@sap/cds-dk 9.3.2 → 9.4.1

package/lib/init/template/approuter/files/mta.yaml.hbs

@@ -10,7 +10,6 @@ modules:
     {{/hasMultitenancy}}
     {{/isJava}}
     requires:
-      - name: {{appName}}-auth
     {{#isJava}}
       - name: app-api{{#hasMultitenancy}}
         properties:
@@ -84,4 +83,3 @@ resources:
         oauth2-configuration:
           redirect-uris:
             - https://*~{app-api/app-uri}/**
-

package/lib/init/template/attachments/index.js

@@ -1,6 +1,7 @@
 const { readProject } = require('../../projectReader')
 const { merge } = require('../../merge')
 const { srv4, attachments } = require('../../registries/mta')
+const { mvn } = require('../../add')
 
 module.exports = class AttachmentsTemplate extends require('../../plugin') {
 
@@ -16,18 +17,11 @@ module.exports = class AttachmentsTemplate extends require('../../plugin') {
         return !!env.requires?.attachments || readProject().dependencies?.['@cap-js/attachments']
     }
 
-    async canRun() {
-        const { isJava } = readProject()
-        if (isJava) throw `'cds add attachments' is not available for Java yet`
-        return true
-    }
-
     async run() {
         const project = readProject()
-        const { isNodejs } = project
-        if (isNodejs) {
-            await merge(__dirname, 'files/package.json.hbs').into('package.json')
-        }
+        const { isNodejs, isJava } = project
+        if (isNodejs) await merge(__dirname, 'files/package.json.hbs').into('package.json')
+        if (isJava) await mvn.add('attachments')
     }
 
     async combine() {

package/lib/init/template/audit-logging/files/package.json.hbs

@@ -4,4 +4,9 @@
     "@cap-js/audit-logging": ">=0"
   }
   {{/isNodejs}}
+  {{#isJava}}
+  "requires": {
+      "audit-log": true
+  }
+  {{/isJava}}
 }

package/lib/init/template/handler/index.js

@@ -56,6 +56,7 @@ async function createNodeHandler(proj) {
   const nameFilter = filterStringAsRegex(filter)
 
   for (const service of csn.services) {
+    if (service['@cds.external']) continue
     if (!service.$location.file)  continue
 
     proj.serviceName = service.name

package/lib/init/template/helm/index.js

@@ -86,7 +86,8 @@ module.exports = class HelmTemplate extends require('../../plugin') {
     }
 
     async combine() {
-        const { hasDestination, hasEnterpriseMessaging, hasEnterpriseMessagingShared, hasHana, hasMultitenancy, hasXsuaa, hasHtml5Repo, hasApprouter, hasKafka, hasAttachments, hasPortal, hasMalwareScanner, hasDynatrace, hasCloudLogging } = readProject()
+        // REVISIT: This must be moved to the respective plugins
+        const { hasDestination, hasEnterpriseMessaging, hasEnterpriseMessagingShared, hasHana, hasMultitenancy, hasXsuaa, hasHtml5Repo, hasApprouter, hasKafka, hasAttachments, hasPortal, hasMalwareScanner, hasDynatrace, hasCloudLogging, hasAuditLogging } = readProject()
 
         if (hasApprouter) {
             await this._mergeDependency('web-application', 'approuter')
@@ -143,6 +144,9 @@ module.exports = class HelmTemplate extends require('../../plugin') {
         if (hasDynatrace) {
             await this._mergeDependency('service-instance', 'dynatrace')
         }
+        if (hasAuditLogging) {
+            await this._mergeDependency('service-instance', 'auditlog')
+        }
     }
 
     async _mergeDependency(name, alias) {

package/lib/init/template/html5-repo/files/mta.yaml.hbs

@@ -25,11 +25,16 @@ modules:
     type: com.sap.application.content
     path: {{#isNodejs}}gen{{/isNodejs}}{{#isJava}}.{{/isJava}}
     requires:
-      - name: {{appName}}-auth{{#hasIas}}
+      {{#hasXsuaa}}
+      - name: {{appName}}-auth
+      {{/hasXsuaa}}
+      {{#hasIas}}
+      - name: {{appName}}-ias
         parameters:
           config:
             credential-type: X509_GENERATED
-            app-identifier: app-deployer{{/hasIas}}
+            app-identifier: app-deployer
+      {{/hasIas}}
       - name: srv-api
       - name: {{appName}}-html5-repo-host
         parameters:

