@sap/cds 8.5.0 → 8.5.1

package/CHANGELOG.md

@@ -4,6 +4,13 @@
 - The format is based on [Keep a Changelog](http://keepachangelog.com/).
 - This project adheres to [Semantic Versioning](http://semver.org/).
 
+## Version 8.5.1 - 2024-12-06
+
+### Fixed
+
+- `cds deploy --dry --model-only` no longer tries to load a SQLite database
+- Requests with HTTP methods other than `POST` to the `/$batch` endpoint are now rejected when using the new OData adapter
+
 ## Version 8.5.0 - 2024-11-25
 
 ### Added

package/lib/dbs/cds-deploy.js

@@ -37,7 +37,7 @@ const deploy = module.exports = function cds_deploy (model, options, csvs) {
       const _run = fn => o.dry ? fn(db) : db.run(fn)
       await _run (async tx => {
         let any = await deploy.schema (tx, model, o)
-        if (any || csvs) await deploy.data (tx, model, o, csvs, file => LOG?.(GREY, ' > init from', local(file), RESET))
+        if ((any || csvs) && !o.dry) await deploy.data (tx, model, o, csvs, file => LOG?.(GREY, ' > init from', local(file), RESET))
       })
       LOG?.('/> successfully deployed to', descr, '\n')
     } catch (e) {

package/libx/odata/ODataAdapter.js

@@ -96,7 +96,8 @@ class ODataAdapter extends HttpAdapter {
           return jsonBodyParser(req, res, next)
         })
         // batch
-        .post('/\\$batch', require('./middleware/batch')(this))
+        // .all is used deliberately instead of .use so that the matched path is not stripped from req properties
+        .all('/\\$batch', require('./middleware/batch')(this))
         // handle
         // REVISIT: with old adapter, we return 405 for HEAD requests -> check OData spec
         .head('*', (_, res) => res.sendStatus(405))

package/libx/odata/middleware/batch.js

@@ -561,6 +561,10 @@ module.exports = adapter => {
   })
 
   return function odata_batch(req, res, next) {
+    if (req.method !== 'POST') {
+      throw cds.error(`Method ${req.method} is not allowed for calls to $batch endpoint`, { code: 405 })
+    }
+
     if (req.headers['content-type'].includes('application/json')) {
       return _processBatch(service, router, req, res, next)
     }

package/libx/odata/parse/afterburner.js

@@ -19,7 +19,7 @@ function _getDefinition(definition, name, namespace) {
 
 function _resolveAliasesInRef(ref, target) {
   if (ref.length === 1) {
-    if (target.keys[ref[0]]) return ref
+    if (target.keys?.[ref[0]]) return ref
 
     // resolve multi-part refs for innermost ref in url
     if (target._flattenedKeys === undefined) {

package/libx/odata/utils/index.js

@@ -312,6 +312,7 @@ const handleSapMessages = (cdsReq, req, res) => {
 }
 
 const isStream = query => {
+  if (!query) return
   const { _propertyAccess, target } = query
   if (!_propertyAccess) return
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sap/cds",
-  "version": "8.5.0",
+  "version": "8.5.1",
   "description": "SAP Cloud Application Programming Model - CDS for Node.js",
   "homepage": "https://cap.cloud.sap/",
   "keywords": [