@sap/cds-dk 10.0.5 → 10.0.6

package/CHANGELOG.md

@@ -6,10 +6,25 @@ This project adheres to [Semantic Versioning](https://semver.org/).
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
+## Version 10.0.6 - 2026-07-24
+
+### Added
+
+- `cds add xsuaa` now generates namespace-suffixed XSUAA `role-collections` for Kyma.
+
+### Fixed
+
+- `cds add http` no longer throws `MULTIPLE_DOCS` when `application.yaml` uses `---` separators (Spring Boot multi-profile format).
+- `cds export --data` now reads seed data via in-memory SQLite instead of the configured db driver, so it no longer fails in projects with `requires.db: hana` (e.g. CAP Java).
+- `cds init --java --add mta` now writes `path: srv` for the Java `srv` module in `mta.yaml` instead of `gen/srv`, so `mbt build` no longer fails with `the "gen/srv" path of the "<app>-srv" module does not exist`.
+- `cds version` no longer reports dependency problems if no dependencies are installed at all. It prints an info message instead.
+- `cds add test` creates tests that are green by default. Sample data is provided as commented code.
+
 ## Version 10.0.5 - 2026-07-16
 
 ### Fixed
 
+- `cds build --for hana` now declares the plugin for native HANA artifacts placed in the build output (e.g. a `.hdbprojectionview` from `db/src`) in the generated `.hdiconfig`.
 - `cds add typer` now generates a `jsconfig.json` file that works with VS Code.
 - `cds debug <app> --force` on Kyma now preserves existing `NODE_OPTIONS` flags (e.g. `--max-old-space-size`) instead of overwriting them when enabling the inspector.
 - `cds add sample` now selects `stock` in the Books list and object pages, so the overstock discount shows up in the UI.

package/bin/export.js

@@ -200,7 +200,7 @@ class Export extends Minify {
   }
 
   async export_data (model) {
-    const db = cds.db = await cds.deploy ('*',{silent:true})
+    const db = cds.db = await cds.deploy ('*',{silent:true}).to ('sqlite::memory:')
     const out = path.resolve (this.options.to, 'data')
     await fs.promises.rm (out, { recursive: true, force: true })
     await mkdirp (this.options.to, 'data')

package/bin/version.js

@@ -1,3 +1,4 @@
+const cds = require('../lib')
 
 module.exports = exports = async function cds_version (pattern, options) {
   console.log()
@@ -9,7 +10,12 @@ module.exports = exports = async function cds_version (pattern, options) {
   print_versions (all.flat(),o)
   if (!o.json) {
     if (o.info) console.log ('\n','> Project:', project_info (o))
-    if (o._elsp) console.log ('\n', `${RED}ELSPROBLEMS${RESET} reported by ${BOLD}npm ls${RESET}. Run ${BOLD}npm install${RESET} to fix dependency problems, then rerun ${BOLD}cds version${RESET}.`)
+    if (o._elsp) {
+      if (!cds.utils.fs.existsSync(join(o.root, 'node_modules')))
+        console.log (`\nNo dependencies installed. Run ${BOLD}npm install${RESET}, then rerun ${BOLD}cds version${RESET}.`)
+      else
+        console.log (`\n${RED}ELSPROBLEMS${RESET} reported by ${BOLD}npm ls${RESET}. Run ${BOLD}npm install${RESET} to fix dependency problems, then rerun ${BOLD}cds version${RESET}.`)
+    }
   }
   console.log()
 }
@@ -49,8 +55,6 @@ exports.help = `
       repository URL at the end as a markdown link.
 `
 
-
-const cds = require('../lib')
 const $ = cds.utils.sh || sh_polyfill
 const child_process = require('node:child_process')
 const home = require('os').homedir()

package/lib/build/plugins/hana/index.js

@@ -68,7 +68,6 @@ module.exports = class HanaBuildPlugin extends require('../internal') {
             }
 
             // create additional stuff in dest
-            await this._writeHdiConfig(hdiPlugins)
             await this._writeHdiNamespace()
             await this._writeUndeployJson()
 
