[pull] master from backstage:master

.changeset/cli-new-frontend-templates-default.md

@@ -0,0 +1,16 @@
+---
+'@backstage/cli': minor
+---
+
+**BREAKING**: The CLI templates for frontend plugins have been renamed:
+
+- `new-frontend-plugin` → `frontend-plugin`
+- `new-frontend-plugin-module` → `frontend-plugin-module`
+- `frontend-plugin` (legacy) → `legacy-frontend-plugin`
+
+To smooth out this breaking change, the CLI now auto-detects which frontend system your app uses based on the dependencies in `packages/app/package.json`. When using the default templates (no explicit `templates` configuration):
+
+- Apps using `@backstage/frontend-defaults` will see the new frontend system templates (`frontend-plugin`, `frontend-plugin-module`)
+- Apps using `@backstage/app-defaults` will see the legacy template (displayed as `frontend-plugin`)
+
+This means existing projects that haven't migrated to the new frontend system will continue to create legacy plugins by default, while new projects will get the new frontend system templates. If you have explicit template configuration in your `package.json`, it will be used as-is without any auto-detection.

.changeset/cli-node-auth-api.md

@@ -0,0 +1,5 @@
+---
+'@backstage/cli-node': patch
+---
+
+Added `CliAuth` class for managing CLI authentication state. This provides a class-based API with a static `create` method that resolves the currently selected (or explicitly named) auth instance, transparently refreshes expired access tokens, and exposes helpers for other CLI modules to authenticate with a Backstage backend.

.changeset/new-frontend-system-default.md

@@ -0,0 +1,5 @@
+---
+'@backstage/create-app': minor
+---
+
+**BREAKING**: The new frontend system is now the default template when creating a new Backstage app. The previous `--next` flag has been replaced with a `--legacy` flag that can be used to create an app using the old frontend system instead.

.changeset/promote-translation-refs-stable-minor.md

@@ -0,0 +1,10 @@
+---
+'@backstage/plugin-catalog-react': minor
+'@backstage/plugin-catalog': minor
+'@backstage/plugin-scaffolder-react': minor
+'@backstage/plugin-scaffolder': minor
+'@backstage/plugin-search-react': minor
+'@backstage/plugin-search': minor
+---
+
+Promoted the plugin's translation ref to the stable package entry point. It was previously only available through the alpha entry point.

.changeset/promote-translation-refs-stable-patch.md

@@ -0,0 +1,16 @@
+---
+'@backstage/core-components': patch
+'@backstage/plugin-api-docs': patch
+'@backstage/plugin-catalog-graph': patch
+'@backstage/plugin-catalog-import': patch
+'@backstage/plugin-home-react': patch
+'@backstage/plugin-home': patch
+'@backstage/plugin-kubernetes-cluster': patch
+'@backstage/plugin-kubernetes-react': patch
+'@backstage/plugin-kubernetes': patch
+'@backstage/plugin-notifications': patch
+'@backstage/plugin-org': patch
+'@backstage/plugin-user-settings': patch
+---
+
+Promoted the plugin's translation ref to the stable package entry point. It was previously only available through the alpha entry point.

.changeset/silver-snails-pull.md

@@ -0,0 +1,56 @@
+---
+'@backstage/plugin-auth-backend-module-cloudflare-access-provider': patch
+'@backstage/plugin-auth-backend-module-bitbucket-server-provider': patch
+'@backstage/plugin-auth-backend-module-azure-easyauth-provider': patch
+'@backstage/plugin-auth-backend-module-oauth2-proxy-provider': patch
+'@backstage/plugin-scaffolder-backend-module-bitbucket-cloud': patch
+'@backstage/plugin-auth-backend-module-atlassian-provider': patch
+'@backstage/plugin-auth-backend-module-bitbucket-provider': patch
+'@backstage/plugin-auth-backend-module-microsoft-provider': patch
+'@backstage/plugin-auth-backend-module-openshift-provider': patch
+'@backstage/cli-module-auth': patch
+'@backstage/cli-module-new': patch
+'@backstage/plugin-auth-backend-module-onelogin-provider': patch
+'@backstage/plugin-auth-backend-module-aws-alb-provider': patch
+'@backstage/plugin-auth-backend-module-gcp-iap-provider': patch
+'@backstage/plugin-auth-backend-module-github-provider': patch
+'@backstage/plugin-auth-backend-module-gitlab-provider': patch
+'@backstage/plugin-auth-backend-module-google-provider': patch
+'@backstage/plugin-auth-backend-module-oauth2-provider': patch
+'@backstage/plugin-auth-backend-module-oidc-provider': patch
+'@backstage/plugin-auth-backend-module-okta-provider': patch
+'@backstage/plugin-scaffolder-backend-module-github': patch
+'@backstage/plugin-scaffolder-backend-module-gitlab': patch
+'@backstage/plugin-user-settings-backend': patch
+'@backstage/frontend-plugin-api': patch
+'@backstage/frontend-test-utils': patch
+'@backstage/backend-plugin-api': patch
+'@backstage/backend-test-utils': patch
+'@backstage/plugin-mcp-actions-backend': patch
+'@backstage/filter-predicates': patch
+'@backstage/plugin-permission-backend': patch
+'@backstage/plugin-scaffolder-backend': patch
+'@backstage/backend-defaults': patch
+'@backstage/frontend-app-api': patch
+'@backstage/plugin-permission-common': patch
+'@backstage/core-compat-api': patch
+'@backstage/core-components': patch
+'@backstage/core-plugin-api': patch
+'@backstage/plugin-scaffolder-react': patch
+'@backstage/plugin-catalog-backend': patch
+'@backstage/plugin-permission-node': patch
+'@backstage/plugin-scaffolder-node': patch
+'@backstage/catalog-model': patch
+'@backstage/plugin-search-backend': patch
+'@backstage/core-app-api': patch
+'@backstage/plugin-catalog-react': patch
+'@backstage/plugin-auth-backend': patch
+'@backstage/repo-tools': patch
+'@backstage/plugin-scaffolder': patch
+'@backstage/cli-node': patch
+'@backstage/plugin-auth-node': patch
+'@backstage/plugin-home': patch
+'@backstage/plugin-app': patch
+---
+
+Updated dependency `zod` to `^3.25.76 || ^4.0.0` & migrated to `/v3` or `/v4` imports.

.changeset/solid-bats-flash.md

@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-notifications-backend-module-slack': patch
+---
+
+The Slack notification processor now uses the `MetricsService` to create metrics, providing plugin-scoped attribution. `{message}` unit has also been added.

.changeset/tangy-toys-carry.md

@@ -0,0 +1,5 @@
+---
+'@backstage/frontend-dynamic-feature-loader': patch
+---
+
+Update the README of the `frontend-dynamic-feature-loader` package to mention the new `backstage-cli package bundle` command.

contrib/docs/tutorials/help-im-behind-a-corporate-proxy.md

@@ -1,4 +1,7 @@
-# Running the backend behind a Corporate Proxy
+# Legacy: Running the backend behind a Corporate Proxy
+
+> [!NOTE]
+> On Node.js 22.21.0 or later, you can use Node.js's built-in proxy support instead of the workarounds described here. See the [recommended proxy setup guide](../../../docs/tutorials/corporate-proxy.md) for details.
 
 This article helps you get your backend installation up and running making calls through corporate proxies.