@sap/eslint-plugin-cds 4.2.1 → 4.2.3

package/CHANGELOG.md

@@ -6,6 +6,14 @@ This project adheres to [Semantic Versioning](https://semver.org/).
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
+## [4.2.3] - 2026-05-12
+### Fixed
+- Don't fail if the `tree-sitter` dependency cannot be installed. This might happen in WebContainer environments where native modules cannot be loaded.
+
+## [4.2.2] - 2026-05-04
+### Fixed
+- `auth-valid-restrict-grant` now also considers inherited actions.
+
 ## [4.2.1] - 2026-02-26
 ### Fixed
 - Removed usage of deprecated API in `lib/utils/rules.js`

package/lib/index.js

@@ -19,7 +19,6 @@
 const api = require('./api')
 const getConfigs = require('./conf')
 const { allRules, initialiseRules } = require('./rules')
-const { javaLanguage } = require('./languages/java/java-language')
 const packageJson = require('../package.json')
 
 const rules = initialiseRules(allRules)
@@ -30,7 +29,7 @@ const plugin = {
     version: packageJson.version
   },
   languages: {
-    java: javaLanguage
+    get java() { return require('./languages/java/java-language').javaLanguage }
   },
   configs: {},
   rules,

package/lib/rules/auth-valid-restrict-grant.js

@@ -8,6 +8,38 @@ const SAME_AS_WRITE_EVENT = [ 'CREATE', 'DELETE', 'UPDATE', 'UPSERT' ]
 // Note that 'INSERT' is not meant to be used by users. They should use 'CREATE' instead.
 const VALID_EVENTS = [ ...SAME_AS_WRITE_EVENT, 'READ', 'INSERT', '*', 'WRITE']
 
+const isJoin = e => Boolean(e.query?.SELECT?.from.join)
+const isProjection = e => Boolean(e.query?.SELECT?.from.ref)
+const isSetUnion = e => Boolean(e.query?.SET?.op === 'union')
+const projectionTarget = e => e.query.SELECT.from.ref[0]
+
+function extractActions (e, csn) {
+  const getActions = e => Object.keys(e.actions ?? {})
+  const queue = [e]
+  const actions = []
+  while (queue.length) {
+    const entity = queue.pop()
+    actions.push(...getActions(entity))
+    if (isJoin(entity)) {
+      for (const { ref } of entity.query.SELECT.from.args[0].args) {
+        const ancestor = csn.definitions[ref[0]]
+        if (ancestor) {
+          queue.push(ancestor)
+        }
+      }
+    } else if (isProjection(entity)) {
+      const ancestor = csn.definitions[projectionTarget(entity)]
+      if (ancestor) {
+        queue.push(ancestor)
+      }
+    } else if (isSetUnion(entity)) {
+      // these are entities/ queries themselves. Just queue those.
+      queue.push(...entity.query.SET.args.map(e => ({query: e}) ))
+    }
+  }
+  return actions
+}
+
 const TYPICAL_ISSUES = {
   __proto__: null,
   any: '*'
@@ -45,7 +77,7 @@ module.exports = {
 
       const node = context.getNode(e)
       const file = e.$location.file
-      const actionNames = e.actions ? Object.keys(e.actions) : []
+      const actionNames = extractActions(e, context.getModel())
       const validEventsAndActions = [ ...VALID_EVENTS, ...actionNames ]
 
       for (const entry of e['@restrict']) {

package/lib/utils/csnTraversal.js

@@ -72,7 +72,7 @@ class CsnTraversal {
     if (!node || typeof node !== 'object')
       return
 
-    for (const name of Object.getOwnPropertyNames( dict ))
+    for (const name of Object.getOwnPropertyNames( dict ?? {} ))
       this.standard( dict, name, dict[name] )
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sap/eslint-plugin-cds",
-  "version": "4.2.1",
+  "version": "4.2.3",
   "description": "ESLint plugin including recommended SAP Cloud Application Programming model and environment rules",
   "homepage": "https://cap.cloud.sap/",
   "keywords": [
@@ -20,8 +20,10 @@
     "README.md"
   ],
   "dependencies": {
-    "@eslint/plugin-kit": "^0.6.0",
-    "semver": "^7.7.1",
+    "@eslint/plugin-kit": "^0.7.0",
+    "semver": "^7.7.1"
+  },
+  "optionalDependencies": {
     "tree-sitter": "^0.21.1",
     "tree-sitter-java": "^0.23.5"
   },