@sap/cds 9.6.3 → 9.6.4

package/CHANGELOG.md

@@ -4,6 +4,13 @@
 - The format is based on [Keep a Changelog](https://keepachangelog.com/).
 - This project adheres to [Semantic Versioning](https://semver.org/).
 
+## Version 9.6.4 - 2026-01-20
+
+### Fixed
+
+- `queue`: Too eager removal of control data from deserialized task
+- Stop overriding existing `cds.requires.[service].credentials` configurations using values from `.cds-services.json`
+
 ## Version 9.6.3 - 2026-01-14
 
 ### Fixed

package/lib/srv/bindings.js

@@ -20,16 +20,21 @@ class Bindings {
   bind (service) {
     let required = cds.requires [service]
     let binding = this.provides [required?.service || service]
-    if (binding?.endpoints) {
+
+    if (binding?.endpoints && !required.credentials) {
+      // > Re-route requests to the mock service running locally
+
       const server = this.servers [binding.server]
       const kind = [ required?.kind, 'hcql', 'rest', 'odata' ].find (k => k in binding.endpoints)
       const path = binding.endpoints [kind]
+      
       // in case of cds.requires.Foo = { ... }
       if (typeof required === 'object') required.credentials = {
         ...required.credentials,
         ...binding.credentials,
         url: server.url + path
       }
+      
       // in case of cds.requires.Foo = true
       else required = cds.requires[service] = cds.env.requires[service] = {
         ...cds.requires.kinds [binding.kind],
@@ -38,11 +43,13 @@ class Bindings {
           url: server.url + path
         }
       }
+
       required.kind = kind
       // REVISIT: temporary fix to inherit kind as well for mocked odata services
       // otherwise mocking with two services does not work for kind:odata-v2
       if (kind === 'odata-v2' || kind === 'odata-v4') required.kind = 'odata'
     }
+    
     return required
   }
 

package/libx/queue/index.js

@@ -191,7 +191,8 @@ const _processTasks = (target, tenant, _opts = {}) => {
           const _msg = _safeJSONParse(_task.msg)
 
           const context = _msg.context || {}
-          delete _msg.context
+          // REVISIT: controlled context propagation
+          // delete _msg.context
 
           const userId = _msg[INTERNAL_USER]
           delete _msg[INTERNAL_USER]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sap/cds",
-  "version": "9.6.3",
+  "version": "9.6.4",
   "description": "SAP Cloud Application Programming Model - CDS for Node.js",
   "homepage": "https://cap.cloud.sap/",
   "keywords": [