@sap/cds-dk 10.1.1 → 10.1.2

package/CHANGELOG.md

@@ -6,6 +6,18 @@ This project adheres to [Semantic Versioning](https://semver.org/).
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
+## Version 10.1.2 - 2026-09-17
+
+### Fixed
+
+- `cds` no longer crashes with an `ENOENT` (`uv_cwd`) stack trace when the shell's current directory has been deleted, e.g. during tab-completion.
+- `cds build --for java` no longer writes Node.js runtime messages.
+- `cds build` preserves line breaks in merged `messages.properties` bundles.
+- `cds add xsuaa` no longer generates an invalid `mta.yaml` when added after `workzone`.
+- `cds add cloud-logging` now binds existing approuter and multitenancy modules when `mta` is added later.
+- `cds add enterprise-messaging` and `cds add event-mesh` now contribute to an MTA descriptor added later.
+- `cds add destination` now binds existing approuter and multitenancy modules when `mta` is added later.
+
 ## Version 10.1.1 - 2026-09-09
 
 ### Added

package/lib/build/plugins/internal.js

@@ -132,36 +132,10 @@ module.exports = class InternalBuildPlugin extends require('./plugin') {
         // bundleDest might be null
         if (bundleDest && Object.keys(bundles).length > 0) {
             await this.write(bundles).to(file)
-            // also collect and write messages from plugins
-            await this.collectMessageBundles(bundleDest, model)
             return { file, bundles }
         }
         return null
     }
-
-    /**
-     * Collect and write message bundles from CAP plugins into messages.properties files.
-     * @param {string} bundleDest
-     * @param {Object} model - passed for signature consistency with subclass overrides; not used here
-     * as Java does not require neighborhood resolution of plugin i18n files.
-     */
-    // eslint-disable-next-line no-unused-vars
-    async collectMessageBundles(bundleDest, model) {
-        const messageBundle = cds.i18n.bundle4('messages')
-        const messagesData = messageBundle.translations4?.(cds.env.i18n.languages) ?? {}
-
-        // Write messages.properties files for each locale
-        for (const [locale, messages] of Object.entries(messagesData)) {
-            if (Object.keys(messages).length > 0) {
-                const fileName = locale ? `messages_${locale}.properties` : 'messages.properties'
-                const filePath = path.join(bundleDest, fileName)
-                const content = Object.entries(messages)
-                    .map(([key, value]) => `${key}=${value}`)
-                    .join('\n') + '\n'
-                await this.write(content).to(filePath)
-            }
-        }
-    }
 }
 
 // Emits the 'compile.for.runtime' event, as the produced CSN is for runtime usage.

package/lib/build/plugins/nodejs/index.js

@@ -10,6 +10,7 @@ const DEBUG = cds.debug('cli|build')
 const NODE_ENGINE_VERSION = '^24'
 const { exec } = require('node:child_process')
 const pexec = require('node:util').promisify(exec)
+const escapeLineBreaks = value => value.replace(/\r/g, '\\u000D').replace(/\n/g, '\\u000A')
 
 module.exports = class NodejsBuildPlugin extends require('../edmx') {
 
@@ -353,15 +354,19 @@ module.exports = class NodejsBuildPlugin extends require('../edmx') {
         return Array.isArray(parsed) ? parsed : Object.values(parsed)
     }
 
-    // Override to pass model for neighborhood resolution of plugin i18n files.
-    // Cannot be done in InternalBuildPlugin because Java relies on the model-less behaviour.
+    async collectLanguageBundles(model, bundleDest) {
+        const result = await super.collectLanguageBundles(model, bundleDest)
+        if (result) await this.collectMessageBundles(bundleDest, model)
+        return result
+    }
+
     async collectMessageBundles(bundleDest, model) {
         const messageBundle = cds.i18n.bundle4('messages', { model })
         const messagesData = messageBundle.translations4?.(cds.env.i18n.languages) ?? {}
         for (const [locale, messages] of Object.entries(messagesData)) {
             if (Object.keys(messages).length > 0) {
                 const fileName = locale ? `messages_${locale}.properties` : 'messages.properties'
-                const content = Object.entries(messages).map(([k, v]) => `${k}=${v}`).join('\n') + '\n'
+                const content = Object.entries(messages).map(([k, v]) => `${k}=${escapeLineBreaks(v)}`).join('\n') + '\n'
                 await this.write(content).to(path.join(bundleDest, fileName))
             }
         }

