@sap/cds-dk 7.8.1 → 7.9.1

package/lib/init/template/helm/files/content-deployment/values.schema.json

@@ -1,6 +1,5 @@
 {
     "$schema": "http://json-schema.org/draft-07/schema",
-    "$id": "https://github.tools.sap/cki/content-deployment/blob/main/values.schema.json",
     "type": "object",
     "required": [
         "image", "bindings"

package/lib/init/template/helm/files/service-instance/Chart.yaml

@@ -1,7 +1,5 @@
 apiVersion: v2
 description: A Helm chart for creating service instances on btp-service-operator
 name: service-instance
-sources:
-- https://github.tools.sap/unified-runtime/service-instance
 type: application
 version: 1.3.0

package/lib/init/template/helm/files/service-instance/values.schema.json

@@ -1,6 +1,5 @@
 {
     "$schema": "http://json-schema.org/draft-07/schema",
-    "$id": "https://github.tools.sap/cki/web-application-cf/blob/main/values.schema.json",
     "type": "object",
     "required": [
         "serviceOfferingName",

package/lib/init/template/helm/files/web-application/Chart.yaml

@@ -2,7 +2,5 @@ apiVersion: v2
 description: A Helm chart for web app
 kubeVersion: '>= 1.21'
 name: web-application
-sources:
-- https://github.tools.sap/unified-runtime/web-application
 type: application
-version: 1.12.0
+version: 1.13.1

package/lib/init/template/helm/files/web-application/templates/_helpers.tpl

@@ -189,3 +189,26 @@ If release name contains chart name it will be used as service instance name.
 {{- $_ := set $result "vars" $variables }}
 {{- (fromYaml (tpl (toYaml $result) .context)) | mustToJson }}
 {{- end }}
+
+{{- define "web-application.internal.healthCheck" }}
+{{ .checkName }}:
+{{- if .checkValues.path }}
+  httpGet:
+    path: {{ .checkValues.path }}
+    port: http
+{{- else }}
+  tcpSocket:
+    port: {{ .context.Values.port }}
+{{- end }}
+{{- if eq .checkName "startupProbe" }}
+  periodSeconds: 2
+  failureThreshold: {{ div (add1  .context.Values.startupTimeoutSeconds) 2 }}
+{{- else }}
+{{- if .checkValues.periodSeconds }}
+  periodSeconds: {{ .checkValues.periodSeconds }}
+{{- end }}
+{{- if .checkValues.failureThreshold }}
+  failureThreshold: {{ .checkValues.failureThreshold }}
+{{- end }}
+{{- end }}
+{{- end }}

package/lib/init/template/helm/files/web-application/templates/deployment.yaml

@@ -71,35 +71,9 @@ spec:
         {{- if not (eq (len $envVars.vars) 0) }}
         {{- $envVars.vars | toYaml | nindent 8}}
         {{- end }}
-        livenessProbe:
-        {{- if .Values.health.liveness.path }}
-          httpGet:
-            path: {{ .Values.health.liveness.path }}
-            port: http
-        {{- else }}
-          tcpSocket:
-            port: {{ .Values.port }}
-        {{- end }}
-        readinessProbe:
-        {{- if .Values.health.readiness.path }}
-          httpGet:
-            path: {{ .Values.health.readiness.path }}
-            port: http
-        {{- else }}
-          tcpSocket:
-            port: {{ .Values.port }}
-        {{- end }}
-        startupProbe:
-        {{- if .Values.health.liveness.path }}
-          httpGet:
-            path: {{ .Values.health.liveness.path }}
-            port: http
-        {{- else }}
-          tcpSocket:
-            port: {{ .Values.port }}
-        {{- end }}
-          failureThreshold: {{ div (add1  .Values.startupTimeoutSeconds) 2 }}
-          periodSeconds: 2
+        {{ include "web-application.internal.healthCheck" (dict "checkName" "livenessProbe" "checkValues" .Values.health.liveness "context" $) | nindent 8}}
+        {{ include "web-application.internal.healthCheck" (dict "checkName" "readinessProbe" "checkValues" .Values.health.readiness "context" $) | nindent 8}}
+        {{ include "web-application.internal.healthCheck" (dict "checkName" "startupProbe" "checkValues" .Values.health.liveness "context" $) | nindent 8}}
         volumeMounts:
         - name: tmp
           mountPath: /tmp

package/lib/init/template/helm/files/web-application/values.schema.json

@@ -1,6 +1,5 @@
 {
     "$schema": "http://json-schema.org/draft-07/schema",
-    "$id": "https://github.tools.sap/cki/web-application/blob/main/values.schema.json",
     "type": "object",
     "required": [
         "image",
@@ -354,6 +353,14 @@
                         "path": {
                             "type": "string",
                             "default": "/healthz"
+                        },
+                        "periodSeconds": {
+                            "type": "integer",
+                            "minimum": 1
+                        },
+                        "failureThreshold": {
+                            "type": "integer",
+                            "minimum": 1
                         }
                     }
                 },
@@ -365,6 +372,14 @@
                         "path": {
                             "type": "string",
                             "default": "/healthz"
+                        },
+                        "periodSeconds": {
+                            "type": "integer",
+                            "minimum": 1
+                        },
+                        "failureThreshold": {
+                            "type": "integer",
+                            "minimum": 1
                         }
                     }
                 }
@@ -599,7 +614,7 @@
                 "gateway": {
                     "$id": "#/properties/expose/properties/gateway",
                     "type": "string",
-                    "default": "kyma-gateway.kyma-system.svc.cluster.local"
+                    "default": "kyma-system/kyma-gateway"
                 },
                 "tenantGateway": {
                     "$id": "#/properties/expose/properties/gateway",

package/lib/init/template/helm/files/web-application/values.yaml

@@ -15,7 +15,7 @@ global:
     _internal:
       web-application:
         versions:
-          1.12.0: true
+          1.13.1: true
 ## Will be used instead of the `.Chart.Name`, e.g. when generating the Deployment name.
 # nameOverride: name
 
@@ -97,10 +97,18 @@ health:
   liveness:
     # HTTP path used by Kubernetes, to perform liveness-probe calls.
     path: /healthz
+    ## How often (in seconds) to perform the probe.
+    # periodSeconds: 3
+    ## Number of probes to fail in a row, in order to consider the check failed.
+    # failureThreshold: 5
   # Readiness-probe configuration.
   readiness:
     # HTTP path used by Kubernetes, to perform readiness-probe calls.
     path: /healthz
+    ## How often (in seconds) to perform the probe.
+    # periodSeconds: 3
+    ## Number of probes to fail in a row, in order to consider the check failed.
+    # failureThreshold: 5
 # Initial timeout in seconds, during which the app must start giving the response to the liveness-probe.
 startupTimeoutSeconds: 30
 ## Use read only filesystem for the Deployment.
@@ -141,7 +149,7 @@ expose:
   # Expose the application to the internet.
   enabled: true
   # Use this istio gateway for incoming traffic.
-  gateway: kyma-gateway.kyma-system.svc.cluster.local
+  gateway: kyma-system/kyma-gateway
   ## Custom Istio Gateway to use with the VirtualService created using the TENANT_HOST_PATTERN.
   ## If your TENANT_HOST_PATTERN uses top level domain for the tenants (like tenant-name.<provider>.<cluster-domain>), you need to create custom Certificate and Gateway since the default Kyma Gateway will not work.
   # tenantGateway: tenants-gateway.my-ns.svc.cluster.local

package/lib/init/template/helm-unified-runtime/files/templates/NOTES.txt

@@ -6,7 +6,9 @@ Your services are available at:
 {{- $root := . }}
 {{- range $name := include "cap.deploymentNames" . | split ";" }}
   {{- $deployment := (get $root.Values $name) }}
+  {{- if $deployment.expose.enabled }}
   {{- $ := merge (dict "name" $name "deployment" $deployment) $root }}
   {{- $url := include "cap.deploymentHostFull" $ }}
   {{ printf "%s - https://%s" $name $url }}
+  {{- end -}}
 {{- end }}

package/lib/init/template/helm-unified-runtime/files/templates/_deployment_helpers.tpl

@@ -51,7 +51,11 @@ copied from web-application: web-application.fullname
 Get FQDN of a deployment
 */}}
 {{- define "cap.deploymentHostFull" -}}
-{{ include "cap.deploymentHost" $ }}.{{ $.Values.global.domain }}
+{{- if not .deployment.expose.enabled }}
+{{- printf "%s-%s.%s.svc.cluster.local:8080" .Release.Name .name .Release.Namespace }}
+{{- else }}
+{{- include "cap.deploymentHost" $ }}.{{ $.Values.global.domain }}
+{{- end -}}
 {{- end -}}
 
 {{/*
@@ -73,7 +77,11 @@ Backend Destinations
     {{- $deployment := (get $root.Values $destination.service) -}}
     {{- $srv := merge (dict "name" $destination.service "destination" $destination "deployment" $deployment) $root -}}
     {{- $destinationHost := include "cap.deploymentHostFull" $srv -}}
-    {{- $currentDestination := dict $nameKey $destination.name $urlKey (print  "https://" $destinationHost ) -}}
+    {{- $protocol := "https" -}}
+    {{- if not $deployment.expose.enabled }}
+    {{- $protocol = "http" -}}
+    {{- end -}}
+    {{- $currentDestination := dict $nameKey $destination.name $urlKey (print  $protocol "://" $destinationHost ) -}}
     {{- $currentDestination := merge $currentDestination $.defaultParameters -}}
     {{- $destinations = (append $destinations $currentDestination) -}}
 {{- end -}}

package/lib/init/template/helm-unified-runtime/files/values.schema.json

@@ -187,7 +187,7 @@
                             ],
                             "properties": {
                                 "fromSecret": {
-                                    "description": "Name of a Kubernetes Secret, with the binding content, compliant to the SAP Kubernetes Service Binding spec https://github.tools.sap/Kubernetes-Service-Bindings/doc/",
+                                    "description": "Name of a Kubernetes Secret, with the binding content, compliant to the SAP Kubernetes Service Binding spec",
                                     "$ref": "#/definitions/KubernetesName"
                                 }
                             }

package/lib/init/template/http/index.js

@@ -1,21 +1,26 @@
+const https = require('node:https')
+const axios = require('axios')
+const asJson = require("../data/as-json")
 const cds = require('../../../cds')
 const cf = require("../../../util/cf")
 const { write, exists } = cds.utils
+const { filterStringAsRegex } = require("../data/index")
 
 module.exports = class HttpTemplate extends require('../../plugin') {
 
-  #defaultHost = "http://localhost:4004"
-  #defaultPathPrefix = "/odata/v4/"
-  #defaultDirName = "*"
+  #nodeHost = "http://localhost:4004"
+  #javaHost = "http://localhost:8080"
   #defaultOutputDir = "http"
-  #defaultAuth = `Authorization: Basic yves:`
+  #defaultAuth = `Authorization: Basic alice:`
 
   options() {
     return {
       'filter': {
         type: 'string',
         short: 'f',
-        help: `Specify the path to the service definition file or directory. Default is ${this.#defaultDirName}.`
+        help: `Filter for services or entities or actions matching the given pattern. If it contains meta
+        characters like '^' or '*', it is treated as a regular expression,
+        otherwise as an include pattern, i.e /.*pattern.*/i`
       },
       'for-app': {
         type: 'string',
@@ -26,146 +31,187 @@ module.exports = class HttpTemplate extends require('../../plugin') {
         type: 'string',
         short: 'o',
         help: 'The output directory. By default, an `http` dir will be created in one of the following: test/tests/__tests__, whichever already exists. If none exists, an `http` dir will be created at the root level.'
+      },
+      'dry': {
+        type: 'boolean',
+        help: 'Print the generated requests to the console instead of writing them to a file.'
       }
     }
   }
 
   async run() {
-
-    const path = cds.cli.options['filter'] || this.#defaultDirName
-    const csn = await cds.load(path)
+    const csn = await cds.load(cds.env.roots).then(cds.minify)
     cds.linked(csn)
 
