Skip to content

Conversation

@jonkoops
Copy link
Contributor

Add new GitHub Action to validate catalog metadata files against plugin package.json files to ensure consistency during the dynamic plugin export workflow.

Features:

  • Validates packageName corresponds to a plugin in plugins-list.yaml
  • Validates version matches the plugin's package.json version
  • Validates OCI reference format in dynamicArtifact (tag and repository)
  • Validates backstage.supportedVersions matches dist-dynamic/package.json
  • Reports detailed errors to GitHub workflow summary
  • Provides JSON output for downstream workflow consumption

Also updates:

  • Integrate validate-metadata into export-dynamic workflow
  • Add metadata validation outputs to export-dynamic and export-workspaces
  • Update actions/checkout and actions/setup-node to latest versions
  • Add comprehensive test suite with 8 test scenarios

@jonkoops jonkoops force-pushed the metadata-validation branch from 5c5382f to 0f8755f Compare January 29, 2026 11:54
@jonkoops jonkoops force-pushed the metadata-validation branch 3 times, most recently from edd6bf7 to 7a8a93a Compare January 29, 2026 12:19
Add new GitHub Action to validate catalog metadata files against plugin
package.json files to ensure consistency during the dynamic plugin export
workflow.

Features:
- Validates `packageName` corresponds to a plugin in `plugins-list.yaml`
- Validates `version` matches the plugin's `package.json` version
- Validates OCI reference format in `dynamicArtifact` (tag and repository)
- Validates `backstage.supportedVersions` matches `dist-dynamic/package.json`
- Reports detailed errors to GitHub workflow summary
- Provides JSON output for downstream workflow consumption

Also updates:
- Integrate `validate-metadata` into `export-dynamic` workflow
- Add metadata validation outputs to `export-dynamic` and `export-workspaces`
- Update `actions/checkout` and `actions/setup-node` to latest versions
- Add comprehensive test suite with 8 test scenarios

Signed-off-by: Jon Koops <jonkoops@gmail.com>
@jonkoops jonkoops force-pushed the metadata-validation branch from 7a8a93a to 5fedf09 Compare January 29, 2026 12:29
@sonarqubecloud
Copy link

Quality Gate Failed Quality Gate failed

Failed conditions
1 Security Hotspot

See analysis details on SonarQube Cloud

@davidfestal davidfestal merged commit ed38b21 into redhat-developer:main Jan 29, 2026
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants