fix affected

.changeset/README.md

@@ -0,0 +1,8 @@
+# Changesets
+
+Hello and welcome! This folder has been automatically generated by `@changesets/cli`, a build tool that works
+with multi-package repos, or single-package repos to help you version and publish your code. You can
+find the full documentation for it [in our repository](https://github.com/changesets/changesets)
+
+We have a quick list of common questions to get you started engaging with this project in
+[our documentation](https://github.com/changesets/changesets/blob/main/docs/common-questions.md)

.changeset/config.json

@@ -0,0 +1,15 @@
+{
+  "$schema": "https://unpkg.com/@changesets/[email protected]/schema.json",
+  "changelog": "@changesets/cli/changelog",
+  "commit": false,
+  "fixed": [],
+  "linked": [],
+  "access": "restricted",
+  "baseBranch": "main",
+  "updateInternalDependencies": "patch",
+  "ignore": [],
+  "privatePackages": {
+    "tag": false,
+    "version": false
+  }
+}

.changeset/odd-onions-sort.md

@@ -0,0 +1,9 @@
+---
+'@janus-idp/backstage-plugin-keycloak-backend': patch
+---
+
+Provide keycloak-backend fixes:
+
+- avoid undefined values for keycloak group members
+- retrieve full list group members using pagination
+- revert unexpected major upgrade of the keycloak backend plugin

.changeset/unlucky-rings-run.md

@@ -0,0 +1,2 @@
+---
+---

.github/actions/build/action.yaml

@@ -1,37 +1,14 @@
-name: Build all packages
-description: Build all packages
+name: Build packages
+description: Build packages
 inputs:
   args:
     description: Backstage CLI repo build arguments
-    default: '@janus-idp/*'
-  node-version:
-    description: Node.js version
-    required: true
-    default: '20'
+    default: --filter=@janus-idp/*
+
 runs:
   using: 'composite'
   steps:
-    - name: Setup Node.js
-      uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4
-      with:
-        node-version: ${{ inputs.node-version }}
-        cache: 'yarn'
-
-    # already done when calling the actions/test/ action.
-    # - name: Setup local Turbo cache
-    #   uses: dtinth/setup-github-actions-caching-for-turbo@cc723b4600e40a6b8815b65701d8614b91e2669e # v1
-
-    # already done when calling the actions/test/ action.
-    # - name: Install dependencies
-    #   shell: bash
-    #   run: |
-    #     yarn install
-    #     if [[ $(git diff --name-only . || true) ]]; then
-    #       echo "After 'yarn install', workspace is dirty! The following files have changed:"
-    #       echo
-    #       git diff --name-only . || true
-    #     fi
-
-    - name: Build all packages
+    - name: Build packages
       shell: bash
-      run: yarn build --filter=${{ inputs.args }} --concurrency=1
+      run: |
+        yarn run build --concurrency=75% ${{ inputs.args }}

.github/actions/test/action.yaml

@@ -3,27 +3,14 @@ description: Test Node.js package
 inputs:
   args:
     description: Backstage CLI repo build arguments
-    default: '@janus-idp/*'
-  node-version:
-    description: Node.js version
-    required: true
-    default: '20'
+    default: --filter=@janus-idp/*
+
 runs:
   using: 'composite'
   steps:
-    - name: Setup Node.js
-      uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4
-      with:
-        node-version: ${{ inputs.node-version }}
-        cache: 'yarn'
-
-    - name: Setup local Turbo cache
-      uses: dtinth/setup-github-actions-caching-for-turbo@cc723b4600e40a6b8815b65701d8614b91e2669e # v1
-
-    - name: Install dependencies
+    - name: Check if workspace is dirty
       shell: bash
       run: |
-        yarn install
         changed_files="$(git diff --name-only . || true)"
         if [[ $changed_files ]]; then
           echo "After 'yarn install', workspace is dirty! The following files have changed:"
@@ -35,15 +22,14 @@ runs:
           echo
           exit 42
         fi
-
     - name: Run prettier
       shell: bash
-      run: yarn prettier:check
+      run: yarn prettier:check --concurrency=75% ${{ inputs.args }}
 
     - name: Run lint
       shell: bash
-      run: yarn lint --filter=${{ inputs.args }}
+      run: yarn run lint:check --concurrency=75% ${{ inputs.args }}
 
     - name: Run tests
       shell: bash
-      run: yarn test --filter=${{ inputs.args }}
+      run: yarn run test --concurrency=75% ${{ inputs.args }}

