[generator, openapi-generator] Transpilation now includes inherited compiler options. (82a6d2d)
[generator, generator-common, openapi-generator] The project has been updated to typescript version 6.
Some options are deprecated in TypeScript 6, reference the breaking changes page for more details. (b7cfc1b)
[connectivity, http-client] A new agentOptions property on Destination allows configuring the underlying HTTP(S) agent (e.g. keepAlive, timeout) without constructing an agent manually. (32aab37)
[connectivity] HTTP(S) agents are now cached per destination instead of per protocol and options, preventing unintended agent reuse across different destinations. (34da40e)
[connectivity] Refactor HTTP agent cache for better runtime compatibility. (a42a3a2)
[connectivity,util] Fix DestinationOrFetchOptions and HttpDestinationOrFetchOptions so the service key surfaces at the type level. (24fe0c5)
[generator, openapi-generator] Transpilation now resolves extends inheritance in tsconfig files, merging base config options with child options taking precedence. (82a6d2d)
[openapi] Wrap Buffer responses in Blob when executing OpenAPI requests that return binary data. (e568017)
[connectivity] IAS tokens are now cached via @sap/xssec.
@sap/xssec uses an LRU cache limited to 100 items, previously this cache was unbound. (9102f18)
[eslint-config] Replaced eslint-plugin-import with eslint-plugin-import-x.
Please ensure that you have eslint-plugin-import-x installed. (9cbf19d)
[connectivity] Add createDestinationFromIasService() convenience function to build IAS-backed destinations.
This function aims to offer more convenience for obtaining IAS-backed destinations outside SAP BTP-environments. (9102f18)
[connectivity] Add getIasToken() convenience function to fetch IAS token.
This function aims to offer more convenience for obtaining IAS tokens outside SAP BTP-environments. (9102f18)
[connectivity] Avoid caching JWT if forwardAuthToken is set to true.
@sap-cloud-sdk/resilience@4.7.0
@sap-cloud-sdk/util@4.7.0 (df84426)
[http-client] Warn when the CSRF token fetch URL has a different host than the request URL, as sensitive headers would be forwarded to the cross-host endpoint. (67e1c53)
[connectivity] Support TrustStoreLocation for OAuth2ClientCredentials destinations. (8637346)
[connectivity] Extend isDestinationFetchOptions to check service property. (259d8ad)
[http-client] Improve handling of missing zlib-module in the compress() middleware and lazy-load it only when needed.
To compress requests in the browser, ensure that a suitable polyfill is provided. (7ea34ce)
[connectivity] Update @sap/xssec to version 4.12.2 with changed XSUAA URL behavior.
When fetching XSUAA tokens with zone ID (multi-tenant scenarios), xssec now uses the base domain without a tenant subdomain prefix. (02d1302)
[connectivity] Allow passing a service binding directly through DestinationFromServiceBindingOptions instead of looking it up by name. (962cdcb)
[http-client] Add signal property to CustomRequestConfig and HttpRequestConfigBase type definition to document AbortSignal support for cancelling HTTP requests. (cbed72f)
[http-client] Add request compression middleware.
Use the compress() middleware to compress HTTP request payloads using gzip, brotli, deflate, or zstd algorithms.
Supports multiple compression modes: auto (size-based), passthrough (pre-compressed), or forced compression. (f5715de)
[connectivity] Support IAS (App-to-App) authentication. Use transformServiceBindingToDestination() function or getDestinationFromServiceBinding() function to create a destination targeting an IAS application. (d444438)
[eslint-config] Open the peer dependency range of the eslint module to include version 8 and 9. Version 9 can now be used without the potentially unsafe npm flag --legacy-peer-deps. (6431463)
[connectivity, http-client, openapi, resilience, util] Update axios to 1.12.2 to fix vulnerability to DoS attack. Refer here for more details. (011b841)
[connectivity] The getDestinationFromDestinationService() function no longer verifies the incoming XSUAA JWT against the application's bound XSUAA instance. Consequently, the cacheVerificationKeys option is now deprecated and has no effect. (3c19ffa)
[connectivity] Remove dependency on XSUAA service binding while retrieving destinations using getDestinationFromDestinationService() and getAllDestinationsFromDestinationService() functions. (3c19ffa)
[connectivity] Remove destination cache in getDestinationFromServiceBinding() function to let cached destinations retrieved in getDestinationFromDestinationService() function be added with the proxyConfiguration property.
[connectivity] Enable destination caching by default when retrieving destinations via the destination service. Change affects behavior of getDestination() method, getAllDestinationsFromDestinationService() method, generated client's execute() method and generic HTTP requests execution using executeHttpRequest(). (d69325a)
[generator, odata-common, odata-v4] Support precision handling during serialization of Edm.DateTimeOffset fields in OData v4. (ab6ca60)