package/lib/init/template/ias/files/manifest.yml.hbs

@@ -2,7 +2,7 @@
 applications:
   - name: {{appName}}-srv
     services:
-      - name: {{appName}}-auth
+      - name: {{appName}}-ias
         parameters:
           credential-type: X509_GENERATED
           app-identifier: srv

package/lib/init/template/ias/files/mta.yaml.hbs

@@ -4,7 +4,7 @@ modules:
     type: {{language}}
     path: {{& srvPath}}
     requires:
-      - name: {{appName}}-auth
+      - name: {{appName}}-ias
         parameters:
           config:
             credential-type: X509_GENERATED
@@ -22,7 +22,7 @@ modules:
     type: approuter.nodejs
     path: {{& approuterPath}}
     requires:
-      - name: {{appName}}-auth
+      - name: {{appName}}-ias
         parameters:
           config:
             credential-type: X509_GENERATED
@@ -32,20 +32,21 @@ modules:
         properties:
           url: ~{srv-cert-url}
           forwardAuthCertificates: true
+          forwardAuthToken: true
           strictSSL: true
 
   - name: {{appName}}-mtx
     type: nodejs
     path: {{#isNodejs}}gen/{{/isNodejs}}mtx/sidecar
     requires:
-      - name: {{appName}}-auth
+      - name: {{appName}}-ias
         parameters:
           config:
             credential-type: X509_GENERATED
             app-identifier: mtx
 
 resources:
-  - name: {{appName}}-auth
+  - name: {{appName}}-ias
     type: org.cloudfoundry.managed-service
     {{#hasApprouter}}
     requires:
@@ -53,7 +54,7 @@ resources:
     {{/hasApprouter}}
     parameters:
       service: identity
-      service-name: {{appName}}-auth
+      service-name: {{appName}}-ias
       service-plan: application
       config:
         display-name: {{appName}}

package/lib/init/template/ias/files/values.yaml.hbs

@@ -1,5 +1,8 @@
 {{#hasMultitenancy}}
 sidecar:
+  expose:
+    gateway: default/kyma-mtls-gateway
+    host: {{#literal}}"{{ .Release.Name }}-sidecar-{{ .Release.Namespace }}.cert"{{/literal}}
   bindings:
     auth:
       serviceInstanceName: identity
@@ -9,6 +12,9 @@ sidecar:
 {{/hasMultitenancy}}
 {{#hasApprouter}}
 approuter:
+  expose:
+    gateway: default/kyma-mtls-gateway
+    host: {{#literal}}"{{ .Release.Name }}-approuter-{{ .Release.Namespace }}.cert"{{/literal}}
   bindings:
     auth:
       serviceInstanceName: identity
@@ -17,6 +23,9 @@ approuter:
           app-identifier: approuter
 {{/hasApprouter}}
 srv:
+  expose:
+    gateway: default/kyma-mtls-gateway
+    host: {{#literal}}"{{ .Release.Name }}-srv-{{ .Release.Namespace }}.cert"{{/literal}}
   bindings:
     auth:
       serviceInstanceName: identity
@@ -35,10 +44,10 @@ identity:
     {{#hasXsuaa}}
     xsuaa-cross-consumption: true
     {{/hasXsuaa}}
-    {{#hasApprouter}}
     oauth2-configuration:
       token-policy:
         access-token-format: "jwt"
+    {{#hasApprouter}}
       redirect-uris:
         {{=<% %>=}}
         - https://*.{{ tpl .Values.global.domain . }}/login/callback

package/lib/init/template/multitenancy/files/mta.yaml.hbs

@@ -39,6 +39,19 @@ modules:
       routes:
         - route: "${default-url}"
         - route: "${default-host}.cert.${default-domain}"{{/hasIas}}
+    {{#isNodejs}}
+    hooks:
+      - name: upgrade-all
+        type: task
+        phases:
+          - blue-green.application.before-start.idle
+          - deploy.application.before-start
+        parameters:
+          name: upgrade
+          memory: 512M # increase as required
+          disk-quota: 768M # increase as required
+          command: cds-mtx upgrade '*'
+    {{/isNodejs}}
     provides:
       - name: mtx-api
         properties:
@@ -91,7 +104,7 @@ resources:
         appName: {{appName}}-${org}-${space}
         appCallbacks:
           dependenciesCallbacks:
-            url: {{#isJava}}~{srv-api/srv-cert-url}/mt/sms/subscriptions/tenants/{app_tid}/dependencies{{/isJava}}{{#isNodejs}}~{mtx-api/mtx-cert-url}/-/cds/sms-provisioning/dependencies{{/isNodejs}}
+            url: {{#isJava}}~{srv-api/srv-cert-url}/mt/sms/subscriptions/tenants/{app_tid}/dependencies{{/isJava}}{{#isNodejs}}~{mtx-api/mtx-cert-url}/-/cds/sms-provisioning/dependencies/{app_tid}{{/isNodejs}}
           subscriptionCallbacks:
             url: {{#isJava}}~{srv-api/srv-cert-url}/mt/sms/subscriptions/tenants/{app_tid}{{/isJava}}{{#isNodejs}}~{mtx-api/mtx-cert-url}/-/cds/sms-provisioning/tenant/{app_tid}{{/isNodejs}}
             async:
@@ -101,9 +114,9 @@ resources:
         displayName: {{appName}}
         description: Description for {{appName}}
         category: Category
-        iasServiceInstanceName: {{appName}}-auth{{#hasXsuaa}}
+        iasServiceInstanceName: {{appName}}-ias{{#hasXsuaa}}
         saasManagerServiceInstanceName: {{appName}}-registry{{/hasXsuaa}}
     requires:
       - name: {{#isJava}}srv-api{{/isJava}}{{^isJava}}mtx-api{{/isJava}}
-    processed-after: [{{#hasXsuaa}}{{appName}}-registry, {{/hasXsuaa}}{{appName}}-auth]
+    processed-after: [{{#hasXsuaa}}{{appName}}-registry, {{/hasXsuaa}}{{appName}}-ias]
   {{/hasIas}}

package/lib/init/template/multitenancy/files/package.json.hbs

@@ -19,6 +19,11 @@
       {{#profile}}
       }
       {{/profile}}
+      {{^profileSpecified}}
+      ,"[with-mtx]": {
+        "multitenancy": true
+      }
+      {{/profileSpecified}}
     }
   {{#isNodejs}}
   }

package/lib/init/template/multitenancy/files/values.yaml.hbs

@@ -50,7 +50,7 @@ subscription-manager:
   parameters:
     appCallbacks:
       dependenciesCallbacks:
-        {{#literal}}url: https://{{ .Release.Name }}-sidecar-{{ .Release.Namespace }}.cert.{{ .Values.global.domain }}/-/cds/sms-provisioning/dependencies{{/literal}}
+        {{#literal}}url: https://{{ .Release.Name }}-sidecar-{{ .Release.Namespace }}.cert.{{ .Values.global.domain }}/-/cds/sms-provisioning/dependencies/{app_tid}{{/literal}}
       subscriptionCallbacks:
         {{#literal}}url: https://{{ .Release.Name }}-sidecar-{{ .Release.Namespace }}.cert.{{ .Values.global.domain }}/-/cds/sms-provisioning/tenant/{app_tid}{{/literal}}
     appName: {{appName}}
@@ -87,11 +87,6 @@ sidecar:
       serviceInstanceName: service-manager
   image:
     repository: {{appName}}-sidecar
-  {{#hasIas}}
-  expose:
-    gateway: default/kyma-mtls-gateway
-    {{#literal}}host: https://{{ .Release.Name }}-sidecar-{{ .Release.Namespace }}.cert.{{ .Values.global.domain }}{{/literal}}
-  {{/hasIas}}
   resources:
     limits:
       ephemeral-storage: 1G

package/lib/init/template/portal/files/mta.yaml.hbs

@@ -37,11 +37,16 @@ modules:
             name: {{appName}}-portal-key
             config:
               content-endpoint: developer
-      - name: {{appName}}-auth{{#hasIas}}
+      {{#hasXsuaa}}
+      - name: {{appName}}-auth
+      {{/hasXsuaa}}
+      {{#hasIas}}
+      - name: {{appName}}-ias
         parameters:
           config:
             credential-type: X509_GENERATED
-            app-identifier: portal-deployer{{/hasIas}}
+            app-identifier: portal-deployer
+      {{/hasIas}}
       - name: {{appName}}-html5-repo-host
       - name: {{appName}}-app-deployer
     deployed-after:
@@ -63,3 +68,8 @@ resources:
     type: org.cloudfoundry.managed-service
     parameters:
       service: destination
+
+  - name: {{appName}}-ias
+    type: org.cloudfoundry.managed-service
+    parameters:
+      service: identity

package/lib/init/template/sample/files/db/schema.cds

@@ -1,13 +1,9 @@
-using {
-  Currency,
-  managed,
-  cuid,
-  sap
-} from '@sap/cds/common';
+using { Currency, managed, sap } from '@sap/cds/common';
 
 namespace sap.capire.bookshop;
 
