Version Packages (scorecard)

workspaces/scorecard/plugins/scorecard-backend-module-dependabot/CHANGELOG.md

@@ -0,0 +1,18 @@
+# @red-hat-developer-hub/backstage-plugin-scorecard-backend-module-dependabot
+
+## 0.2.0
+
+### Minor Changes
+
+- 526b9f3: added dependabot scorecard
+- d706601: Backstage version bump to v1.49.3
+
+### Patch Changes
+
+- 1657da3: Added github.com/dependabot annotation
+- Updated dependencies [d706601]
+- Updated dependencies [55226c2]
+- Updated dependencies [243ad0a]
+- Updated dependencies [c83b206]
+  - @red-hat-developer-hub/backstage-plugin-scorecard-common@2.5.0
+  - @red-hat-developer-hub/backstage-plugin-scorecard-node@2.5.0

workspaces/scorecard/plugins/scorecard-backend-module-dependabot/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@red-hat-developer-hub/backstage-plugin-scorecard-backend-module-dependabot",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "license": "Apache-2.0",
   "description": "The dependabot backend module for the scorecard plugin.",
   "main": "src/index.ts",

workspaces/scorecard/plugins/scorecard-backend-module-github/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @red-hat-developer-hub/backstage-plugin-scorecard-backend-module-github
 
+## 2.5.0
+
+### Minor Changes
+
+- d706601: Backstage version bump to v1.49.3
+
+### Patch Changes
+
+- Updated dependencies [d706601]
+- Updated dependencies [55226c2]
+- Updated dependencies [243ad0a]
+- Updated dependencies [c83b206]
+  - @red-hat-developer-hub/backstage-plugin-scorecard-common@2.5.0
+  - @red-hat-developer-hub/backstage-plugin-scorecard-node@2.5.0
+
 ## 2.4.0
 
 ### Patch Changes

workspaces/scorecard/plugins/scorecard-backend-module-github/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@red-hat-developer-hub/backstage-plugin-scorecard-backend-module-github",
-  "version": "2.4.0",
+  "version": "2.5.0",
   "license": "Apache-2.0",
   "description": "The github backend module for the scorecard plugin.",
   "main": "src/index.ts",

workspaces/scorecard/plugins/scorecard-backend-module-jira/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @red-hat-developer-hub/backstage-plugin-scorecard-backend-module-jira
 
+## 2.5.0
+
+### Minor Changes
+
+- d706601: Backstage version bump to v1.49.3
+
+### Patch Changes
+
+- Updated dependencies [d706601]
+- Updated dependencies [55226c2]
+- Updated dependencies [243ad0a]
+- Updated dependencies [c83b206]
+  - @red-hat-developer-hub/backstage-plugin-scorecard-common@2.5.0
+  - @red-hat-developer-hub/backstage-plugin-scorecard-node@2.5.0
+
 ## 2.4.0
 
 ### Patch Changes

workspaces/scorecard/plugins/scorecard-backend-module-jira/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@red-hat-developer-hub/backstage-plugin-scorecard-backend-module-jira",
-  "version": "2.4.0",
+  "version": "2.5.0",
   "license": "Apache-2.0",
   "description": "The jira backend module for the scorecard plugin.",
   "main": "src/index.ts",

workspaces/scorecard/plugins/scorecard-backend-module-openssf/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @red-hat-developer-hub/backstage-plugin-scorecard-backend-module-openssf
 
+## 0.2.0
+
+### Minor Changes
+
+- d706601: Backstage version bump to v1.49.3
+
+### Patch Changes
+
+- bd5f3e8: rework openssf client
+- Updated dependencies [d706601]
+- Updated dependencies [55226c2]
+- Updated dependencies [243ad0a]
+- Updated dependencies [c83b206]
+  - @red-hat-developer-hub/backstage-plugin-scorecard-common@2.5.0
+  - @red-hat-developer-hub/backstage-plugin-scorecard-node@2.5.0
+
 ## 0.1.6
 
 ### Patch Changes

workspaces/scorecard/plugins/scorecard-backend-module-openssf/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@red-hat-developer-hub/backstage-plugin-scorecard-backend-module-openssf",
-  "version": "0.1.6",
+  "version": "0.2.0",
   "license": "Apache-2.0",
   "description": "The openssf backend module for the scorecard plugin.",
   "main": "src/index.ts",

