From aa9a0c7449386c563d01afc6d54cb1b8ef82f939 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 15:35:53 +0000 Subject: [PATCH 01/11] chore(deps): bump the github-actions group across 1 directory with 3 updates Bumps the github-actions group with 3 updates in the / directory: [tarides/changelog-check-action](https://github.com/tarides/changelog-check-action), [actions/checkout](https://github.com/actions/checkout) and [actions/setup-java](https://github.com/actions/setup-java). Updates `tarides/changelog-check-action` from 3 to 4 - [Release notes](https://github.com/tarides/changelog-check-action/releases) - [Commits](https://github.com/tarides/changelog-check-action/compare/0189fc7eedec3ef3e9648c713908f6f2a6e99057...8f47e0becbfa549e4c82a3f562aa6f90d2c2ee8c) Updates `actions/checkout` from 4.3.1 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4.3.1...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `actions/setup-java` from 4.8.0 to 5.6.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/v4.8.0...03ad4de0992f5dab5e18fcb136590ce7c4a0ac95) --- updated-dependencies: - dependency-name: tarides/changelog-check-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/check-changelog.yml | 2 +- .github/workflows/linter.yml | 4 ++-- .github/workflows/main.yml | 4 ++-- .github/workflows/pr.yml | 2 +- .github/workflows/release.yml | 10 +++++----- .github/workflows/sonarqube.yml | 2 +- .github/workflows/test.yml | 2 +- 7 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/check-changelog.yml b/.github/workflows/check-changelog.yml index 34c2e0f..614c623 100644 --- a/.github/workflows/check-changelog.yml +++ b/.github/workflows/check-changelog.yml @@ -9,6 +9,6 @@ jobs: name: Check Changelog Action runs-on: ubuntu-latest steps: - - uses: tarides/changelog-check-action@0189fc7eedec3ef3e9648c713908f6f2a6e99057 # v3 + - uses: tarides/changelog-check-action@8f47e0becbfa549e4c82a3f562aa6f90d2c2ee8c # v4 with: changelog: CHANGELOG.md \ No newline at end of file diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml index 2877bad..319c71b 100644 --- a/.github/workflows/linter.yml +++ b/.github/workflows/linter.yml @@ -6,9 +6,9 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4 - name: Set up JDK 21 - uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4 + uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 with: java-version: '21' distribution: 'temurin' diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index d464487..eea2ae4 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -17,7 +17,7 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - name: Scan With Black Duck uses: cap-java/.github/actions/scan-with-blackduck@296573b55e906f5c77a1855bcfe4285cbbc5cac4 #main @@ -39,7 +39,7 @@ jobs: packages: read steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - name: Scan With CodeQL uses: cap-java/.github/actions/scan-with-codeql@296573b55e906f5c77a1855bcfe4285cbbc5cac4 #main diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index d66f822..f940cb8 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -24,7 +24,7 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 - name: Scan With Black Duck uses: cap-java/.github/actions/scan-with-blackduck@296573b55e906f5c77a1855bcfe4285cbbc5cac4 #main diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3e82701..e7e5392 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -28,12 +28,12 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: ref: ${{ github.event.release.tag_name }} - name: Set up Java - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5 + uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 with: java-version: ${{ env.JAVA_VERSION }} distribution: sapmachine @@ -65,7 +65,7 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: ref: ${{ github.event.release.tag_name }} @@ -88,7 +88,7 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: ref: ${{ github.event.release.tag_name }} @@ -108,7 +108,7 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: ref: ${{ github.event.release.tag_name }} diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml index 3069790..2651e9c 100644 --- a/.github/workflows/sonarqube.yml +++ b/.github/workflows/sonarqube.yml @@ -19,7 +19,7 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: fetch-depth: 0 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 5f8163c..f9853f0 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4 - name: Test CAP Projects uses: ./.github/actions/test From efb66fcccf024e2567a9f43fbc3d06af3c40fca2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 15:35:45 +0000 Subject: [PATCH 02/11] chore(deps-dev): bump @sap/cds-dk from 10.0.4 to 10.0.5 Bumps [@sap/cds-dk](https://cap.cloud.sap/) from 10.0.4 to 10.0.5. --- updated-dependencies: - dependency-name: "@sap/cds-dk" dependency-version: 10.0.5 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- package-lock.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index 667fedf..3e0e38c 100644 --- a/package-lock.json +++ b/package-lock.json @@ -256,9 +256,9 @@ } }, "node_modules/@sap/cds-dk": { - "version": "10.0.4", - "resolved": "https://registry.npmjs.org/@sap/cds-dk/-/cds-dk-10.0.4.tgz", - "integrity": "sha512-xuA/Kgo5lkiyZYJM1JNYVsmYGoylPD0XMVbi2pWPdJ9opUN44WIn9/8T0qL9ouw84nUhvh3swz9XvXtNYsygNw==", + "version": "10.0.5", + "resolved": "https://registry.npmjs.org/@sap/cds-dk/-/cds-dk-10.0.5.tgz", + "integrity": "sha512-jbh5lK3oSwA6xzqxQeZbKkphzV0i57HutIo2friTuolS2QYHX9WOaVAZySqovoPmT8acQtqj5ki7/nuJepGBRA==", "bundleDependencies": [ "@cap-js/asyncapi", "@cap-js/db-service", @@ -594,7 +594,7 @@ } }, "node_modules/@sap/cds-dk/node_modules/@sap/cds-compiler": { - "version": "7.0.1", + "version": "7.0.2", "dev": true, "inBundle": true, "license": "SEE LICENSE IN LICENSE", @@ -1838,7 +1838,7 @@ "license": "ISC" }, "node_modules/@sap/cds-dk/node_modules/ws": { - "version": "8.21.0", + "version": "8.21.1", "dev": true, "inBundle": true, "license": "MIT", From 8a59328bb901600982989033ddfe0bca1e47aa3e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 12:28:41 +0000 Subject: [PATCH 03/11] chore(deps): bump org.junit:junit-bom from 6.0.1 to 6.1.2 Bumps [org.junit:junit-bom](https://github.com/junit-team/junit-framework) from 6.0.1 to 6.1.2. - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](https://github.com/junit-team/junit-framework/compare/r6.0.1...r6.1.2) --- updated-dependencies: - dependency-name: org.junit:junit-bom dependency-version: 6.1.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index ad23750..07d032f 100644 --- a/pom.xml +++ b/pom.xml @@ -92,7 +92,7 @@ org.junit junit-bom - 6.0.1 + 6.1.2 pom import From 018440d6d6cd19511622511d739d2c534428312c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 12:28:35 +0000 Subject: [PATCH 04/11] chore(deps): bump ch.qos.logback:logback-classic from 1.5.34 to 1.5.38 Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.34 to 1.5.38. - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](https://github.com/qos-ch/logback/compare/v_1.5.34...v_1.5.38) --- updated-dependencies: - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.37 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 07d032f..07f2232 100644 --- a/pom.xml +++ b/pom.xml @@ -108,7 +108,7 @@ ch.qos.logback logback-classic - 1.5.34 + 1.5.38 runtime From 32975ae72d1743bf1f3e366b4358815ac8c22ce4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 1 Jul 2026 15:38:42 +0000 Subject: [PATCH 05/11] chore(deps): bump org.apache.maven.plugins:maven-surefire-plugin Bumps [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) from 3.5.4 to 3.5.6. - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.4...surefire-3.5.6) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.5.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- integration-tests/pom.xml | 2 +- pom.xml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/integration-tests/pom.xml b/integration-tests/pom.xml index c6ab55b..aa29122 100644 --- a/integration-tests/pom.xml +++ b/integration-tests/pom.xml @@ -88,7 +88,7 @@ maven-surefire-plugin - 3.5.4 + 3.5.6 diff --git a/pom.xml b/pom.xml index 07f2232..7177a13 100644 --- a/pom.xml +++ b/pom.xml @@ -183,7 +183,7 @@ maven-surefire-plugin - 3.5.4 + 3.5.6 maven-failsafe-plugin From 579eef819e38123df45ac8fdeb338268c143981c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 1 Jul 2026 15:38:38 +0000 Subject: [PATCH 06/11] chore(deps): bump com.sap.cloud.sdk.cloudplatform:cloudplatform-connectivity Bumps [com.sap.cloud.sdk.cloudplatform:cloudplatform-connectivity](https://github.com/SAP/cloud-sdk-java) from 5.24.0 to 5.31.0. - [Release notes](https://github.com/SAP/cloud-sdk-java/releases) - [Changelog](https://github.com/SAP/cloud-sdk-java/blob/main/release_notes.md) - [Commits](https://github.com/SAP/cloud-sdk-java/compare/rel/5.24.0...rel/5.31.0) --- updated-dependencies: - dependency-name: com.sap.cloud.sdk.cloudplatform:cloudplatform-connectivity dependency-version: 5.31.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- cds-feature-notifications/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cds-feature-notifications/pom.xml b/cds-feature-notifications/pom.xml index 38a94bd..d725d6c 100644 --- a/cds-feature-notifications/pom.xml +++ b/cds-feature-notifications/pom.xml @@ -49,7 +49,7 @@ com.sap.cloud.sdk.cloudplatform cloudplatform-connectivity - 5.24.0 + 5.31.0 From e1833afa12adac0b9369357f42adb5dca03c2930 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 18 Jun 2026 10:54:00 +0000 Subject: [PATCH 07/11] chore(deps-dev): bump org.codehaus.mojo:build-helper-maven-plugin Bumps [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) from 3.3.0 to 3.6.1. - [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases) - [Commits](https://github.com/mojohaus/build-helper-maven-plugin/compare/build-helper-maven-plugin-3.3.0...3.6.1) --- updated-dependencies: - dependency-name: org.codehaus.mojo:build-helper-maven-plugin dependency-version: 3.6.1 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- cds-feature-notifications/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cds-feature-notifications/pom.xml b/cds-feature-notifications/pom.xml index d725d6c..f080c0e 100644 --- a/cds-feature-notifications/pom.xml +++ b/cds-feature-notifications/pom.xml @@ -195,7 +195,7 @@ org.codehaus.mojo build-helper-maven-plugin - 3.3.0 + 3.6.1 add-source From 72c0d8b049d8417f7091041065a706199db53fe2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 18 Jun 2026 10:53:56 +0000 Subject: [PATCH 08/11] chore(deps): bump org.apache.maven.plugins:maven-source-plugin Bumps [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) from 3.3.1 to 3.4.0. - [Release notes](https://github.com/apache/maven-source-plugin/releases) - [Commits](https://github.com/apache/maven-source-plugin/compare/maven-source-plugin-3.3.1...maven-source-plugin-3.4.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-source-plugin dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 7177a13..e00c395 100644 --- a/pom.xml +++ b/pom.xml @@ -161,7 +161,7 @@ maven-source-plugin - 3.3.1 + 3.4.0 maven-deploy-plugin From 37cb0458d17843af8077dfc822209601fdf0c385 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 18 Jun 2026 10:54:10 +0000 Subject: [PATCH 09/11] chore(deps-dev): bump org.assertj:assertj-core from 3.27.6 to 3.27.7 Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.6 to 3.27.7. - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.6...assertj-build-3.27.7) --- updated-dependencies: - dependency-name: org.assertj:assertj-core dependency-version: 3.27.7 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index e00c395..86092e1 100644 --- a/pom.xml +++ b/pom.xml @@ -136,7 +136,7 @@ org.assertj assertj-core - 3.27.6 + 3.27.7 test From 9d63f71dc0c4be7f9095969c7978e2e5f7738945 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 17 Jun 2026 08:17:54 +0000 Subject: [PATCH 10/11] chore(deps): bump org.apache.maven.plugins:maven-enforcer-plugin Bumps [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) from 3.6.2 to 3.6.3. - [Release notes](https://github.com/apache/maven-enforcer/releases) - [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.6.2...enforcer-3.6.3) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-enforcer-plugin dependency-version: 3.6.3 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- sample-app/pom.xml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pom.xml b/pom.xml index 86092e1..6b0f924 100644 --- a/pom.xml +++ b/pom.xml @@ -195,7 +195,7 @@ maven-enforcer-plugin - 3.6.2 + 3.6.3 org.codehaus.mojo diff --git a/sample-app/pom.xml b/sample-app/pom.xml index 95b52b4..8d64c0c 100644 --- a/sample-app/pom.xml +++ b/sample-app/pom.xml @@ -119,7 +119,7 @@ maven-enforcer-plugin - 3.6.2 + 3.6.3 Project Structure Checks From 336941d0b92e8ef6b6112b5d9911b520bd1e3a1a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 17 Jun 2026 08:18:02 +0000 Subject: [PATCH 11/11] chore(deps): bump org.apache.maven.plugins:maven-compiler-plugin Bumps [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) from 3.14.1 to 3.15.0. - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](https://github.com/apache/maven-compiler-plugin/compare/maven-compiler-plugin-3.14.1...maven-compiler-plugin-3.15.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.15.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 6b0f924..6d25da9 100644 --- a/pom.xml +++ b/pom.xml @@ -157,7 +157,7 @@ maven-compiler-plugin - 3.14.1 + 3.15.0 maven-source-plugin