-entity Books : managed, cuid {
+entity Books : managed {
+  key ID   : Integer;
   title    : localized String(111)  @mandatory;
   descr    : localized String(1111);
   author   : Association to Authors @mandatory;
@@ -17,7 +13,8 @@ entity Books : managed, cuid {
   currency : Currency;
 }
 
-entity Authors : managed, cuid {
+entity Authors : managed {
+  key ID       : Integer;
   name         : String(111) @mandatory;
   dateOfBirth  : Date;
   dateOfDeath  : Date;

package/lib/init/template/typer/files/xsconfig.json

@@ -2,7 +2,8 @@
   "compilerOptions": {
     "moduleResolution": "nodenext",
     "paths": {
-      "#cds-models/*": ["./@cds-models/*"]
+      "#cds-models/*": ["./@cds-models/*"],
+      "@sap/cds": ["./node_modules/@cap-js/cds-types"]
     }
   }
 }

package/lib/init/template/typescript/files/package.json

@@ -1,6 +1,6 @@
 {
   "devDependencies": {
-    "@cap-js/cds-types": "^0.14.0",
+    "@cap-js/cds-types": "^0.15.0",
     "@types/node": "^22.0.0",
     "tsx": "^4",
     "typescript": "^5"

package/lib/init/template/typescript/files/tsconfig.json

@@ -8,6 +8,9 @@
     "strict": true,
     "skipLibCheck": true,
     "sourceMap": true,
-    "allowJs": true
+    "allowJs": true,
+    "paths": {
+      "@sap/cds": ["./node_modules/@cap-js/cds-types"]
+    }
   }
 }

package/lib/init/template/workzone-standard/files/mta.yaml.hbs

@@ -11,10 +11,12 @@ modules:
   - name: {{appName}}-destinations
     type: com.sap.application.content
     requires:
+      {{#hasXsuaa}}
       - name: {{appName}}-auth
         parameters:
           service-key:
             name: {{appName}}-auth-key
+      {{/hasXsuaa}}
       - name: {{appName}}-html5-repo-host
         parameters:
           service-key:
@@ -34,11 +36,13 @@ modules:
               ServiceInstanceName: {{appName}}-html5-repo-host
               ServiceKeyName: {{appName}}-html5-repo-host-key
               sap.cloud.service: {{strippedAppName}}.service
+            {{#hasXsuaa}}
             - Name: {{appName}}-auth
               Authentication: OAuth2UserTokenExchange
               ServiceInstanceName: {{appName}}-auth
               ServiceKeyName: {{appName}}-auth-key
               sap.cloud.service: {{strippedAppName}}.service
+            {{/hasXsuaa}}
 
   - name: {{appName}}-mtx
     type: nodejs

package/lib/init/template/workzone-standard/index.js

@@ -30,10 +30,11 @@ module.exports = class extends require('../../plugin') {
   }
 
   async run() {
-    await merge({ cds: { requires: { workzone: true } } }).into('package.json')
+    const project = readProject()
+    const conf = project.isJava ? { requires: { workzone: true }} : { cds: { requires: { workzone: true } } }
+    await merge(conf).into(project.configFile)
 
     if (cds.cli.options.cdm) {
-      const project = readProject()
       await merge(join(__dirname, 'files/cdm.json.hbs')).into('app/workzone/cdm.json', { project })
     }
   }

package/lib/init/template/xsuaa/files/package.json.hbs

@@ -6,6 +6,9 @@
   "cds": {
   {{/isNodejs}}
     "requires": {
+      {{#hasIas}}
+      "xsuaa": true,
+      {{/hasIas}}
       {{#profile}}
       "[{{profile}}]": {
       {{/profile}}

