@backstage/backend-dynamic-feature-service 0.8.8 → 0.8.9-next.1

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # @backstage/backend-dynamic-feature-service
 
+## 0.8.9-next.1
+
+### Patch Changes
+
+- Updated dependencies
+  - @backstage/backend-defaults@0.18.2-next.1
+  - @backstage/plugin-catalog-backend@4.0.3-next.1
+  - @backstage/cli-node@0.3.6-next.1
+  - @backstage/plugin-events-backend@0.6.8-next.1
+  - @backstage/plugin-events-node@0.5.0-next.1
+  - @backstage/plugin-auth-node@0.7.8-next.1
+  - @backstage/plugin-scaffolder-node@0.13.9-next.1
+
+## 0.8.9-next.0
+
+### Patch Changes
+
+- c999b77: Dynamic backend plugins can now require the packages they share with the backend when those packages are not in the root `node_modules`, as with the pnpm `isolated` node linker. They are found through the backend package and through this package. With the default pnpm hoisting, this includes the packages that pnpm hoists into `node_modules/.pnpm/node_modules`. With `hoist: false`, only the direct dependencies of the backend package and of this package are found. Everything that was searched before is still searched first, so a module that was found before is found in the same place. The exception is plugins inside the Backstage root on Windows, which did not search the root `node_modules` before, other than through `NODE_PATH`. It is now searched in the same order as on other platforms.
+- Updated dependencies
+  - @backstage/backend-defaults@0.18.2-next.0
+  - @backstage/plugin-catalog-backend@4.0.3-next.0
+  - @backstage/cli-node@0.3.6-next.0
+  - @backstage/plugin-events-backend@0.6.8-next.0
+  - @backstage/plugin-auth-node@0.7.8-next.0
+  - @backstage/plugin-permission-node@0.11.6-next.0
+  - @backstage/plugin-search-backend-node@1.4.10-next.0
+  - @backstage/backend-plugin-api@1.11.1-next.0
+  - @backstage/plugin-events-node@0.4.28-next.0
+  - @backstage/plugin-scaffolder-node@0.13.9-next.0
+  - @backstage/backend-openapi-utils@0.7.4-next.0
+  - @backstage/plugin-app-node@0.1.51-next.0
+
 ## 0.8.8
 
 ### Patch Changes

package/README.md

@@ -35,6 +35,14 @@ The service consists of several key components:
 3. **Loading**: The module loader loads the plugin code
 4. **Integration**: Plugins are registered as Backstage features and made available to the backend
 
+### Module Resolution
+
+When a backend dynamic plugin requires a module, it is resolved from the plugin's own `node_modules` first, then from the `node_modules` of the Backstage root, and then from the global folders of Node.js, which start with the directories in `NODE_PATH`. Plugins outside of the Backstage root reach the root `node_modules` through `NODE_PATH`, so for them the order of `NODE_PATH` applies. When `NODE_PATH` doesn't include it, the root `node_modules` is searched right after the global folders.
+
+Modules that are not found in these places are resolved from the host backend, through the `node_modules` directories of the backend package and of this package within the Backstage root. The backend package is found through the entry point of the process and the working directory. If the backend is started by another program, such as a process manager, use the backend package directory as its working directory, and adjust relative paths such as `--config` arguments.
+
+This lets a plugin require the packages it shares with the host when the package manager does not link them into the root `node_modules`, as with the pnpm `isolated` node linker. With the default pnpm hoisting, this includes the packages that pnpm hoists into `node_modules/.pnpm/node_modules`. With `hoist: false`, only the direct dependencies of the backend package and of this package are found.
+
 ## Usage
 
 ### Basic Setup
@@ -109,7 +117,7 @@ mkdir -p /path/to/dynamic-plugins-root/my-backstage-plugin
 tar -xzf package.tgz -C /path/to/dynamic-plugins-root/my-backstage-plugin --strip-components=1
 ```
 
-**Why this works:** The plugin can resolve all its dependencies from the main application's `node_modules`.
+**Why this works:** The plugin can resolve all its dependencies from the main application. See [Module Resolution](#module-resolution).
 
 **Reality:** Most plugins have private dependencies not available in the main application, so this approach has limited applicability.
 

package/dist/loader/CommonJSModuleLoader.cjs.js

@@ -1,9 +1,12 @@
 'use strict';
 
+var cliCommon = require('@backstage/cli-common');
+var fs = require('node:fs');
 var path = require('node:path');
 
 function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
 
+var fs__default = /*#__PURE__*/_interopDefaultCompat(fs);
 var path__default = /*#__PURE__*/_interopDefaultCompat(path);
 
 class CommonJSModuleLoader {
@@ -14,11 +17,22 @@ class CommonJSModuleLoader {
     this.module = require("node:module");
