chore: upgrade Backstage dependencies from 1.49.4 to 1.52.0

[sshedmake]

Summary

• Bump all @backstage/* packages to the 1.52.0 release line via backstage-cli versions:bump --release 1.52.0
• Update @red-hat-developer-hub/cli ^1.10.2 -> ^1.11.4
• Update @red-hat-developer-hub/backstage-plugin-theme ^0.14.0 -> ^0.15.0
• Update @backstage-community/plugin-rbac-backend 7.12.1 -> 7.16.2
• Pinned dependency guard: actual resolved version (3.8.1) satisfies 3.6.0 floor. Guard script (check-dependency-pins.sh) reports false FAIL due to a pre-existing grep pattern bug on merged yarn.lock ranges -- fix tracked separately.
• resolutions entries (CVE-driven security pins) intentionally unchanged

Packages with breaking changes

Package	Old	New
@backstage/backend-defaults	^0.16.0	^0.17.3
@backstage/plugin-auth-backend	^0.27.3	^0.29.1
@backstage/plugin-auth-node	^0.6.14	^0.7.2
@backstage/plugin-catalog-react	^2.1.1	^3.1.0
@backstage/plugin-permission-react	^0.4.41	^0.5.2
@backstage/plugin-scaffolder-backend	^3.3.0	^4.0.1
@backstage/plugin-scaffolder-react	^1.20.0	^2.0.1
@backstage/ui	^0.6.0	^0.16.0

Signals package version alignment

4 signals-family packages have lower version specifiers than before, matching the Backstage 1.52.0 release manifest. The previous versions were from the 1.53.x line (published after 1.52.0):

Package	Old	New (1.52.0 manifest)
@backstage/plugin-signals	^0.0.33	^0.0.32
@backstage/plugin-signals-backend	^0.3.17	^0.3.16
@backstage/plugin-signals-node	^0.2.3	^0.2.2
@backstage/plugin-signals-react	^0.0.24	^0.0.23

Known issue

yarn tsc fails with 2 errors -- catalogProcessingExtensionPoint moved from @backstage/plugin-catalog-node/alpha to @backstage/plugin-catalog-node (main export). Fix tracked in a follow-up PR.

Upgrade helper: https://backstage.github.io/upgrade-helper/?from=1.49.4&to=1.52.0

Test plan

• yarn install passes (Node 22 and Node 24)
• yarn test:all -- 186/187 suites pass, 3943/3945 tests pass (2 failures are the catalogProcessingExtensionPoint import issue)
• yarn tsc -- blocked by follow-up import fix PR
• rhdh-local validation after import fix

Generated with Claude Code

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: ecf65b35-bfa9-4b62-94cb-72e6d8c14f8f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.72%. Comparing base (16e437b) to head (8571289).
⚠️ Report is 1 commits behind head on main.

@@           Coverage Diff           @@
##             main     #538   +/-   ##
=======================================
  Coverage   95.72%   95.72%           
=======================================
  Files         230      230           
  Lines       14288    14289    +1     
  Branches     3852     3852           
=======================================
+ Hits        13677    13678    +1     
  Misses        600      600           
  Partials       11       11           

Flag	Coverage Δ
plugins	95.72% <100.00%> (+<0.01%)	⬆️

Files with missing lines	Coverage Δ
plugins/catalog-backend-module-rhaap/src/module.ts	87.50% <100.00%> (+0.26%)	⬆️

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 16e437b...8571289. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud