Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 5, 2025

Bumps the all-npm-dependencies group with 5 updates in the / directory:

Package From To
@sap/cds-dk 9.4.3 9.5.0
@sap/cds-mtxs 3.4.4 3.5.0
@cap-js/hana 2.3.4 2.4.1
express 4.21.2 4.22.1
@cap-js/sqlite 2.0.4 2.1.0

Bumps the all-npm-dependencies group with 4 updates in the /mtx/sidecar directory: @sap/cds-mtxs, @cap-js/hana, express and @cap-js/sqlite.

Updates @sap/cds-dk from 9.4.3 to 9.5.0

Updates @sap/cds-mtxs from 3.4.4 to 3.5.0

Updates @cap-js/hana from 2.3.4 to 2.4.1

Release notes

Sourced from @​cap-js/hana's releases.

hana: v2.4.1

2.4.1 (2025-11-26)

Fixed

  • introduce repository.url in package.json (#1430) (00ad7fb)

db-service: v2.4.0

2.4.0 (2025-08-27)

Added

  • tuple expansion: allow structs with exactly one element/fk in comparison (#1291) (75ea826)
  • cds.db.foreach uses real object mode streaming (#1318) (cd28b53)

Fixed

  • assoc2join: target side access detection (#1282) (6f9befa)
  • cqn4sql: only consider own property [@cds](https://github.com/cds).persistence.skip (#1324) (bd1f52f)
  • exists: do not loose custom where (#1322) (644918c)
  • arithmetic operators can only be used with scalar operands (#1307) (d58d335)
  • detect path expression inside nested xpr after exists (#1292) (852d915), closes #1225
  • reject comparison of two empty structures (#1306) (d97304d)

hana: v2.4.0

2.4.0 (2025-11-26)

Added

Fixed

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​cap-js/db-service bumped from ^2.6.0 to ^2.7.0
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​cap-js/hana since your current version.


Updates @sap/cds from 9.4.4 to 9.5.1

Updates express from 4.21.2 to 4.22.1

Release notes

Sourced from express's releases.

v4.22.1

What's Changed

[!IMPORTANT]
The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: expressjs/express@4.22.0...v4.22.1

4.22.0

Important: Security

What's Changed

Full Changelog: expressjs/express@4.21.2...4.22.0

Changelog

Sourced from express's changelog.

4.22.1 / 2025-12-01

4.22.0 / 2025-12-01

Commits

Updates @cap-js/sqlite from 2.0.4 to 2.1.0

Release notes

Sourced from @​cap-js/sqlite's releases.

db-service: v2.1.0

2.1.0 (2025-06-04)

Added

hana: v2.1.0

2.1.0 (2025-06-04)

Added

Fixed

  • hana skip hextobin conversion for "select x from ..." input (#1215) (e6d3d1b)

postgres: v2.1.0

2.1.0 (2025-11-26)

Added

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​cap-js/db-service bumped from ^2.6.0 to ^2.7.0

sqlite: v2.1.0

2.1.0 (2025-11-26)

Added

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​cap-js/db-service bumped from ^2.6.0 to ^2.7.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​cap-js/sqlite since your current version.


Updates @cap-js/hana from 2.3.4 to 2.4.1

Release notes

Sourced from @​cap-js/hana's releases.

hana: v2.4.1

2.4.1 (2025-11-26)

Fixed

  • introduce repository.url in package.json (#1430) (00ad7fb)

db-service: v2.4.0

2.4.0 (2025-08-27)

Added

  • tuple expansion: allow structs with exactly one element/fk in comparison (#1291) (75ea826)
  • cds.db.foreach uses real object mode streaming (#1318) (cd28b53)

Fixed

  • assoc2join: target side access detection (#1282) (6f9befa)
  • cqn4sql: only consider own property [@cds](https://github.com/cds).persistence.skip (#1324) (bd1f52f)
  • exists: do not loose custom where (#1322) (644918c)
  • arithmetic operators can only be used with scalar operands (#1307) (d58d335)
  • detect path expression inside nested xpr after exists (#1292) (852d915), closes #1225
  • reject comparison of two empty structures (#1306) (d97304d)

hana: v2.4.0

2.4.0 (2025-11-26)

Added

Fixed

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​cap-js/db-service bumped from ^2.6.0 to ^2.7.0
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​cap-js/hana since your current version.


Updates @sap/cds from 9.4.4 to 9.5.1

Updates @sap/cds-mtxs from 3.4.4 to 3.5.0

Updates express from 4.21.2 to 4.22.1

Release notes

Sourced from express's releases.

v4.22.1

What's Changed

[!IMPORTANT]
The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: expressjs/express@4.22.0...v4.22.1

4.22.0

Important: Security

What's Changed

Full Changelog: expressjs/express@4.21.2...4.22.0

Changelog

Sourced from express's changelog.

