@ui5/webcomponents-base 2.20.0 → 2.20.2

package/dist/createReactComponent.d.ts

@@ -0,0 +1,26 @@
+/**
+ * React wrapper factory for UI5 Web Components.
+ *
+ * This lightweight factory creates typed React components that wrap UI5 Web Components.
+ * It handles:
+ * - Event prop conversion (onXxx → ui5-xxx event listeners)
+ * - Ref forwarding
+ * - Children handling
+ *
+ * Note: Supports React >=19.
+ *
+ * Note: This is for documentation samples only - for production React apps,
+ * use the official @ui5/webcomponents-react library.
+ */
+import type UI5Element from "@ui5/webcomponents-base/dist/UI5Element.js";
+/**
+ * Creates a React component wrapper for a UI5 Web Component.
+ *
+ * @param ComponentClass - The UI5 Web Component class (e.g., Button from "@ui5/webcomponents/dist/Button.js")
+ * @returns A React component that renders the custom element with proper TypeScript types
+ * @since 2.21.0
+ * @example
+ * import Button from "@ui5/webcomponents/dist/Button.js";
+ * const ReactButton = createReactComponent(Button);
+ */
+export default function createReactComponent<T extends typeof UI5Element>(klass: T): (props: InstanceType<T>["_jsxProps"]) => import("react").DOMElement<Record<string, unknown>, Element>;

package/dist/createReactComponent.js

@@ -0,0 +1,51 @@
+/**
+ * React wrapper factory for UI5 Web Components.
+ *
+ * This lightweight factory creates typed React components that wrap UI5 Web Components.
+ * It handles:
+ * - Event prop conversion (onXxx → ui5-xxx event listeners)
+ * - Ref forwarding
+ * - Children handling
+ *
+ * Note: Supports React >=19.
+ *
+ * Note: This is for documentation samples only - for production React apps,
+ * use the official @ui5/webcomponents-react library.
+ */
+import { createElement } from "react";
+/**
+ * Creates a React component wrapper for a UI5 Web Component.
+ *
+ * @param ComponentClass - The UI5 Web Component class (e.g., Button from "@ui5/webcomponents/dist/Button.js")
+ * @returns A React component that renders the custom element with proper TypeScript types
+ * @since 2.21.0
+ * @example
+ * import Button from "@ui5/webcomponents/dist/Button.js";
+ * const ReactButton = createReactComponent(Button);
+ */
+export default function createReactComponent(klass) {
+    const tag = klass.getMetadata().getTag();
+    return function Component(props) {
+        const patchedProps = {};
+        Object.entries(props).forEach(([key, value]) => {
+            if (key.startsWith("on") && typeof value === "function") {
+                // React 19 wraps DOM events (change, click, input, etc.) in SyntheticEvent,
+                // hiding CustomEvent.detail under nativeEvent.detail.
+                // Patch all event handlers to restore detail from nativeEvent.
+                const originalHandler = value;
+                patchedProps[key] = (e) => {
+                    const nativeDetail = e.nativeEvent?.detail;
+                    if (nativeDetail !== undefined) {
+                        e.detail = nativeDetail;
+                    }
+                    originalHandler(e);
+                };
+            }
+            else {
+                patchedProps[key] = value;
+            }
+        });
+        return createElement(tag, patchedProps);
+    };
+}
+//# sourceMappingURL=createReactComponent.js.map

