@sap/cds-dk 9.8.4 → 9.9.1

package/CHANGELOG.md

@@ -6,11 +6,41 @@ This project adheres to [Semantic Versioning](https://semver.org/).
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
-## Version 9.8.4 - 2026-04-10
+## Version 9.9.1 - 2026-05-07
+
+### Changed
+
+- `cds add lint` now adds a dependency on `eslint@10`, instead of `eslint@9`.
+
+### Fixed
+
+- `cds add test` now uses version 1 of `@cap-js/cds-test`.
+- `cds add vue` uses correct placeholder values for book and author in `App.vue`.
+- `cds debug` support for latest Chrome versions.
+- `cds watch` runs ESM projects with `tsx` again, so that `.js` import are rewritten to `.ts`. This got broken in 9.9.0, but used to work in 9.8.
+- `cds add` only adds the `event-mesh.json` if a facet requiring the file is run.
+
+## Version 9.9.0 - 2026-04-23
+
+### Added
+
+- `cds build` routes `.hdbsynonymconfig` files with `*.configure` properties to the `cfg/` folder for HDI template substitution.
+- `cds deploy` also supports `-b` as a shortcut for `--resolve-bindings`.
+- `cds import` now supports `--resolve-bindings`.
+
+### Changed
+
+- `cds add html5-repo` creates destinations as part of the app deployer module instead of initial destinations in the destination service.
+- `axios` is removed from `dependencies`.
+- `cds init` no longer generates database-specific extensions (`db/hana/`, `db/sqlite/`) and their profile-based configuration in the sample template.
 
 ### Fixed
 
-- `axios` bump to 1.15.0 for CVE-2025-62718.
+- `cds add xsuaa --plan broker` does not use plan `application` in approuter scenarios.
+- `cds add postgres` for Kyma no longer adds an invalid `values.yaml` entry for `postgres-db-deployer`.
+- `cds init/add esm` now also fills `package.json` with proper content.
+- `cds deploy --to hana --resolve-bindings` no longer overwrites credentials of all hana-tagged `VCAP_SERVICES` entries with the target container's service key when multiple HDI bindings are present.
+- `cds add data` now adds a newline character at the end of csv files to make appending content easier.
 
 ## Version 9.8.3 - 2026-04-02
 

package/bin/add.js

@@ -36,7 +36,7 @@ module.exports = Object.assign(add, {
 
     Pick any of these:
 
-${cds.cli.command !== 'completion' && require('../lib/init').help({ exclude: ['java', 'nodejs'] })}
+${cds.cli.command !== 'completion' && require('../lib/init').help()}
 
 # OPTIONS
 
@@ -55,8 +55,8 @@ ${cds.cli.command !== 'completion' && require('../lib/init').help({ exclude: ['j
 
 # FEATURE OPTIONS
 
-${Object.entries(conf).sort(([a], [b]) => a.localeCompare(b)).flatMap(([pluginName, { options, flags }]) => {
-    const text4 = arr => arr.map(({ key, help, short }) => help && `      ${key}${short ? ' | '+short : ''}\n\n        ${help}`).join('\n\n')
+${Object.entries(conf).flatMap(([pluginName, { options, flags }]) => {
+    const text4 = arr => arr.map(({ key, help, short }) => help && `      ${key}${short ? ' | '+short : ''}\n\n        ${help}`).filter(Boolean).join('\n\n')
     const optionsText = text4(options), flagsText = text4(flags)
     if (!optionsText && !flagsText) return []
     return `    *cds add ${pluginName}*${optionsText?`\n\n${optionsText}`:''}${flagsText?`\n\n${flagsText}`:''}`

package/bin/cds.js

@@ -89,6 +89,19 @@ const cli = {
         args[0].push(...appendArgs)
         cds.cli = { command: cmd, argv: args[0], options: args[1] }
 
