chore(release): v0.135.1

CHANGELOG.md

@@ -5,6 +5,14 @@ Package specific changes (for packages from `packages/*` and `plugins/*`) can be
 
 ## [Unreleased]
 
+## [0.135.1] - 2026-06-11
+
+### Fixed
+
+- Muster: fix the Workflows page failing with 401 on muster MCP servers requiring per-user auth -- the `aiChat.mcp[].name` and `muster.serverName` config keys were not frontend-visible, so the browser could not resolve the server's auth provider and never sent the user's token.
+
+See [./docs/releases/v0.135.1-changelog.md](./docs/releases/v0.135.1-changelog.md) for more information.
+
 ## [0.135.0] - 2026-06-11
 
 ### Added
@@ -2571,7 +2579,8 @@ See [./docs/releases/v0.40.0-changelog.md](./docs/releases/v0.40.0-changelog.md)
 
 - Disable anonymous access.
 
-[Unreleased]: https://github.com/giantswarm/backstage/compare/v0.135.0...HEAD
+[Unreleased]: https://github.com/giantswarm/backstage/compare/v0.135.1...HEAD
+[0.135.1]: https://github.com/giantswarm/backstage/compare/v0.135.0...v0.135.1
 [0.135.0]: https://github.com/giantswarm/backstage/compare/v0.134.0...v0.135.0
 [0.134.0]: https://github.com/giantswarm/backstage/compare/v0.133.2...v0.134.0
 [0.133.2]: https://github.com/giantswarm/backstage/compare/v0.133.1...v0.133.2

docs/releases/v0.135.1-changelog.md

@@ -0,0 +1,49 @@
+# Release v0.135.1
+
+## @giantswarm/backstage-plugin-ai-chat@0.13.6
+
+### Patch Changes
+
+- db81de5: Fix the muster Workflows page failing with 401 ("requires a user token for
+  auth provider ... but the request did not include one") when the muster MCP
+  server uses per-user auth.
+
+  The muster frontend resolves the server's `authProvider` by matching the
+  `aiChat.mcp` entry by `name`, but `name` was not declared frontend-visible in
+  the config schema, so the browser never saw it, never resolved the auth
+  provider, and never sent the auth header. `aiChat.mcp[].name` is now
+  `@visibility frontend`, and `muster.serverName` is declared frontend-visible
+  in the muster frontend plugin's own config schema so overriding the entry
+  name also works in the browser.
+
+## @giantswarm/backstage-plugin-muster-backend@0.2.1
+
+### Patch Changes
+
+- db81de5: Fix the muster Workflows page failing with 401 ("requires a user token for
+  auth provider ... but the request did not include one") when the muster MCP
+  server uses per-user auth.
+
+  The muster frontend resolves the server's `authProvider` by matching the
+  `aiChat.mcp` entry by `name`, but `name` was not declared frontend-visible in
+  the config schema, so the browser never saw it, never resolved the auth
+  provider, and never sent the auth header. `aiChat.mcp[].name` is now
+  `@visibility frontend`, and `muster.serverName` is declared frontend-visible
+  in the muster frontend plugin's own config schema so overriding the entry
+  name also works in the browser.
+
+## @giantswarm/backstage-plugin-muster@0.2.1
+
+### Patch Changes
+
+- db81de5: Fix the muster Workflows page failing with 401 ("requires a user token for
+  auth provider ... but the request did not include one") when the muster MCP
+  server uses per-user auth.
+
+  The muster frontend resolves the server's `authProvider` by matching the
+  `aiChat.mcp` entry by `name`, but `name` was not declared frontend-visible in
+  the config schema, so the browser never saw it, never resolved the auth
+  provider, and never sent the auth header. `aiChat.mcp[].name` is now
+  `@visibility frontend`, and `muster.serverName` is declared frontend-visible
+  in the muster frontend plugin's own config schema so overriding the entry
+  name also works in the browser.

helm/backstage/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: backstage
 description: Backstage app provided by Giant Swarm
 home: https://github.com/giantswarm/backstage
-version: 0.135.0
-appVersion: '0.135.0'
+version: 0.135.1
+appVersion: '0.135.1'
 annotations:
   io.giantswarm.application.team: honeybadger
   io.giantswarm.application.logo: https://s.giantswarm.io/app-icons/backstage/1/logo.svg

package.json

@@ -1,6 +1,6 @@
 {
   "name": "root",
-  "version": "0.135.0",
+  "version": "0.135.1",
   "private": true,
   "engines": {
     "node": "22 || 24"

plugins/ai-chat/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @giantswarm/backstage-plugin-ai-chat
 
+## 0.13.6
+
+### Patch Changes
+
+- db81de5: Fix the muster Workflows page failing with 401 ("requires a user token for
+  auth provider ... but the request did not include one") when the muster MCP
+  server uses per-user auth.
+
+  The muster frontend resolves the server's `authProvider` by matching the
+  `aiChat.mcp` entry by `name`, but `name` was not declared frontend-visible in
+  the config schema, so the browser never saw it, never resolved the auth
+  provider, and never sent the auth header. `aiChat.mcp[].name` is now
+  `@visibility frontend`, and `muster.serverName` is declared frontend-visible
+  in the muster frontend plugin's own config schema so overriding the entry
+  name also works in the browser.
+
 ## 0.13.5
 
 ### Patch Changes

plugins/ai-chat/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@giantswarm/backstage-plugin-ai-chat",
-  "version": "0.13.5",
+  "version": "0.13.6",
   "license": "Apache-2.0",
   "private": true,
   "main": "src/index.ts",

plugins/muster-backend/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @giantswarm/backstage-plugin-muster-backend
 
+## 0.2.1
+
+### Patch Changes
+
+- db81de5: Fix the muster Workflows page failing with 401 ("requires a user token for
+  auth provider ... but the request did not include one") when the muster MCP
+  server uses per-user auth.
+
+  The muster frontend resolves the server's `authProvider` by matching the
+  `aiChat.mcp` entry by `name`, but `name` was not declared frontend-visible in
+  the config schema, so the browser never saw it, never resolved the auth
+  provider, and never sent the auth header. `aiChat.mcp[].name` is now
+  `@visibility frontend`, and `muster.serverName` is declared frontend-visible
+  in the muster frontend plugin's own config schema so overriding the entry
+  name also works in the browser.
+
 ## 0.2.0
 
 ### Minor Changes

plugins/muster-backend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@giantswarm/backstage-plugin-muster-backend",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "license": "Apache-2.0",
   "private": true,
   "main": "src/index.ts",

plugins/muster/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @giantswarm/backstage-plugin-muster
 
+## 0.2.1
+
+### Patch Changes
+
+- db81de5: Fix the muster Workflows page failing with 401 ("requires a user token for
+  auth provider ... but the request did not include one") when the muster MCP
+  server uses per-user auth.
+
+  The muster frontend resolves the server's `authProvider` by matching the
+  `aiChat.mcp` entry by `name`, but `name` was not declared frontend-visible in
+  the config schema, so the browser never saw it, never resolved the auth
+  provider, and never sent the auth header. `aiChat.mcp[].name` is now
+  `@visibility frontend`, and `muster.serverName` is declared frontend-visible
+  in the muster frontend plugin's own config schema so overriding the entry
+  name also works in the browser.
+
 ## 0.2.0
 
 ### Minor Changes

plugins/muster/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@giantswarm/backstage-plugin-muster",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "license": "Apache-2.0",
   "private": true,
   "main": "src/index.ts",