4.22.1 / 2025-12-01

4.22.0 / 2025-12-01

Commits

Updates @cap-js/sqlite from 2.0.4 to 2.1.0

Release notes

Sourced from @​cap-js/sqlite's releases.

db-service: v2.1.0

2.1.0 (2025-06-04)

Added

hana: v2.1.0

2.1.0 (2025-06-04)

Added

Fixed

  • hana skip hextobin conversion for "select x from ..." input (#1215) (e6d3d1b)

postgres: v2.1.0

2.1.0 (2025-11-26)

Added

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​cap-js/db-service bumped from ^2.6.0 to ^2.7.0

sqlite: v2.1.0

2.1.0 (2025-11-26)

Added

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​cap-js/db-service bumped from ^2.6.0 to ^2.7.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​cap-js/sqlite since your current version.


Updates @sap/cds-mtxs from 3.4.4 to 3.5.0

Updates @cap-js/hana from 2.3.4 to 2.4.1

Release notes

Sourced from @​cap-js/hana's releases.

hana: v2.4.1

2.4.1 (2025-11-26)

Fixed

  • introduce repository.url in package.json (#1430) (00ad7fb)

db-service: v2.4.0

2.4.0 (2025-08-27)

Added

  • tuple expansion: allow structs with exactly one element/fk in comparison (#1291) (75ea826)
  • cds.db.foreach uses real object mode streaming (#1318) (cd28b53)

Fixed

  • assoc2join: target side access detection (#1282) (6f9befa)
  • cqn4sql: only consider own property [@cds](https://github.com/cds).persistence.skip (#1324) (bd1f52f)
  • exists: do not loose custom where (#1322) (644918c)
  • arithmetic operators can only be used with scalar operands (#1307) (d58d335)
  • detect path expression inside nested xpr after exists (#1292) (852d915), closes #1225
  • reject comparison of two empty structures (#1306) (d97304d)

hana: v2.4.0

2.4.0 (2025-11-26)

Added

Fixed

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​cap-js/db-service bumped from ^2.6.0 to ^2.7.0
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​cap-js/hana since your current version.


Updates @sap/cds from 9.4.4 to 9.5.1

Updates express from 4.21.2 to 4.22.1

Release notes

Sourced from express's releases.

v4.22.1

What's Changed

[!IMPORTANT]
The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: expressjs/express@4.22.0...v4.22.1

4.22.0

Important: Security

What's Changed

Full Changelog: expressjs/express@4.21.2...4.22.0

Changelog

Sourced from express's changelog.

4.22.1 / 2025-12-01

4.22.0 / 2025-12-01

Commits

Updates @cap-js/sqlite from 2.0.4 to 2.1.0

Release notes

Sourced from @​cap-js/sqlite's releases.

db-service: v2.1.0

2.1.0 (2025-06-04)

Added

hana: v2.1.0

2.1.0 (2025-06-04)

Added

Fixed

  • hana skip hextobin conversion for "select x from ..." input (#1215) (e6d3d1b)

postgres: v2.1.0

2.1.0 (2025-11-26)

Added

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​cap-js/db-service bumped from ^2.6.0 to ^2.7.0

sqlite: v2.1.0

2.1.0 (2025-11-26)

Added

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​cap-js/db-service bumped from ^2.6.0 to ^2.7.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​cap-js/sqlite since your current version.


Updates @cap-js/hana from 2.3.4 to 2.4.1

Release notes

Sourced from @​cap-js/hana's releases.

hana: v2.4.1

2.4.1 (2025-11-26)

Fixed

  • introduce repository.url in package.json (#1430) (00ad7fb)

db-service: v2.4.0

2.4.0 (2025-08-27)

Added

  • tuple expansion: allow structs with exactly one element/fk in comparison (#1291) (75ea826)
  • cds.db.foreach uses real object mode streaming (#1318) (cd28b53)

Fixed

  • assoc2join: target side access detection (#1282) (6f9befa)
  • cqn4sql: only consider own property [@cds](https://github.com/cds).persistence.skip (#1324) (bd1f52f)
  • exists: do not loose custom where (#1322) (644918c)
  • arithmetic operators can only be used with scalar operands (#1307) (d58d335)
  • detect path expression inside nested xpr after exists (#1292) (852d915), closes #1225
  • reject comparison of two empty structures (#1306) (d97304d)

hana: v2.4.0

2.4.0 (2025-11-26)

Added

Fixed

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​cap-js/db-service bumped from ^2.6.0 to ^2.7.0
Commits

Bumps the all-npm-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@sap/cds-dk](https://cap.cloud.sap/) | `9.4.3` | `9.5.0` |
| [@sap/cds-mtxs](https://cap.cloud.sap/) | `3.4.4` | `3.5.0` |
| [@cap-js/hana](https://github.com/cap-js/cds-dbs) | `2.3.4` | `2.4.1` |
| [express](https://github.com/expressjs/express) | `4.21.2` | `4.22.1` |
| [@cap-js/sqlite](https://github.com/cap-js/cds-dbs) | `2.0.4` | `2.1.0` |

Bumps the all-npm-dependencies group with 4 updates in the /mtx/sidecar directory: [@sap/cds-mtxs](https://cap.cloud.sap/), [@cap-js/hana](https://github.com/cap-js/cds-dbs), [express](https://github.com/expressjs/express) and [@cap-js/sqlite](https://github.com/cap-js/cds-dbs).