+        // For import: load plugins early to merge their default options
+        // so if plugins need bindings it is handled by the _resolveBindings below
+        if (cmd === 'import' && args[1]?.from) {
+          await cds.plugins
+          const pluginOpts = cds.import?.options?.[args[1].from]
+          if (pluginOpts) for (const k in pluginOpts) {
+            if (!(k in args[1])) args[1][k] = pluginOpts[k]
+          }
+          if (args[1].profile) {
+            process.env.CDS_ENV = [...new Set([...process.env.CDS_ENV?.split(',') ?? [], ...args[1].profile.split(',')])]
+          }
+        }
+
         if (args[1]?.['resolve-bindings']) await _resolveBindings({ silent: cmd === 'env' })
 
         _prepareTsIfNeeded(cds)
@@ -163,8 +176,9 @@ const DEBUG = /\b(y|all|cli)\b/.test(process.env.DEBUG) ? console.debug : undefi
 async function _resolveBindings(options) {
   const cds = require('../lib/cds')
   const { env: bindingEnv } = require('../lib/bind/shared')
-  Object.assign(process.env, await bindingEnv(options))
-  cds.env = cds.env.for('cds') // reload env
+  cds.env = cds.env.for('cds') // reload env (e.g. after profile activation)
+  Object.assign(process.env, await bindingEnv({ ...options, env: cds.env }))
+  cds.env = cds.env.for('cds') // reload env to pick up resolved bindings
   cds.requires = cds.env.requires
 }
 
@@ -250,9 +264,11 @@ function _prepareTsIfNeeded(cds) {
       return delete process.env.CDS_TYPESCRIPT
 
     if (!process.env.CDS_TYPESCRIPT ) {
+      const type = _moduleType(cds)
+      const tsxLoader = type === 'module' ? 'tsx/esm' : 'tsx/cjs'
       try {
-        cds._localOrGlobal('tsx/cjs') // cjs is needed as we are in CJS code
-        DEBUG?.(`[cds] - Detected ${path.relative(cds.root, tsconfig)}. Running with tsx.\n`)
+        cds._localOrGlobal(tsxLoader)
+        DEBUG?.(`[cds] - Detected ${path.relative(cds.root, tsconfig)}. Running with ${tsxLoader}.\n`)
         process.env.CDS_TYPESCRIPT = 'tsx'
       }
       catch (e) {
@@ -262,5 +278,12 @@ function _prepareTsIfNeeded(cds) {
       }
     }
   }
-
 }
+
+function _moduleType(cds) {
+  try {
+    return require(path.join(cds.root??'.', 'package.json')).type
+  } catch {
+    return 'commonjs'
+  }
+}

package/bin/debug.js

@@ -215,15 +215,16 @@ async function debug() {
   async function openDevTools(port) {
     attempts++
     const ide = vscode ? 'vscode' : 'chrome'
+    const clientHost = host === '0.0.0.0' || host === 'localhost' ? '127.0.0.1' : host
     try {
       switch (ide) {
         case 'chrome': {
-          const res = await fetch(`http://localhost:${port}/json/list`)
+          const res = await fetch(`http://${clientHost}:${port}/json/list`)
           const data = await res.json()
           if (!data?.length) throw 'No debugger found on port ' + port
-          const wsUrl = data[0].webSocketDebuggerUrl
+          const wsPath = new URL(data[0].webSocketDebuggerUrl).pathname
           let command
-          const url = `devtools://devtools/bundled/inspector.html?ws=${wsUrl.split('ws://')[1]}`
+          const url = `devtools://devtools/bundled/js_app.html?ws=${clientHost}:${port}${wsPath}`
           console.log(`Opening Chrome DevTools at ${url}`)
           if (os === 'darwin') {
             command = `open -a "Google Chrome" '${url}'`