package/lib/lint/eslintHelp.json

@@ -1,5 +1,5 @@
 {
-  "version": "9.35.0",
+  "version": "9.37.0",
   "help": "\n# SYNOPSIS\n\n    *cds lint* [options] file.js [file.js] [dir]\n\n    Runs environment checks and/or checks the specified models\n    based on the ESLint framework\n\n# OPTIONS\n    \n    Basic configuration:\n      --no-config-lookup               Disable look up for eslint.config.js\n      -c, --config path::String        Use this configuration instead of eslint.config.js, eslint.config.mjs, or eslint.config.cjs\n      --inspect-config                 Open the config inspector with the current configuration\n      --ext [String]                   Specify additional file extensions to lint\n      --global [String]                Define global variables\n      --parser String                  Specify the parser to be used\n      --parser-options Object          Specify parser options\n    \n    Specify Rules and Plugins:\n      --plugin [String]                Specify plugins\n      --rule Object                    Specify rules\n    \n    Fix Problems:\n      --fix                            Automatically fix problems\n      --fix-dry-run                    Automatically fix problems without saving the changes to the file system\n      --fix-type Array                 Specify the types of fixes to apply (directive, problem, suggestion, layout)\n    \n    Ignore Files:\n      --no-ignore                      Disable use of ignore files and patterns\n      --ignore-pattern [String]        Patterns of files to ignore\n    \n    Use stdin:\n      --stdin                          Lint code provided on <STDIN> - default: false\n      --stdin-filename String          Specify filename to process STDIN as\n    \n    Handle Warnings:\n      --quiet                          Report errors only - default: false\n      --max-warnings Int               Number of warnings to trigger nonzero exit code - default: -1\n    \n    Output:\n      -o, --output-file path::String   Specify file to write report to\n      -f, --format String              Use a specific output format - default: stylish\n      --color, --no-color              Force enabling/disabling of color\n    \n    Inline configuration comments:\n      --no-inline-config               Prevent comments from changing config or rules\n      --report-unused-disable-directives  Adds reported errors for unused eslint-disable and eslint-enable directives\n      --report-unused-disable-directives-severity String  Chooses severity level for reporting unused eslint-disable and eslint-enable directives - either: off, warn, error, 0, 1, or 2\n      --report-unused-inline-configs String  Adds reported errors for unused eslint inline config comments - either: off, warn, error, 0, 1, or 2\n    \n    Caching:\n      --cache                          Only check changed files - default: false\n      --cache-file path::String        Path to the cache file. Deprecated: use --cache-location - default: .eslintcache\n      --cache-location path::String    Path to the cache file or directory\n      --cache-strategy String          Strategy to use for detecting changed files in the cache - either: metadata or content - default: metadata\n    \n    Suppressing Violations:\n      --suppress-all                   Suppress all violations - default: false\n      --suppress-rule [String]         Suppress specific rules\n      --suppressions-location path::String  Specify the location of the suppressions file\n      --prune-suppressions             Prune unused suppressions - default: false\n      --pass-on-unpruned-suppressions  Ignore unused suppressions - default: false\n    \n    Miscellaneous:\n      --init                           Run config initialization wizard - default: false\n      --env-info                       Output execution environment information - default: false\n      --no-error-on-unmatched-pattern  Prevent errors when pattern is unmatched\n      --exit-on-fatal-error            Exit with exit code 2 in case of fatal error - default: false\n      --no-warn-ignored                Suppress warnings when the file list includes ignored files\n      --pass-on-no-patterns            Exit with exit code 0 in case no file patterns are passed\n      --debug                          Output debugging information\n      -h, --help                       Show help\n      -v, --version                    Output the version number\n      --print-config path::String      Print the configuration for the given file\n      --stats                          Add statistics to the lint report - default: false\n      --flag [String]                  Enable a feature flag\n      --mcp                            Start the ESLint MCP server\n      --concurrency Int|String         Number of linting threads, auto to choose automatically, off for no multithreading - default: off\n    \n",
   "options": [
     "--config",

package/lib/util/term.js

@@ -13,11 +13,8 @@ const t = module.exports.codes = {
   orange: '\x1b[38;2;255;140;0m' // darker orange, works with bright and dark background
 }
 
-Object.defineProperty(module.exports, 'isTTY',  { get: () => process.stdout.isTTY && process.stderr.isTTY })
-const useColor = module.exports.isTTY && process.env.NO_COLOR !== 'true' || (process.env.FORCE_COLOR && process.env.FORCE_COLOR !== 'false')
-module.exports.colors = useColor
 const as = module.exports.as = (codes, o) => {
-  return useColor ? (codes + o + t.reset) : ('' + o)
+  return format.colors ? (codes + o + t.reset) : ('' + o)
 }
 
 const asErr = module.exports.error = o => DEBUG ? o : as(t.red + t.bold, o)
@@ -37,6 +34,7 @@ const format = module.exports.format = (o, severity='Error', asInternalError=fal
     default       : return format.info (o)
   }
 }
+format.colors = process.stdout.isTTY && process.stderr.isTTY && process.env.NO_COLOR !== 'true' || (process.env.FORCE_COLOR && process.env.FORCE_COLOR !== 'false')
 