package/dist/createReactComponent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createReactComponent.js","sourceRoot":"","sources":["../src/createReactComponent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAGtC;;;;;;;;;GASG;AACH,MAAM,CAAC,OAAO,UAAU,oBAAoB,CAA8B,KAAQ;IACjF,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,CAAC;IAEzC,OAAO,SAAS,SAAS,CAAC,KAAmC;QAC5D,MAAM,YAAY,GAA4B,EAAE,CAAC;QAEjD,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACzE,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;gBACzD,4EAA4E;gBAC5E,sDAAsD;gBACtD,+DAA+D;gBAC/D,MAAM,eAAe,GAAG,KAAK,CAAC;gBAC9B,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAQ,EAAE,EAAE;oBAChC,MAAM,YAAY,GAAI,CAAsD,CAAC,WAAW,EAAE,MAAM,CAAC;oBACjG,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;wBAC/B,CAAoC,CAAC,MAAM,GAAG,YAAY,CAAC;oBAC7D,CAAC;oBACD,eAAe,CAAC,CAAC,CAAC,CAAC;gBACpB,CAAC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACP,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC3B,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,OAAO,aAAa,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACzC,CAAC,CAAC;AACH,CAAC","sourcesContent":["/**\n * React wrapper factory for UI5 Web Components.\n *\n * This lightweight factory creates typed React components that wrap UI5 Web Components.\n * It handles:\n * - Event prop conversion (onXxx → ui5-xxx event listeners)\n * - Ref forwarding\n * - Children handling\n *\n * Note: Supports React >=19.\n *\n * Note: This is for documentation samples only - for production React apps,\n * use the official @ui5/webcomponents-react library.\n */\n\nimport { createElement } from \"react\";\nimport type UI5Element from \"@ui5/webcomponents-base/dist/UI5Element.js\";\n\n/**\n * Creates a React component wrapper for a UI5 Web Component.\n *\n * @param ComponentClass - The UI5 Web Component class (e.g., Button from \"@ui5/webcomponents/dist/Button.js\")\n * @returns A React component that renders the custom element with proper TypeScript types\n * @since 2.21.0\n * @example\n * import Button from \"@ui5/webcomponents/dist/Button.js\";\n * const ReactButton = createReactComponent(Button);\n */\nexport default function createReactComponent<T extends typeof UI5Element>(klass: T) {\n\tconst tag = klass.getMetadata().getTag();\n\n\treturn function Component(props: InstanceType<T>[\"_jsxProps\"]) {\n\t\tconst patchedProps: Record<string, unknown> = {};\n\n\t\tObject.entries(props as Record<string, unknown>).forEach(([key, value]) => {\n\t\t\tif (key.startsWith(\"on\") && typeof value === \"function\") {\n\t\t\t\t// React 19 wraps DOM events (change, click, input, etc.) in SyntheticEvent,\n\t\t\t\t// hiding CustomEvent.detail under nativeEvent.detail.\n\t\t\t\t// Patch all event handlers to restore detail from nativeEvent.\n\t\t\t\tconst originalHandler = value;\n\t\t\t\tpatchedProps[key] = (e: Event) => {\n\t\t\t\t\tconst nativeDetail = (e as unknown as { nativeEvent?: { detail: unknown } }).nativeEvent?.detail;\n\t\t\t\t\tif (nativeDetail !== undefined) {\n\t\t\t\t\t\t(e as unknown as { detail: unknown }).detail = nativeDetail;\n\t\t\t\t\t}\n\t\t\t\t\toriginalHandler(e);\n\t\t\t\t};\n\t\t\t} else {\n\t\t\t\tpatchedProps[key] = value;\n\t\t\t}\n\t\t});\n\n\t\treturn createElement(tag, patchedProps);\n\t};\n}\n"]}

package/dist/custom-elements-internal.json

@@ -842,6 +842,21 @@
         }
       ]
     },
+    {
+      "kind": "javascript-module",
+      "path": "dist/createReactComponent.js",
+      "declarations": [],
+      "exports": [
+        {
+          "kind": "js",
+          "name": "default",
+          "declaration": {
+            "name": "createReactComponent",
+            "module": "dist/createReactComponent.js"
+          }
+        }
+      ]
+    },
     {
       "kind": "javascript-module",
       "path": "dist/decorators.js",

package/dist/custom-elements.json

@@ -827,6 +827,21 @@
         }
       ]
     },
+    {
+      "kind": "javascript-module",
+      "path": "dist/createReactComponent.js",
+      "declarations": [],
+      "exports": [
+        {
+          "kind": "js",
+          "name": "default",
+          "declaration": {
+            "name": "createReactComponent",
+            "module": "dist/createReactComponent.js"
+          }
+        }
+      ]
+    },
     {
       "kind": "javascript-module",
       "path": "dist/decorators.js",

package/dist/generated/VersionInfo.js

@@ -1,11 +1,11 @@
 const VersionInfo = {
-    version: "2.20.0",
+    version: "2.20.2",
     major: 2,
     minor: 20,
-    patch: 0,
+    patch: 2,
     suffix: "",
     isNext: false,
-    buildTime: 1772704608,
+    buildTime: 1774015045,
 };
 export default VersionInfo;
 //# sourceMappingURL=VersionInfo.js.map

package/dist/generated/VersionInfo.js.map

@@ -1 +1 @@
-{"version":3,"file":"VersionInfo.js","sourceRoot":"","sources":["../../src/generated/VersionInfo.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,GAAG;IACnB,OAAO,EAAE,QAAQ;IACjB,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,EAAE;IACV,MAAM,EAAE,KAAK;IACb,SAAS,EAAE,UAAU;CACrB,CAAC;AACF,eAAe,WAAW,CAAC","sourcesContent":["const VersionInfo = {\n\tversion: \"2.20.0\",\n\tmajor: 2,\n\tminor: 20,\n\tpatch: 0,\n\tsuffix: \"\",\n\tisNext: false,\n\tbuildTime: 1772704608,\n};\nexport default VersionInfo;"]}
+{"version":3,"file":"VersionInfo.js","sourceRoot":"","sources":["../../src/generated/VersionInfo.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,GAAG;IACnB,OAAO,EAAE,QAAQ;IACjB,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,EAAE;IACV,MAAM,EAAE,KAAK;IACb,SAAS,EAAE,UAAU;CACrB,CAAC;AACF,eAAe,WAAW,CAAC","sourcesContent":["const VersionInfo = {\n\tversion: \"2.20.2\",\n\tmajor: 2,\n\tminor: 20,\n\tpatch: 2,\n\tsuffix: \"\",\n\tisNext: false,\n\tbuildTime: 1774015045,\n};\nexport default VersionInfo;"]}

package/dist/prod/createReactComponent.js

@@ -0,0 +1,2 @@
+"use strict";import{createElement as d}from"react";export default function p(i){const s=i.getMetadata().getTag();return function(r){const n={};return Object.entries(r).forEach(([t,e])=>{if(t.startsWith("on")&&typeof e=="function"){const c=e;n[t]=o=>{const a=o.nativeEvent?.detail;a!==void 0&&(o.detail=a),c(o)}}else n[t]=e}),d(s,n)}}
+//# sourceMappingURL=createReactComponent.js.map

package/dist/prod/createReactComponent.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/createReactComponent.ts"],
+  "sourcesContent": ["/**\n * React wrapper factory for UI5 Web Components.\n *\n * This lightweight factory creates typed React components that wrap UI5 Web Components.\n * It handles:\n * - Event prop conversion (onXxx \u2192 ui5-xxx event listeners)\n * - Ref forwarding\n * - Children handling\n *\n * Note: Supports React >=19.\n *\n * Note: This is for documentation samples only - for production React apps,\n * use the official @ui5/webcomponents-react library.\n */\n\nimport { createElement } from \"react\";\nimport type UI5Element from \"@ui5/webcomponents-base/dist/UI5Element.js\";\n\n/**\n * Creates a React component wrapper for a UI5 Web Component.\n *\n * @param ComponentClass - The UI5 Web Component class (e.g., Button from \"@ui5/webcomponents/dist/Button.js\")\n * @returns A React component that renders the custom element with proper TypeScript types\n * @since 2.21.0\n * @example\n * import Button from \"@ui5/webcomponents/dist/Button.js\";\n * const ReactButton = createReactComponent(Button);\n */\nexport default function createReactComponent<T extends typeof UI5Element>(klass: T) {\n\tconst tag = klass.getMetadata().getTag();\n\n\treturn function Component(props: InstanceType<T>[\"_jsxProps\"]) {\n\t\tconst patchedProps: Record<string, unknown> = {};\n\n\t\tObject.entries(props as Record<string, unknown>).forEach(([key, value]) => {\n\t\t\tif (key.startsWith(\"on\") && typeof value === \"function\") {\n\t\t\t\t// React 19 wraps DOM events (change, click, input, etc.) in SyntheticEvent,\n\t\t\t\t// hiding CustomEvent.detail under nativeEvent.detail.\n\t\t\t\t// Patch all event handlers to restore detail from nativeEvent.\n\t\t\t\tconst originalHandler = value;\n\t\t\t\tpatchedProps[key] = (e: Event) => {\n\t\t\t\t\tconst nativeDetail = (e as unknown as { nativeEvent?: { detail: unknown } }).nativeEvent?.detail;\n\t\t\t\t\tif (nativeDetail !== undefined) {\n\t\t\t\t\t\t(e as unknown as { detail: unknown }).detail = nativeDetail;\n\t\t\t\t\t}\n\t\t\t\t\toriginalHandler(e);\n\t\t\t\t};\n\t\t\t} else {\n\t\t\t\tpatchedProps[key] = value;\n\t\t\t}\n\t\t});\n\n\t\treturn createElement(tag, patchedProps);\n\t};\n}\n"],
+  "mappings": "aAeA,OAAS,iBAAAA,MAAqB,QAa9B,wBAAwBC,EAAkDC,EAAU,CACnF,MAAMC,EAAMD,EAAM,YAAY,EAAE,OAAO,EAEvC,OAAO,SAAmBE,EAAqC,CAC9D,MAAMC,EAAwC,CAAC,EAE/C,cAAO,QAAQD,CAAgC,EAAE,QAAQ,CAAC,CAACE,EAAKC,CAAK,IAAM,CAC1E,GAAID,EAAI,WAAW,IAAI,GAAK,OAAOC,GAAU,WAAY,CAIxD,MAAMC,EAAkBD,EACxBF,EAAaC,CAAG,EAAKG,GAAa,CACjC,MAAMC,EAAgBD,EAAuD,aAAa,OACtFC,IAAiB,SACnBD,EAAqC,OAASC,GAEhDF,EAAgBC,CAAC,CAClB,CACD,MACCJ,EAAaC,CAAG,EAAIC,CAEtB,CAAC,EAEMP,EAAcG,EAAKE,CAAY,CACvC,CACD",
+  "names": ["createElement", "createReactComponent", "klass", "tag", "props", "patchedProps", "key", "value", "originalHandler", "e", "nativeDetail"]
+}

package/dist/prod/generated/VersionInfo.js

@@ -1,2 +1,2 @@
-"use strict";const e={version:"2.20.0",major:2,minor:20,patch:0,suffix:"",isNext:!1,buildTime:1772704608};export default e;
+"use strict";const e={version:"2.20.2",major:2,minor:20,patch:2,suffix:"",isNext:!1,buildTime:1774015045};export default e;
 //# sourceMappingURL=VersionInfo.js.map

package/dist/prod/generated/VersionInfo.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/generated/VersionInfo.ts"],
-  "sourcesContent": ["const VersionInfo = {\n\tversion: \"2.20.0\",\n\tmajor: 2,\n\tminor: 20,\n\tpatch: 0,\n\tsuffix: \"\",\n\tisNext: false,\n\tbuildTime: 1772704608,\n};\nexport default VersionInfo;"],
+  "sourcesContent": ["const VersionInfo = {\n\tversion: \"2.20.2\",\n\tmajor: 2,\n\tminor: 20,\n\tpatch: 2,\n\tsuffix: \"\",\n\tisNext: false,\n\tbuildTime: 1774015045,\n};\nexport default VersionInfo;"],
   "mappings": "aAAA,MAAMA,EAAc,CACnB,QAAS,SACT,MAAO,EACP,MAAO,GACP,MAAO,EACP,OAAQ,GACR,OAAQ,GACR,UAAW,UACZ,EACA,eAAeA",
   "names": ["VersionInfo"]
 }

package/dist/prod/sap/base/Log.js

@@ -1,9 +1,8 @@
 /*!
  * OpenUI5
- * (c) Copyright 2009-2024 SAP SE or an SAP affiliate company.
+ * (c) Copyright 2026 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
-import BaseConfig from "./config.js";
 import now from "./util/now.js";
 /**
  * A Logging API for JavaScript.
@@ -202,8 +201,8 @@ function getLogEntryListenerInstance() {
  *   Name of the component that produced the log entry
  * @param {function} [fnSupportInfo]
  *   Callback that returns an additional support object to be logged in support mode.
- *   This function is only called if support info mode is turned on with
- *   <code>logSupportInfo(true)</code>. To avoid negative effects regarding execution times and
+ *   This function is only called if support info mode is turned on via
+ *   the Support Assistant. To avoid negative effects regarding execution times and
  *   memory consumption, the returned object should be a simple immutable JSON object with mostly
  *   static and stable content.
  * @public
@@ -225,8 +224,8 @@ Log.fatal = function (sMessage, vDetails, sComponent, fnSupportInfo) {
  *   Name of the component that produced the log entry
  * @param {function} [fnSupportInfo]
  *   Callback that returns an additional support object to be logged in support mode.
- *   This function is only called if support info mode is turned on with
- *   <code>logSupportInfo(true)</code>. To avoid negative effects regarding execution times and
+ *   This function is only called if support info mode is turned on via
+ *   the Support Assistant. To avoid negative effects regarding execution times and
  *   memory consumption, the returned object should be a simple immutable JSON object with mostly
  *   static and stable content.
  * @public
@@ -248,8 +247,8 @@ Log.error = function (sMessage, vDetails, sComponent, fnSupportInfo) {
  *   Name of the component that produced the log entry
  * @param {function} [fnSupportInfo]
  *   Callback that returns an additional support object to be logged in support mode.
- *   This function is only called if support info mode is turned on with
- *   <code>logSupportInfo(true)</code>. To avoid negative effects regarding execution times and
+ *   This function is only called if support info mode is turned on via
+ *   the Support Assistant. To avoid negative effects regarding execution times and
  *   memory consumption, the returned object should be a simple immutable JSON object with mostly
  *   static and stable content.
  * @public
@@ -271,8 +270,8 @@ Log.warning = function (sMessage, vDetails, sComponent, fnSupportInfo) {
  *   Name of the component that produced the log entry
  * @param {function} [fnSupportInfo]
  *   Callback that returns an additional support object to be logged in support mode.
- *   This function is only called if support info mode is turned on with
- *   <code>logSupportInfo(true)</code>. To avoid negative effects regarding execution times and
+ *   This function is only called if support info mode is turned on via
+ *   the Support Assistant. To avoid negative effects regarding execution times and
  *   memory consumption, the returned object should be a simple immutable JSON object with mostly
  *   static and stable content.
  * @public
@@ -294,8 +293,8 @@ Log.info = function (sMessage, vDetails, sComponent, fnSupportInfo) {
  *   Name of the component that produced the log entry
  * @param {function} [fnSupportInfo]
  *   Callback that returns an additional support object to be logged in support mode.
- *   This function is only called if support info mode is turned on with
- *   <code>logSupportInfo(true)</code>. To avoid negative effects regarding execution times and
+ *   This function is only called if support info mode is turned on via
+ *   the Support Assistant. To avoid negative effects regarding execution times and
  *   memory consumption, the returned object should be a simple immutable JSON object with mostly
  *   static and stable content.
  * @public
@@ -317,8 +316,8 @@ Log.debug = function (sMessage, vDetails, sComponent, fnSupportInfo) {
  *   Name of the component that produced the log entry
  * @param {function} [fnSupportInfo]
  *   Callback that returns an additional support object to be logged in support mode.
- *   This function is only called if support info mode is turned on with
- *   <code>logSupportInfo(true)</code>. To avoid negative effects regarding execution times and
+ *   This function is only called if support info mode is turned on via
+ *   the Support Assistant. To avoid negative effects regarding execution times and
  *   memory consumption, the returned object should be a simple immutable JSON object with mostly
  *   static and stable content.
  * @public
@@ -418,8 +417,8 @@ Log.logSupportInfo = function (bEnabled) {
  * @param {string} [sComponent]
  *   The log component under which the message should be logged
  * @param {function} [fnSupportInfo] Callback that returns an additional support object to be
- *   logged in support mode. This function is only called if support info mode is turned on with
- *   <code>logSupportInfo(true)</code>. To avoid negative effects regarding execution times and
+ *   logged in support mode. This function is only called if support info mode is turned on via
+ *   the Support Assistant. To avoid negative effects regarding execution times and
  *   memory consumption, the returned object should be a simple immutable JSON object with mostly
  *   static and stable content.
  * @returns {module:sap/base/Log.Entry}
@@ -734,17 +733,4 @@ Log.getLogger = function (sComponent, iDefaultLogLevel) {
   }
   return new Logger(sComponent);
 };
-
-// set LogLevel
-const sLogLevel = BaseConfig.get({
-  name: "sapUiLogLevel",
-  type: BaseConfig.Type.String,
-  defaultValue: undefined,
-  external: true
-});
-if (sLogLevel) {
-  Log.setLevel(Log.Level[sLogLevel.toUpperCase()] || parseInt(sLogLevel));
-} else if (!globalThis["sap-ui-optimized"]) {
-  Log.setLevel(Log.Level.DEBUG);
-}
 export default Log;

package/dist/prod/sap/base/assert.js

@@ -19,7 +19,7 @@
  *
  */ /*!
      * OpenUI5
-     * (c) Copyright 2009-2024 SAP SE or an SAP affiliate company.
+     * (c) Copyright 2026 SAP SE or an SAP affiliate company.
      * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
      */
 

package/dist/prod/sap/base/config/MemoryConfigurationProvider.js

@@ -1,6 +1,6 @@
 /*!
  * OpenUI5
- * (c) Copyright 2009-2024 SAP SE or an SAP affiliate company.
+ * (c) Copyright 2026 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
 import uid from "../util/uid.js";

package/dist/prod/sap/base/security/URLListValidator.js

@@ -1,11 +1,11 @@
 // validation regexes
 /*!
  * OpenUI5
- * (c) Copyright 2009-2024 SAP SE or an SAP affiliate company.
+ * (c) Copyright 2026 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
 
-var rBasicUrl = /^(?:([^:\/?#]+):)?((?:[\/\\]{2,}((?:\[[^\]]+\]|[^\/?#:]+))(?::([0-9]+))?)?([^?#]*))(?:\?([^#]*))?(?:#(.*))?$/;
+var rBasicUrl = /^(?:([^:\/?#]+):)?((?:[\/\\]{2,}(?:(?:[^@\/?#]*@)?(\[[^\]]+\]|[^\/?#:]+)(?::([0-9]+))?)?)?([^?#]*))(?:\?([^#]*))?(?:#(.*))?$/;
 var rCheckPath = /^([a-z0-9-._~!$&'()*+,;=:@]|%[0-9a-f]{2})*$/i;
 var rCheckQuery = /^([a-z0-9-._~!$&'()*+,;=:@\/?]|%[0-9a-f]{2})*$/i;
 var rCheckFragment = rCheckQuery;
@@ -104,7 +104,8 @@ oURLListValidator.clear = function () {
  * @param {string} [protocol] The protocol of the URL, can be falsy to allow all protocols for an entry e.g. "", "http", "mailto"
  * @param {string} [host] The host of the URL, can be falsy to allow all hosts. A wildcard asterisk can be set at the beginning, e.g. "examples.com", "*.example.com"
  * @param {string} [port] The port of the URL, can be falsy to allow all ports, e.g. "", "8080"
- * @param {string} [path] the path of the URL, path of the url, can be falsy to allow all paths. A wildcard asterisk can be set at the end, e.g. "/my-example*", "/my-news"
+ * @param {string} [path] the path of the URL, e.g. "/my-news". Can be falsy to allow all paths. A wildcard asterisk can be set at the end to ensure a path starts with the given string, e.g. "/my-example*".
+ * 	When using wildcards, make sure to only provide normalized URLs to the validate function in order to mitigate the risk of path traversal attacks.
  * @public
  */
 oURLListValidator.add = function (protocol, host, port, path) {
@@ -139,13 +140,16 @@ oURLListValidator.entries = function () {
  * Validates a URL. Check if it's not a script or other security issue.
  *
  * <b>Note</b>:
- * It is strongly recommended to validate only absolute URLs. There's almost no case
+ * It is strongly recommended to validate only absolute, normalized URLs. There's almost no case
  * where checking only the path of a URL would allow to ensure its validity.
- * For compatibility reasons, this API cannot automatically resolve URLs relative to
+ * For compatibility reasons, this API does not normalize URLs and cannot automatically resolve URLs relative to
  * <code>document.baseURI</code>, but callers should do so. In that case, and when the
  * allow list is not empty, an entry for the origin of <code>document.baseURI</code>
  * must be added to the allow list.
  *
+ * Any measures to mitigate path traversal or similar attack vectors must be taken by the caller, e.g. by using the
+ * {@link https://developer.mozilla.org/docs/Web/API/URL URL} API to normalize the URL beforehand.
+ *
  * <h3>Details</h3>
  * Splits the given URL into components and checks for allowed characters according to RFC 3986:
  *

package/dist/prod/sap/base/security/encodeCSS.js

@@ -1,6 +1,6 @@
 /*!
  * OpenUI5
- * (c) Copyright 2009-2024 SAP SE or an SAP affiliate company.
+ * (c) Copyright 2026 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
 import toHex from "../strings/toHex.js";

package/dist/prod/sap/base/security/encodeXML.js

@@ -1,6 +1,6 @@
 /*!
  * OpenUI5
- * (c) Copyright 2009-2024 SAP SE or an SAP affiliate company.
+ * (c) Copyright 2026 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
 import toHex from "../strings/toHex.js";

package/dist/prod/sap/base/security/sanitizeHTML.js

@@ -1,6 +1,6 @@
 /*!
  * OpenUI5
- * (c) Copyright 2009-2024 SAP SE or an SAP affiliate company.
+ * (c) Copyright 2026 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
 /*

package/dist/prod/sap/base/strings/toHex.js

@@ -15,7 +15,7 @@
  * @returns {string} padded hex representation of the given character code
  */ /*!
      * OpenUI5
-     * (c) Copyright 2009-2024 SAP SE or an SAP affiliate company.
+     * (c) Copyright 2026 SAP SE or an SAP affiliate company.
      * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
      */
 /*

package/dist/prod/sap/base/util/now.js

@@ -1,9 +1,6 @@
-// @evo-todo window.performance does not exist on node.js, but there is a module performance-now. Maybe use it
-
 /**
- * Returns a high resolution timestamp in microseconds if supported by the environment, otherwise in milliseconds.
- * The timestamp is based on 01/01/1970 00:00:00 (UNIX epoch) as float with microsecond precision or
- * with millisecond precision, if high resolution timestamps are not available.
+ * Returns a high resolution timestamp in microseconds.
+ * The timestamp is based on 01/01/1970 00:00:00 (UNIX epoch) as float with microsecond precision.
  * The fractional part of the timestamp represents fractions of a millisecond.
  * Converting to a <code>Date</code> is possible by using <code>require(["sap/base/util/now"], function(now){new Date(now());}</code>
  *
@@ -11,18 +8,15 @@
  * @since 1.58
  * @public
  * @alias module:sap/base/util/now
- * @returns {float} timestamp in microseconds if supported by the environment otherwise in milliseconds
+ * @returns {float} timestamp in microseconds
  */ /*!
      * OpenUI5
-     * (c) Copyright 2009-2024 SAP SE or an SAP affiliate company.
+     * (c) Copyright 2026 SAP SE or an SAP affiliate company.
      * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
      */
 /*global performance */
 
-var fnNow = !(typeof window != "undefined" && window.performance && performance.now && performance.timing) ? Date.now : function () {
-  var iNavigationStart = performance.timing.navigationStart;
-  return function perfnow() {
-    return iNavigationStart + performance.now();
-  };
-}();
+var fnNow = function now() {
+  return performance.timeOrigin + performance.now();
+};
 export default fnNow;

package/dist/prod/sap/base/util/uid.js

@@ -4,7 +4,7 @@
  * @private
  */ /*!
      * OpenUI5
-     * (c) Copyright 2009-2024 SAP SE or an SAP affiliate company.
+     * (c) Copyright 2026 SAP SE or an SAP affiliate company.
      * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
      */
 

package/dist/prod/sap/ui/thirdparty/caja-html-sanitizer.js

@@ -118,7 +118,11 @@ var cssSchema = (function () {
         'inset' ], [ 'invert' ], [ 'justify' ], [ 'local' ], [ 'medium' ], [
         'mix' ], [ 'none' ], [ 'normal' ], [ 'once' ], [ 'repeat' ], [ 'scroll'
       ], [ 'separate' ], [ 'small-caps' ], [ 'spell-out' ], [ 'transparent' ],
-      [ 'visible' ] ];
+      [ 'visible' ],
+      // ##### BEGIN: MODIFIED BY SAP
+      [ 'flex', 'inline-flex', 'grid', 'inline-grid', 'flow-root', 'contents' ], [ 'initial', 'revert', 'revert-layer', 'unset' ]
+      // ##### END: MODIFIED BY SAP
+    ];
     return {
       '-moz-border-radius': {
         'cssExtra': c[ 0 ],
@@ -440,7 +444,9 @@ var cssSchema = (function () {
       },
       'display': {
         'cssPropBits': 32,
-        'cssLitGroup': [ L[ 2 ], L[ 47 ], L[ 54 ] ]
+        // ##### BEGIN: MODIFIED BY SAP
+        'cssLitGroup': [ L[ 2 ], L[ 47 ], L[ 54 ], L[ 64 ], L[ 65 ] ]
+        // ##### END: MODIFIED BY SAP
       },
       'elevation': {
         'cssPropBits': 5,
@@ -707,6 +713,12 @@ var cssSchema = (function () {
         'cssPropBits': 0,
         'cssLitGroup': [ L[ 18 ], L[ 47 ], L[ 54 ] ]
       },
+      // ##### BEGIN: MODIFIED BY SAP
+      'text-decoration-line': {
+        'cssPropBits': 0,
+        'cssLitGroup': [ L[ 18 ], L[ 47 ], L[ 54 ] ]
+      },
+      // ##### END: MODIFIED BY SAP
       'text-indent': {
         'cssPropBits': 5,
         'cssLitGroup': [ L[ 47 ] ]
@@ -2004,7 +2016,7 @@ if (typeof window !== 'undefined') {
 }
 /*!
  * OpenUI5
- * (c) Copyright 2009-2024 SAP SE or an SAP affiliate company.
+ * (c) Copyright 2026 SAP SE or an SAP affiliate company.
  * Licensed under the Apache License, Version 2.0 - see LICENSE.txt.
  */
 // Based on coding from the HTML4 Sanitizer by Google Inc.

package/dist/react18/createReactComponent.d.ts

@@ -0,0 +1,38 @@
+/**
+ * React wrapper factory for UI5 Web Components.
+ *
+ * This lightweight factory creates typed React components that wrap UI5 Web Components.
+ * It handles:
+ * - Event prop conversion (onXxx → ui5-xxx event listeners)
+ * - Ref forwarding
+ * - Children handling
+ *
+ * Note: The function supports react >= 18.
+ * Note: This is for documentation samples only - for production React apps,
+ * use the official @ui5/webcomponents-react library.
+ */
+import * as React from "react";
+import type { ReactNode } from "react";
+import type UI5Element from "../UI5Element.js";
+interface UI5ComponentClass<T extends UI5Element = UI5Element> {
+    new (): T;
+    getMetadata(): {
+        getTag(): string;
+    };
+}
+/**
+ * Creates a React component wrapper for a UI5 Web Component.
+ * Uses the component's _jsxProps type for full TypeScript support.
+ *
+ * @param ComponentClass - The UI5 Web Component class (e.g., Button from "@ui5/webcomponents/dist/Button.js")
+ * @returns A React component that renders the custom element with proper TypeScript types
+ * @since 2.21.0
+ * @example
+ * import Button from "@ui5/webcomponents/dist/Button.js";
+ * const ReactButton = createReactComponent(Button);
+ * // ReactButton props are typed based on Button's _jsxProps
+ */
+declare function createReactComponent<T extends UI5Element>(ComponentClass: UI5ComponentClass<T>): React.ForwardRefExoticComponent<React.PropsWithoutRef<T["_jsxProps"] & {
+    children?: ReactNode;
+}> & React.RefAttributes<T>>;
+export default createReactComponent;