.github/workflows/pr-playwright.yaml

@@ -2,7 +2,8 @@ name: Playwright tests
 
 on:
   pull_request:
-    branches: [main]
+    branches:
+      - release-1.3
 
 jobs:
   changes:

.github/workflows/pr.yaml

@@ -1,10 +1,20 @@
-name: Pull request
+name: Pull Request
 
 on: pull_request
 
+env:
+  TURBO_SCM_BASE: ${{ github.event.pull_request.base.sha }}
+  TURBO_SCM_HEAD: ${{ github.sha }}
+
+# enforce only one action can run at a time for a given PR, and
+# when updating a PR, actions in progress will be cancelled to start a fresh one
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
-  test:
-    name: Test-build with Node.js ${{ matrix.node-version }}
+  build:
+    name: Build with Node.js ${{ matrix.node-version }}
     runs-on: ubuntu-latest
     strategy:
       matrix:
@@ -15,14 +25,57 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Test
-        uses: ./.github/actions/test
+      - name: Setup Node.js
+        uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4
         with:
-          args: '[HEAD^1]'
           node-version: ${{ matrix.node-version }}
+          registry-url: 'https://registry.npmjs.org'
+          cache: 'yarn'
 
-      - name: Build all packages
+      - name: Setup local Turbo cache
+        uses: dtinth/setup-github-actions-caching-for-turbo@cc723b4600e40a6b8815b65701d8614b91e2669e # v1
+
+      - name: Install dependencies
+        run: |
+          yarn install --frozen-lockfile
+
+      - name: Build packages
         uses: ./.github/actions/build
         with:
-          args: '[HEAD^1]'
+          args: --affected
+
+  test:
+    name: Test with Node.js ${{ matrix.node-version }}
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [18, 20]
+    steps:
+      - name: Checkout
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4
+        with:
           node-version: ${{ matrix.node-version }}
+          registry-url: 'https://registry.npmjs.org'
+          cache: 'yarn'
+
+      - name: Setup local Turbo cache
+        uses: dtinth/setup-github-actions-caching-for-turbo@cc723b4600e40a6b8815b65701d8614b91e2669e # v1
+
+      - name: Install dependencies
+        run: |
+          yarn install --frozen-lockfile
+
+      - name: Verify changesets
+        if: ${{ !(github.actor == 'janus-idp[bot]' || github.actor == 'github-actions[bot]') }}
+        run: |
+          yarn changeset status --since=${{ github.event.pull_request.base.sha }}
+
+      - name: Test packages
+        uses: ./.github/actions/test
+        with:
+          args: --affected

.github/workflows/release.yaml

@@ -0,0 +1,70 @@
+name: Release Packages
+
+on:
+  push:
+    branches:
+      - main
+      # TODO: Remove once 1.2.x is deprecated
+      - 1.2.x
+      - release-[0-9].[0-9]*
+
+env:
+  TURBO_SCM_BASE: ${{ github.event.before }}
+  TURBO_SCM_HEAD: ${{ github.sha }}
+
+# enforce only one release action per release branch at a time
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  release:
+    name: Release Packages
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generate token
+        id: generate-token
+        uses: actions/create-github-app-token@31c86eb3b33c9b601a1f60f98dcbfd1d70f379b4 # v1.10.3
+        with:
+          app-id: ${{ vars.JANUS_IDP_GITHUB_APP_ID }}
+          private-key: ${{ secrets.JANUS_IDP_GITHUB_APP_PRIVATE_KEY }}
+
+      - name: Checkout
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+        with:
+          token: ${{ steps.generate-token.outputs.token }}
+
+      - name: Setup Node.js
+        uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4
+        with:
+          node-version-file: '.nvmrc'
+          registry-url: 'https://registry.npmjs.org'
+
+      - name: Install dependencies
+        shell: bash
+        run: |
+          yarn install --frozen-lockfile
+
+      - name: Creating .npmrc
+        run: |
+          cat << EOF > "$HOME/.npmrc"
+            //registry.npmjs.org/:_authToken=$NPM_TOKEN
+          EOF
+        env:
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+      - name: Create Release PR or Publish to NPM
+        id: changesets
+        uses: changesets/action@v1
+        with:
+          title: 'chore(release): version packages on ${{ github.ref_name }} branch'
+          commit: 'chore(release): version packages on ${{ github.ref_name }} branch'
+          version: yarn run packages:version
+          publish: yarn run packages:publish
+        env:
+          GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          # we used to set 8G here but since the process often craps out, let's try 14G!
+          # https://stackoverflow.com/questions/48387040/how-do-i-determine-the-correct-max-old-space-size-for-node-js
+          NODE_OPTIONS: '--max-old-space-size=14336'