Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 9, 2026

Bumps @cap-js/attachments from 2.0.2 to 3.6.0.

Release notes

Sourced from @​cap-js/attachments's releases.

v3.6.0

Added

  • Introduced support for @Validation.MaxItems and @Validation.MinItems annotations, enabling you to define the minimum and maximum number of attachments that can be uploaded.

    Example: Limit to a Maximum of 2 Attachments

    entity Incidents {
        @Validation.MaxItems: 2
        attachments: Composition of many Attachments;
    }

    Example: Require at Least 2 Attachments

    entity Incidents {
        @Validation.MinItems: 2
        attachments: Composition of many Attachments;
    }
  • Enhanced the note field to support multi-line input, improving readability for longer text entries.

Fixed

  • Prevented unauthorized users from accessing attachments.
  • Improved deletion logic for non-draft entities to ensure all associated attachments are reliably removed, preventing orphaned files and maintaining data consistency.
  • Handling the use of nested POST requests in non-draft mode.
  • Prevent overriding attachments using /content handler.

v3.5.0

Fixed

  • Enforced the use of the Content-Length header to prevent server errors.
  • Designated the content property in the Attachments table as a NonSortableProperty to prevent database errors when sorting LargeBinary fields.

v3.4.0

Added

  • Introduced support for the @Core.AcceptableMediaTypes annotation, allowing specification of permitted MIME types for attachment uploads:
    annotate my.Books.attachments with {
        content @Core.AcceptableMediaTypes: ['image/jpeg'];
    }
  • Added support for the @Validation.Maximum annotation to define the maximum allowed file size for attachments:
    annotate my.Books.attachments with {
        content @Validation.Maximum: '2MB';

... (truncated)

Changelog

Sourced from @​cap-js/attachments's changelog.

Version 3.6.0

Added

  • Introduced support for @Validation.MaxItems and @Validation.MinItems annotations, enabling you to define the minimum and maximum number of attachments that can be uploaded.

    Example: Limit to a Maximum of 2 Attachments

    entity Incidents {
        @Validation.MaxItems: 2
        attachments: Composition of many Attachments;
    }

    Example: Require at Least 2 Attachments

    entity Incidents {
        @Validation.MinItems: 2
        attachments: Composition of many Attachments;
    }
  • Enhanced the note field to support multi-line input, improving readability for longer text entries.

Fixed

  • Prevented unauthorized users from accessing attachments.
  • Improved deletion logic for non-draft entities to ensure all associated attachments are reliably removed, preventing orphaned files and maintaining data consistency.
  • Handling the use of nested POST requests in non-draft mode.
  • Prevent overriding attachments using /content handler.

Version 3.5.0

Fixed

  • Enforced the use of the Content-Length header to prevent server errors.
  • Designated the content property in the Attachments table as a NonSortableProperty to prevent database errors when sorting LargeBinary fields.

Version 3.4.0

Added

  • Introduced support for the @Core.AcceptableMediaTypes annotation, allowing specification of permitted MIME types for attachment uploads:
    annotate my.Books.attachments with {
        content @Core.AcceptableMediaTypes: ['image/jpeg'];
    }
  • Added support for the @Validation.Maximum annotation to define the maximum allowed file size for attachments:

... (truncated)

Commits
  • 05cd8ba Prepare release 3.6.0 (#346)
  • 8784730 Fixing data preparation of nested POST requests (#336)
  • c29ce34 Translation Delivery (#347)
  • 24ad403 Fix condition for PR approval check in CI workflow (#345)
  • de9ebd2 Enhance attachment deletion handling for non-draft entities (#326)
  • ea1fcbd Enhance note field in Attachments aspect to support multi-line text (#342)
  • 288e269 Restrict the amount of attachments (#340)
  • 15e2bcb Disallow unauthorized users from having access to attachments (#334)
  • 2bbf4f7 Refactor test assertions to use Jest matchers for consistency (#339)
  • 02cc632 Update messages.properties (#338)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​cap-js/attachments since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@cap-js/attachments](https://github.com/cap-js/attachments) from 2.0.2 to 3.6.0.
- [Release notes](https://github.com/cap-js/attachments/releases)
- [Changelog](https://github.com/cap-js/attachments/blob/main/CHANGELOG.md)
- [Commits](cap-js/attachments@v2.0.2...v3.6.0)

---
updated-dependencies:
- dependency-name: "@cap-js/attachments"
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 9, 2026
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jan 15, 2026

Superseded by #224.

@dependabot dependabot bot closed this Jan 15, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/cap-js/attachments-3.6.0 branch January 15, 2026 11:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant