v4.7.0

Compatibility Notes

• [connectivity] IAS tokens are now cached via @sap/xssec.
  @sap/xssec uses an LRU cache limited to 100 items, previously this cache was unbound. (9102f18)
• [eslint-config] Replaced eslint-plugin-import with eslint-plugin-import-x.
  Please ensure that you have eslint-plugin-import-x installed. (9cbf19d)

New Features

• [connectivity] Add createDestinationFromIasService() convenience function to build IAS-backed destinations.
  This function aims to offer more convenience for obtaining IAS-backed destinations outside SAP BTP-environments. (9102f18)
• [connectivity] Add getIasToken() convenience function to fetch IAS token.
  This function aims to offer more convenience for obtaining IAS tokens outside SAP BTP-environments. (9102f18)

Fixed Issues

• [connectivity] Avoid caching JWT if forwardAuthToken is set to true.
  • @sap-cloud-sdk/resilience@4.7.0
  • @sap-cloud-sdk/util@4.7.0 (df84426)
• [http-client] Warn when the CSRF token fetch URL has a different host than the request URL, as sensitive headers would be forwarded to the cross-host endpoint. (67e1c53)

Improvements

• [connectivity, http-client] Cache custom http and https agents and enable the keep-alive option by default. (d54ba5a)
• [connectivity, http-client] Use node's global http/https agent unless a custom agent is required by the destination configuration. (d54ba5a)

v4.6.0

Compatibility Notes

• [util] Deprecate unixEOL and webEOL. Use '\n' or '\r\n' respectively. (a6c8ff6)

Fixed Issues

• [connectivity] Destinations with authentication type "SAMLAssertion" are no longer cached, even if caching is enabled. (see #6396) (0800e7a)
• [connectivity] Support TrustStoreLocation for OAuth2ClientCredentials destinations. (8637346)
• [connectivity] Extend isDestinationFetchOptions to check service property. (259d8ad)
• [http-client] Improve handling of missing zlib-module in the compress() middleware and lazy-load it only when needed.
  To compress requests in the browser, ensure that a suitable polyfill is provided. (7ea34ce)

v4.5.1

Fixed Issues

• [eslint-config] Correct formatting in ESLint flat-config (330230c)

v4.5.0

Compatibility Notes

• [connectivity] Update @sap/xssec to version 4.12.2 with changed XSUAA URL behavior.
  When fetching XSUAA tokens with zone ID (multi-tenant scenarios), xssec now uses the base domain without a tenant subdomain prefix. (02d1302)

New Features

• [openapi, openapi-generator] Support request bodies with content type "multipart/form-data". (3b95c42)
• [openapi-generator] Allow OpenAPI version 3.1. style "type": "null" schemas. OpenAPI version 3.1. support is limited. (007541a)

Improvements

• [connectivity] Allow passing a service binding directly through DestinationFromServiceBindingOptions instead of looking it up by name. (962cdcb)
• [http-client] Add signal property to CustomRequestConfig and HttpRequestConfigBase type definition to document AbortSignal support for cancelling HTTP requests. (cbed72f)
• [http-client] Add request compression middleware.
  Use the compress() middleware to compress HTTP request payloads using gzip, brotli, deflate, or zstd algorithms.
  Supports multiple compression modes: auto (size-based), passthrough (pre-compressed), or forced compression. (f5715de)

v4.4.0

New Features

• [connectivity] Support IAS (App-to-App) authentication. Use transformServiceBindingToDestination() function or getDestinationFromServiceBinding() function to create a destination targeting an IAS application. (d444438)

v4.3.1

Improvements

• [eslint-config] Open the peer dependency range of the eslint module to include version 8 and 9. Version 9 can now be used without the potentially unsafe npm flag --legacy-peer-deps. (6431463)

v4.3.0

New Features

• [connectivity] Support certificates in JKS format for ClientCertificateAuthentication. (ab96aff)

v4.2.0

New Features

• [generator, generator-common] Introduce option generateESM in OData generator to generate ESM compatible code. (c73c7fa)

Fixed Issues

• [openapi] Fix missing type: module in generated package.json when --generateESM option is enabled. (e09754a)
• [openapi-generator] Improve the handling of arrays of enums (f17ca59)

v4.1.2

Fixed Issues

• [connectivity, http-client, openapi, resilience, util] Update axios to 1.12.2 to fix vulnerability to DoS attack. Refer here for more details. (011b841)

v4.1.1

Fixed Issues

• [connectivity, http-client, openapi, resilience, util] Update axios to 1.11.0 to use non-vulnerable version of form-data. (b502b40)