configSchema requires the full Zod v4 package for JSON Schema support.
• Updated dependencies
  • @​backstage/core-components@​0.18.10-next.0
  • @​backstage/ui@​0.15.0-next.0
  • @​backstage/errors@​1.3.1-next.0
  • @​backstage/core-compat-api@​0.5.11-next.0
  • @​backstage/plugin-catalog-react@​2.1.5-next.0

... (truncated)

Commits

• See full diff in compare view