workspaces/scorecard/plugins/scorecard-backend/CHANGELOG.md

@@ -1,5 +1,43 @@
 # @red-hat-developer-hub/backstage-plugin-scorecard-backend
 
+## 2.5.0
+
+### Minor Changes
+
+- d706601: Backstage version bump to v1.49.3
+- 55226c2: Introduces custom threshold rule icons that can be configured in `app-config.yaml`.
+- bd5f3e8: added disable metric feature to the pull metric task
+- 243ad0a: Aggregated scorecards now use **aggregation IDs** and dedicated HTTP routes. The old catalog-aggregations URL still works but is **deprecated** (not removed).
+
+  **Backend (`@red-hat-developer-hub/backstage-plugin-scorecard-backend`)**
+
+  - **Deprecated:** `GET /metrics/:metricId/catalog/aggregations` — responses are unchanged, but the handler emits [RFC 8594](https://datatracker.ietf.org/doc/html/rfc8594) `Deprecation` and `Link` headers (alternate successor: `GET .../aggregations/:aggregationId`) and logs a warning. Prefer **`GET /aggregations/:aggregationId`** for new integrations.
+  - **Added:** `GET /aggregations/:aggregationId` for aggregated results using configured aggregation.
+  - **Added:** `GET /aggregations/:aggregationId/metadata` for KPI titles, descriptions, and aggregation metadata consumed by the UI.
+
+  **Common (`@red-hat-developer-hub/backstage-plugin-scorecard-common`)**
+
+  - Types and constants aligned with the aggregation config and new API shapes.
+
+  **Frontend (`@red-hat-developer-hub/backstage-plugin-scorecard`)**
+
+  - Homepage and aggregated flows resolve cards via **`aggregationId`**, fetch metadata from the new endpoint, and keep localized threshold and error strings where translation keys exist.
+
+  **Action for adopters:** Configure aggregated scorecards with `aggregationId` values that match backend aggregation config, replace direct calls to `GET /metrics/:metricId/catalog/aggregations` with `GET /aggregations/:aggregationId` (and metadata if you need the same labels as the plugin UI).
+
+- c83b206: Adds the ability to drill down from aggregated scorecard KPIs to view the individual entities that contribute to the overall score. This enables managers and platform engineers to identify specific services impacting metrics and troubleshoot issues at the entity level.
+
+### Patch Changes
+
+- 4f483a6: Normalize entity owners to their full canonical reference when syncing. Catalog entities are able to define a short name or the full entity reference for group ownership. This can lead to inconsistent filtering as we utilize the full entity reference for users and groups
+- 89b273f: Adds the ability to sort by status that was originally missed during the initial implementation of the drill down feature
+- Updated dependencies [d706601]
+- Updated dependencies [55226c2]
+- Updated dependencies [243ad0a]
+- Updated dependencies [c83b206]
+  - @red-hat-developer-hub/backstage-plugin-scorecard-common@2.5.0
+  - @red-hat-developer-hub/backstage-plugin-scorecard-node@2.5.0
+
 ## 2.4.0
 
 ### Minor Changes

workspaces/scorecard/plugins/scorecard-backend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@red-hat-developer-hub/backstage-plugin-scorecard-backend",
-  "version": "2.4.0",
+  "version": "2.5.0",
   "license": "Apache-2.0",
   "main": "src/index.ts",
   "types": "src/index.ts",

workspaces/scorecard/plugins/scorecard-common/CHANGELOG.md

@@ -1,5 +1,31 @@
 # @red-hat-developer-hub/backstage-plugin-scorecard-common
 
+## 2.5.0
+
+### Minor Changes
+
+- d706601: Backstage version bump to v1.49.3
+- 55226c2: Introduces custom threshold rule icons that can be configured in `app-config.yaml`.
+- 243ad0a: Aggregated scorecards now use **aggregation IDs** and dedicated HTTP routes. The old catalog-aggregations URL still works but is **deprecated** (not removed).
+
+  **Backend (`@red-hat-developer-hub/backstage-plugin-scorecard-backend`)**
+
+  - **Deprecated:** `GET /metrics/:metricId/catalog/aggregations` — responses are unchanged, but the handler emits [RFC 8594](https://datatracker.ietf.org/doc/html/rfc8594) `Deprecation` and `Link` headers (alternate successor: `GET .../aggregations/:aggregationId`) and logs a warning. Prefer **`GET /aggregations/:aggregationId`** for new integrations.
+  - **Added:** `GET /aggregations/:aggregationId` for aggregated results using configured aggregation.
+  - **Added:** `GET /aggregations/:aggregationId/metadata` for KPI titles, descriptions, and aggregation metadata consumed by the UI.
+
+  **Common (`@red-hat-developer-hub/backstage-plugin-scorecard-common`)**
+
+  - Types and constants aligned with the aggregation config and new API shapes.
+
+  **Frontend (`@red-hat-developer-hub/backstage-plugin-scorecard`)**
+
+  - Homepage and aggregated flows resolve cards via **`aggregationId`**, fetch metadata from the new endpoint, and keep localized threshold and error strings where translation keys exist.
+
+  **Action for adopters:** Configure aggregated scorecards with `aggregationId` values that match backend aggregation config, replace direct calls to `GET /metrics/:metricId/catalog/aggregations` with `GET /aggregations/:aggregationId` (and metadata if you need the same labels as the plugin UI).
+
+- c83b206: Adds the ability to drill down from aggregated scorecard KPIs to view the individual entities that contribute to the overall score. This enables managers and platform engineers to identify specific services impacting metrics and troubleshoot issues at the entity level.
+
 ## 2.4.0
 
 ### Minor Changes

workspaces/scorecard/plugins/scorecard-common/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@red-hat-developer-hub/backstage-plugin-scorecard-common",
-  "version": "2.4.0",
+  "version": "2.5.0",
   "license": "Apache-2.0",
   "description": "Common functionalities for the scorecard plugin",
   "main": "src/index.ts",

workspaces/scorecard/plugins/scorecard-node/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @red-hat-developer-hub/backstage-plugin-scorecard-node
 
+## 2.5.0
+
+### Minor Changes
+
+- d706601: Backstage version bump to v1.49.3
+- 55226c2: Introduces custom threshold rule icons that can be configured in `app-config.yaml`.
+
+### Patch Changes
+
+- Updated dependencies [d706601]
+- Updated dependencies [55226c2]
+- Updated dependencies [243ad0a]
+- Updated dependencies [c83b206]
+  - @red-hat-developer-hub/backstage-plugin-scorecard-common@2.5.0
+
 ## 2.4.0
 
 ### Minor Changes

workspaces/scorecard/plugins/scorecard-node/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@red-hat-developer-hub/backstage-plugin-scorecard-node",
-  "version": "2.4.0",
+  "version": "2.5.0",
   "license": "Apache-2.0",
   "description": "Node.js library for the scorecard plugin",
   "main": "src/index.ts",