@sap/cds-dk 9.1.0 → 9.1.2

package/CHANGELOG.md

@@ -6,6 +6,28 @@ This project adheres to [Semantic Versioning](https://semver.org/).
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
+## Version 9.1.2 - 2025-07-24
+
+### Fixed
+
+- CVE-2025-7783: vulnerability with `form-data` versions <4.0.4.
+- `cds build --for hana` no longer excludes external entities when not in mocking mode.
+
+## Version 9.1.1 - 2025-07-10
+
+### Added
+
+- shipping an `index.d.ts` file containing a subset of the dk types now.
+
+### Changed
+
+- `cds add http` now generates auth headers with `:` separators again, as this is the only separator supporting empty passwords with the RestClient extension in VS Code. (For use with IntelliJ, separate username and password with a blank.)
+
+### Fixed
+
+- `cds deploy --to hana --no-build` now works correctly
+- fixed bug in call from SAP Business Application Studio wizard
+
 ## Version 9.1.0 - 2025-07-02
 
 ### Added

package/index.d.ts

@@ -0,0 +1,3 @@
+export {
+    build
+} from './lib/index.js'

package/lib/build/provider/hana/index.js

@@ -46,8 +46,6 @@ class HanaBuildPlugin extends InternalBuildPlugin {
 
         if (cds.cli.options.mocked) {
             cds.deploy?.include_external_entities_in?.(model)
-        } else {
-            cds.deploy?.exclude_external_entities_in?.(model)
         }
 
         // the order of 1 and 2 is important

package/lib/deploy/to-hana/hana.js

@@ -29,7 +29,8 @@ const allowList = [
   '--to',
   '--tunnel-address',
   '--vcap-file',
-  '--with-mocks'
+  '--with-mocks',
+  '--no-build'
 ]
 
 module.exports = new class HanaDeployer {
@@ -110,7 +111,8 @@ Therefore, specifying the CDS model is not required when calling 'cds deploy'.`;
       }
     } else {
       // the primary database is always built and deployed
-      const dest = buildResult.dest // path.join(cds.env.build.target, cds.env.folders.db);
+      // const dest = buildResult.dest
+      const dest = path.join(cds.root, cds.env.build.target, cds.env.folders.db);
 
       if (undeployWhitelist) {
         console.log('Writing undeploy.json');
@@ -130,7 +132,9 @@ metadata:
   name: ${appName}-db
 spec:
   serviceOfferingName: hana
-  servicePlanName: hdi-shared\n`
+  servicePlanName: hdi-shared
+`
+
         const binding =
 `apiVersion: services.cloud.sap.com/v1
 kind: ServiceBinding
@@ -139,7 +143,8 @@ metadata:
 spec:
   serviceInstanceName: ${appName}-db
   secretName: ${appName}-db-secret
-\n`
+
+`
 
         try {
           cp.execSync('kubectl apply -f -', { input: instance })

package/lib/init/constants.js

@@ -5,7 +5,7 @@ module.exports = {
     COMMAND_ADD: 'add',
 
     JAVA_LTS_VERSIONS: [17, 21],
-    MAVEN_ARCHETYPE_VERSION: '4.0.2',
+    MAVEN_ARCHETYPE_VERSION: '4.1.1',
 
     OPTIONS: Object.freeze({
         COMPLETION: 'completion',

package/lib/init/index.js

@@ -94,13 +94,16 @@ module.exports = class CDSGenerator {
     async stepInit(projectName, options) { // Also used by CAP Generator
         if (options) {
             // called from CAP generator with options
+            // cds.cli is not set correctly when called from CAP generator
+            // so set defaults here
             cds.cli = {
                 command: COMMAND_INIT,
                 // keep caller independent from internal names
                 options: {
                     cwd: options.cwd,
                     add: new Set(options.add)
-                }
+                },
+                argv:[]
             }
 