package/bin/import.js

@@ -1,8 +1,8 @@
 module.exports = Object.assign(_import, {
     _name: 'import',
     options:   [ '--services', '--for', '--out', '--as', '--name', '--include-namespaces', '--dependencies', '--from', '--config', '--destination', '--group', '--into-namespace' ],
-    shortcuts: [ '-s',            '-4',    '-o',  '-as',     '-n',                  '-ns',             '-d',undefined,       '-c',       undefined, undefined,                '-2',        '-', '-f'],
-    flags: [ '--dry', '--force', '--no-copy', '--no-save', '--keep-namespace', '--data-product', '--edmx', '--rfc', '--odata', '--openapi', '--asyncapi' ],
+    shortcuts: [ '-s',            '-4',    '-o',  '-as',     '-n',                  '-ns',             '-d',undefined,       '-c',       undefined, undefined,                '-2',        '-', '-f', '-b'],
+    flags: [ '--dry', '--force', '--resolve-bindings', '--no-copy', '--no-save', '--keep-namespace', '--data-product', '--edmx', '--rfc', '--odata', '--openapi', '--asyncapi' ],
     help: `
 # SYNOPSIS
 
@@ -33,6 +33,10 @@ module.exports = Object.assign(_import, {
         (Not released with general availability yet)
 
 
+    *-b | --resolve-bindings*
+
+        Resolve remote service bindings configured via *cds bind*.
+
     *--dry*
         Writes the converted csn to stdout only.
 

package/bin/logout.js

@@ -12,14 +12,14 @@ module.exports = Object.assign(logout, {
     *cds pull* and *cds push*. In default mode, deletes only data for a
     specific app URL and subdomain, optionally including relevant project
     settings.
-    
+
     <app-url> and <tenant-subdomain> will be determined from project settings
     unless given by options.
-    
+
     Project settings will be loaded by reference to the given folder.
     If omitted, the project setting are loaded from a subdirectory named as the
     subdomain or the current working directory.
-    
+
     To access keyring storage, the 'keytar' Node.js module must be installed.
     If this is not the case, existing keyring entries will not be detected and
     cannot be removed by this command.
@@ -28,25 +28,25 @@ module.exports = Object.assign(logout, {
 # OPTIONS
 
     *-l* | *--url* <app-url>
-    
+
         The <app-url> to logout from. By default, it's determined from project
         settings.
-   
+
     *-s* | *--subdomain* <subdomain>
-    
+
         The subdomain to logout from. By default, it's determined from project
         settings.
 
     *--delete-settings*
-    
+
         Additionally removes the settings for the given extension project.
 
     *--clear-invalid*
-    
+
         Enter special mode to clear all tokens and settings for any project
         folders which no longer exist in the file system. Additionally, removes
         expired tokens. Ignores any other command-line arguments.
-        
+
 `;
     }})
 
@@ -56,6 +56,3 @@ async function logout ([projectFolder], options = {}) {
 
     await require('../lib/mtx/auth_manager').logout(options)
 }
-
-
-/* eslint no-console: off */

package/lib/bind/shared.js

@@ -12,8 +12,8 @@ const KindToRequiresNameMap = {
     'ias-auth': 'auth',
     'hana-cloud': 'db',
     hana: 'db',
-    'hana-mt': 'db', // For compatibility only
-    'sql-mt': 'db', // For compatibility only
+    'hana-mt': 'db', // cds10: remove, For compatibility only
+    'sql-mt': 'db', // cds10: remove, For compatibility only
     destinations: 'destinations',
     connectivity: 'connectivity',
     'audit-log': 'auditlog',

package/lib/build/constants.js

@@ -40,7 +40,6 @@ exports.FOLDER_GEN = "gen"
 exports.FILE_EXT_CDS = ".cds"
 exports.MTX_SIDECAR_FOLDER = "mtx/sidecar"                      // default name of the mtx sidecar folder
 exports.DEFAULT_CSN_FILE_NAME = "csn.json"
-// REVISIT: the models are not required if a custom server.js file is used for MTX bootstrap
 exports.NODEJS_MODEL_EXCLUDE_LIST = ['@sap/cds-mtxs/srv/bootstrap']
 
 exports.CDS_CONFIG_PATH_SEP = "/"