package/lib/cds.js

@@ -11,10 +11,16 @@ module.exports = Object.defineProperties (cds, {
 
 function _local (id, ...morePaths) {
   return require(require.resolve (id, {paths:[
-    process.cwd(), // project-local module is preferred
+    _cwd(),         // project-local module is preferred
     __dirname,      // otherwise from our own dependencies
     ...morePaths
-  ]}))
+  ].filter(Boolean)})) // drop empty paths (e.g. _cwd()/_npmRoot() fallbacks); require.resolve expects real paths
+}
+
+function _cwd() {
+  // process.cwd() throws ENOENT (uv_cwd) when the cwd was deleted
+  try { return process.cwd() }
+  catch (e) { if (e.code === 'ENOENT') return '' }
 }
 
 function _npmRoot() {

package/lib/init/merge.js

@@ -165,8 +165,28 @@ async function _mergeYAML(into, from, project, semantics = {}) {
             t.value = s.value
         }
     }
+    const deleteEntries = entries => {
+        for (const { item, key, relationships: refs } of entries) {
+            const seq = locate(target, item.in)
+            const node = locate(target, item)
+            if (!YAML.isSeq(seq) || !node) continue
+            const removed = node.toJSON()
+            key ? node.deleteIn(path(key)) : seq.delete(seq.items.indexOf(node))
+            for (const { removeProperty, allWithin } of refs ?? []) {
+                const [parentPath, childPath, prop] = allWithin
+                for (const parent of locate(target, parentPath)?.items ?? []) {
+                    const list = parent.getIn(path(childPath))
+                    const i = list?.items?.findIndex(n => n.get?.(prop) === removed[removeProperty]) ?? -1
+                    if (i > -1) list.delete(i)
+                }
+            }
+        }
+    }
     mergeNode(target.contents, source.contents)
 
+    // Deletions: remove the matched node (or a sub-key), then cascade-remove references to it.
+    deleteEntries(deletions.filter(({ key }) => !key))
+
     // Placement: add matched (and relationship-referenced) template entries not already present.
     const isEntry = e => e && typeof e === 'object' && !Array.isArray(e) && e.in !== undefined
     const insertNode = ins => Array.isArray(ins) ? (ins.length === 1 ? ins[0] : undefined) : ins
@@ -208,22 +228,7 @@ async function _mergeYAML(into, from, project, semantics = {}) {
         }
     }
 
-    // Deletions: remove the matched node (or a sub-key), then cascade-remove references to it.
-    for (const { item, key, relationships: refs } of deletions) {
-        const seq = locate(target, item.in)
-        const node = locate(target, item)
-        if (!YAML.isSeq(seq) || !node) continue
-        const removed = node.toJSON()
-        key ? node.deleteIn(path(key)) : seq.delete(seq.items.indexOf(node))
-        for (const { removeProperty, allWithin } of refs ?? []) {
-            const [parentPath, childPath, prop] = allWithin
-            for (const parent of locate(target, parentPath)?.items ?? []) {
-                const list = parent.getIn(path(childPath))
-                const i = list?.items?.findIndex(n => n.get?.(prop) === removed[removeProperty]) ?? -1
-                if (i > -1) list.delete(i)
-            }
-        }
-    }
+    deleteEntries(deletions.filter(({ key }) => key))
 
     typeof into === 'string' && await writeYAML(into, target)
     return target
@@ -349,4 +354,3 @@ module.exports.merge = (...src) => {
  * @property {Deletion[]} [deletions] - matched nodes (or sub-keys) to delete
  * @property {Relationship[]} [relationships] - relationships to wire into target sequences
  */
-

package/lib/init/template/cloud-logging/index.js

@@ -40,7 +40,7 @@ module.exports = class extends require('../../plugin') {
 
   async combine(facet) {
     const project = readProject(facet)
-    const { hasMta, addMta, addKyma, addApprouter, isJava, addMultitenancy, srv } = project
+    const { hasMta, addMta, addKyma, addApprouter, hasApprouter, isJava, addMultitenancy, hasMultitenancy, srv } = project
 
     if (addMta || (addMultitenancy || addApprouter) && hasMta) {
       const cloudLogging = {
@@ -58,14 +58,14 @@ module.exports = class extends require('../../plugin') {
           into: [srvModule, 'requires', 'name']
         })
       }
-      if (addMultitenancy) {
+      if (hasMultitenancy) {
         const mtxSidecar = mtxSidecar4(isJava ? 'mtx/sidecar' : 'gen/mtx/sidecar')
         relationships.push({
           insert: [cloudLogging, 'name'],
           into: [mtxSidecar, 'requires', 'name']
         })
       }
-      if (addApprouter) {
+      if (hasApprouter) {
         relationships.push({
           insert: [cloudLogging, 'name'],
           into: [approuter, 'requires', 'name']

package/lib/init/template/destination/index.js

@@ -25,7 +25,7 @@ module.exports = class DestinationTemplate extends require('../../plugin') {
 
     async combine(facet) {
         const project = readProject(facet)
-        const { addApprouter, addMultitenancy, addKyma, addMta, hasMta, srv, isJava } = project
+        const { addApprouter, hasApprouter, addMultitenancy, hasMultitenancy, addKyma, addMta, hasMta, srv, isJava } = project
 
         if (addMta || (addApprouter || addMultitenancy) && hasMta) {
             const srvModule = srv4(srv.path)
@@ -34,13 +34,13 @@ module.exports = class DestinationTemplate extends require('../../plugin') {
                 insert: [destination, 'name'],
                 into: [srvModule, 'requires', 'name']
             }]
-            if (addApprouter) {
+            if (hasApprouter) {
                 relationships.push({
                     insert: [destination, 'name'],
                     into: [approuter, 'requires', 'name']
                 })
             }
-            if (addMultitenancy) {
+            if (hasMultitenancy) {
                 relationships.push({
                     insert: [destination, 'name'],
                     into: [mtxSidecar4(isJava ? 'mtx/sidecar' : 'gen/mtx/sidecar'), 'requires', 'name']

package/lib/init/template/enterprise-messaging/index.js

@@ -6,6 +6,9 @@ const { srv4, enterpriseMessaging, xsuaa } = require('../../registries/mta')
 const KymaTemplate = require('../kyma')
 
 module.exports = class EnterpriseMessagingTemplate extends require('../../plugin') {
+  static get kind() { return 'enterprise-messaging-http' }
+  static get vcap() { return 'enterprise-messaging' }
+
   constructor(...args) {
     super(...args)
     this._name = 'enterprise-messaging'
@@ -37,7 +40,7 @@ module.exports = class EnterpriseMessagingTemplate extends require('../../plugin
 
   static hasInProduction(env) {
     const { kind = 'dummy', vcap } = env.requires?.messaging ?? {}
-    return kind === this._kind && vcap?.label === this._vcap
+    return kind === this.kind && vcap?.label === this.vcap
   }
 
   async run() {

package/lib/init/template/event-mesh/index.js

@@ -1,6 +1,9 @@
 const { eventMesh } = require('../../registries/mta')
 
 module.exports = class EventMeshTemplate extends require('../enterprise-messaging') {
+  static get kind() { return 'enterprise-messaging-http' }
+  static get vcap() { return 'event-mesh-message-client' }
+
   constructor(...args) {
     super(...args)
     this._name = 'event-mesh'

package/lib/init/template/multitenancy/index.js

@@ -44,11 +44,11 @@ module.exports = class MultitenancyTemplate extends require('../../plugin') {
     const project = readProject(facet)
     const {
       isNodejs, isJava, addMta, hasMta,
-      addXsuaa, hasXsuaa, addIas, hasIas, hasHana, hasHanaServerless, addKyma, hasApprouter,
+      addXsuaa, hasXsuaa, addIas, hasIas, addMultitenancy, hasHana, hasHanaServerless, addKyma, hasApprouter,
       srv, appName
     } = project
 