-    let [hostname, auth] = await this.#getHostnameAndAuth()
-
-    let endpoints = this.#collectEndpointInfo(csn)
+    const serviceInfo = cds.compile.to.serviceinfo(csn)
+    let [hostname, auth] = await this.#getHostnameAndAuth(serviceInfo)
+    let services = this.#collectServiceInfo(csn, serviceInfo)
+    if (!services)  return
 
-    this.#generateRequests(endpoints, hostname, auth)
+    const payload = await this.#generatePayload(csn, services)
+    this.#generateRequests(services, hostname, auth, payload)
   }
 
-  async #getHostnameAndAuth() {
+  async #getHostnameAndAuth(serviceInfo) {
     if (!cds.cli.options['for-app']) {
-      return [this.#defaultHost, this.#defaultAuth]
+      if (serviceInfo[0].runtime === 'Java') {
+        return [this.#javaHost, null]
+      } else {
+        return [this.#nodeHost, this.#defaultAuth]
+      }
     }
 
-    const env = await cf.getEnv(cds.cli.options['for-app'])
+    const app = cds.cli.options['for-app']
+    // Later: differentiate between CF and Kyma
+    const env = await cf.getEnv(app)
+    if (!cds.cli.options.dry)   console.error('Fetching credentials from Cloud Foundry app \'' + app + '\'...')
     const hostname = `https://${env.application_env_json.VCAP_APPLICATION.application_uris[0]}`
-    const { url, clientid, clientsecret } = env.system_env_json.VCAP_SERVICES?.xsuaa[0]?.credentials || {}
-
-    const response = await fetch(`${url}/oauth/token?${new URLSearchParams({
-      grant_type: 'client_credentials',
-      response_type: 'token',
-    })}`, {
-      method: 'GET',
-      headers: {
-        'Authorization': `Basic ${Buffer.from(`${clientid}:${clientsecret}`).toString('base64')}`
-      }
-    })
-    if (response.ok) {
-      const { access_token } = await response.json()
-      const auth = `x-approuter-authorization: bearer ` + access_token
-      return [hostname, auth]
-    } else {
-      throw new Error('Error authenticating ', { url, response })
-    }
+    const xsuaaCredentials = env.system_env_json.VCAP_SERVICES?.xsuaa[0]?.credentials ?? {}
+    const { url, clientid, clientsecret, certurl, certificate, key } = xsuaaCredentials
+    if (!url) throw new Error('No XSUAA service found in the environment of ' + app)
+
+    const auth = certificate ? { maxRedirects: 0, httpsAgent: new https.Agent({ cert: certificate, key }) }
+                             : { auth: { username: clientid, password: clientsecret } }
+    const authUrl = `${certurl ?? url}/oauth/token`
+    const data = `grant_type=client_credentials&client_id=${encodeURI(clientid)}`
+    const config = { method: 'POST', timeout: 5000, data, ...auth }
+    const { access_token } = (await axios(authUrl, config)).data
+    const approuterAuth = `x-approuter-authorization: bearer ${access_token}`
+    return [hostname, approuterAuth]
   }
 
-  #collectEndpointInfo(csn) {
-    const mapping = {}
+  #collectServiceInfo(csn, serviceInfo) {
+    const services = new Map()
+
+    const filter = cds.cli.options['filter']
 