 // decorate.error, .warning, .info
 // 'Error: foo'  ->  '[ERROR] foo'  (Maven-like, allows for better grepping in logs)

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@sap/cds-dk",
-  "version": "9.3.2",
+  "version": "9.4.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@sap/cds-dk",
-      "version": "9.3.2",
+      "version": "9.4.1",
       "license": "SEE LICENSE IN LICENSE",
       "dependencies": {
         "@cap-js/asyncapi": "^1.0.0",
@@ -42,8 +42,8 @@
       }
     },
     "node_modules/@cap-js/db-service": {
-      "version": "2.4.0",
-      "integrity": "sha512-tWZUkgAPgZQIVu3xownD9cA9joXPI84KDstx3ZezOxXJuRsapgM2QEs0TXwQK5XLG43FUAsGO7wVJPoZ29ZH2Q==",
+      "version": "2.5.1",
+      "integrity": "sha512-dpz9lvOepcXOgE8uTs9abCotLcCt1odpwlrUT4AW2pnSrMB0EVMRbHKVIlufmrm8Kh/Y5c2d6ODald8eahsEDw==",
       "devOptional": true,
       "license": "Apache-2.0",
       "dependencies": {
@@ -65,8 +65,8 @@
       }
     },
     "node_modules/@cap-js/sqlite": {
-      "version": "2.0.2",
-      "integrity": "sha512-oNg2f56sfELshyp0eSmYYwG1lt4Zmc135sLIzS8iykHdRVxxJpTrPj0jx0Y4Hc6sfC9u25LRXVu/ZKqjm9Yu+Q==",
+      "version": "2.0.3",
+      "integrity": "sha512-Zm2JLpPuddFkeqM47TX7V7IC6x3WOfn5lTRbaiVOMvRQoshCNXTkjv083ssfiwF/jF/46/PSVox+fTElozg6XA==",
       "license": "Apache-2.0",
       "optional": true,
       "dependencies": {
@@ -78,8 +78,8 @@
       }
     },
     "node_modules/@eslint/js": {
-      "version": "9.35.0",
-      "integrity": "sha512-30iXE9whjlILfWobBkNerJo+TXYsgVM5ERQwMcMKCHckHflCmf7wXDAHlARoWnh0s1U72WqlbeyE7iAcCzuCPw==",
+      "version": "9.37.0",
+      "integrity": "sha512-jaS+NJ+hximswBG6pjNX0uEJZkrT0zwpVi3BA3vX22aFGjJjmgSTSmPpZCRKmoBL5VY/M6p0xsSJx7rk7sy5gg==",
       "license": "MIT",
       "peer": true,
       "engines": {
@@ -90,8 +90,8 @@
       }
     },
     "node_modules/@sap/cds": {
-      "version": "9.3.1",
-      "integrity": "sha512-xA9EN29X8HKaz83Aod1e3Bs6LRvqcCVoaTvCtyOup5rMYDQumcoZ7UOKH6NIUTeO0zOtafUiMHucMG+dBnq5XQ==",
+      "version": "9.4.2",
+      "integrity": "sha512-+MtNRviAgyZnPkSkT9sZ52rKRrNcTSpjIL88HfPtS5VzWX17Niu9PRANba/dd8aF4lxSQEEqb85zqJkga6MwKA==",
       "license": "SEE LICENSE IN LICENSE",
       "dependencies": {
         "@sap/cds-compiler": "^6.1",
@@ -120,8 +120,8 @@
       }
     },
     "node_modules/@sap/cds-compiler": {
-      "version": "6.3.4",
-      "integrity": "sha512-3Ip+PgK0yiZXftAC1Pc5euiz4L56t0vX/a4k8xJwTxD0Ccr6G3AvmEFLju5f96D18nr4lH1djC05BeK9yWUpGg==",
+      "version": "6.4.2",
+      "integrity": "sha512-kjhq8GxzCLIfsM4aln9saxkifPC26MYuAqT82QB7RGZDVFM5Pw09Dp6TcKCSp65hut0YgHkvHlVGWMZWWBJNdA==",
       "license": "SEE LICENSE IN LICENSE",
       "bin": {
         "cdsc": "bin/cdsc.js",
@@ -133,12 +133,12 @@
       }
     },
     "node_modules/@sap/cds-fiori": {
-      "version": "2.0.1",