-    if (addMta || (addIas || addXsuaa) && hasMta) {
+    if (addMta || (addMultitenancy || addIas || addXsuaa) && hasMta) {
       const srvModule = srv4(srv.path)
       const mtxSidecar = mtxSidecar4(isJava ? 'mtx/sidecar' : 'gen/mtx/sidecar')
       const modules = [srvModule, mtxSidecar]

package/lib/init/template/workzone-standard/index.js

@@ -93,7 +93,7 @@ module.exports = class extends require('../../plugin') {
       }
       if (addXsuaa) {
         relationships.push({
-          insert: [xsuaa],
+          insert: [xsuaa, 'name'],
           into: [destinations, 'requires']
         })
         additions.push({

package/node_modules/@cap-js/db-service/CHANGELOG.md

@@ -4,6 +4,19 @@
 - The format is based on [Keep a Changelog](http://keepachangelog.com/).
 - This project adheres to [Semantic Versioning](http://semver.org/).
 
+## [3.1.1](https://github.com/cap-js/cds-dbs/compare/db-service-v3.1.0...db-service-v3.1.1) (2026-09-15)
+
+
+### Fixed
+
+* **cqn4sql:** correctly expand `not exists <assoc>` alongside a null-check branch ([#1736](https://github.com/cap-js/cds-dbs/issues/1736)) ([bfb0a01](https://github.com/cap-js/cds-dbs/commit/bfb0a010cce2cea089f4fabf92a3ecea43486a09))
+
+
+### Performance Improvements
+
+* do not use ranked search for static values ([#1727](https://github.com/cap-js/cds-dbs/issues/1727)) ([33fb36b](https://github.com/cap-js/cds-dbs/commit/33fb36bbf0f86291e5fc0b9e2ff5b7244b49d19e))
+* if explicit order by is specified, do not add ranked search as a secondary clause ([33fb36b](https://github.com/cap-js/cds-dbs/commit/33fb36bbf0f86291e5fc0b9e2ff5b7244b49d19e))
+
 ## [3.1.0](https://github.com/cap-js/cds-dbs/compare/db-service-v3.0.1...db-service-v3.1.0) (2026-09-07)
 
 

package/node_modules/@cap-js/db-service/lib/cqn4sql.js

@@ -338,9 +338,11 @@ function _cqn4sql(originalQuery, model, useTechnicalAlias = true) {
     // it would sort by a constant boolean.
     const ranksSearch =
       cds.db?.kind === 'hana' && cds.env.hana?.fuzzy !== false && cds.env.hana?.fuzzy?.ranked_search !== false
-    // count queries do not need ranked search
-    const isCountQuery = columns?.length === 1 && columns[0].func === 'count'
-    const searchRank = ranksSearch && !isCountQuery && inferred.$searchRank && buildSearchRankOrderBy(inferred.$searchRank)
+    // count queries or static values do not need ranked search
+    const isCountQuery = columns?.length === 1 && typeof columns[0] === 'object' && (columns[0].func === 'count' || 'val' in columns[0])
+    // a user-provided ORDER BY takes precedence over the search rank — don't inject the ranking then
+    const hasExplicitOrderBy = (orderBy || []).some(o => !o.implicit)
+    const searchRank = ranksSearch && !isCountQuery && !hasExplicitOrderBy && inferred.$searchRank && buildSearchRankOrderBy(inferred.$searchRank)
     if (searchRank) {
       // precedence: user ordering, then rank, then the runtime's implicit key ordering
       const implicitAt = (orderBy || []).findIndex(o => o.implicit)
@@ -1776,8 +1778,10 @@ function _cqn4sql(originalQuery, model, useTechnicalAlias = true) {
         }
 
         const whereExists = { SELECT: whereExistsSubqueries(whereExistsSubSelects) }
-        transformedTokenStream[i + 1] = whereExists
-        // skip newly created subquery from being iterated
+        // append, don't index by `i`: a preceding branch (e.g. flattening `<assoc> is null`)
+        // may have changed the transformed stream's length, so `[i + 1]` would leave holes
+        transformedTokenStream.push(whereExists)
+        // skip the association ref which we just turned into the subquery
         i += 1
       } else if (token !== null && typeof token === 'object' && '#' in token) {
         // Enum token: resolve to its value

package/node_modules/@cap-js/db-service/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cap-js/db-service",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "description": "CDS base database service",
   "homepage": "https://github.com/cap-js/cds-dbs/tree/main/db-service#cds-base-database-service",
   "repository": {

package/node_modules/@cap-js/sqlite/CHANGELOG.md

@@ -4,6 +4,15 @@
 - The format is based on [Keep a Changelog](http://keepachangelog.com/).
 - This project adheres to [Semantic Versioning](http://semver.org/).
 
+## [3.1.1](https://github.com/cap-js/cds-dbs/compare/sqlite-v3.1.0...sqlite-v3.1.1) (2026-09-15)
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @cap-js/db-service bumped from ^3.1.0 to ^3.1.1
+
 ## [3.1.0](https://github.com/cap-js/cds-dbs/compare/sqlite-v3.0.2...sqlite-v3.1.0) (2026-09-07)
 
 

package/node_modules/@cap-js/sqlite/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cap-js/sqlite",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "description": "CDS database service for SQLite",
   "homepage": "https://github.com/cap-js/cds-dbs/tree/main/sqlite#cds-database-service-for-sqlite",
   "repository": {
@@ -26,7 +26,7 @@
     "test": "cds-test"
   },
   "dependencies": {
-    "@cap-js/db-service": "^3.1.0"
+    "@cap-js/db-service": "^3.1.1"
   },
   "peerDependencies": {
     "@sap/cds": "^10",

package/node_modules/@sap/cds/CHANGELOG.md

@@ -4,6 +4,25 @@
 - The format is based on [Keep a Changelog](https://keepachangelog.com/).
 - This project adheres to [Semantic Versioning](https://semver.org/).
 
+## Version 10.1.1 - 2026-09-17
+
+### Fixed
+
+- Messaging consumers (Event Mesh AMQP, Kafka, Redis) no longer crash with `TypeError: Cannot use 'in' operator to search for 'data' in null` when a message with a `null` payload is received
+- `cds.env` now correctly replaces an array default with an object project override instead of assigning object properties onto the array
+- SQLite now uses its default pool config (single, non-evicting connection) even when `@cap-js/sqlite` is installed globally rather than as a local dependency
+- Stripping of `IsActiveEntity` in programmatic deep updates to draft instances
+- Server crash when string keys contain control characters in OData `Location` response header
+- Binary keys in OData `Location` response header are now formatted as binary literals (`binary'...'`)
+- Skip periodic message processing when no provider tenant is configured
+- The parent-readable check during CREATE/navigation no longer swallows system errors (e.g. database failures); such errors are now propagated instead of being masked as a `404`
+- Support X.509 in `enterprise-messaging`'s deploy task
+- Incompatibility of global config `cds.sql.lock_acquire_timeout` and event-queue implementation
+- Outbox messages written before `appid` was introduced are now processed after an upgrade instead of being skipped
+- A queued outbox message whose target service cannot be resolved is now dead-lettered instead of crashing the application
+- Recurring scheduled tasks (`.every()`) are no longer resurrected when unscheduled while running, and re-submitting one while it runs no longer discards the updated schedule and payload
+- Convenience handling of `/$count` requests for custom handlers simply returning arrays
+
 ## Version 10.1.0 - 2026-09-02
 
 ### Added

package/node_modules/@sap/cds/common.cds

@@ -166,9 +166,9 @@ annotate managed with {
   createdBy  @Core.Immutable;
 }
 
-annotate sap.common.Countries  with { code @Common.Text:name; }
-annotate sap.common.Currencies with { code @Common.Text:name; }
-annotate sap.common.Languages  with { code @Common.Text:name; }
+annotate sap.common.Currencies :code with @Common.Text:name;
+annotate sap.common.Countries  :code with @Common.Text:name;
+annotate sap.common.Languages  :code with @Common.Text:name;
 
 
 //---------------------------------------------------------------------------

package/node_modules/@sap/cds/lib/compile/minify.js

@@ -93,7 +93,8 @@ class Minifier {
     let r = q.from.ref[0]; if (r.id) r = r.id; if (r in this.kept) return
     let e = this.defs[r]; if (!e) return
     let all = e.elements, kept = {}
-    if (q.columns) _keep (q.columns)
+    if (e['@cds.minify'] === 'unused-elements') return this.keep (r,e) // avoids propagation
+    if (q.columns) _keep (q.columns); else return this.keep (r,e)
     if (q.where) _keep (q.where)
     e.elements = kept
     return this.keep (r,e)
@@ -101,6 +102,7 @@ class Minifier {
       if (x.func) { _keep (x.args); continue }
       if (x.xpr) { _keep (x.xpr); continue }
       if (x.ref) { let [r] = x.ref; if (r in all) kept[r] = all[r] }
+      if (x === '*') return kept = all
     }}
   }
 

package/node_modules/@sap/cds/lib/env/cds-env.js

@@ -515,7 +515,7 @@ function _merge (dst, src, _profiles) {
     const v = pd.value
     if (typeof v === 'object' && !Array.isArray(v) && v != null) {
       if (!dst[p]) dst[p] = {}
-      if (typeof dst[p] !== 'object') dst[p] = v
+      if (typeof dst[p] !== 'object' || Array.isArray(dst[p])) dst[p] = v
       else _merge (dst[p], v, _profiles)
       continue
     }

package/node_modules/@sap/cds/lib/env/cds-requires.js

@@ -138,6 +138,7 @@ const _databases = {
 
   "sqlite": {
     impl: '@cap-js/sqlite', credentials: { url: 'db.sqlite' },
+    pool: { evictionRunIntervalMillis: 0, min: 1, max: 1 },
     ..._db_data,
   },
   "sqlite:memory": {

package/node_modules/@sap/cds/libx/_runtime/common/generic/crud.js

@@ -1,4 +1,5 @@
 const cds = require('../../cds')
+const LOG = cds.log('app')
 const { SELECT } = cds.ql
 
 module.exports = exports = cds.service.impl(function () {
@@ -18,7 +19,7 @@ module.exports = exports = cds.service.impl(function () {
       ? SELECT.one`1 as $parent`.from({ ref: ref.slice(0, -1) })
       : null
     const parent_readable_check = parent_exists_query
-      ? async () => (parent_skip_auth ? cds.db : this).run(parent_exists_query).catch(() => null)
+      ? async () => (parent_skip_auth ? cds.db : this).run(parent_exists_query).catch(parent_unreadable_error)
       : null
 
     if (req.event === 'CREATE' && parent_readable_check != null) (await parent_readable_check()) || req.reject(404)
@@ -84,6 +85,11 @@ async function legacy_behavior(req, result, parent) {
   }
 }
 
+function parent_unreadable_error(e) {
+  if (cds.error.isSystemError(e)) throw e
+  LOG._debug && LOG.debug('Parent readable check failed:', e)
+}
+
 exports._handle_result = legacy_behavior
 exports._always_return_arrays = on_off => {
   if (on_off === undefined) return exports._handle_result === new_behavior

package/node_modules/@sap/cds/libx/_runtime/common/utils/cqn.js

@@ -4,7 +4,7 @@ const { setEntityContained } = require('./csn')
 
 // scope: simple wheres à la "[{ ref: ['foo'] }, '=', { val: 'bar' }, 'and', ... ]"
 function where2obj(where, target = null, data = {}) {
-  for (let i = 0; i < where.length;) {
+  for (let i = 0; i < where.length; ) {
     const a = where[i++]
     if (a.xpr) {
       where2obj(a.xpr, target, data)

package/node_modules/@sap/cds/libx/_runtime/fiori/lean-draft.js

@@ -1090,7 +1090,7 @@ const draftHandle = async function (req) {
       for (const assoc in target.associations) {
         const val = data[assoc]
         if (val && typeof val === 'object') {
-          const _target = req.target.associations[assoc]._target
+          const _target = target.associations[assoc]._target
           if (Array.isArray(val)) {
             val.forEach(v => _rmIsActiveEntity(v, _target))
           } else {

package/node_modules/@sap/cds/libx/_runtime/messaging/common-utils/normalizeIncomingMessage.js

