Skip to content

Bump @cap-js/attachments from 2.0.2 to 3.7.0#229

Closed
dependabot[bot] wants to merge 775 commits intodevelopfrom
dependabot/npm_and_yarn/cap-js/attachments-3.7.0
Closed

Bump @cap-js/attachments from 2.0.2 to 3.7.0#229
dependabot[bot] wants to merge 775 commits intodevelopfrom
dependabot/npm_and_yarn/cap-js/attachments-3.7.0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Jan 23, 2026

Bumps @cap-js/attachments from 2.0.2 to 3.7.0.

Release notes

Sourced from @​cap-js/attachments's releases.

v3.7.0

Added

  • Implemented automatic re-scanning of files whose last malware scan occurred more than 3 days ago, in alignment with the BTP Malware Scanning FAQ.
  • Enhanced error messages for file size violations to include the filename, e.g., The size of "myfile.jpeg" exceeds the maximum allowed limit of 5MB.

Fixed

  • Addressed an issue where files were deleted twice from the underlying object store, which previously resulted in error messages and looping through the outbox.

v3.6.1

Fixed

  • Resolved an issue where URLs for nested entities were not generated.
  • Fixed an internal server error in CDS 8 caused by the absence of cds.infer?.target.

v3.6.0

Added

  • Introduced support for @Validation.MaxItems and @Validation.MinItems annotations, enabling you to define the minimum and maximum number of attachments that can be uploaded.

    Example: Limit to a Maximum of 2 Attachments

    entity Incidents {
        @Validation.MaxItems: 2
        attachments: Composition of many Attachments;
    }

    Example: Require at Least 2 Attachments

    entity Incidents {
        @Validation.MinItems: 2
        attachments: Composition of many Attachments;
    }
  • Enhanced the note field to support multi-line input, improving readability for longer text entries.

Fixed

  • Prevented unauthorized users from accessing attachments.
  • Improved deletion logic for non-draft entities to ensure all associated attachments are reliably removed, preventing orphaned files and maintaining data consistency.
  • Handling the use of nested POST requests in non-draft mode.
  • Prevent overriding attachments using /content handler.

v3.5.0

Fixed

... (truncated)

Changelog

Sourced from @​cap-js/attachments's changelog.

Version 3.7.0

Added

  • Implemented automatic re-scanning of files whose last malware scan occurred more than 3 days ago, in alignment with the BTP Malware Scanning FAQ.
  • Enhanced error messages for file size violations to include the filename, e.g., The size of "myfile.jpeg" exceeds the maximum allowed limit of 5MB.

Fixed

  • Addressed an issue where files were deleted twice from the underlying object store, which previously resulted in error messages and looping through the outbox.

Version 3.6.1

Fixed

  • Resolved an issue where URLs for nested entities were not generated.
  • Fixed an internal server error in CDS 8 caused by the absence of cds.infer?.target.

Version 3.6.0

Added

  • Introduced support for @Validation.MaxItems and @Validation.MinItems annotations, enabling you to define the minimum and maximum number of attachments that can be uploaded.

    Example: Limit to a Maximum of 2 Attachments

    entity Incidents {
        @Validation.MaxItems: 2
        attachments: Composition of many Attachments;
    }

    Example: Require at Least 2 Attachments

    entity Incidents {
        @Validation.MinItems: 2
        attachments: Composition of many Attachments;
    }
  • Enhanced the note field to support multi-line input, improving readability for longer text entries.

Fixed

  • Prevented unauthorized users from accessing attachments.
  • Improved deletion logic for non-draft entities to ensure all associated attachments are reliably removed, preventing orphaned files and maintaining data consistency.
  • Handling the use of nested POST requests in non-draft mode.
  • Prevent overriding attachments using /content handler.

... (truncated)

Commits
  • b0c0367 Fix typo (#362)
  • 71dac54 Remove unused import of join from cds.utils.path in validateAttachmen… (#361)
  • bb278f9 Add filename to AttachmentSizeExceeded error message (#360)
  • a9a77b4 Remove lenient handling option for attachment scanning (#358)
  • 4894342 Implement automatic file rescanning and update related properties in … (#357)
  • ef71b9e WIP Re-add Automatic Deletion of Infected Files (#337)
  • afde7d1 Update CHANGELOG for version 3.6.1 and bump version in package.json (#356)
  • f9a4658 Internal server error supporting CDS 8 (#355)
  • 92b2d0a Nested Entities Missing URLs (#353)
  • 0079528 Fix links and formatting in README.md (#352)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​cap-js/attachments since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 23, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/cap-js/attachments-3.7.0 branch from 312a1d2 to 4917084 Compare February 3, 2026 07:25
@vibhutikumar07 vibhutikumar07 force-pushed the dependabot/npm_and_yarn/cap-js/attachments-3.7.0 branch from 4917084 to f8e5331 Compare April 8, 2026 06:18
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 8, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/cap-js/attachments-3.7.0 branch April 8, 2026 06:18
@vibhutikumar07 vibhutikumar07 restored the dependabot/npm_and_yarn/cap-js/attachments-3.7.0 branch April 8, 2026 06:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants