@sap/cds 9.0.2 → 9.0.3

package/CHANGELOG.md

@@ -4,6 +4,14 @@
 - The format is based on [Keep a Changelog](https://keepachangelog.com/).
 - This project adheres to [Semantic Versioning](https://semver.org/).
 
+## Version 9.0.3 - 2025-06-04
+
+### Fixed
+
+- Handling of bad timestamps in URL ($filter and temporals)
+- View metadata for requests with $apply
+- Server crash for some URLs
+
 ## Version 9.0.2 - 2025-05-28
 
 ### Changed

package/lib/log/cds-error.js

@@ -62,13 +62,14 @@ exports.expected = ([,type], arg) => {
 }
 
 
-exports.isSystemError = err => err.name in {
-  TypeError:1,
-  ReferenceError:1,
-  SyntaxError:1,
-  RangeError:1,
-  URIError:1,
-}
+const system_errors = [
+  TypeError,
+  ReferenceError,
+  SyntaxError,
+  RangeError,
+  URIError
+]
+exports.isSystemError = err => system_errors.some(e => err instanceof e) 
 
 
 //

package/libx/_runtime/common/generic/temporal.js

@@ -4,7 +4,6 @@ const normalizeTimestamp = require('../utils/normalizeTimestamp')
 const _getDateFromQueryOptions = str => {
   if (str) {
     const match = str.match(/^date'(.+)'$/)
-    // REVISIT: What happens with invalid date values in query parameter? if match.length > 1
     return normalizeTimestamp(match ? match[1] : str)
   }
 }

package/libx/_runtime/common/utils/normalizeTimestamp.js

@@ -9,13 +9,22 @@ const _lengthIfNotFoundIndex = (index, length) => (index > -1 ? index : length)
 module.exports = value => {
   if (value instanceof Date) value = value.toISOString()
   if (typeof value === 'number') value = new Date(value).toISOString()
+  if (typeof value !== 'string') {
+    const msg = `Value "${value}" is not a valid Timestamp`
+    throw Object.assign(new Error(msg), { statusCode: 400 })
+  }
 
   const decimalPointIndex = _lengthIfNotFoundIndex(value.lastIndexOf('.'), value.length)
   const tzRegexMatch = TZ_REGEX.exec(value)
   const tz = tzRegexMatch?.[0] || ''
   const tzIndex = _lengthIfNotFoundIndex(tzRegexMatch?.index, value.length)
   const dateEndIndex = Math.min(decimalPointIndex, tzIndex)
-  const dateNoMillisNoTZ = new Date(value.slice(0, dateEndIndex) + tz).toISOString().slice(0, 19)
+  let dt = new Date(value.slice(0, dateEndIndex) + tz)
+  if (isNaN(dt)) {
+    const msg = `Value "${value}" is not a valid Timestamp`
+    throw Object.assign(new Error(msg), { statusCode: 400 })
+  }
+  const dateNoMillisNoTZ = dt.toISOString().slice(0, 19)
   const normalizedFractionalDigits = value
     .slice(dateEndIndex + 1, tzIndex)
     .replace(NON_DIGIT_REGEX, '')

package/libx/odata/utils/metadata.js

@@ -32,6 +32,14 @@ const _lastValidRef = ref => {
   }
 }
 
+const _getRef = query => {
+  if (query.SELECT?.from?.SELECT) return _getRef(query.SELECT.from)
+
+  return (
+    query.SELECT?.from?.ref ?? query.UPDATE?.entity?.ref ?? query.INSERT?.into?.ref ?? query.DELETE?.from?.ref ?? []
+  )
+}
+
 const _toBinaryKeyValue = value => `binary'${value.toString('base64')}'`
 
 const _odataContext = (query, options) => {
@@ -49,10 +57,7 @@ const _odataContext = (query, options) => {
 
   path += '#'
 
-  // REVISIT: subselect is treated as empty array
-  const ref =
-    query.SELECT?.from?.ref ?? query.UPDATE?.entity?.ref ?? query.INSERT?.into?.ref ?? query.DELETE?.from?.ref ?? []
-
+  const ref = _getRef(query)
   const isNavToDraftAdmin = _isNavToDraftAdmin(ref)
 
   let edmName

package/libx/odata/utils/normalizeTimeData.js

@@ -8,7 +8,7 @@ const _processorFn = elementInfo => {
     const { row, key } = elementInfo
     if (!(row[key] == null) && row[key] !== '$now') {
       const dt = typeof row[key] === 'string' && new Date(row[key])
-      if (!isNaN(dt)) {
+      if (dt && !isNaN(dt)) {
         switch (category) {
           case 'cds.DateTime':
             row[key] = new Date(row[key]).toISOString().replace(/\.\d\d\d/, '')

package/libx/queue/index.js

@@ -423,6 +423,7 @@ const _createTask = (name, msg, context, taskOpts) => {
     delete _msg.query._target
     delete _msg.query.__target
     delete _msg.query.target
+    delete _msg.data // `req.data` should be a getter to whatever is in `req.query`
   }
   const taskMsg = {
     ID: cds.utils.uuid(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sap/cds",
-  "version": "9.0.2",
+  "version": "9.0.3",
   "description": "SAP Cloud Application Programming Model - CDS for Node.js",
   "homepage": "https://cap.cloud.sap/",
   "keywords": [