     csn.services.map((s) => {
-      const protocols = this.#getProtocols(s)
-      const paths = this.#getPaths(s, protocols)
-
-      let entityInfo = []
-      const entities = csn.entities(s.name)
-      for (const e in entities) {
-        if (entities[e].name.endsWith('.texts')) {
-          continue
+      const sInfo = serviceInfo.find(info => info.name === s.name)
+      const urlPaths = sInfo?.endpoints?.map(e => e.path) ?? [sInfo?.urlPath]
+      if (!urlPaths) return
+      let entities = []
+      let actions = []
+
+      for (const c of csn.childrenOf(s.name)) {
+        if (c.name.match(filterStringAsRegex(filter))) {
+          if (c.name.includes('.texts')) continue
+          c.kind === 'entity' ? entities.push(this.#addNameAndReadOnly(c)) : c.kind === 'action' ? actions.push(c) : null
         }
-        entityInfo.push(this.#addNameAndReadOnly(entities[e]))
       }
-
-      mapping[s.name] = { entities: entityInfo, paths: paths, protocols: protocols, actions: [] }
+      if (entities.length === 0 && actions.length === 0) return
+      services.set(s.name, { entities, urlPaths, actions })
     })
 
-    csn.foreach('action', (a) => {
-      mapping[a.name.split(".")[0]].actions.push(a)
-    })
+    if (services.size === 0) {
+      console.error(`No services found for filter ${filter}`)
+      process.exitCode = 1
+      return
+    }
 
-    return mapping
+    return services
   }
 
-  #getProtocols(s) {
-    return s["@protocol"]
-      ? typeof s["@protocol"] === "string"
-        ? [s["@protocol"]]
-        : s["@protocol"]
-      : ["odata"]
+  #addNameAndReadOnly(e) {
+    return {
+      name: e.name,
+      readOnly: (e["@readonly"] || e["@cds.autoexpose"] || e['@odata.singleton']) ?? false,
+    }
   }
 
-  #getPaths(s, protocols) {
-    let paths = []
-    if (s["@path"]) {
-      paths.push(s["@path"])
-    } else {
-      const serviceName = s.name.replace("Service", "").toLowerCase()
-
-      let prefix = ""
-      if (protocols) {
-        for (const p of protocols) {
-          if (p === "odata-v2") {
-            prefix = "/odata/v2/"
-          } else if (p === "rest") {
-            prefix = "/rest/"
-          } else {
-            prefix = this.#defaultPathPrefix
-          }
-          paths.push(prefix + serviceName)
-        }
+  async #generatePayload(csn, services) {
+    const payload = {}
+    for (const [, service] of services) {
+      for (const e of service.entities) {
+        payload[e.name] = []
       }
     }
-    return paths
-  }
-
-  #addNameAndReadOnly(e) {
-    return {
-      name: e.name.split(".")[1],
-      readOnly: (e["@readonly"] || e["@cds.autoexpose"] || e['@odata.singleton']) ?? false,
+    // csn.all('entity').reduce((all, e) => { all[e.name] = []; return all }, {})
+    await asJson(payload, csn, 1)
+    for (const p in payload) {
+      delete payload[p][0].texts
+      delete payload[p][0].localized
     }
+    return payload
   }
 
-  #generateRequests(mapping, hostname, auth) {
-    for (const service in mapping) {
+  #generateRequests(services, hostname, auth, payload) {
+    let varsDefined = false  // when writing requests for multiple services to stdout, define vars only once
+    for (const [serviceName, service] of services) {
       let requests = []
+      if (!cds.cli.options.dry || !varsDefined) {
+        requests.push(auth ? `@server = ${hostname}\n@auth = ${auth}\n` : `@server = ${hostname}\n`)
+      }
+      varsDefined = true
+      const headers = auth ? `Content-Type: application/json\n{{auth}}` : `Content-Type: application/json`
 
-      requests.push(`@server = ${hostname}\n@auth = ${auth}\n`)
-
-      mapping[service].entities.forEach((e) => {
-        for (const path of mapping[service].paths) {
-          const url = `{{server}}${path}/${e.name}`
-          const contentType = `Content-Type: application/json`
-          const authHeader = `{{auth}}`
-
-          requests.push(`GET ${url}\n${authHeader}\n${contentType}\n`)
+      service.urlPaths.forEach((urlPath) => {
+        if (service.urlPaths.length > 1) {
+          requests.push(`\n# Service endpoint: ${urlPath}`)
+        }
 
-          if (!e.readOnly) {
-            const allHeaders = `${contentType}\n${authHeader}`
-            requests.push(`POST ${url}\n${allHeaders}\n\n{}\n`)
+        service.entities.forEach((e) => {
+          const entityNameSimple = e.name.slice(e.name.lastIndexOf('.') + 1)
+          const url = `{{server}}/${urlPath}${entityNameSimple}`
+          const requestTitle = `\n### ${e.name}`
+          requests.push(`${requestTitle}\nGET ${url}\n${headers}\n`)
+          if (e.readOnly) {
+            return
+          }
 
-            requests.push(`PATCH ${url}\n${allHeaders}\n\n{}\n`)
-            requests.push(`DELETE ${url}\n${authHeader}\n`)
+          const entityData = payload[`${e.name}`] ? payload[`${e.name}`][0] : null
+          if (!entityData) return
+          // TODO handle ids that are not named ID
+          if (!Object.keys(entityData).some(k => k === "ID")) return  // no need to write requests for entities without ids
+
+          const postBody = JSON.stringify(entityData, null, 2)
+          requests.push(`${requestTitle}\nPOST ${url}\n${headers}\n\n${postBody}\n`)
+          requests.push(`${requestTitle}\nPATCH ${url}/${entityData.ID}\n${headers}\n\n${postBody}\n`)
+          requests.push(`${requestTitle}\nDELETE ${url}/${entityData.ID}\n${headers}\n`)
+        })
+
+        service.actions.forEach((a) => {
+          const url = `{{server}}/${urlPath}${a.name.split(".")[1]}`
+
+          let actionPayload = {}
+          if (a.params) {
+            for (const [key, value] of Object.entries(a.params)) {
+              actionPayload[key] = value.type === 'cds.Integer' ? 1
+                : value.type === 'string' ? 'sample string'
+                  // TODO reference an object that has been generated
+                  : typeof value.type === 'object' && value.type.ref ? payload[value.type.ref[0]][0][value.type.ref[1]]
+                    : null
+            }
           }
-        }
+          requests.push(`\n### ${a.name}\nPOST ${url}\n${headers}\n\n${JSON.stringify(actionPayload, null, 2)}\n`)
+        })
+
       })
+      this.#write(requests, serviceName)
+    }
+  }
 
-      const outputPath = this.#determineOutputPath(service)
-      write(requests.join("\n###\n")).to(outputPath)
-      console.log(`${outputPath} has been created.`)
+  #write(requests, serviceName) {
+    const http = requests.join('\n')
+    if (cds.cli.options.dry) {
+      console.log(http)
+    } else {
+      const term = require('../../../util/term')
+      const outputPath = this.#determineOutputPath(serviceName)
+      if (exists(outputPath)) {
+        if (cds.cli.options.force) {
+          console.log(term.dim(`  Overwriting ${outputPath}`))
+        } else {
+          console.log(term.dim(`  Skipping ${outputPath}`))
+          return
+        }
+      } else {
+        console.log(term.dim(`  Creating ${outputPath}`))
+      }
+      write(http).to(outputPath)
     }
   }
 
-  #determineOutputPath(service) {
+  #determineOutputPath(serviceName) {
     let outputDir
     const { out } = cds.cli.options
     if (out) {
@@ -175,7 +221,7 @@ module.exports = class HttpTemplate extends require('../../plugin') {
     } else {
       outputDir = this.#defaultOutputDir
     }
-    return `${outputDir}/${service}.http`
+    return `${outputDir}/${serviceName}.http`
   }
 }
 

package/lib/init/template/kafka/index.js

@@ -1,3 +1,5 @@
+const cds = require('../../../cds')
+const { exists, fs, path } = cds.utils
 const { readProject } = require('../../projectReader')
 const { merge } = require('../../merge')
 const { srv4, kafkaMessaging } = require('../../registries/mta')
@@ -6,6 +8,10 @@ const mvn = require('../../mvn')
 module.exports = class KafkaTemplate extends require('../../plugin') {
 