Updates `@sap/cds-dk` from 9.4.3 to 9.5.0

Updates `@sap/cds-mtxs` from 3.4.4 to 3.5.0

Updates `@cap-js/hana` from 2.3.4 to 2.4.1
- [Release notes](https://github.com/cap-js/cds-dbs/releases)
- [Changelog](https://github.com/cap-js/cds-dbs/blob/main/release-please-config.json)
- [Commits](cap-js/cds-dbs@hana-v2.3.4...hana-v2.4.1)

Updates `@sap/cds` from 9.4.4 to 9.5.1

Updates `express` from 4.21.2 to 4.22.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md)
- [Commits](expressjs/express@4.21.2...v4.22.1)

Updates `@cap-js/sqlite` from 2.0.4 to 2.1.0
- [Release notes](https://github.com/cap-js/cds-dbs/releases)
- [Changelog](https://github.com/cap-js/cds-dbs/blob/main/release-please-config.json)
- [Commits](cap-js/cds-dbs@sqlite-v2.0.4...hana-v2.1.0)

Updates `@cap-js/hana` from 2.3.4 to 2.4.1
- [Release notes](https://github.com/cap-js/cds-dbs/releases)
- [Changelog](https://github.com/cap-js/cds-dbs/blob/main/release-please-config.json)
- [Commits](cap-js/cds-dbs@hana-v2.3.4...hana-v2.4.1)

Updates `@sap/cds` from 9.4.4 to 9.5.1

Updates `@sap/cds-mtxs` from 3.4.4 to 3.5.0

Updates `express` from 4.21.2 to 4.22.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md)
- [Commits](expressjs/express@4.21.2...v4.22.1)

Updates `@cap-js/sqlite` from 2.0.4 to 2.1.0
- [Release notes](https://github.com/cap-js/cds-dbs/releases)
- [Changelog](https://github.com/cap-js/cds-dbs/blob/main/release-please-config.json)
- [Commits](cap-js/cds-dbs@sqlite-v2.0.4...hana-v2.1.0)

Updates `@sap/cds-mtxs` from 3.4.4 to 3.5.0

Updates `@cap-js/hana` from 2.3.4 to 2.4.1
- [Release notes](https://github.com/cap-js/cds-dbs/releases)
- [Changelog](https://github.com/cap-js/cds-dbs/blob/main/release-please-config.json)
- [Commits](cap-js/cds-dbs@hana-v2.3.4...hana-v2.4.1)

Updates `@sap/cds` from 9.4.4 to 9.5.1

Updates `express` from 4.21.2 to 4.22.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md)
- [Commits](expressjs/express@4.21.2...v4.22.1)

Updates `@cap-js/sqlite` from 2.0.4 to 2.1.0
- [Release notes](https://github.com/cap-js/cds-dbs/releases)
- [Changelog](https://github.com/cap-js/cds-dbs/blob/main/release-please-config.json)
- [Commits](cap-js/cds-dbs@sqlite-v2.0.4...hana-v2.1.0)

Updates `@cap-js/hana` from 2.3.4 to 2.4.1
- [Release notes](https://github.com/cap-js/cds-dbs/releases)
- [Changelog](https://github.com/cap-js/cds-dbs/blob/main/release-please-config.json)
- [Commits](cap-js/cds-dbs@hana-v2.3.4...hana-v2.4.1)

Updates `@sap/cds` from 9.4.4 to 9.5.1

Updates `@sap/cds-mtxs` from 3.4.4 to 3.5.0

Updates `express` from 4.21.2 to 4.22.1
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md)
- [Commits](expressjs/express@4.21.2...v4.22.1)

Updates `@cap-js/sqlite` from 2.0.4 to 2.1.0
- [Release notes](https://github.com/cap-js/cds-dbs/releases)
- [Changelog](https://github.com/cap-js/cds-dbs/blob/main/release-please-config.json)
- [Commits](cap-js/cds-dbs@sqlite-v2.0.4...hana-v2.1.0)

---
updated-dependencies:
- dependency-name: "@sap/cds-dk"
  dependency-version: 9.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@sap/cds-mtxs"
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@cap-js/hana"
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@sap/cds"
  dependency-version: 9.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: express
  dependency-version: 4.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@cap-js/sqlite"
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@cap-js/hana"
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@sap/cds"
  dependency-version: 9.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@sap/cds-mtxs"
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: express
  dependency-version: 4.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@cap-js/sqlite"
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@sap/cds-mtxs"
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@cap-js/hana"
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@sap/cds"
  dependency-version: 9.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: express
  dependency-version: 4.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@cap-js/sqlite"
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@cap-js/hana"
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@sap/cds"
  dependency-version: 9.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@sap/cds-mtxs"
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: express
  dependency-version: 4.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@cap-js/sqlite"
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 5, 2025
@beckermarc beckermarc merged commit 1e918e7 into main Dec 5, 2025
2 checks passed
@beckermarc beckermarc deleted the dependabot/npm_and_yarn/all-npm-dependencies-abaa23dae4 branch December 5, 2025 08:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants