Merge branch 'main' of https://github.com/SAP/cloud-sdk-js into I753325-esm-support-oData

Author: BrigittaK307

.github/actions/check-license/index.js

@@ -65,7 +65,7 @@ jobs:
           node-version: 22
           cache: 'yarn'
       - name: REUSE Compliance Check
-        uses: fsfe/reuse-action@v5
+        uses: fsfe/reuse-action@v6
       - run: yarn install --frozen-lockfile --ignore-engines
       - run: yarn lint
         name: Static Code Check

.github/actions/check-public-api/index.js

@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           config-file: ./.github/codeql/codeql-config.yml
@@ -50,7 +50,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@v4
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -64,4 +64,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4

.github/workflows/build.yml

@@ -28,6 +28,11 @@
 
 -
 
+# 4.1.2
+## Fixed Issues
+
+- [connectivity, http-client, openapi, resilience, util] Update `axios` to `1.12.2` to fix vulnerability to DoS attack. Refer [here](https://github.com/advisories/GHSA-4hjh-wcwx-xvwj) for more details. (011b841)
+
 # 4.1.1
 ## Fixed Issues
 

.github/workflows/codeql-analysis.yml

@@ -1,4 +1,4 @@
-## Version: 4.1.1
+## Version: 4.1.2
 
 The SAP Cloud SDK for JavaScript consists of multiple libraries to enable you to write side-by-side extensions on SAP Business Technology Platform.
 

CHANGELOG.md

@@ -19,10 +19,10 @@
     "semver": "^7.7.2"
   },
   "devDependencies": {
-    "@vercel/ncc": "^0.38.3",
+    "@vercel/ncc": "^0.38.4",
     "depcheck": "^1.4.7",
     "eslint": "^8.57.1",
     "prettier": "^3.6.2",
-    "typescript": "~5.9.2"
+    "typescript": "~5.9.3"
   }
 }

DOCUMENTATION.md

@@ -16,10 +16,10 @@
       "@actions/core": "^1.10.1"
     },
     "devDependencies": {
-      "@vercel/ncc": "^0.38.3",
+      "@vercel/ncc": "^0.38.4",
       "depcheck": "^1.4.7",
       "eslint": "^8.57.0",
       "prettier": "^3.6.2",
-      "typescript": "~5.9.2"
+      "typescript": "~5.9.3"
     }
   }

build-packages/changesets-fixed-version-bump/package.json

@@ -19,11 +19,11 @@
     "@actions/github": "^6.0.1"
   },
   "devDependencies": {
-    "@vercel/ncc": "^0.38.3",
+    "@vercel/ncc": "^0.38.4",
     "depcheck": "^1.4.7",
     "eslint": "^8.57.1",
     "mock-fs": "^5.5.0",
     "prettier": "^3.6.2",
-    "typescript": "~5.9.2"
+    "typescript": "~5.9.3"
   }
 }

build-packages/check-license/package.json

@@ -24,10 +24,10 @@
     "mock-fs": "^5.5.0"
   },
   "devDependencies": {
-    "@vercel/ncc": "^0.38.3",
+    "@vercel/ncc": "^0.38.4",
     "depcheck": "^1.4.7",
     "eslint": "^8.57.0",
     "prettier": "^3.6.2",
-    "typescript": "~5.9.2"
+    "typescript": "~5.9.3"
   }
 }