   }
   async bootstrap(backstageRoot, dynamicPluginsPaths, scannedPluginManifests) {
-    const backstageRootNodeModulesPath = `${backstageRoot}/node_modules`;
+    const backstageRootNodeModulesPath = path__default.default.join(
+      backstageRoot,
+      "node_modules"
+    );
     const dynamicNodeModulesPaths = [
       ...dynamicPluginsPaths.map((p) => path__default.default.resolve(p, "node_modules"))
     ];
     const oldNodeModulePaths = this.module._nodeModulePaths;
+    const globalPaths = (this.module.globalPaths ?? []).map(
+      (p) => path__default.default.resolve(p)
+    );
+    const hostNodeModulesPaths = getHostNodeModulesPaths(
+      backstageRoot,
+      oldNodeModulePaths
+    );
+    const previousSearchPaths = /* @__PURE__ */ new WeakMap();
     this.module._nodeModulePaths = (from) => {
       const result = oldNodeModulePaths(from);
       if (!dynamicPluginsPaths.some((p) => from.startsWith(p))) {
@@ -27,15 +41,37 @@ class CommonJSModuleLoader {
       const filtered = result.filter((nodeModulePath) => {
         return nodeModulePath === backstageRootNodeModulesPath || dynamicNodeModulesPaths.some((p) => nodeModulePath.startsWith(p));
       });
+      const searchPaths = Array.from(
+        /* @__PURE__ */ new Set([
+          ...filtered,
+          ...globalPaths,
+          backstageRootNodeModulesPath,
+          ...hostNodeModulesPaths
+        ])
+      );
+      previousSearchPaths.set(searchPaths, filtered);
       this.options.logger.debug(
-        `Overriding node_modules search path for dynamic plugin ${from} to: ${filtered}`
+        `Overriding node_modules search path for dynamic plugin ${from} to: ${searchPaths}`
       );
-      return filtered;
+      return searchPaths;
     };
     const oldResolveFileName = this.module._resolveFilename;
     this.module._resolveFilename = (request, mod, _, options) => {
+      const resolvingPackageJsonViaResolvePackagePath = request?.endsWith("/package.json") && /[/\\](?:@backstage|packages)[/\\]backend-plugin-api(?:[/\\]|$)/.test(
+        mod?.path ?? ""
+      );
+      const previousPaths = resolvingPackageJsonViaResolvePackagePath && !options?.paths ? mod?.paths && previousSearchPaths.get(mod.paths) : void 0;
       let errorToThrow;
       try {
+        if (previousPaths) {
+          const searchPaths = mod.paths;
+          mod.paths = previousPaths;
+          try {
+            return oldResolveFileName(request, mod, _, options);
+          } finally {
+            mod.paths = searchPaths;
+          }
+        }
         return oldResolveFileName(request, mod, _, options);
       } catch (e) {
         errorToThrow = e;
@@ -44,9 +80,6 @@ class CommonJSModuleLoader {
           e instanceof Error ? e : void 0
         );
       }
-      const resolvingPackageJsonViaResolvePackagePath = request?.endsWith("/package.json") && /[/\\](?:@backstage|packages)[/\\]backend-plugin-api(?:[/\\]|$)/.test(
-        mod?.path ?? ""
-      );
       if (!resolvingPackageJsonViaResolvePackagePath) {
         throw errorToThrow;
       }
@@ -74,6 +107,16 @@ class CommonJSModuleLoader {
           return resolvedPath;
         }
       }
+      if (previousPaths) {
+        try {
+          const resolvedPath = oldResolveFileName(request, mod, _, options);
+          this.options.logger.info(
+            `Resolved '${request}' at ${resolvedPath} in the host backend`
+          );
+          return resolvedPath;
+        } catch {
+        }
+      }
       throw errorToThrow;
     };
   }
@@ -81,6 +124,53 @@ class CommonJSModuleLoader {
     return await this.module.prototype.require(packagePath);
   }
 }
+function getHostNodeModulesPaths(backstageRoot, nodeModulePaths) {
+  const dirs = new Array();
+  for (const startPath of [
+    require.main?.filename,
+    process.argv[1],
+    process.cwd()
+  ]) {
+    const dir = startPath && getDirectory(path__default.default.resolve(startPath));
+    if (dir && !isInInstalledPackage(backstageRoot, dir)) {
+      dirs.push(dir);
+    }
+  }
+  const paths = /* @__PURE__ */ new Set([
+    ...dirs.flatMap((dir) => nodeModulePaths(dir)),
+    // The lookup chain of this module
+    ...module.paths ?? []
+  ]);
+  return Array.from(paths).filter((p) => {
+    try {
+      return cliCommon.isChildPath(backstageRoot, p);
+    } catch {
+      return false;
+    }
+  });
+}
+function getDirectory(p) {
+  try {
+    const stats = fs__default.default.statSync(p, { throwIfNoEntry: false });
+    if (!stats) {
+      return void 0;
+    }
+    return stats.isDirectory() ? p : path__default.default.dirname(p);
+  } catch {
+    return void 0;
+  }
+}
+function isInInstalledPackage(backstageRoot, dir) {
+  try {
+    const relativeDir = path__default.default.relative(
+      fs__default.default.realpathSync(backstageRoot),
