@sap/async-xsjs 2.0.7 → 2.0.9

package/CHANGELOG.md

@@ -5,6 +5,20 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 
 The format is based on [Keep a Changelog](http://keepachangelog.com/).
 
+<a name="2.0.9"></a>
+## 2.0.9 - 2024-12-18
+
+### Updated
+- Pinned @sap/hdbext version to 8.1.0 to fix the security vulnerability.
+
+<a name="2.0.8"></a>
+## 2.0.8 - 2024-12-12
+
+### Updated
+- Pinned @sap/hdbext version to 8.0.9 to fix the security vulnerability.
+- Updated express version to 4.21.2  to fix the security vulnerability.
+
+
 <a name="2.0.7"></a>
 ## 2.0.7 - 2024-12-03
 

package/README.md

@@ -93,6 +93,8 @@ Here is a list of options you can provide:
 | redirectUrl | | If specified, a redirect to this URL is triggered when the root path is requested. <br> **Note**: When _async-xsjs_ is performed behind a reverse proxy (for example, Application Router), the value of this property should be aligned with the path rewriting rules that may apply. |
 | xsApplicationUser | true | If set to false, the session variable `XS_APPLICATIONUSER` will not be set. | 
 
+**Note:** If xsApplicationUser is true or anonymous is false and your database is Hana Cloud, please configure the [JWT Environment](https://help.sap.com/docs/hana-cloud-database/sap-hana-cloud-sap-hana-database-data-access-guide/set-up-jwt-environment), else SET command: XS_APPLICATIONUSER will be failed and process will be stopped.
+
 **Note:** When there are several `rootDirs` (for example, **repo1** and **repo2**) and their file structures are identical (_/repo1/hello.xsjs_ and _/repo2/hello.xsjs_), then:
 * The file from the first directory, as listed in the `rootDirs` property, will be used (_/repo1/hello.xsjs_).
 * The file from the second directory (_/repo2/hello.xsjs_) will be ignored with a warning message in the logs.