@@ -100,6 +99,8 @@ module.exports = class HanaBuildPlugin extends require('../internal') {
                 )
             }
 
+            await this._writeHdiConfig(hdiPlugins)
+
             // relocate .hdbsynonymconfig files containing *.configure properties to cfg/ folder
             // HDI's template mechanism for configuration files only works from the cfg/ folder
             // For inplace builds (Java), restrict the scan to compileDest only to avoid moving user's
@@ -433,7 +434,8 @@ module.exports = class HanaBuildPlugin extends require('../internal') {
     async _writeHdiConfig(compileHdiPlugins) {
         const DEFAULT_HDI_PLUGINS = [FILE_EXT_CSV, FILE_EXT_HDBTABLEDATA, FILE_EXT_HDBTABLE, ".hdbview", ".hdbindex", ".hdbconstraint", ".hdbcalculationview"]
         const undeployHdiPlugins = await this._readTypesFromUndeployJson() // see CAP issue #6222
-        const hdiPlugins = new Set([...DEFAULT_HDI_PLUGINS, ...undeployHdiPlugins, ...compileHdiPlugins])
+        const destHdiPlugins = await this._readTypesFromCompileDest()
+        const hdiPlugins = new Set([...DEFAULT_HDI_PLUGINS, ...undeployHdiPlugins, ...compileHdiPlugins, ...destHdiPlugins])
         let hdiConfigPath
 
         // do not create the .hdiconfig file in 'gen/db' root folder for now
@@ -543,6 +545,21 @@ module.exports = class HanaBuildPlugin extends require('../internal') {
         return hdiPlugins
     }
 
+    async _readTypesFromCompileDest() {
+        const hdiPlugins = new Set()
+        const dir = path.join(this.task.dest, 'src')
+        if (!exists(dir)) return hdiPlugins
+
+        const template = await _readTemplateAsJson('.hdiconfig-all')
+        const knownSuffixes = new Set(Object.keys(template['file_suffixes']).map(key => '.' + key))
+        const files = await find(dir, { filter: (entry) => !isdir(entry) })
+        files.forEach(file => {
+            const suffix = path.extname(file)
+            if (knownSuffixes.has(suffix)) hdiPlugins.add(suffix)
+        })
+        return hdiPlugins
+    }
+
     async _validateMigrationTableFiles() {
         const dbSrcDir = path.join(this.task.src, "src")
         const migrationTableFiles = await find(dbSrcDir, { filter: (res) => {

package/lib/init/projectReader.js

@@ -3,6 +3,7 @@ const { join, resolve, basename } = require('node:path')
 const { execSync } = require('node:child_process')
 const { fs, exists, isfile, isdir, path } = cds.utils
 const { parseXml } = require('./xml')
+const YAML = require('yaml')
 const { REGEX_JAVA_VERSION, JAVA_LTS_VERSIONS } = require('./constants')
 const TRACE = cds.debug('trace')
 
@@ -69,6 +70,7 @@ module.exports = new class ProjectReader {
     readProject() {
         if (!this.appName) this.#setPackageInfo()
         const env = this.env4('production')
+        if (this.isJava) env.build.target = '.'
         const { appVersion, appName, appId, appDescription, jdkVersion } = this
         TRACE?.({ env })
 
@@ -249,8 +251,8 @@ module.exports._readSpringBootConfig = async function (roots = [cds.env.folders.
     for (let r of rootDirs) {
         const file = isfile(join(r, './src/main/resources/application.yaml'))
         if (file) {
-            const yaml = cds.load.yaml(file)
-            for (let yamlDoc of Array.isArray(yaml) ? yaml : [yaml]) {
+            const docs = YAML.parseAllDocuments(fs.readFileSync(file, 'utf-8'))
+            for (let yamlDoc of docs.map(d => d.toJS())) {
                 let cds = yamlDoc?.cds;
                 if (!cds) continue
                 cds = _normalizeSpringBootCfg(cds)

