Bump @sap-cloud-sdk/util from 4.0.2 to 4.7.0

[dependabot]

Bumps @sap-cloud-sdk/util from 4.0.2 to 4.7.0.

Release notes

Sourced from @​sap-cloud-sdk/util's releases.

v4.7.0

Compatibility Notes

• [connectivity] IAS tokens are now cached via @sap/xssec. @sap/xssec uses an LRU cache limited to 100 items, previously this cache was unbound. (9102f18)
• [eslint-config] Replaced eslint-plugin-import with eslint-plugin-import-x. Please ensure that you have eslint-plugin-import-x installed. (9cbf19d)

New Features

• [connectivity] Add createDestinationFromIasService() convenience function to build IAS-backed destinations. This function aims to offer more convenience for obtaining IAS-backed destinations outside SAP BTP-environments. (9102f18)
• [connectivity] Add getIasToken() convenience function to fetch IAS token. This function aims to offer more convenience for obtaining IAS tokens outside SAP BTP-environments. (9102f18)

Fixed Issues

• [connectivity] Avoid caching JWT if forwardAuthToken is set to true.
  • @​sap-cloud-sdk/resilience@​4.7.0
  • @​sap-cloud-sdk/util@​4.7.0 (df84426)
• [http-client] Warn when the CSRF token fetch URL has a different host than the request URL, as sensitive headers would be forwarded to the cross-host endpoint. (67e1c53)

Improvements

• [connectivity, http-client] Cache custom http and https agents and enable the keep-alive option by default. (d54ba5a)
• [connectivity, http-client] Use node's global http/https agent unless a custom agent is required by the destination configuration. (d54ba5a)

v4.6.0

Compatibility Notes

• [util] Deprecate unixEOL and webEOL. Use '\n' or '\r\n' respectively. (a6c8ff6)

Fixed Issues

• [connectivity] Destinations with authentication type "SAMLAssertion" are no longer cached, even if caching is enabled. (see SAP/cloud-sdk-js#6396) (0800e7a)
• [connectivity] Support TrustStoreLocation for OAuth2ClientCredentials destinations. (8637346)
• [connectivity] Extend isDestinationFetchOptions to check service property. (259d8ad)
• [http-client] Improve handling of missing zlib-module in the compress() middleware and lazy-load it only when needed. To compress requests in the browser, ensure that a suitable polyfill is provided. (7ea34ce)

v4.5.1

Fixed Issues

• [eslint-config] Correct formatting in ESLint flat-config (330230c)

v4.5.0

Compatibility Notes

• [connectivity] Update @sap/xssec to version 4.12.2 with changed XSUAA URL behavior. When fetching XSUAA tokens with zone ID (multi-tenant scenarios), xssec now uses the base domain without a tenant subdomain prefix. (02d1302)

... (truncated)

Changelog

Sourced from @​sap-cloud-sdk/util's changelog.

4.7.0

4.6.0

Minor Changes

• a6c8ff6: [Compatibility Note] Deprecate unixEOL and webEOL. Use '\n' or '\r\n' respectively.

4.5.1

4.5.0

4.4.0

4.3.1

4.3.0

4.2.0

4.1.2

Patch Changes

• 011b841: [Fixed Issue] Update axios to 1.12.2 to fix vulnerability to DoS attack. Refer here for more details.

4.1.1

Patch Changes

• b502b40: [Fixed Issue] Update axios to 1.11.0 to use non-vulnerable version of form-data.

4.1.0

Commits

• 2543133 v4.7.0
• 67e1c53 chore: Add warning logs for cross-host CSRF and iss-based destination fetch (...
• 9cbf19d feat: Bump eslint to v10 (#6552)
• f03422b chore(pnpm): Enable shell-emulator: true (#6545)
• 9b42f11 chore: Replace yarn with pnpm (#6448)
• d46268b chore: Replace mock-fs with memfs/unionfs for fs mocking (#6470)
• 3cb3955 chore: v4.6.0 (#6494)
• f24451e chore(deps): bump axios from 1.14.0 to 1.15.0 (#6478)
• 6f75535 chore: Replace chalk with styleText for logging formatting (#6420)
• a6c8ff6 chore: Deprecate unixEOL and webEOL (#6386)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​sap-cloud-sdk/util since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)