-      "integrity": "sha512-KZVLWXndydgqdlao8OL1gtgd/XMgBdiKBmmgwGpBL1y4S21FOXglnWh6d3bnSZL/qwR3z50D+0PoGghjhayF0Q==",
+      "version": "2.1.0",
+      "integrity": "sha512-EoNtPT5aVurxwsqHQfW2FgnXA3Ysu9GvihR0jTQNUZ4pVlHHFkfFehH6G2DIHKyfTROWaahegJsMpiwpE8clkg==",
       "license": "SEE LICENSE IN LICENSE",
       "peerDependencies": {
         "@sap/cds": ">=8",
-        "express": ">=4"
+        "express": "^4"
       }
     },
     "node_modules/@sap/cds-mtxs": {
@@ -180,8 +180,8 @@
       }
     },
     "node_modules/@sap/hdi-deploy": {
-      "version": "5.5.0",
-      "integrity": "sha512-nxamWIBz+D/4wcvgYgxGSJLsyJ1KNtU9X6gfMHiyi/IjozGN/3WdeT11++jy5qeZNkdinuND55RRlRcnsu3W5g==",
+      "version": "5.5.1",
+      "integrity": "sha512-5r9SIkXX7cO+MwRFF32O566sMx6LP1mLin0eT9F+Adqy+0SrdwkWv4JslQzYetiWLuNsfqQljcao62alaxts8A==",
       "license": "See LICENSE file",
       "dependencies": {
         "@sap/hdi": "^4.8.0",
@@ -291,8 +291,8 @@
       "optional": true
     },
     "node_modules/better-sqlite3": {
-      "version": "12.2.0",
-      "integrity": "sha512-eGbYq2CT+tos1fBwLQ/tkBt9J5M3JEHjku4hbvQUePCckkvVf14xWj+1m7dGoK81M/fOjFT7yM9UMeKT/+vFLQ==",
+      "version": "12.4.1",
+      "integrity": "sha512-3yVdyZhklTiNrtg+4WqHpJpFDd+WHTg2oM7UcR80GqL05AOV0xEJzc6qNvFYoEtE+hRp1n9MpN6/+4yhlGkDXQ==",
       "hasInstallScript": true,
       "license": "MIT",
       "optional": true,
@@ -558,8 +558,8 @@
       }
     },
     "node_modules/detect-libc": {
-      "version": "2.1.0",
-      "integrity": "sha512-vEtk+OcP7VBRtQZ1EJ3bdgzSfBjgnEalLTp5zjJrS+2Z1w2KZly4SBdac/WDU3hhsNAZ9E8SC96ME4Ey8MZ7cg==",
+      "version": "2.1.2",
+      "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
       "license": "Apache-2.0",
       "optional": true,
       "engines": {
@@ -1213,8 +1213,8 @@
       "license": "MIT"
     },
     "node_modules/node-abi": {
-      "version": "3.77.0",
-      "integrity": "sha512-DSmt0OEcLoK4i3NuscSbGjOf3bqiDEutejqENSplMSFA/gmB8mkED9G4pKWnPl7MDU4rSHebKPHeitpDfyH0cQ==",
+      "version": "3.78.0",
+      "integrity": "sha512-E2wEyrgX/CqvicaQYU3Ze1PFGjc4QYPGsjUrlYkqAE0WjHEZwgOsGMPMzkMse4LjJbDmaEuDX3CM036j5K2DSQ==",
       "license": "MIT",
       "optional": true,
       "dependencies": {
@@ -1443,8 +1443,8 @@
       "license": "ISC"
     },
     "node_modules/semver": {
-      "version": "7.7.2",
-      "integrity": "sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA==",
+      "version": "7.7.3",
+      "integrity": "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==",
       "devOptional": true,
       "license": "ISC",
       "bin": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sap/cds-dk",
-  "version": "9.3.2",
+  "version": "9.4.1",
   "description": "Command line client and development toolkit for the SAP Cloud Application Programming Model",
   "homepage": "https://cap.cloud.sap/",
   "keywords": [