fix: update dependencies

package.json

@@ -71,21 +71,21 @@
     "ncu": "ncu -ws --root"
   },
   "devDependencies": {
-    "@commitlint/cli": "^19.4.1",
-    "@commitlint/config-conventional": "^19.4.1",
+    "@commitlint/cli": "^19.5.0",
+    "@commitlint/config-conventional": "^19.5.0",
     "@prettier/plugin-xml": "^3.4.1",
     "cz-conventional-changelog": "^3.3.0",
-    "eslint": "^9.9.1",
-    "eslint-plugin-jsdoc": "^50.2.2",
-    "globals": "^15.9.0",
-    "husky": "^9.1.5",
-    "lerna": "^8.1.8",
+    "eslint": "^9.13.0",
+    "eslint-plugin-jsdoc": "^50.4.3",
+    "globals": "^15.11.0",
+    "husky": "^9.1.6",
+    "lerna": "^8.1.9",
     "lint-staged": "^15.2.10",
     "npm-run-all": "^4.1.5",
     "prettier": "^3.3.3",
     "prettier-plugin-properties": "^0.3.0",
     "pretty-quick": "^4.0.0",
-    "wait-on": "^8.0.0"
+    "wait-on": "^8.0.1"
   },
   "pnpm": {
     "overrides": {

packages/dev-approuter/package.json

@@ -11,10 +11,10 @@
     "directory": "packages/dev-approuter"
   },
   "dependencies": {
-    "@sap/approuter": ">=16.7.1",
-    "@sap/xsenv": "5.2.0",
+    "@sap/approuter": ">=17.0.0",
+    "@sap/xsenv": "5.4.0",
     "cds-plugin-ui5": "workspace:^",
-    "express": "^4.19.2",
+    "express": "^4.21.1",
     "ui5-middleware-cap": "workspace:^"
   }
 }

packages/ui5-middleware-approuter/.ncurc.json

@@ -0,0 +1,3 @@
+{
+  "reject": ["@ui5/cli", "@ui5/project", "@ui5/server", "http-proxy-middleware"]
+}

packages/ui5-middleware-approuter/package.json

@@ -23,7 +23,7 @@
     "timeout": "20s"
   },
   "dependencies": {
-    "@sap/approuter": "^16.7.1",
+    "@sap/approuter": "^17.0.0",
     "content-type": "^1.0.5",
     "dotenv": "^16.4.5",
     "http-proxy-middleware": "^2.0.6",
@@ -35,13 +35,13 @@
     "@ui5/cli": "^3",
     "@ui5/project": "^3",
     "@ui5/server": "^3",
-    "ava": "^6.1.3",
+    "ava": "^6.2.0",
     "envfile": "7.1.0",
     "get-port": "^7.1.0",
     "nock": "^13.5.5",
-    "replace-in-file": "^8.1.0",
+    "replace-in-file": "^8.2.0",
     "supertest": "^7.0.0",
     "ui5-middleware-websocket": "workspace:^",
-    "wait-on": "^8.0.0"
+    "wait-on": "^8.0.1"
   }
 }

packages/ui5-middleware-iasync/package.json

@@ -14,7 +14,7 @@
     "lint": "eslint lib"
   },
   "dependencies": {
-    "browser-sync": "^3.0.2",
+    "browser-sync": "^3.0.3",
     "connect-injector": "^0.4.4"
   }
 }

packages/ui5-middleware-onelogin/package.json

@@ -22,19 +22,19 @@
   },
   "dependencies": {
     "async-prompt": "^1.0.1",
-    "cookie": "^0.6.0",
+    "cookie": "^1.0.1",
     "dotenv": "^16.4.5",
-    "playwright-chromium": "^1.46.1",
-    "playwright-core": "^1.46.1",
+    "playwright-chromium": "^1.48.2",
+    "playwright-core": "^1.48.2",
     "sleep-promise": "^9.1.0"
   },
   "devDependencies": {
-    "@playwright/test": "^1.46.1",
-    "@types/cookie": "^0.6.0",
-    "@types/express": "^4.17.21",
-    "@types/prompt": "^1.1.8",
-    "eslint": "^9.9.1",
-    "globals": "^15.9.0",
-    "typescript-eslint": "^8.3.0"
+    "@playwright/test": "^1.48.2",
+    "@types/cookie": "^1.0.0",
+    "@types/express": "^5.0.0",
+    "@types/prompt": "^1.1.9",
+    "eslint": "^9.13.0",
+    "globals": "^15.11.0",
+    "typescript-eslint": "^8.12.2"
   }
 }

packages/ui5-middleware-servestatic/package.json

@@ -15,6 +15,6 @@
   },
   "dependencies": {
     "dotenv": "^16.4.5",
-    "serve-static": "^1.15.0"
+    "serve-static": "^1.16.2"
   }
 }