package/dist/react18/createReactComponent.js

@@ -0,0 +1,112 @@
+/**
+ * React wrapper factory for UI5 Web Components.
+ *
+ * This lightweight factory creates typed React components that wrap UI5 Web Components.
+ * It handles:
+ * - Event prop conversion (onXxx → ui5-xxx event listeners)
+ * - Ref forwarding
+ * - Children handling
+ *
+ * Note: The function supports react >= 18.
+ * Note: This is for documentation samples only - for production React apps,
+ * use the official @ui5/webcomponents-react library.
+ */
+import * as React from "react";
+import { useRef, useEffect, forwardRef, } from "react";
+// Helper to convert event name
+const toEventName = (propName) => {
+    return propName
+        .slice(2) // Remove "on"
+        .replace(/([A-Z])/g, (match, letter, index) => {
+        return index === 0 ? letter.toLowerCase() : `-${letter.toLowerCase()}`;
+    });
+};
+// Helper to create cleanup function for event listener
+const createEventCleanup = (element, eventName, handler) => {
+    element.addEventListener(eventName, handler);
+    return () => element.removeEventListener(eventName, handler);
+};
+/**
+ * Creates a React component wrapper for a UI5 Web Component.
+ * Uses the component's _jsxProps type for full TypeScript support.
+ *
+ * @param ComponentClass - The UI5 Web Component class (e.g., Button from "@ui5/webcomponents/dist/Button.js")
+ * @returns A React component that renders the custom element with proper TypeScript types
+ * @since 2.21.0
+ * @example
+ * import Button from "@ui5/webcomponents/dist/Button.js";
+ * const ReactButton = createReactComponent(Button);
+ * // ReactButton props are typed based on Button's _jsxProps
+ */
+function createReactComponent(ComponentClass) {
+    const tagName = ComponentClass.getMetadata().getTag();
+    const Component = forwardRef((props, ref) => {
+        const { children, ...restProps } = props;
+        const elementRef = useRef(null);
+        // Forward ref
+        useEffect(() => {
+            if (ref) {
+                if (typeof ref === "function") {
+                    ref(elementRef.current);
+                }
+                else {
+                    ref.current = elementRef.current;
+                }
+            }
+        }, [ref]);
+        // Handle event props and boolean props imperatively
+        useEffect(() => {
+            const element = elementRef.current;
+            if (!element) {
+                return;
+            }
+            const eventCleanups = [];
+            Object.keys(restProps).forEach(propName => {
+                const propValue = restProps[propName];
+                if (propName.startsWith("on") && typeof propValue === "function") {
+                    // Convert React event naming (onClick, onSelectionChange) to DOM event naming
+                    // onClick -> click, onSelectionChange -> selection-change
+                    const eventName = toEventName(propName);
+                    const handler = propValue;
+                    eventCleanups.push(createEventCleanup(element, eventName, handler));
+                }
+                else if (typeof propValue === "boolean") {
+                    // React 18 sets false booleans as empty string attributes on custom elements.
+                    // Set as property directly to avoid this.
+                    element[propName] = propValue;
+                }
+            });
+            return () => {
+                eventCleanups.forEach(cleanup => cleanup());
+            };
+        }, [restProps]);
+        // Filter out event handlers and booleans from DOM props
+        const domProps = {};
+        Object.keys(restProps).forEach(propName => {
+            const propValue = restProps[propName];
+            if (propName.startsWith("on") && typeof propValue === "function") {
+                return;
+            }
+            if (typeof propValue === "boolean") {
+                return;
+            } // handled in useEffect
+            // className → class for React compatibility
+            if (propName === "className") {
+                // eslint-disable-next-line dot-notation
+                domProps["class"] = propValue;
+                return;
+            }
+            // Convert camelCase to kebab-case for HTML attributes
+            const attrName = propName.replace(/([A-Z])/g, "-$1").toLowerCase();
+            domProps[attrName] = propValue;
+        });
+        return React.createElement(tagName, { ref: elementRef, ...domProps }, children);
+    });
+    Component.displayName = tagName
+        .split("-")
+        .map(part => part.charAt(0).toUpperCase() + part.slice(1))
+        .join("");
+    return Component;
+}
+export default createReactComponent;
+//# sourceMappingURL=createReactComponent.js.map