+      fs__default.default.realpathSync(dir)
+    );
+    return relativeDir.split(path__default.default.sep).includes("node_modules");
+  } catch {
+    return true;
+  }
+}
 
 exports.CommonJSModuleLoader = CommonJSModuleLoader;
 //# sourceMappingURL=CommonJSModuleLoader.cjs.js.map

package/dist/loader/CommonJSModuleLoader.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"CommonJSModuleLoader.cjs.js","sources":["../../src/loader/CommonJSModuleLoader.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { ModuleLoader } from './types';\nimport { LoggerService } from '@backstage/backend-plugin-api';\nimport path from 'node:path';\nimport { ScannedPluginManifest } from '../scanner';\n\n/**\n * @public\n */\nexport type CommonJSModuleLoaderOptions = {\n  logger: LoggerService;\n  dynamicPluginPackageNameSuffixes?: String[];\n  customResolveDynamicPackage?: (\n    logger: LoggerService,\n    searchedPackageName: string,\n    scannedPluginManifests: Map<string, ScannedPluginManifest>,\n  ) => string | undefined;\n};\n\n/**\n * @public\n */\nexport class CommonJSModuleLoader implements ModuleLoader {\n  private module: any;\n  public readonly options: CommonJSModuleLoaderOptions;\n\n  constructor(options: CommonJSModuleLoaderOptions) {\n    this.options = options;\n    this.module = require('node:module');\n  }\n\n  async bootstrap(\n    backstageRoot: string,\n    dynamicPluginsPaths: string[],\n    scannedPluginManifests: Map<string, ScannedPluginManifest>,\n  ): Promise<void> {\n    const backstageRootNodeModulesPath = `${backstageRoot}/node_modules`;\n    const dynamicNodeModulesPaths = [\n      ...dynamicPluginsPaths.map(p => path.resolve(p, 'node_modules')),\n    ];\n    const oldNodeModulePaths = this.module._nodeModulePaths;\n    this.module._nodeModulePaths = (from: string): string[] => {\n      const result: string[] = oldNodeModulePaths(from);\n      if (!dynamicPluginsPaths.some(p => from.startsWith(p))) {\n        return result;\n      }\n      const filtered = result.filter(nodeModulePath => {\n        return (\n          nodeModulePath === backstageRootNodeModulesPath ||\n          dynamicNodeModulesPaths.some(p => nodeModulePath.startsWith(p))\n        );\n      });\n      this.options.logger.debug(\n        `Overriding node_modules search path for dynamic plugin ${from} to: ${filtered}`,\n      );\n      return filtered;\n    };\n\n    // The whole piece of code below is a way to accommodate the limitations of\n    // the current `resolvePackagePath` implementation, which cannot be provided\n    // some custom locations where it should find the assets of some given packages.\n    //\n    // Since the packages for dynamic plugins are not located in the main backstage\n    // monorepo structure, and since dynamic plugins could also be repackaged\n    // (typically renamed with a `-dynamic` suffix), for now we have to customize\n    // module file name resolution here to support these use-cases.\n    //\n    // This might not be necessary anymore according to future enhancements to the\n    // `resolvePackagePath` feature.\n    const oldResolveFileName = this.module._resolveFilename;\n    this.module._resolveFilename = (\n      request: string,\n      mod: NodeModule,\n      _: boolean,\n      options: any,\n    ): any => {\n      let errorToThrow: any;\n      try {\n        return oldResolveFileName(request, mod, _, options);\n      } catch (e) {\n        errorToThrow = e;\n        this.options.logger.debug(\n          `Could not resolve '${request}' inside the Core backstage backend application`,\n          e instanceof Error ? e : undefined,\n        );\n      }\n\n      // Is this a `resolvePackagePath` call from `@backstage/backend-plugin-api`?\n      // This covers both the host application's copy and a bundled copy living\n      // inside a dynamic plugin's own node_modules.\n      // The regex matches mod.path against the various ways the package can be resolved on disk\n      // (with optional subdirectory such as /src or /dist after the package name):\n      //   - .../node_modules/@backstage/backend-plugin-api[/...]  (npm-installed)\n      //   - .../<plugin>/node_modules/@backstage/backend-plugin-api[/...]  (bundled)\n      //   - .../packages/backend-plugin-api[/...]  (symlinked workspace in monorepo)\n      const resolvingPackageJsonViaResolvePackagePath =\n        request?.endsWith('/package.json') &&\n        /[/\\\\](?:@backstage|packages)[/\\\\]backend-plugin-api(?:[/\\\\]|$)/.test(\n          mod?.path ?? '',\n        );\n\n      if (!resolvingPackageJsonViaResolvePackagePath) {\n        throw errorToThrow;\n      }\n\n      this.options.logger.info(\n        `Resolving '${request}' in the dynamic backend plugins`,\n      );\n      const searchedPackageName = request.replace(/\\/package.json$/, '');\n\n      // First search for a dynamic plugin package matching the expected package name,\n      // taking in account accepted dynamic plugin package name suffixes\n      // (suffix accepted by default is '-dynamic').\n      const searchedPackageNamesWithSuffixes = (\n        this.options.dynamicPluginPackageNameSuffixes ?? ['-dynamic']\n      ).map(s => `${searchedPackageName}${s}`);\n      for (const [realPath, pkg] of scannedPluginManifests.entries()) {\n        if (\n          [searchedPackageName, ...searchedPackageNamesWithSuffixes].includes(\n            pkg.name,\n          )\n        ) {\n          const resolvedPath = path.resolve(realPath, 'package.json');\n          this.options.logger.info(`Resolved '${request}' at ${resolvedPath}`);\n          return resolvedPath;\n        }\n      }\n\n      // If a custom resolution is provided, use it.\n      // This allows accommodating alternate ways to package dynamic plugins:\n      // static plugin package wrapped inside a distinct dynamic plugin package for example.\n      if (this.options.customResolveDynamicPackage) {\n        const resolvedPath = this.options.customResolveDynamicPackage(\n          this.options.logger,\n          searchedPackageName,\n          scannedPluginManifests,\n        );\n        if (resolvedPath) {\n          return resolvedPath;\n        }\n      }\n      throw errorToThrow;\n    };\n  }\n\n  async load(packagePath: string): Promise<any> {\n    return await this.module.prototype.require(packagePath);\n  }\n}\n"],"names":["path"],"mappings":";;;;;;;;AAoCO,MAAM,oBAAA,CAA6C;AAAA,EAChD,MAAA;AAAA,EACQ,OAAA;AAAA,EAEhB,YAAY,OAAA,EAAsC;AAChD,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AACf,IAAA,IAAA,CAAK,MAAA,GAAS,QAAQ,aAAa,CAAA;AAAA,EACrC;AAAA,EAEA,MAAM,SAAA,CACJ,aAAA,EACA,mBAAA,EACA,sBAAA,EACe;AACf,IAAA,MAAM,4BAAA,GAA+B,GAAG,aAAa,CAAA,aAAA,CAAA;AACrD,IAAA,MAAM,uBAAA,GAA0B;AAAA,MAC9B,GAAG,oBAAoB,GAAA,CAAI,CAAA,CAAA,KAAKA,sBAAK,OAAA,CAAQ,CAAA,EAAG,cAAc,CAAC;AAAA,KACjE;AACA,IAAA,MAAM,kBAAA,GAAqB,KAAK,MAAA,CAAO,gBAAA;AACvC,IAAA,IAAA,CAAK,MAAA,CAAO,gBAAA,GAAmB,CAAC,IAAA,KAA2B;AACzD,MAAA,MAAM,MAAA,GAAmB,mBAAmB,IAAI,CAAA;AAChD,MAAA,IAAI,CAAC,oBAAoB,IAAA,CAAK,CAAA,CAAA,KAAK,KAAK,UAAA,CAAW,CAAC,CAAC,CAAA,EAAG;AACtD,QAAA,OAAO,MAAA;AAAA,MACT;AACA,MAAA,MAAM,QAAA,GAAW,MAAA,CAAO,MAAA,CAAO,CAAA,cAAA,KAAkB;AAC/C,QAAA,OACE,cAAA,KAAmB,gCACnB,uBAAA,CAAwB,IAAA,CAAK,OAAK,cAAA,CAAe,UAAA,CAAW,CAAC,CAAC,CAAA;AAAA,MAElE,CAAC,CAAA;AACD,MAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,KAAA;AAAA,QAClB,CAAA,uDAAA,EAA0D,IAAI,CAAA,KAAA,EAAQ,QAAQ,CAAA;AAAA,OAChF;AACA,MAAA,OAAO,QAAA;AAAA,IACT,CAAA;AAaA,IAAA,MAAM,kBAAA,GAAqB,KAAK,MAAA,CAAO,gBAAA;AACvC,IAAA,IAAA,CAAK,OAAO,gBAAA,GAAmB,CAC7B,OAAA,EACA,GAAA,EACA,GACA,OAAA,KACQ;AACR,MAAA,IAAI,YAAA;AACJ,MAAA,IAAI;AACF,QAAA,OAAO,kBAAA,CAAmB,OAAA,EAAS,GAAA,EAAK,CAAA,EAAG,OAAO,CAAA;AAAA,MACpD,SAAS,CAAA,EAAG;AACV,QAAA,YAAA,GAAe,CAAA;AACf,QAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,KAAA;AAAA,UAClB,sBAAsB,OAAO,CAAA,+CAAA,CAAA;AAAA,UAC7B,CAAA,YAAa,QAAQ,CAAA,GAAI;AAAA,SAC3B;AAAA,MACF;AAUA,MAAA,MAAM,yCAAA,GACJ,OAAA,EAAS,QAAA,CAAS,eAAe,KACjC,gEAAA,CAAiE,IAAA;AAAA,QAC/D,KAAK,IAAA,IAAQ;AAAA,OACf;AAEF,MAAA,IAAI,CAAC,yCAAA,EAA2C;AAC9C,QAAA,MAAM,YAAA;AAAA,MACR;AAEA,MAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,IAAA;AAAA,QAClB,cAAc,OAAO,CAAA,gCAAA;AAAA,OACvB;AACA,MAAA,MAAM,mBAAA,GAAsB,OAAA,CAAQ,OAAA,CAAQ,iBAAA,EAAmB,EAAE,CAAA;AAKjE,MAAA,MAAM,gCAAA,GAAA,CACJ,IAAA,CAAK,OAAA,CAAQ,gCAAA,IAAoC,CAAC,UAAU,CAAA,EAC5D,GAAA,CAAI,CAAA,CAAA,KAAK,CAAA,EAAG,mBAAmB,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACvC,MAAA,KAAA,MAAW,CAAC,QAAA,EAAU,GAAG,CAAA,IAAK,sBAAA,CAAuB,SAAQ,EAAG;AAC9D,QAAA,IACE,CAAC,mBAAA,EAAqB,GAAG,gCAAgC,CAAA,CAAE,QAAA;AAAA,UACzD,GAAA,CAAI;AAAA,SACN,EACA;AACA,UAAA,MAAM,YAAA,GAAeA,qBAAA,CAAK,OAAA,CAAQ,QAAA,EAAU,cAAc,CAAA;AAC1D,UAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,IAAA,CAAK,aAAa,OAAO,CAAA,KAAA,EAAQ,YAAY,CAAA,CAAE,CAAA;AACnE,UAAA,OAAO,YAAA;AAAA,QACT;AAAA,MACF;AAKA,MAAA,IAAI,IAAA,CAAK,QAAQ,2BAAA,EAA6B;AAC5C,QAAA,MAAM,YAAA,GAAe,KAAK,OAAA,CAAQ,2BAAA;AAAA,UAChC,KAAK,OAAA,CAAQ,MAAA;AAAA,UACb,mBAAA;AAAA,UACA;AAAA,SACF;AACA,QAAA,IAAI,YAAA,EAAc;AAChB,UAAA,OAAO,YAAA;AAAA,QACT;AAAA,MACF;AACA,MAAA,MAAM,YAAA;AAAA,IACR,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,WAAA,EAAmC;AAC5C,IAAA,OAAO,MAAM,IAAA,CAAK,MAAA,CAAO,SAAA,CAAU,QAAQ,WAAW,CAAA;AAAA,EACxD;AACF;;"}
+{"version":3,"file":"CommonJSModuleLoader.cjs.js","sources":["../../src/loader/CommonJSModuleLoader.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { ModuleLoader } from './types';\nimport { LoggerService } from '@backstage/backend-plugin-api';\nimport { isChildPath } from '@backstage/cli-common';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { ScannedPluginManifest } from '../scanner';\n\n/**\n * @public\n */\nexport type CommonJSModuleLoaderOptions = {\n  logger: LoggerService;\n  dynamicPluginPackageNameSuffixes?: String[];\n  customResolveDynamicPackage?: (\n    logger: LoggerService,\n    searchedPackageName: string,\n    scannedPluginManifests: Map<string, ScannedPluginManifest>,\n  ) => string | undefined;\n};\n\n/**\n * @public\n */\nexport class CommonJSModuleLoader implements ModuleLoader {\n  private module: any;\n  public readonly options: CommonJSModuleLoaderOptions;\n\n  constructor(options: CommonJSModuleLoaderOptions) {\n    this.options = options;\n    this.module = require('node:module');\n  }\n\n  async bootstrap(\n    backstageRoot: string,\n    dynamicPluginsPaths: string[],\n    scannedPluginManifests: Map<string, ScannedPluginManifest>,\n  ): Promise<void> {\n    const backstageRootNodeModulesPath = path.join(\n      backstageRoot,\n      'node_modules',\n    );\n    const dynamicNodeModulesPaths = [\n      ...dynamicPluginsPaths.map(p => path.resolve(p, 'node_modules')),\n    ];\n    const oldNodeModulePaths = this.module._nodeModulePaths;\n    // After the node_modules lookup chain, Node.js searches its global\n    // folders, which start with the NODE_PATH entries. Dynamic plugins outside\n    // of the Backstage root reach the root node_modules through NODE_PATH.\n    const globalPaths: string[] = (this.module.globalPaths ?? []).map(\n      (p: string) => path.resolve(p),\n    );\n    // Some package managers, for example pnpm with the isolated linker, do not\n    // link every package into the root node_modules. The modules that a\n    // dynamic plugin shares with the host are then only visible from the\n    // backend package, or from this package.\n    const hostNodeModulesPaths = getHostNodeModulesPaths(\n      backstageRoot,\n      oldNodeModulePaths,\n    );\n    // The paths that were searched before the host was added, for each list\n    // of search paths returned below\n    const previousSearchPaths = new WeakMap<string[], string[]>();\n    this.module._nodeModulePaths = (from: string): string[] => {\n      const result: string[] = oldNodeModulePaths(from);\n      if (!dynamicPluginsPaths.some(p => from.startsWith(p))) {\n        return result;\n      }\n      const filtered = result.filter(nodeModulePath => {\n        return (\n          nodeModulePath === backstageRootNodeModulesPath ||\n          dynamicNodeModulesPaths.some(p => nodeModulePath.startsWith(p))\n        );\n      });\n      // The host comes after everything that was searched before, so that a\n      // module that was found before is still found in the same place. Node.js\n      // appends its global folders again after these paths, so a module that\n      // is missing everywhere is looked for in them twice.\n      const searchPaths = Array.from(\n        new Set([\n          ...filtered,\n          ...globalPaths,\n          backstageRootNodeModulesPath,\n          ...hostNodeModulesPaths,\n        ]),\n      );\n      previousSearchPaths.set(searchPaths, filtered);\n      this.options.logger.debug(\n        `Overriding node_modules search path for dynamic plugin ${from} to: ${searchPaths}`,\n      );\n      return searchPaths;\n    };\n\n    // The whole piece of code below is a way to accommodate the limitations of\n    // the current `resolvePackagePath` implementation, which cannot be provided\n    // some custom locations where it should find the assets of some given packages.\n    //\n    // Since the packages for dynamic plugins are not located in the main backstage\n    // monorepo structure, and since dynamic plugins could also be repackaged\n    // (typically renamed with a `-dynamic` suffix), for now we have to customize\n    // module file name resolution here to support these use-cases.\n    //\n    // This might not be necessary anymore according to future enhancements to the\n    // `resolvePackagePath` feature.\n    const oldResolveFileName = this.module._resolveFilename;\n    this.module._resolveFilename = (\n      request: string,\n      mod: NodeModule,\n      _: boolean,\n      options: any,\n    ): any => {\n      // Is this a `resolvePackagePath` call from `@backstage/backend-plugin-api`?\n      // This covers both the host application's copy and a bundled copy living\n      // inside a dynamic plugin's own node_modules.\n      // The regex matches mod.path against the various ways the package can be resolved on disk\n      // (with optional subdirectory such as /src or /dist after the package name):\n      //   - .../node_modules/@backstage/backend-plugin-api[/...]  (npm-installed)\n      //   - .../<plugin>/node_modules/@backstage/backend-plugin-api[/...]  (bundled)\n      //   - .../packages/backend-plugin-api[/...]  (symlinked workspace in monorepo)\n      const resolvingPackageJsonViaResolvePackagePath =\n        request?.endsWith('/package.json') &&\n        /[/\\\\](?:@backstage|packages)[/\\\\]backend-plugin-api(?:[/\\\\]|$)/.test(\n          mod?.path ?? '',\n        );\n\n      // A bundled copy of `@backstage/backend-plugin-api` in a dynamic plugin\n      // searches the host last, after the dynamic plugin packages below, so\n      // that it finds the same package as before the host was added. This\n      // covers calls without explicit paths, which is how\n      // `resolvePackagePath` resolves.\n      const previousPaths =\n        resolvingPackageJsonViaResolvePackagePath && !options?.paths\n          ? mod?.paths && previousSearchPaths.get(mod.paths)\n          : undefined;\n\n      let errorToThrow: any;\n      try {\n        if (previousPaths) {\n          const searchPaths = mod.paths;\n          mod.paths = previousPaths;\n          try {\n            return oldResolveFileName(request, mod, _, options);\n          } finally {\n            mod.paths = searchPaths;\n          }\n        }\n        return oldResolveFileName(request, mod, _, options);\n      } catch (e) {\n        errorToThrow = e;\n        this.options.logger.debug(\n          `Could not resolve '${request}' inside the Core backstage backend application`,\n          e instanceof Error ? e : undefined,\n        );\n      }\n\n      if (!resolvingPackageJsonViaResolvePackagePath) {\n        throw errorToThrow;\n      }\n\n      this.options.logger.info(\n        `Resolving '${request}' in the dynamic backend plugins`,\n      );\n      const searchedPackageName = request.replace(/\\/package.json$/, '');\n\n      // First search for a dynamic plugin package matching the expected package name,\n      // taking in account accepted dynamic plugin package name suffixes\n      // (suffix accepted by default is '-dynamic').\n      const searchedPackageNamesWithSuffixes = (\n        this.options.dynamicPluginPackageNameSuffixes ?? ['-dynamic']\n      ).map(s => `${searchedPackageName}${s}`);\n      for (const [realPath, pkg] of scannedPluginManifests.entries()) {\n        if (\n          [searchedPackageName, ...searchedPackageNamesWithSuffixes].includes(\n            pkg.name,\n          )\n        ) {\n          const resolvedPath = path.resolve(realPath, 'package.json');\n          this.options.logger.info(`Resolved '${request}' at ${resolvedPath}`);\n          return resolvedPath;\n        }\n      }\n\n      // If a custom resolution is provided, use it.\n      // This allows accommodating alternate ways to package dynamic plugins:\n      // static plugin package wrapped inside a distinct dynamic plugin package for example.\n      if (this.options.customResolveDynamicPackage) {\n        const resolvedPath = this.options.customResolveDynamicPackage(\n          this.options.logger,\n          searchedPackageName,\n          scannedPluginManifests,\n        );\n        if (resolvedPath) {\n          return resolvedPath;\n        }\n      }\n\n      // Last, the host\n      if (previousPaths) {\n        try {\n          const resolvedPath = oldResolveFileName(request, mod, _, options);\n          this.options.logger.info(\n            `Resolved '${request}' at ${resolvedPath} in the host backend`,\n          );\n          return resolvedPath;\n        } catch {\n          // The error from the first attempt is the one to report\n        }\n      }\n      throw errorToThrow;\n    };\n  }\n\n  async load(packagePath: string): Promise<any> {\n    return await this.module.prototype.require(packagePath);\n  }\n}\n\n/**\n * Returns the node_modules directories that the host backend resolves modules\n * from, limited to those within the Backstage root. These are the lookup\n * chains of the backend package, found through the entry point of the process\n * and the working directory, and of this package, which reaches the packages\n * that a package manager keeps out of the root node_modules. An entry point in\n * an installed package, such as a process manager that starts the backend, is\n * not the backend package, so its lookup chain is not used.\n */\nfunction getHostNodeModulesPaths(\n  backstageRoot: string,\n  nodeModulePaths: (from: string) => string[],\n): string[] {\n  const dirs = new Array<string>();\n  // The main module is not set when the entry point is an ES module, so the\n  // script path is also used\n  for (const startPath of [\n    require.main?.filename,\n    process.argv[1],\n    process.cwd(),\n  ]) {\n    const dir = startPath && getDirectory(path.resolve(startPath));\n    if (dir && !isInInstalledPackage(backstageRoot, dir)) {\n      dirs.push(dir);\n    }\n  }\n  const paths = new Set([\n    ...dirs.flatMap(dir => nodeModulePaths(dir)),\n    // The lookup chain of this module\n    ...(module.paths ?? []),\n  ]);\n  return Array.from(paths).filter(p => {\n    // Real paths cannot be resolved for directories that cannot be read\n    try {\n      return isChildPath(backstageRoot, p);\n    } catch {\n      return false;\n    }\n  });\n}\n\n// The given directory, or the directory of the given file. Paths that do not\n// exist or cannot be read are skipped, since the host is only a fallback.\nfunction getDirectory(p: string): string | undefined {\n  try {\n    const stats = fs.statSync(p, { throwIfNoEntry: false });\n    if (!stats) {\n      return undefined;\n    }\n    return stats.isDirectory() ? p : path.dirname(p);\n  } catch {\n    return undefined;\n  }\n}\n\n// Whether the directory is inside a node_modules directory of the Backstage\n// root, or cannot be read. Workspace packages, such as the backend package,\n// are never inside node_modules.\nfunction isInInstalledPackage(backstageRoot: string, dir: string): boolean {\n  try {\n    const relativeDir = path.relative(\n      fs.realpathSync(backstageRoot),\n      fs.realpathSync(dir),\n    );\n    return relativeDir.split(path.sep).includes('node_modules');\n  } catch {\n    return true;\n  }\n}\n"],"names":["path","isChildPath","fs"],"mappings":";;;;;;;;;;;AAsCO,MAAM,oBAAA,CAA6C;AAAA,EAChD,MAAA;AAAA,EACQ,OAAA;AAAA,EAEhB,YAAY,OAAA,EAAsC;AAChD,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AACf,IAAA,IAAA,CAAK,MAAA,GAAS,QAAQ,aAAa,CAAA;AAAA,EACrC;AAAA,EAEA,MAAM,SAAA,CACJ,aAAA,EACA,mBAAA,EACA,sBAAA,EACe;AACf,IAAA,MAAM,+BAA+BA,qBAAA,CAAK,IAAA;AAAA,MACxC,aAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,MAAM,uBAAA,GAA0B;AAAA,MAC9B,GAAG,oBAAoB,GAAA,CAAI,CAAA,CAAA,KAAKA,sBAAK,OAAA,CAAQ,CAAA,EAAG,cAAc,CAAC;AAAA,KACjE;AACA,IAAA,MAAM,kBAAA,GAAqB,KAAK,MAAA,CAAO,gBAAA;AAIvC,IAAA,MAAM,WAAA,GAAA,CAAyB,IAAA,CAAK,MAAA,CAAO,WAAA,IAAe,EAAC,EAAG,GAAA;AAAA,MAC5D,CAAC,CAAA,KAAcA,qBAAA,CAAK,OAAA,CAAQ,CAAC;AAAA,KAC/B;AAKA,IAAA,MAAM,oBAAA,GAAuB,uBAAA;AAAA,MAC3B,aAAA;AAAA,MACA;AAAA,KACF;AAGA,IAAA,MAAM,mBAAA,uBAA0B,OAAA,EAA4B;AAC5D,IAAA,IAAA,CAAK,MAAA,CAAO,gBAAA,GAAmB,CAAC,IAAA,KAA2B;AACzD,MAAA,MAAM,MAAA,GAAmB,mBAAmB,IAAI,CAAA;AAChD,MAAA,IAAI,CAAC,oBAAoB,IAAA,CAAK,CAAA,CAAA,KAAK,KAAK,UAAA,CAAW,CAAC,CAAC,CAAA,EAAG;AACtD,QAAA,OAAO,MAAA;AAAA,MACT;AACA,MAAA,MAAM,QAAA,GAAW,MAAA,CAAO,MAAA,CAAO,CAAA,cAAA,KAAkB;AAC/C,QAAA,OACE,cAAA,KAAmB,gCACnB,uBAAA,CAAwB,IAAA,CAAK,OAAK,cAAA,CAAe,UAAA,CAAW,CAAC,CAAC,CAAA;AAAA,MAElE,CAAC,CAAA;AAKD,MAAA,MAAM,cAAc,KAAA,CAAM,IAAA;AAAA,4BACpB,GAAA,CAAI;AAAA,UACN,GAAG,QAAA;AAAA,UACH,GAAG,WAAA;AAAA,UACH,4BAAA;AAAA,UACA,GAAG;AAAA,SACJ;AAAA,OACH;AACA,MAAA,mBAAA,CAAoB,GAAA,CAAI,aAAa,QAAQ,CAAA;AAC7C,MAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,KAAA;AAAA,QAClB,CAAA,uDAAA,EAA0D,IAAI,CAAA,KAAA,EAAQ,WAAW,CAAA;AAAA,OACnF;AACA,MAAA,OAAO,WAAA;AAAA,IACT,CAAA;AAaA,IAAA,MAAM,kBAAA,GAAqB,KAAK,MAAA,CAAO,gBAAA;AACvC,IAAA,IAAA,CAAK,OAAO,gBAAA,GAAmB,CAC7B,OAAA,EACA,GAAA,EACA,GACA,OAAA,KACQ;AASR,MAAA,MAAM,yCAAA,GACJ,OAAA,EAAS,QAAA,CAAS,eAAe,KACjC,gEAAA,CAAiE,IAAA;AAAA,QAC/D,KAAK,IAAA,IAAQ;AAAA,OACf;AAOF,MAAA,MAAM,aAAA,GACJ,yCAAA,IAA6C,CAAC,OAAA,EAAS,KAAA,GACnD,GAAA,EAAK,KAAA,IAAS,mBAAA,CAAoB,GAAA,CAAI,GAAA,CAAI,KAAK,CAAA,GAC/C,MAAA;AAEN,MAAA,IAAI,YAAA;AACJ,MAAA,IAAI;AACF,QAAA,IAAI,aAAA,EAAe;AACjB,UAAA,MAAM,cAAc,GAAA,CAAI,KAAA;AACxB,UAAA,GAAA,CAAI,KAAA,GAAQ,aAAA;AACZ,UAAA,IAAI;AACF,YAAA,OAAO,kBAAA,CAAmB,OAAA,EAAS,GAAA,EAAK,CAAA,EAAG,OAAO,CAAA;AAAA,UACpD,CAAA,SAAE;AACA,YAAA,GAAA,CAAI,KAAA,GAAQ,WAAA;AAAA,UACd;AAAA,QACF;AACA,QAAA,OAAO,kBAAA,CAAmB,OAAA,EAAS,GAAA,EAAK,CAAA,EAAG,OAAO,CAAA;AAAA,MACpD,SAAS,CAAA,EAAG;AACV,QAAA,YAAA,GAAe,CAAA;AACf,QAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,KAAA;AAAA,UAClB,sBAAsB,OAAO,CAAA,+CAAA,CAAA;AAAA,UAC7B,CAAA,YAAa,QAAQ,CAAA,GAAI;AAAA,SAC3B;AAAA,MACF;AAEA,MAAA,IAAI,CAAC,yCAAA,EAA2C;AAC9C,QAAA,MAAM,YAAA;AAAA,MACR;AAEA,MAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,IAAA;AAAA,QAClB,cAAc,OAAO,CAAA,gCAAA;AAAA,OACvB;AACA,MAAA,MAAM,mBAAA,GAAsB,OAAA,CAAQ,OAAA,CAAQ,iBAAA,EAAmB,EAAE,CAAA;AAKjE,MAAA,MAAM,gCAAA,GAAA,CACJ,IAAA,CAAK,OAAA,CAAQ,gCAAA,IAAoC,CAAC,UAAU,CAAA,EAC5D,GAAA,CAAI,CAAA,CAAA,KAAK,CAAA,EAAG,mBAAmB,CAAA,EAAG,CAAC,CAAA,CAAE,CAAA;AACvC,MAAA,KAAA,MAAW,CAAC,QAAA,EAAU,GAAG,CAAA,IAAK,sBAAA,CAAuB,SAAQ,EAAG;AAC9D,QAAA,IACE,CAAC,mBAAA,EAAqB,GAAG,gCAAgC,CAAA,CAAE,QAAA;AAAA,UACzD,GAAA,CAAI;AAAA,SACN,EACA;AACA,UAAA,MAAM,YAAA,GAAeA,qBAAA,CAAK,OAAA,CAAQ,QAAA,EAAU,cAAc,CAAA;AAC1D,UAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,IAAA,CAAK,aAAa,OAAO,CAAA,KAAA,EAAQ,YAAY,CAAA,CAAE,CAAA;AACnE,UAAA,OAAO,YAAA;AAAA,QACT;AAAA,MACF;AAKA,MAAA,IAAI,IAAA,CAAK,QAAQ,2BAAA,EAA6B;AAC5C,QAAA,MAAM,YAAA,GAAe,KAAK,OAAA,CAAQ,2BAAA;AAAA,UAChC,KAAK,OAAA,CAAQ,MAAA;AAAA,UACb,mBAAA;AAAA,UACA;AAAA,SACF;AACA,QAAA,IAAI,YAAA,EAAc;AAChB,UAAA,OAAO,YAAA;AAAA,QACT;AAAA,MACF;AAGA,MAAA,IAAI,aAAA,EAAe;AACjB,QAAA,IAAI;AACF,UAAA,MAAM,YAAA,GAAe,kBAAA,CAAmB,OAAA,EAAS,GAAA,EAAK,GAAG,OAAO,CAAA;AAChE,UAAA,IAAA,CAAK,QAAQ,MAAA,CAAO,IAAA;AAAA,YAClB,CAAA,UAAA,EAAa,OAAO,CAAA,KAAA,EAAQ,YAAY,CAAA,oBAAA;AAAA,WAC1C;AACA,UAAA,OAAO,YAAA;AAAA,QACT,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF;AACA,MAAA,MAAM,YAAA;AAAA,IACR,CAAA;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,WAAA,EAAmC;AAC5C,IAAA,OAAO,MAAM,IAAA,CAAK,MAAA,CAAO,SAAA,CAAU,QAAQ,WAAW,CAAA;AAAA,EACxD;AACF;AAWA,SAAS,uBAAA,CACP,eACA,eAAA,EACU;AACV,EAAA,MAAM,IAAA,GAAO,IAAI,KAAA,EAAc;AAG/B,EAAA,KAAA,MAAW,SAAA,IAAa;AAAA,IACtB,QAAQ,IAAA,EAAM,QAAA;AAAA,IACd,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IACd,QAAQ,GAAA;AAAI,GACd,EAAG;AACD,IAAA,MAAM,MAAM,SAAA,IAAa,YAAA,CAAaA,qBAAA,CAAK,OAAA,CAAQ,SAAS,CAAC,CAAA;AAC7D,IAAA,IAAI,GAAA,IAAO,CAAC,oBAAA,CAAqB,aAAA,EAAe,GAAG,CAAA,EAAG;AACpD,MAAA,IAAA,CAAK,KAAK,GAAG,CAAA;AAAA,IACf;AAAA,EACF;AACA,EAAA,MAAM,KAAA,uBAAY,GAAA,CAAI;AAAA,IACpB,GAAG,IAAA,CAAK,OAAA,CAAQ,CAAA,GAAA,KAAO,eAAA,CAAgB,GAAG,CAAC,CAAA;AAAA;AAAA,IAE3C,GAAI,MAAA,CAAO,KAAA,IAAS;AAAC,GACtB,CAAA;AACD,EAAA,OAAO,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA,CAAE,OAAO,CAAA,CAAA,KAAK;AAEnC,IAAA,IAAI;AACF,MAAA,OAAOC,qBAAA,CAAY,eAAe,CAAC,CAAA;AAAA,IACrC,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF,CAAC,CAAA;AACH;AAIA,SAAS,aAAa,CAAA,EAA+B;AACnD,EAAA,IAAI;AACF,IAAA,MAAM,QAAQC,mBAAA,CAAG,QAAA,CAAS,GAAG,EAAE,cAAA,EAAgB,OAAO,CAAA;AACtD,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,OAAO,KAAA,CAAA;AAAA,IACT;AACA,IAAA,OAAO,MAAM,WAAA,EAAY,GAAI,CAAA,GAAIF,qBAAA,CAAK,QAAQ,CAAC,CAAA;AAAA,EACjD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,MAAA;AAAA,EACT;AACF;AAKA,SAAS,oBAAA,CAAqB,eAAuB,GAAA,EAAsB;AACzE,EAAA,IAAI;AACF,IAAA,MAAM,cAAcA,qBAAA,CAAK,QAAA;AAAA,MACvBE,mBAAA,CAAG,aAAa,aAAa,CAAA;AAAA,MAC7BA,mBAAA,CAAG,aAAa,GAAG;AAAA,KACrB;AACA,IAAA,OAAO,YAAY,KAAA,CAAMF,qBAAA,CAAK,GAAG,CAAA,CAAE,SAAS,cAAc,CAAA;AAAA,EAC5D,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@backstage/backend-dynamic-feature-service",
-  "version": "0.8.8",
+  "version": "0.8.9-next.1",
   "description": "Backstage dynamic feature service",
   "backstage": {
     "role": "node-library"
@@ -51,25 +51,25 @@
     "test": "backstage-cli package test"
   },
   "dependencies": {
-    "@backstage/backend-defaults": "^0.18.1",
-    "@backstage/backend-openapi-utils": "^0.7.3",
-    "@backstage/backend-plugin-api": "^1.11.0",
-    "@backstage/cli-common": "^0.3.2",
-    "@backstage/cli-node": "^0.3.5",
-    "@backstage/config": "^1.3.10",
-    "@backstage/config-loader": "^1.11.4",
-    "@backstage/errors": "^1.3.2",
-    "@backstage/plugin-app-node": "^0.1.50",
-    "@backstage/plugin-auth-node": "^0.7.7",
-    "@backstage/plugin-catalog-backend": "^4.0.1",
-    "@backstage/plugin-events-backend": "^0.6.7",
-    "@backstage/plugin-events-node": "^0.4.27",
-    "@backstage/plugin-permission-common": "^0.9.12",
-    "@backstage/plugin-permission-node": "^0.11.5",
-    "@backstage/plugin-scaffolder-node": "^0.13.8",
-    "@backstage/plugin-search-backend-node": "^1.4.9",
-    "@backstage/plugin-search-common": "^1.2.26",
-    "@backstage/types": "^1.2.2",
+    "@backstage/backend-defaults": "0.18.2-next.1",
+    "@backstage/backend-openapi-utils": "0.7.4-next.0",
+    "@backstage/backend-plugin-api": "1.11.1-next.0",
+    "@backstage/cli-common": "0.3.2",
+    "@backstage/cli-node": "0.3.6-next.1",
+    "@backstage/config": "1.3.10",
+    "@backstage/config-loader": "1.11.4",
+    "@backstage/errors": "1.3.2",
+    "@backstage/plugin-app-node": "0.1.51-next.0",
+    "@backstage/plugin-auth-node": "0.7.8-next.1",
+    "@backstage/plugin-catalog-backend": "4.0.3-next.1",
+    "@backstage/plugin-events-backend": "0.6.8-next.1",
+    "@backstage/plugin-events-node": "0.5.0-next.1",
+    "@backstage/plugin-permission-common": "0.9.12",
+    "@backstage/plugin-permission-node": "0.11.6-next.0",
+    "@backstage/plugin-scaffolder-node": "0.13.9-next.1",
+    "@backstage/plugin-search-backend-node": "1.4.10-next.0",
+    "@backstage/plugin-search-common": "1.2.26",
+    "@backstage/types": "1.2.2",
     "@manypkg/get-packages": "^1.1.3",
     "@module-federation/sdk": "~2.8.2",
     "chokidar": "^3.5.3",
@@ -80,11 +80,11 @@
     "winston": "^3.2.1"
   },
   "devDependencies": {
-    "@backstage/backend-app-api": "^1.8.0",
-    "@backstage/backend-test-utils": "^1.11.8",
-    "@backstage/cli": "^0.36.7",
-    "@backstage/plugin-app-backend": "^0.5.19",
-    "@backstage/repo-tools": "^0.19.2",
+    "@backstage/backend-app-api": "1.9.0-next.0",
+    "@backstage/backend-test-utils": "1.11.9-next.1",
+    "@backstage/cli": "0.36.8-next.1",
+    "@backstage/plugin-app-backend": "0.5.20-next.0",
+    "@backstage/repo-tools": "0.19.3-next.0",
     "@types/express": "^4.17.6",
     "triple-beam": "^1.4.1",
     "wait-for-expect": "^4.0.0"