packages/ui5-middleware-simpleproxy/.ncurc.json

@@ -0,0 +1,3 @@
+{
+  "reject": ["@ui5/project", "@ui5/server", "http-proxy-middleware", "minimatch"]
+}

packages/ui5-middleware-simpleproxy/package.json

@@ -33,7 +33,7 @@
   "devDependencies": {
     "@ui5/project": "^3",
     "@ui5/server": "^3",
-    "ava": "^6.1.3",
+    "ava": "^6.2.0",
     "get-port": "^7.1.0",
     "nock": "^13.5.5",
     "node-tcp-proxy": "^0.0.28",

packages/ui5-middleware-ui5/package.json

@@ -14,7 +14,7 @@
     "lint": "eslint lib"
   },
   "dependencies": {
-    "express": "^4.19.2",
+    "express": "^4.21.1",
     "js-yaml": "^4.1.0",
     "node-html-parser": "^6.1.13",
     "ui5-utils-express": "workspace:^"

packages/ui5-task-cachebuster/.ncurc.json

@@ -0,0 +1,3 @@
+{
+  "reject": ["@ui5/cli"]
+}

packages/ui5-task-cachebuster/package.json

@@ -25,6 +25,6 @@
   },
   "devDependencies": {
     "@ui5/cli": "^3",
-    "ava": "^6.1.3"
+    "ava": "^6.2.0"
   }
 }

packages/ui5-task-copyright/.ncurc.json

@@ -0,0 +1,3 @@
+{
+  "reject": ["@ui5/cli"]
+}

packages/ui5-task-copyright/package.json

@@ -28,10 +28,10 @@
   },
   "devDependencies": {
     "@ui5/cli": "^3",
-    "ava": "^6.1.3"
+    "ava": "^6.2.0"
   },
   "dependencies": {
-    "@typescript-eslint/typescript-estree": "^8.4.0",
+    "@typescript-eslint/typescript-estree": "^8.12.2",
     "fast-xml-parser": "^4.5.0",
     "js-yaml": "^4.1.0"
   }

packages/ui5-task-i18ncheck/package.json

@@ -14,6 +14,6 @@
     "lint": "eslint lib"
   },
   "dependencies": {
-    "@xmldom/xmldom": "^0.9.0"
+    "@xmldom/xmldom": "^0.9.5"
   }
 }

packages/ui5-task-zipper/.ncurc.json

@@ -0,0 +1,3 @@
+{
+  "reject": ["@ui5/cli"]
+}

packages/ui5-task-zipper/package.json

@@ -24,11 +24,11 @@
     "timeout": "5m"
   },
   "dependencies": {
-    "yazl": "^2.5.1"
+    "yazl": "^3.1.0"
   },
   "devDependencies": {
     "@ui5/cli": "^3",
-    "ava": "^6.1.3",
+    "ava": "^6.2.0",
     "yauzl": "^3.1.3"
   }
 }

packages/ui5-tooling-less/.ncurc.json

@@ -0,0 +1,3 @@
+{
+  "reject": ["@ui5/fs"]
+}

packages/ui5-tooling-modules/lib/util.js

@@ -1162,7 +1162,7 @@ module.exports = function (log, projectInfo) {
 				const cacheKey = createHash("md5")
 					.update(
 						`${myLastModified}:${lastModified}:${modules
-							.map((module) => module.name)
+							.map((module) => `${module.name}@${module.path}`)
 							.sort()
 							.join(",")}`,
 					)

packages/ui5-tooling-modules/package.json

@@ -29,24 +29,24 @@
     "@rollup/plugin-commonjs": "^26.0.1",
     "@rollup/plugin-inject": "^5.0.5",
     "@rollup/plugin-json": "^6.1.0",
-    "@rollup/plugin-replace": "^5.0.7",
+    "@rollup/plugin-replace": "^6.0.1",
     "@rollup/plugin-terser": "^0.4.4",
-    "@rollup/pluginutils": "^5.1.0",
-    "@typescript-eslint/typescript-estree": "^8.4.0",
-    "chokidar": "^3.6.0",
+    "@rollup/pluginutils": "^5.1.3",
+    "@typescript-eslint/typescript-estree": "^8.12.2",
+    "chokidar": "^4.0.1",
     "estree-walker": "^3.0.3",
     "fast-xml-parser": "^4.5.0",
     "handlebars": "^4.7.8",
-    "ignore-walk": "^6.0.5",
+    "ignore-walk": "^7.0.0",
     "minimatch": "^7.4.6",
-    "rollup": "^4.21.2",
+    "rollup": "^4.24.3",
     "rollup-plugin-polyfill-node": "^0.13.0",
     "sanitize-filename": "^1.6.3",
     "semver": "^7.6.3"
   },
   "devDependencies": {
     "@ui5/project": "*",
-    "ava": "^6.1.3"
+    "ava": "^6.2.0"
   },
   "peerDependencies": {
     "@ui5/project": ">=3 <5"

packages/ui5-tooling-modules/test/__snap__/09909941/@opentelemetry/sdk-trace-web.js