package/lib/init/template/ams/files/package.json.hbs

@@ -4,7 +4,7 @@
     "@sap/ams": "^3"
   },
   "devDependencies": {
-    "@sap/ams-dev": "^2"
+    "@sap/ams-dev": "^3"
   },
   "engines": {
     "node": "^24"

package/lib/init/template/test/files/test/test.xs.hbs

@@ -19,7 +19,7 @@ describe('{{serviceName}} OData APIs', () => {
   it('serves <%name%>', async () => {
     const { data } = await GET `<%&urlPath%> ${{ params: { $select: '<%&selectString%>' } }}`
     expect(data.value).to.containSubset([
-      <%&elementsString%>,
+      // <%&elementsString%>,
     ])
   })
 <%={{ }}=%>{{/entities}}
@@ -27,7 +27,8 @@ describe('{{serviceName}} OData APIs', () => {
 {{#actions}}{{=<% %>=}}
   it('executes <%name%>', async () => {
     const { data } = await POST `<%&urlPath%> ${
-      <%&paramsString%>
+      {}
+      // <%&paramsString%>
     }`
     // TODO finish this test
     // expect(data.value).to...

package/lib/init/template/xsuaa/index.js

@@ -86,13 +86,17 @@ module.exports = class XsuaaTemplate extends require('../../plugin') {
         if (addKyma || addMultitenancy && hasKyma) {
             const overwrites = addMultitenancy ? [{ item: 'xsuaa.parameters.tenant-mode', withValue: 'shared' }] : []
             await merge(__dirname, 'files/values.yaml.hbs').into('chart/values.yaml', { with: project, overwrites })
-            await merge({
-                xsuaa: {
-                    parameters: {
-                        xsappname: `${project.appName}-{{ .Release.Namespace }}`
-                    }
-                }
-            }).into('chart/values.yaml')
+            const parameters = {
+                xsappname: `${project.appName}-{{ .Release.Namespace }}`
+            }
+            if (!project.hasCustomRoleCollections && xsSecurity['role-templates'].length) {
+                parameters['role-collections'] = xsSecurity['role-templates'].map(role => ({
+                    name: `${role.name} (${project.appName} {{ .Release.Namespace }})`,
+                    description: 'generated',
+                    'role-template-references': [`$XSAPPNAME.${role.name}`],
+                }))
+            }
+            await merge({ xsuaa: { parameters } }).into('chart/values.yaml')
             await KymaTemplate.mergeDependency('service-instance', 'xsuaa')
 
         }

package/node_modules/@sap/cds/CHANGELOG.md

@@ -4,6 +4,15 @@
 - The format is based on [Keep a Changelog](https://keepachangelog.com/).
 - This project adheres to [Semantic Versioning](https://semver.org/).
 
+## Version 10.0.4 - 2026-07-21
+
+### Fixed
+
+- Default language fallbacks for incomplete `i18n` bundles in Java projects
+- `srv.on/before('READ',...)` handlers registered with a cds-typer singular entity proxy were erroneously rewritten to event `each`
+- Asynchronous plugins (exporting a Promise) were not awaited in ESM projects
+- Fixed context propagation for local app and remote service calls 
+
 ## Version 10.0.3 - 2026-07-02
 
 ### Fixed

package/node_modules/@sap/cds/lib/env/defaults.js

@@ -133,6 +133,7 @@ module.exports = exports = {
     ],
     /** @deprecated */ fallback_bundle: '',
     /** @deprecated */ fatjson: false, // REVISIT: remove in cds^11
+    '[java]': { fatjson: true },
   },
 
   odata: {

package/node_modules/@sap/cds/lib/plugins.js

@@ -36,9 +36,11 @@ exports.activate = async function (plugins = cds.env?.plugins || exports.fetch()
   }
   await Promise.all (all.map (([n,c]) => n in prioritized && _load(n,c)))
   await Promise.all (all.map (([n,c]) => n in prioritized || _load(n,c)))
-  function _load (plugin, conf) {
+  async function _load (plugin, conf) {
     DEBUG?.log(`[cds.plugins] - loading ${plugin}:`, { impl: local(conf.impl) })
-    return cds.utils._import (conf.impl)
+    const module = await cds.utils._import (conf.impl)
+    if (module?.default) await module.default
+    return module
   }
   DEBUG?.timeEnd ('[cds.plugins] - loaded plugins in')
   return plugins