   static hasInProduction(env) {
+    if (exists('pom.xml')) {
+      if (!exists('srv/pom.xml')) return false
+      return fs.readFileSync(path.resolve(cds.root, 'srv/pom.xml'), 'utf8').includes('cds-feature-kafka')
+    }
     return !!(env.requires?.messaging?.kind === 'kafka')
   }
 

package/lib/init/template/lint/index.js

@@ -11,7 +11,7 @@ const cds = require("../../../cds");
 const { mkdirp, exists } = cds.utils;
 const IS_WIN = os.platform() === "win32";
 const VSCODE_FILE_ASSOCIATIONS = {
-  "csv": [ "csv", "csv (semicolon)", "tsv", "tab" ]
+  "csv": ["csv", "csv (semicolon)", "tsv", "tab"]
 }
 
 module.exports = class LintTemplate extends require('../../plugin') {
@@ -43,7 +43,7 @@ module.exports = class LintTemplate extends require('../../plugin') {
   }
 
   async run() {
-    // Require ESLint v>=7.0.0
+    // Require ESLint v>=8.0.0
     if (!this.isTest) {
       this._checkEslint();
     }
@@ -69,21 +69,20 @@ module.exports = class LintTemplate extends require('../../plugin') {
       // Generate VS Code extension settings
       const { getFileExtensions } = require("@sap/eslint-plugin-cds/lib/api");
       const ALLOWED_FILE_EXTENSIONS = getFileExtensions();
-        const extensions = ALLOWED_FILE_EXTENSIONS.map((ext) => {
+      const extensions = new Set(ALLOWED_FILE_EXTENSIONS.map((ext) => {
         return path.extname(ext).replace('.', '');
-      })
+      }))
       extensions.forEach((ext) => {
         if (ext in VSCODE_FILE_ASSOCIATIONS) {
           VSCODE_FILE_ASSOCIATIONS[ext].forEach((assoc) => {
-            extensions.push(assoc)
+            extensions.add(assoc)
           })
         }
       });
       await io.sanitizeVscodeSettings(
-        cds.root,
         path.join(cds.root, ".vscode/settings.json"),
         this.lintType,
-        extensions,
+        Array.from(extensions),
         this.customRuleExample
       );
     }
@@ -124,8 +123,8 @@ module.exports = class LintTemplate extends require('../../plugin') {
   _checkEslint() {
     const eslintCmd = checks.resolveEslint(cds.root, '');
     if (!eslintCmd) {
-      this.missingNpmDependencies["names"].push("eslint");
-      this.missingNpmDependencies["msgs"].push("ESLint v>=7.0.0");
+      this.missingNpmDependencies["names"].push("eslint@^9");
+      this.missingNpmDependencies["msgs"].push("ESLint v>=9.0.0");
     }
     return;
   }
@@ -135,10 +134,11 @@ module.exports = class LintTemplate extends require('../../plugin') {
       "@sap/eslint-plugin-cds",
       cds.root
     );
+
     // Require locally installed ESLint CDS plugin
     if (!eslintPluginLocal) {
-      this.missingNpmDependencies["names"].push("@sap/eslint-plugin-cds");
-      this.missingNpmDependencies["msgs"].push("ESLint plugin for CDS");
+      this.missingNpmDependencies["names"].push("@sap/eslint-plugin-cds@^3.0.0");
+      this.missingNpmDependencies["msgs"].push("ESLint plugin for CDS v>=3.0.0");
     }
     return;
   }
@@ -153,10 +153,9 @@ module.exports = class LintTemplate extends require('../../plugin') {
     const { getConfigPath } = require("@sap/eslint-plugin-cds/lib/api");
     let configPath = getConfigPath(cds.root);
     if (!configPath) {
-      configPath = path.join(cds.root, ".eslintrc.json");
+      configPath = path.join(cds.root, "eslint.config.js");
     }
     await io.sanitizeEslintConfig(configPath, this.customRuleExample);
-    return;
   }
 
   async _promptInstallDependencies(task) {