@@ -424,7 +424,7 @@ sap.ui.define(['exports', 'ui5/ecosystem/demo/app/resources/index3'], (function
     function isEnvVarANumber(key) {
       return ENVIRONMENT_NUMBERS_KEYS.indexOf(key) > -1;
     }
-    var ENVIRONMENT_LISTS_KEYS = ["OTEL_NO_PATCH_MODULES", "OTEL_PROPAGATORS"];
+    var ENVIRONMENT_LISTS_KEYS = ["OTEL_NO_PATCH_MODULES", "OTEL_PROPAGATORS", "OTEL_SEMCONV_STABILITY_OPT_IN"];
     function isEnvVarAList(key) {
       return ENVIRONMENT_LISTS_KEYS.indexOf(key) > -1;
     }
@@ -509,7 +509,8 @@ sap.ui.define(['exports', 'ui5/ecosystem/demo/app/resources/index3'], (function
       OTEL_EXPORTER_OTLP_TRACES_PROTOCOL: "http/protobuf",
       OTEL_EXPORTER_OTLP_METRICS_PROTOCOL: "http/protobuf",
       OTEL_EXPORTER_OTLP_LOGS_PROTOCOL: "http/protobuf",
-      OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE: "cumulative"
+      OTEL_EXPORTER_OTLP_METRICS_TEMPORALITY_PREFERENCE: "cumulative",
+      OTEL_SEMCONV_STABILITY_OPT_IN: []
     };
     function parseBoolean(key, environment, values) {
       if (typeof values[key] === "undefined") {
@@ -734,7 +735,7 @@ sap.ui.define(['exports', 'ui5/ecosystem/demo/app/resources/index3'], (function
      * limitations under the License.
      */
     // this is autogenerated file, see scripts/version-update.js
-    var VERSION$1 = '1.26.0';
+    var VERSION$1 = '1.27.0';
 
     var src = {};
 
@@ -5778,7 +5779,7 @@ sap.ui.define(['exports', 'ui5/ecosystem/demo/app/resources/index3'], (function
                     return propagator.extract(ctx, carrier, getter);
                 }
                 catch (err) {
-                    index.src.diag.warn("Failed to inject with " + propagator.constructor.name + ". Err: " + err.message);
+                    index.src.diag.warn("Failed to extract with " + propagator.constructor.name + ". Err: " + err.message);
                 }
                 return ctx;
             }, context);
@@ -6662,6 +6663,17 @@ sap.ui.define(['exports', 'ui5/ecosystem/demo/app/resources/index3'], (function
      * See the License for the specific language governing permissions and
      * limitations under the License.
      */
+    var __assign$2 = (this && this.__assign) || function () {
+        __assign$2 = Object.assign || function(t) {
+            for (var s, i = 1, n = arguments.length; i < n; i++) {
+                s = arguments[i];
+                for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                    t[p] = s[p];
+            }
+            return t;
+        };
+        return __assign$2.apply(this, arguments);
+    };
     var __values$2 = (this && this.__values) || function(o) {
         var s = typeof Symbol === "function" && Symbol.iterator, m = s && o[s], i = 0;
         if (m) return m.call(o);
@@ -6833,7 +6845,15 @@ sap.ui.define(['exports', 'ui5/ecosystem/demo/app/resources/index3'], (function
         Span.prototype.setStatus = function (status) {
             if (this._isSpanEnded())
                 return this;
-            this.status = status;
+            this.status = __assign$2({}, status);
+            // When using try-catch, the caught "error" is of type `any`. When then assigning `any` to `status.message`,
+            // TypeScript will not error. While this can happen during use of any API, it is more common on Span#setStatus()
+            // as it's likely used in a catch-block. Therefore, we validate if `status.message` is actually a string, null, or
+            // undefined to avoid an incorrect type causing issues downstream.
+            if (this.status.message != null && typeof status.message !== 'string') {
+                index.src.diag.warn("Dropping invalid status.message of type '" + typeof status.message + "', expected 'string'");
+                delete this.status.message;
+            }
             return this;
         };
         Span.prototype.updateName = function (name) {

packages/ui5-tooling-modules/test/__snap__/3735c14e/cmis.js

@@ -19444,7 +19444,7 @@ sap.ui.define((function () { 'use strict';
 	  }
 
 	  // https://github.com/felixge/node-form-data/issues/38
-	  if (util.isArray(value)) {
+	  if (Array.isArray(value)) {
 	    // Please convert your array into string
 	    // the way web server expects it
 	    this._error(new Error('Arrays are not supported.'));