             // must be called after above code to ensure cds.cli.options.add is set

package/lib/init/template/http/index.js

@@ -140,7 +140,7 @@ module.exports = class HttpTemplate extends require('../../plugin') {
         requests.push(`@server=${hostname}\n${auth}`)
       }
       varsDefined = true
-      const headerAuth = username ? `Authorization: Basic {{username}} {{password}}` : ''
+      const headerAuth = username ? `Authorization: Basic {{username}}:{{password}}` : ''
       const headers = headerAuth ? `Content-Type: application/json\n${headerAuth}` : `Content-Type: application/json`
 
       service.urlPaths.forEach((urlPath) => {

package/lib/init/template/nodejs/files/package.json.hbs

@@ -14,7 +14,7 @@
   },
   "devDependencies": {
     "@cap-js/sqlite": "^2",
-    "@cap-js/cds-types": "^0.12.0"
+    "@cap-js/cds-types": "^0.13.0"
   },
   "scripts": {
     "start": "cds-serve"

package/lib/init/template/typescript/files/package.json

@@ -1,6 +1,6 @@
 {
   "devDependencies": {
-    "@cap-js/cds-types": "^0.12.0",
+    "@cap-js/cds-types": "^0.13.0",
     "@types/node": "^22.0.0",
     "tsx": "^4",
     "typescript": "^5"