package/node_modules/@sap/cds/lib/srv/srv-handlers.js

@@ -48,7 +48,7 @@ class EventHandlers {
       return srv
     }
     else if (typeof path === 'object') {
-      if (path.is_singular && event === 'READ') event = 'each' //> srv.after ('READ', Book, ...) w/ Book is a singular def from cds-typer
+      if (phase === 'after' && path.is_singular && event === 'READ') event = 'each' //> srv.after ('READ', Book, ...) w/ Book is a singular def from cds-typer
       path = path.name || cds.error.expected `${{path}} to be a string or an entity's CSN definition`
     }
     else if (typeof path === 'string') {

package/node_modules/@sap/cds/libx/_runtime/common/Service.js

@@ -66,7 +66,7 @@ class ApplicationService extends cds.Service {
       // we need to provide target explicitly because it's cached within ensure_target
       const target = cds.infer.target(query, this)
       const _req = new cds.Request({ query, target, _resolved: true })
-      return this.handle(_req).then(result => postProcess(_req, result, this))
+      return this.dispatch(_req).then(result => postProcess(_req, result, this))
     }
 
     // async

package/node_modules/@sap/cds/libx/_runtime/remote/Service.js

@@ -317,7 +317,7 @@ class RemoteService extends cds.Service {
       // we need to provide target explicitly because it's cached within ensure_target
       const target = cds.infer.target(query, this)
       const _req = new cds.Request({ query, target, _resolved: true, headers: req.headers, method: req.method })
-      return this.handle(_req).then(result => postProcess(_req, result, this, true))
+      return this.dispatch(_req).then(result => postProcess(_req, result, this, true))
     }
 
     // we need to post process if alias was explicitly set in query

package/node_modules/@sap/cds/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sap/cds",
-  "version": "10.0.3",
+  "version": "10.0.4",
   "description": "SAP Cloud Application Programming Model - CDS for Node.js",
   "homepage": "https://cap.cloud.sap/",
   "keywords": [

package/node_modules/@sap/cds-compiler/CHANGELOG.md

@@ -15,6 +15,18 @@ might use a deprecated flag only for a limited period of time.
 
 
 
+## Version 7.0.3 - 2026-07-21
+
+### Bug Fixes
+
+- **compiler:** When a backlink target is at least distantly related to the entity
+  embedding an association with a backlink comparison, the compiler issues a
+  warning ref-deprecated-backlink instead of reporting an error ref-invalid-backlink;
+  this is now also the case if the target entity is auto-exposed.
+- **sql:** Avoid dump in to.sql.migration with complex models.
+
+
+
 ## Version 7.0.2 - 2026-07-14
 
 ### Bug Fixes

package/node_modules/@sap/cds-compiler/lib/compiler/populate.js

@@ -1094,6 +1094,7 @@ function populate( model ) {
         elem._main?._ancestors?.includes( target )) {
       // source and target of the model association are the same entity, and
       // the current main artifact is a suitable auto-redirection target → return it
+      // TODO: check with auto-exposed entities (which do not have _ancestors)
       return elem._main;
     }
     const elemScope = preferredElemScope( target, service, elem, assoc._main || assoc );

package/node_modules/@sap/cds-compiler/lib/compiler/resolve.js

@@ -1240,7 +1240,7 @@ function resolve( model ) {
     if (chain)                  // standard correct case
       return;
 
-    if (target._ancestors) { // && assocHasForeignKeys( assoc.$backlink?._origin )) {
+    if (target._ancestors || target.$inferred === 'autoexposed') {
       // with non-cyclic projection ancestors, not only for managed assoc, but also
       // unmanaged, see test3/Associations/Backlinks/CrossEyedBacklink.sql-err.cds
       // Current entity is no valid redirection target for the backlink association

package/node_modules/@sap/cds-compiler/lib/model/csnUtils.js

@@ -920,12 +920,10 @@ const _dependents = Symbol('_dependents');
  * _dependencies: All artifacts this artifact depends on (because it has a ref to it)
  *
  * @param {CSN.Model} csn A CSN to enrich in-place
- * @param {object} refs csnRefs, only used for artifactRef
  * @returns {object} CSN with _dependents/_dependencies set, "cleanup" function, _dependents/_dependencies Symbol used
  */
-function setDependencies( csn, refs = csnRefs(csn) ) {
+function setDependencies( csn ) {
   const cleanup = [];
-  const { artifactRef } = refs;
 
   forEachDefinition(csn, (artifact, artifactName) => {
     const queries = getNormalizedQuery(artifact).query;
@@ -933,11 +931,18 @@ function setDependencies( csn, refs = csnRefs(csn) ) {
       initDependencies(artifact);
       forAllQueries(queries, (query) => {
         if (query.SELECT?.from) {
-          if (query.SELECT.from.args)
+          if (query.SELECT.from.args) {
             handleArgs(artifact, artifactName, query.SELECT.from.args);
-
-          else if (typeof query.SELECT.from === 'string' || query.SELECT.from.ref)
-            handleDependency(artifactRef.from(query.SELECT.from), artifact, artifactName);
+          }
+          else if (typeof query.SELECT.from === 'string') {
+            handleDependency(csn.definitions[query.SELECT.from], artifact, artifactName);
+          }
+          else if (query.SELECT.from.ref) {
+            if (query.SELECT.from.ref[0].id)
+              handleDependency(csn.definitions[query.SELECT.from.ref[0].id], artifact, artifactName);
+            else
+              handleDependency(csn.definitions[query.SELECT.from.ref[0]], artifact, artifactName);
+          }
         }
       }, [ 'definitions', artifactName, (artifact.projection ? 'projection' : 'query') ]);
     }
@@ -952,7 +957,7 @@ function setDependencies( csn, refs = csnRefs(csn) ) {
       if (arg.args)
         handleArgs(artifact, artifactName, arg.args);
       else if (arg.ref)
-        handleDependency(artifactRef.from(arg), artifact, artifactName);
+        handleDependency(csn.definitions[arg.ref[0].id ? arg.ref[0].id : arg.ref[0]], artifact, artifactName);
     }
   }
 

package/node_modules/@sap/cds-compiler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sap/cds-compiler",
-  "version": "7.0.2",
+  "version": "7.0.3",
   "description": "CDS (Core Data Services) compiler and backends",
   "homepage": "https://cap.cloud.sap/",
   "author": "SAP SE (https://www.sap.com)",

package/node_modules/media-typer/README.md

@@ -1,18 +1,18 @@
 # media-typer
 
-[![NPM Version][npm-version-image]][npm-url]
-[![NPM Downloads][npm-downloads-image]][npm-url]
+[![NPM Version][npm-image]][npm-url]
+[![NPM Downloads][downloads-image]][downloads-url]
 [![Node.js Version][node-version-image]][node-version-url]
-[![Build Status][travis-image]][travis-url]
+[![Build Status][ci-image]][ci-url]
 [![Test Coverage][coveralls-image]][coveralls-url]
 
 Simple RFC 6838 media type parser.
 
-This module will parse a given media type into it's component parts, like type,
+This module will parse a given media type into its component parts, like type,
 subtype, and suffix. A formatter is also provided to put them back together and
 the two can be combined to normalize media types into a canonical form.
 
-If you are looking to parse the string that represents a media type and it's
+If you are looking to parse the string that represents a media type and its
 parameters in HTTP (for example, the `Content-Type` header), use the
 [content-type module](https://www.npmjs.com/package/content-type).
 
@@ -75,19 +75,20 @@ If any of the given object values are invalid, then a `TypeError` is thrown.
 var valid = typer.test('image/svg+xml')
 ```
 
-Validate a media type string. This will return `true` is the string is a well-
+Validate a media type string. This will return `true` if the string is a well-
 formatted media type, or `false` otherwise.
 
 ## License
 
 [MIT](LICENSE)
 
-[coveralls-image]: https://badgen.net/coveralls/c/github/jshttp/media-typer/master
-[coveralls-url]: https://coveralls.io/r/jshttp/media-typer?branch=master
-[node-version-image]: https://badgen.net/npm/node/media-typer
-[node-version-url]: https://nodejs.org/en/download
-[npm-downloads-image]: https://badgen.net/npm/dm/media-typer
+[ci-image]: https://img.shields.io/github/workflow/status/jshttp/media-typer/ci/master?label=ci
+[ci-url]: https://github.com/jshttp/media-typer/actions/workflows/ci.yml
+[npm-image]: https://img.shields.io/npm/v/media-typer.svg
 [npm-url]: https://npmjs.org/package/media-typer
-[npm-version-image]: https://badgen.net/npm/v/media-typer
-[travis-image]: https://badgen.net/travis/jshttp/media-typer/master
-[travis-url]: https://travis-ci.org/jshttp/media-typer
+[node-version-image]: https://img.shields.io/node/v/media-typer.svg
+[node-version-url]: https://nodejs.org/en/
+[coveralls-image]: https://img.shields.io/coveralls/jshttp/media-typer/master.svg
+[coveralls-url]: https://coveralls.io/r/jshttp/media-typer?branch=master
+[downloads-image]: https://img.shields.io/npm/dm/media-typer.svg
+[downloads-url]: https://npmjs.org/package/media-typer

package/node_modules/media-typer/index.js

@@ -83,10 +83,6 @@ function format (obj) {
  */
 
 function test (string) {
-  if (!string) {
-    throw new TypeError('argument string is required')
-  }
-
   if (typeof string !== 'string') {
     throw new TypeError('argument string is required to be a string')
   }
@@ -103,10 +99,6 @@ function test (string) {
  */
 
 function parse (string) {
-  if (!string) {
-    throw new TypeError('argument string is required')
-  }
-
   if (typeof string !== 'string') {
     throw new TypeError('argument string is required to be a string')
   }

package/node_modules/media-typer/package.json

@@ -1,20 +1,24 @@
 {
   "name": "media-typer",
   "description": "Simple RFC 6838 media type parser and formatter",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
   "license": "MIT",
   "repository": "jshttp/media-typer",
+  "funding": {
+    "type": "opencollective",
+    "url": "https://opencollective.com/express"
+  },
   "devDependencies": {
-    "eslint": "5.16.0",
-    "eslint-config-standard": "12.0.0",
-    "eslint-plugin-import": "2.17.2",
-    "eslint-plugin-markdown": "1.0.0",
-    "eslint-plugin-node": "8.0.1",
-    "eslint-plugin-promise": "4.1.1",
-    "eslint-plugin-standard": "4.0.0",
-    "mocha": "6.1.4",
-    "nyc": "14.0.0"
+    "eslint": "7.23.0",
+    "eslint-config-standard": "14.1.1",
+    "eslint-plugin-import": "2.22.1",
+    "eslint-plugin-markdown": "1.0.2",
+    "eslint-plugin-node": "11.1.0",
+    "eslint-plugin-promise": "4.3.1",
+    "eslint-plugin-standard": "4.1.0",
+    "mocha": "9.2.0",
+    "nyc": "15.1.0"
   },
   "files": [
     "LICENSE",
@@ -27,7 +31,7 @@
   "scripts": {
     "lint": "eslint --plugin markdown --ext js,md .",
     "test": "mocha --reporter spec --check-leaks --bail test/",
-    "test-cov": "nyc --reporter=html --reporter=text npm test",
-    "test-travis": "nyc --reporter=text npm test"
+    "test-ci": "nyc --reporter=lcov --reporter=text npm test",
+    "test-cov": "nyc --reporter=html --reporter=text npm test"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sap/cds-dk",
-  "version": "10.0.5",
+  "version": "10.0.6",
   "description": "Command line client and development toolkit for the SAP Cloud Application Programming Model",
   "homepage": "https://cap.cloud.sap/",
   "keywords": [