boost(#3335): add initial test infrastructure with boost-common package

[fullsend-ai-coder]

Create the boost-common plugin package with a minimal test to enable yarn test in the boost workspace. Follows the same pattern used by scorecard-common and other workspaces in this monorepo.

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

---

Closes #3335

Post-script verification

• Branch is not main/master (agent/3335-boost-test-infrastructure)
• Secret scan passed (gitleaks — 4da4d17bde9a26b337bc99d8e289405c4cb4d233..HEAD)
• Pre-commit hooks passed (authoritative run on runner)
• Tests ran inside sandbox

[rhdh-gh-app]

Missing Changesets

The following package(s) are changed by this PR but do not have a changeset:

• @red-hat-developer-hub/backstage-plugin-boost-common

See CONTRIBUTING.md for more information about how to add changesets.

Changed Packages

Package Name	Package Path	Changeset Bump	Current Version
@red-hat-developer-hub/backstage-plugin-boost-common	workspaces/boost/plugins/boost-common	none	v0.1.0

[codecov]

⚠️ JUnit XML file not found

The CLI was unable to find any JUnit XML files to upload.
For more help, visit our troubleshooting guide.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 5:37 PM UTC · Completed 5:48 PM UTC
Commit: 4da4d17 · View workflow run →

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[fullsend-ai-review]

Review

Findings

Low

• [package.json field completeness] workspaces/boost/plugins/boost-common/package.json — The package.json is missing homepage and bugs fields. However, only 6 of 13 existing common packages include these fields, while 7 omit them — this is not a strong convention.
  Remediation: Optionally add "homepage": "https://red.ht/rhdh" and "bugs": "https://github.com/redhat-developer/rhdh-plugins/issues".

• [architectural coherence] workspaces/boost/plugins/boost-common/package.json — The @backstage/cli devDependency is pinned to ^0.34.5, while the majority of common packages use ^0.36.0 or higher. Two other packages (augment-common, x2a-common) share the same version, so this is not unprecedented, but aligning with the majority is recommended for a brand-new package.
  Remediation: Consider updating to ^0.36.0 or higher to match other workspaces.

Info

• [package.json structure] workspaces/boost/plugins/boost-common/package.json — The pluginPackages array only lists the common package itself. Most established common packages list all sibling packages. Acceptable for an initial PR; update when sibling packages are added.

• [test file organization] workspaces/boost/plugins/boost-common/src/index.test.ts — No other -common package in the monorepo has an index.test.ts file. This is a positive deviation; keeping the test is fine.

• [scope alignment] workspaces/boost/.eslintrc.js — The workspace-level .eslintrc.js omits the copyright header that lightspeed's includes. However, scorecard and orchestrator also omit it, so both conventions exist in the repo.

[durandom]

Closing — image rebuild in progress with yarn@4.12.0 pin and corepack permission fix. Will retrigger after new image lands.