@@ -11,7 +11,7 @@ const _JSONorString = string => {
 const normalizeIncomingMessage = message => {
   const _payload = typeof message === 'object' ? message : _JSONorString(message)
   let data, headers
-  if (typeof _payload === 'object' && 'data' in _payload) {
+  if (_payload !== null && typeof _payload === 'object' && 'data' in _payload) {
     data = _payload.data
     headers = { ..._payload }
     delete headers.data

package/node_modules/@sap/cds/libx/_runtime/messaging/kafka.js

@@ -161,7 +161,7 @@ function _JSONorString(string) {
 function _normalizeIncomingMessage(message) {
   const _payload = _JSONorString(message)
   let data, headers
-  if (typeof _payload === 'object' && 'data' in _payload) {
+  if (_payload !== null && typeof _payload === 'object' && 'data' in _payload) {
     data = _payload.data
     headers = { ..._payload }
     delete headers.data

package/node_modules/@sap/cds/libx/http/location.js

@@ -8,14 +8,16 @@ module.exports = (target, srv, result, keys_as_segments) => {
 
   const keyValuePairs = filteredKeys.reduce((acc, key) => {
     const value = result[key]
-    if (result[key] === undefined) return acc
 
     if (Buffer.isBuffer(value)) {
-      acc[key] = value.toString('base64')
+      const base64 = value.toString('base64')
+      acc[key] = keys_as_segments ? base64 : `binary'${base64}'`
+    } else if (keys_as_segments) {
+      acc[key] = value
     } else {
-      const _type = target.elements[key]._type
-      if (!keys_as_segments && typeof value === 'string' && _type !== 'cds.UUID') acc[key] = `'${value}'`
-      else acc[key] = value
+      const el = target.elements[key]
+      const needsQuotes = typeof value === 'string' && (el._type !== 'cds.UUID' || el['@odata.Type'] === 'Edm.String')
+      acc[key] = needsQuotes ? `'${value}'` : value
     }
 
     return acc
@@ -24,19 +26,16 @@ module.exports = (target, srv, result, keys_as_segments) => {
   if (keys_as_segments) {
     let location = targetName
     for (const k in keyValuePairs) location += `/${keyValuePairs[k]}`
-    return location
+    return encodeURI(location)
   }
 
   let keys
   const entries = Object.entries(keyValuePairs)
   if (entries.length === 1) {
     keys = entries[0][1]
-    if (target.elements[entries[0][0]]['@odata.Type'] === 'Edm.String') keys = `'${keys}'`
   } else {
-    keys = entries
-      .map(([key, value]) => `${key}=${target.elements[key]['@odata.Type'] === 'Edm.String' ? `'${value}'` : value}`)
-      .join(',')
+    keys = entries.map(([key, value]) => `${key}=${value}`).join(',')
   }
 
-  return `${targetName}(${keys})`
+  return encodeURI(`${targetName}(${keys})`)
 }

package/node_modules/@sap/cds/libx/odata/middleware/read.js

@@ -126,7 +126,7 @@ const _isNullableSingleton = query => query._target._isSingleton && query._targe
 const _isToOneAssoc = query =>
   query.SELECT.from.ref.length > 1 && typeof query.SELECT.from.ref.slice(-1)[0] === 'string'
 
-const _getCountFromResult = result => (Array.isArray(result) ? (result[0].$count ?? 0) : (result.$count ?? 0))
+const _getCountFromResult = result => (Array.isArray(result) ? (result[0]?.$count ?? 0) : (result?.$count ?? 0))
 
 const _getCountFromResultForArrayOfQueries = result => {
   if (!Array.isArray(result)) return result.$count ?? 0

package/node_modules/@sap/cds/libx/queue/SchedulingService.js

@@ -24,6 +24,8 @@ const _setLongTimeout = (cb, delay) => {
 }
 
 let T0
+const MISSING_T0 =
+  'Skipping periodic message processing: no provider tenant is configured via `cds.requires.multitenancy.t0`. This is unexpected outside the `mtx-sidecar` profile.'
 
 module.exports = class SchedulingService extends cds.Service {
   constructor(...args) {
@@ -101,6 +103,8 @@ module.exports = class SchedulingService extends cds.Service {
 
       // NOTE: in the future, we also need to trigger task processing in sidecar for mtx
       if (cds.env.profile !== 'mtx-sidecar') {
+        if (!T0) return LOG.warn(MISSING_T0)
+
         const periodic_flush = setInterval(() => _flush(T0), flush_interval_ms).unref()
         cds.on('shutdown', () => clearInterval(periodic_flush))
         _flush(T0)