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@sap/cds-dk",
-  "version": "9.1.0",
+  "version": "9.1.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@sap/cds-dk",
-      "version": "9.1.0",
+      "version": "9.1.2",
       "license": "SEE LICENSE IN LICENSE",
       "dependencies": {
         "@cap-js/asyncapi": "^1.0.0",
@@ -42,8 +42,8 @@
       }
     },
     "node_modules/@cap-js/db-service": {
-      "version": "2.1.2",
-      "integrity": "sha512-wbbEhUaSnQnYSC2029CO8MLAag5k/mJAtu6nyJUYfZbjkfr/JnP9lG5ylHg1dQtjRfAjPds+lxZIo35DHwNsVQ==",
+      "version": "2.2.0",
+      "integrity": "sha512-C5n8Qy8MwOGWjpXS44CskaEZt8YKrEEs4AtJyBSfJ6+aKMu/ynqpXh0Up4Ql0XX2Frq2PwNU8Ohai/04wxd46g==",
       "devOptional": true,
       "license": "Apache-2.0",
       "dependencies": {
@@ -65,21 +65,21 @@
       }
     },
     "node_modules/@cap-js/sqlite": {
-      "version": "2.0.1",
-      "integrity": "sha512-QahmUBueZ5fvzal7WpcUN83EKrtnIxJCtGGGqXmJraeBZY/wDx+NqOGFiiZ9UE05lUSvYtPJw4JJ+d3f5aCy8w==",
+      "version": "2.0.2",
+      "integrity": "sha512-oNg2f56sfELshyp0eSmYYwG1lt4Zmc135sLIzS8iykHdRVxxJpTrPj0jx0Y4Hc6sfC9u25LRXVu/ZKqjm9Yu+Q==",
       "license": "Apache-2.0",
       "optional": true,
       "dependencies": {
         "@cap-js/db-service": "^2",
-        "better-sqlite3": "^11.0.0"
+        "better-sqlite3": "^12.0.0"
       },
       "peerDependencies": {
         "@sap/cds": ">=9"
       }
     },
     "node_modules/@eslint/js": {
-      "version": "9.30.1",
-      "integrity": "sha512-zXhuECFlyep42KZUhWjfvsmXGX39W8K8LFb8AWXM9gSV9dQB+MrJGLKvW6Zw0Ggnbpw0VHTtrhFXYe3Gym18jg==",
+      "version": "9.31.0",
+      "integrity": "sha512-LOm5OVt7D4qiKCqoiPbA7LWmI+tbw1VbTUowBcUMgQSuM6poJufkFkYDcQpo5KfgD39TnNySV26QjOh7VFpSyw==",
       "license": "MIT",
       "peer": true,
       "engines": {
@@ -157,8 +157,8 @@
       }
     },
     "node_modules/@sap/hdi": {
-      "version": "4.7.0",
-      "integrity": "sha512-iA7W3en3QdZBTialmbomB2E6q4mP/b2Z2S2juhyQpbG7jPhc9jcL3S2wMkDv1XF3RJ5bmm6S/QwiSPtuCfI3LQ==",
+      "version": "4.8.0",
+      "integrity": "sha512-tkJmY2ffm6mt4/LFwRBihlQkMxNAXa3ngvRe2N/6+qLIsUNdrH/M03S5mkygXq56K+KoVVZYuradajCusMWwsw==",
       "license": "See LICENSE file",
       "dependencies": {
         "async": "^3.2.3"
@@ -168,7 +168,7 @@
       },
       "peerDependencies": {
         "@sap/hana-client": "^2 >= 2.5",
-        "hdb": "^0"
+        "hdb": "^2 || ^0"
       },
       "peerDependenciesMeta": {
         "@sap/hana-client": {
@@ -180,11 +180,11 @@
       }
     },
     "node_modules/@sap/hdi-deploy": {
-      "version": "5.4.2",
-      "integrity": "sha512-v+u7kEyC5BT5S2ppOacRRBFwTGXVwu7tU83AMM5n/TzBMukdTE58+rMSFjvpm78Uy8ct2K+1W+xFS+Nx96b+6Q==",
+      "version": "5.5.0",
+      "integrity": "sha512-nxamWIBz+D/4wcvgYgxGSJLsyJ1KNtU9X6gfMHiyi/IjozGN/3WdeT11++jy5qeZNkdinuND55RRlRcnsu3W5g==",
       "license": "See LICENSE file",
       "dependencies": {
-        "@sap/hdi": "^4.7.0",
+        "@sap/hdi": "^4.8.0",
         "@sap/xsenv": "^5.2.0",
         "async": "^3.2.6",
         "dotenv": "^16.4.5",
@@ -196,7 +196,7 @@
       },
       "peerDependencies": {
         "@sap/hana-client": "^2 >= 2.6",
-        "hdb": "^0"
+        "hdb": "^2 || ^0"
       },
       "peerDependenciesMeta": {
         "@sap/hana-client": {
@@ -261,12 +261,12 @@
       "license": "MIT"
     },
     "node_modules/axios": {
-      "version": "1.10.0",
-      "integrity": "sha512-/1xYAC4MP/HEG+3duIhFr4ZQXR4sQXOIe+o6sdqzeykGLx6Upp/1p8MHqhINOvGeP7xyNHe7tsiJByc4SSVUxw==",
+      "version": "1.11.0",
+      "integrity": "sha512-1Lx3WLFQWm3ooKDYZD1eXmoGO9fxYQjrycfHFC8P0sCfQVXyROp0p9PFWBehewBOdCwHc+f/b8I0fMto5eSfwA==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.15.6",
-        "form-data": "^4.0.0",
+        "form-data": "^4.0.4",
         "proxy-from-env": "^1.1.0"
       }
     },
@@ -291,14 +291,17 @@
       "optional": true
     },
     "node_modules/better-sqlite3": {
-      "version": "11.10.0",
-      "integrity": "sha512-EwhOpyXiOEL/lKzHz9AW1msWFNzGc/z+LzeB3/jnFJpxu+th2yqvzsSWas1v9jgs9+xiXJcD5A8CJxAG2TaghQ==",
+      "version": "12.2.0",
+      "integrity": "sha512-eGbYq2CT+tos1fBwLQ/tkBt9J5M3JEHjku4hbvQUePCckkvVf14xWj+1m7dGoK81M/fOjFT7yM9UMeKT/+vFLQ==",
       "hasInstallScript": true,
       "license": "MIT",
       "optional": true,
       "dependencies": {
         "bindings": "^1.5.0",
         "prebuild-install": "^7.1.1"
+      },
+      "engines": {
+        "node": "20.x || 22.x || 23.x || 24.x"
       }
     },
     "node_modules/bindings": {
@@ -805,8 +808,8 @@
       }
     },
     "node_modules/form-data": {
-      "version": "4.0.3",
-      "integrity": "sha512-qsITQPfmvMOSAdeyZ+12I1c+CKSstAFAwu+97zrnWAbIr5u8wfsExUzCesVLC8NgHuRUqNN4Zy6UPWUTRGslcA==",
+      "version": "4.0.4",
+      "integrity": "sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==",
       "license": "MIT",
       "dependencies": {
         "asynckit": "^0.4.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sap/cds-dk",
-  "version": "9.1.0",
+  "version": "9.1.2",
   "description": "Command line client and development toolkit for the SAP Cloud Application Programming Model",
   "homepage": "https://cap.cloud.sap/",
   "keywords": [
@@ -42,7 +42,8 @@
     "LICENSE",
     "npm-shrinkwrap.json",
     "package.json",
-    "readme.md"
+    "readme.md",
+    "index.d.ts"
   ],
   "_hasShrinkwrap": true
 }