-

+
 
 > Note: User `authenticated` is a [prepared mock user](../java/security#mock-users) which will be authenticated by default. Use it to access the _/admin_ service. You don't need to enter a password.
 
diff --git a/get-started/jumpstart.md b/get-started/jumpstart.md
index 4099382d5..ea3adf4d8 100644
--- a/get-started/jumpstart.md
+++ b/get-started/jumpstart.md
@@ -29,7 +29,7 @@ Follow the steps below to set up a local development environment. If you are a d
 
 Choose the **LTS** version, via the left-hand side button:
 
-

+{style="zoom: 33%;" }
 
 
 
diff --git a/get-started/samples.md b/get-started/samples.md
index 355f0253e..d18176784 100644
--- a/get-started/samples.md
+++ b/get-started/samples.md
@@ -53,8 +53,8 @@ It is available in both Node.js and Java. The Node.js variant contains additiona
 
 Available for:
 
-[

](https://github.com/sap-samples/cloud-cap-samples)
-[

](https://github.com/sap-samples/cloud-cap-samples-java)
+[{style="height:2.5em; display:inline; margin:0 0.2em;"}](https://github.com/sap-samples/cloud-cap-samples)
+[{style="height:3em; display:inline; margin:0 0.2em;"}](https://github.com/sap-samples/cloud-cap-samples-java)
 
 
 
@@ -64,7 +64,7 @@ A reference sample application for CAP and the SAP BTP Developer Guide.
 
 Available for:
 
-[

](https://github.com/cap-js/incidents-app)
+[{style="height:2.5em; display:inline; margin:0 0.2em;"}](https://github.com/cap-js/incidents-app)
 
 
 
@@ -74,8 +74,8 @@ This sample is a CAP adaptation of the popular [SFLIGHT](https://blog.sap-press.
 
 Available for:
 
-[

](https://github.com/sap-samples/cap-sflight)
-[

](https://github.com/sap-samples/cap-sflight)
+[{style="height:2.5em; display:inline; margin:0 0.2em;"}](https://github.com/sap-samples/cap-sflight)
+[{style="height:3em; display:inline; margin:0 0.2em;"}](https://github.com/sap-samples/cap-sflight)
 
 
 
@@ -87,7 +87,7 @@ The projects described above have fallen out of maintenance but still offered th
 
 Available for:
 
-[

](https://github.com/SAP-samples/cloud-cap-hana-swapi)
+[{style="height:2.5em; display:inline; margin:0 0.2em;"}](https://github.com/SAP-samples/cloud-cap-hana-swapi)
 
 
 
@@ -97,4 +97,4 @@ The Sustainable SaaS (SusaaS) sample application has been built in a partner col
 
 Available for:
 
-[

](https://github.com/SAP-samples/btp-cap-multitenant-saas)
+[ repository.'){style="height:2.5em; display:inline; margin:0 0.2em;"}](https://github.com/SAP-samples/btp-cap-multitenant-saas)
diff --git a/guides/data-privacy/annotations.md b/guides/data-privacy/annotations.md
index 904cdedea..aa20579e2 100644
--- a/guides/data-privacy/annotations.md
+++ b/guides/data-privacy/annotations.md
@@ -23,7 +23,7 @@ In order to automate audit logging, personal data management, and data retention
 
 In the remainder of this guide, we use the [Incidents Management reference sample app](https://github.com/cap-js/incidents-app) as the base to add data privacy and audit logging to.
 
-

+{style="zoom:111%;"}
 
 So, let's annotate the data model to identify personal data.
 In essence, in all our entities we search for elements which carry personal data, such as person names, birth dates, etc., and tag them accordingly.
@@ -82,7 +82,7 @@ Learn more about these annotations in the [@PersonalData OData vocabulary](https
 
 The entity-level annotation `@PersonalData.EntitySemantics` signifies relevant entities as *Data Subject*, *Data Subject Details*, or *Other* in data privacy terms, as depicted in the following graphic.
 
-

+{style="zoom:111%;"}
 
 The following table provides some further details.
 
diff --git a/guides/data-privacy/index.md b/guides/data-privacy/index.md
index 8e33041ab..e165cc917 100644
--- a/guides/data-privacy/index.md
+++ b/guides/data-privacy/index.md
@@ -29,7 +29,7 @@ Data protection is associated with numerous legal requirements and privacy conce
 
 CAP supports applications in their obligations to comply to data privacy regulations, by automating tedious tasks as much as possible based on annotated models. That is, CAP provides easy ways to designate personal data, as well as out-of-the-box integration with SAP BTP services, which enable you to fulfill specific data privacy requirements in your application. This relieves application developers of these tedious tasks and related efforts.
 
-

+{style="zoom:111%;"}
 
 
 
diff --git a/guides/messaging/s4.md b/guides/messaging/s4.md
index 6bd420e65..f1614ff16 100644
--- a/guides/messaging/s4.md
+++ b/guides/messaging/s4.md
@@ -23,7 +23,7 @@ As documented in the [Service Consumption guide](../using-services#external-serv
 1. Find / open [Business Partner (A2X) API](https://api.sap.com/api/API_BUSINESS_PARTNER).
 2. Choose button *"API Specification"*.
 3. Download the EDMX spec from this list:
-

+{style="zoom: 33%;" }
 1. Import it as a CDS model:
 
 ```sh
diff --git a/guides/security/overview.md b/guides/security/overview.md
index dea450f64..fc40b799a 100644
--- a/guides/security/overview.md
+++ b/guides/security/overview.md
@@ -133,7 +133,7 @@ CAP requires a dedicated [platform environment](#platform-environment) to integr
 The following diagram provides a high-level overview about the security-relevant aspects of a deployed CAP application in a cloud environment:
 
 
-

+{width="600px"}
 
 To serve a business request, different runtime components are involved: a request, issued by a UI or technical client ([public zone](#public-zone)), is forwarded by a gateway or ingress router to the CAP application. In case of an UI request, an [Application Router](https://help.sap.com/docs/btp/sap-business-technology-platform/application-router) instance acts as a proxy. The CAP application might make use of a CAP sidecar. All application components ([application zone](#application-zone)) might make use of platform services such as database or identity service ([platform zone](#platform-zone)).
 
diff --git a/java/cqn-services/remote-services.md b/java/cqn-services/remote-services.md
index ba5928c5d..3ca1b4774 100644
--- a/java/cqn-services/remote-services.md
+++ b/java/cqn-services/remote-services.md
@@ -24,7 +24,7 @@ Destinations in the Cloud SDK are the means to express and define connectivity t
 
 On top of that CAP integrates nicely with Cloud SDK, for example, ensuring automatic propagation of tenant and user information from the _Request Context_ to the Cloud SDK.
 
-

+{width="700px" class="mute-dark"}
 
 CAP's clear recommendation is to use _Remote Services_ over directly using the SAP Cloud SDK. However, if you can't leverage CQN-based _Remote Services_, refer to [native consumption with Cloud SDK](#native-consumption) for details.
 
diff --git a/java/developing-applications/building.md b/java/developing-applications/building.md
index 362cee486..2fa850b27 100644
--- a/java/developing-applications/building.md
+++ b/java/developing-applications/building.md
@@ -46,7 +46,7 @@ A common example for this is to run the application locally on H2 instead of SAP
 
 The following diagram illustrates the modular stack architecture and highlights the generic components:
 
-

+{width="600px"}
 
 You can recognize five different areas of the stack, which comprise components according to different tasks:
 
diff --git a/java/event-handlers/request-contexts.md b/java/event-handlers/request-contexts.md
index 45f625d40..1a0d27951 100644
--- a/java/event-handlers/request-contexts.md
+++ b/java/event-handlers/request-contexts.md
@@ -119,7 +119,7 @@ The CAP Java SDK allows you to create new Request Contexts and define their scop
 
 There are a few typical use cases in a CAP-based, multitenant application on SAP BTP in which creation of new Request Contexts is necessary. These scenarios are identified by a combination of the user (technical or named) and the tenant (provider or subscribed).
 
-

+
 
 When calling CAP Services, it's important to call them in an appropriate Request Context. Services might, for example,  trigger HTTP requests to external services by deriving the target tenant from the current Request Context.
 
@@ -144,7 +144,7 @@ In the following a few concrete examples are given:
 
 ### Switching to Technical User
 
-

+
 
 The incoming JWT token triggers the creation of an initial RequestContext with a named user. Accesses to the database in the OData Adapter as well as the custom `On` handler are executed within 
tenant1 and authorization checks are performed for user 
JohnDoe. An additionally defined `After` handler wants to call out to an external service using a technical user without propagating the named user 
JohnDoe.
 Therefore, the `After` handler needs to create a new Request Context. To achieve this, it's required to call `requestContext()` on the current `CdsRuntime` and use the `systemUser()` method to remove the named user from the new Request Context:
@@ -160,7 +160,7 @@ public void afterHandler(EventContext context){
 ```
 ### Switching to Technical Provider Tenant {#switching-to-provider-tenant}
 
-

+
 
 The application offers an action for one of its CDS entities. Within the action, a communication happens with a remote CAP service using an internal technical user from the provider account. The corresponding `on` handler of the action needs to create a new Request Context by calling `requestContext()`. Using the `systemUserProvider()` method, the existing user information is removed and the tenant is automatically set to the provider tenant. This allows the application to perform an HTTP call to the remote CAP service, which is secured using the pseudo-role `internal-user`.
 
@@ -175,7 +175,7 @@ public void onAction(AddToOrderContext context){
 ```
 ### Switching to a Specific Technical Tenant
 
-

+
 
 The application is using a job scheduler that needs to regularly perform tasks on behalf of a certain tenant. By default, background executions (for example in a dedicated thread pool) aren't associated to any subscriber tenant and user. In this case, it's necessary to explicitly define a new Request Context based on the subscribed tenant by calling `systemUser(tenantId)`. This ensures that the Persistence Service performs the query for the specified tenant.
 
diff --git a/java/messaging.md b/java/messaging.md
index 299861650..098b2e99b 100644
--- a/java/messaging.md
+++ b/java/messaging.md
@@ -36,7 +36,7 @@ In the following, we provide a basic introduction to publish-subscribe-based mes
 
 In a publish-subscribe-based messaging scenario (pub-sub messaging), senders send a message tagged with a topic to a message broker. Receivers can create queues at the message broker and subscribe these queues to the topics they're interested in. The message broker will then copy incoming messages matching the subscribed topics to the corresponding queues. Receivers can now consume these messages from their queues. If the receiver is offline, no messages will be lost as the message broker safely stores messages in the queue until a receiver consumes the messages. After the receiver acknowledges the successful processing of a message, the message broker will delete the acknowledged message from the queue.
 
-

+{width="700px"}
 
 CAP makes sending and receiving messages easy by providing an API agnostic from specific message brokers, and taking care of broker-specific mechanics like connection handling, protocols to use, creating queues, subscriptions, etc. The API seamlessly blends into the common event API of CAP services, so that event messages can be sent using `emit` and handlers to execute when receiving event messages can be declared with the `@On` annotation.
 
diff --git a/java/operating-applications/observability.md b/java/operating-applications/observability.md
index b703e316e..5a77cca54 100644
--- a/java/operating-applications/observability.md
+++ b/java/operating-applications/observability.md
@@ -29,7 +29,7 @@ Various logging frameworks for Java have evolved and are widely used in Open Sou
 
 CAP Java SDK seamlessly integrates with Simple Logging Façade for Java ([SLF4J](https://www.slf4j.org)), which provides an abstraction layer for logging APIs. Applications compiled against SLF4J are free to choose a logging framework implementation at deployment time. Most famous libraries have a native integration to SLF4J, but it also can bridge legacy logging API calls:
 
-

+{width="500px"}
 
 ### Logger API { #logging-api}
 
@@ -252,7 +252,7 @@ Spans and traces that are produced out of the box, include HTTP requests as well
 
 In addition, it's possible to add manual instrumentations using the [Open Telemetry Java API](https://opentelemetry.io/docs/instrumentation/java/manual/), for example, in a custom event handler.
 
-

+{width="500px" class="mute-dark"}
 
 #### Configure Java Agent and Extension Library { #agent-extension }
 
diff --git a/java/operating-applications/optimizing.md b/java/operating-applications/optimizing.md
index d49abd43d..3a7f2ee26 100644
--- a/java/operating-applications/optimizing.md
+++ b/java/operating-applications/optimizing.md
@@ -26,7 +26,7 @@ Typically, such tools are capable of focusing on a specific aspect of an applica
 
 How can dedicated Java tools access the running services in a secure manner? The depicted diagram shows recommended options that **do not require exposed HTTP endpoints**:
 
-

+{width="600px"}
 
 As an authorized operator, you can access the container and start tools [locally](#profiling-local) in a CLI session running with the same user as the target process. Depending on the protocol, the JVM supports on-demand connections, for example, JVM diagnostic tools such as `jcmd`. Alternatively, additional JVM configuration is required as a prerequisite (JMX).
 A bunch of tools also support [remote](#profiling-remote) connections in a secure way. Instead of running the tool locally, a remote daemon is started as a proxy in the container, which connects the JVM with a remote profiling tool via an ssh tunnel.
diff --git a/plugins/index.md b/plugins/index.md
index ce86aee16..11c6de449 100644
--- a/plugins/index.md
+++ b/plugins/index.md
@@ -122,8 +122,8 @@ The OData v2 Proxy is a protocol adapter that allows you to expose your services
 
 Available for:
 
-[

](https://github.com/cap-js-community/odata-v2-adapter#readme)
-[

](../java/migration#v2adapter)
+[{style="height:2.5em; display:inline; margin:0 0.2em;"}](https://github.com/cap-js-community/odata-v2-adapter#readme)
+[{style="height:3em; display:inline; margin:0 0.2em;"}](../java/migration#v2adapter)
 
 See also [Cookbook > Protocols/APIs > OData APIs > V2 Support](../advanced/odata#v2-support) {.learn-more}
 
@@ -134,7 +134,7 @@ The UI5 Dev Server is a CDS server plugin that enables the integration of UI5 (U
 
 Available for:
 
-[

](https://github.com/ui5-community/ui5-ecosystem-showcase/tree/main/packages/cds-plugin-ui5#cds-plugin-ui5)
+[{style="height:2.5em; display:inline; margin:0 0.2em;"}](https://github.com/ui5-community/ui5-ecosystem-showcase/tree/main/packages/cds-plugin-ui5#cds-plugin-ui5)
 
 ## GraphQL Adapter
 
@@ -146,7 +146,7 @@ The GraphQL Adapter is a protocol adapter that generically generates a GraphQL s
 
 Available for:
 
-[

](https://github.com/cap-js/graphql#readme)
+[{style="height:2.5em; display:inline; margin:0 0.2em;"}](https://github.com/cap-js/graphql#readme)
 
 
 
@@ -181,8 +181,8 @@ Outlook:
 
 Available for:
 
-[

](https://github.com/cap-js/attachments#readme)
-[

](https://github.com/cap-java/cds-feature-attachments#readme)
+[{style="height:2.5em; display:inline; margin:0 0.2em;"}](https://github.com/cap-js/attachments#readme)
+[{style="height:3em; display:inline; margin:0 0.2em;"}](https://github.com/cap-java/cds-feature-attachments#readme)
 
 
 ## Audit Logging
@@ -209,8 +209,8 @@ Features:
 
 Available for:
 
-[

](https://github.com/cap-js/audit-logging#readme)
-

+[{style="height:2.5em; display:inline; margin:0 0.2em;"}](https://github.com/cap-js/audit-logging#readme)
+{style="height:3em; display:inline; margin:0 0.2em;"}
 
 Learn more about audit logging in [Node.js](../guides/data-privacy/audit-logging) and in [Java](../java/auditlog) {.learn-more}
 
@@ -232,9 +232,8 @@ annotate my.Incidents {
 
 Available for:
 
-[

](https://github.com/cap-js/change-tracking#readme)
-[

](../java/change-tracking)
-
+[{style="height:2.5em; display:inline; margin:0 0.2em;"}](https://github.com/cap-js/change-tracking#readme)
+[{style="height:3em; display:inline; margin:0 0.2em;"}](../java/change-tracking)
 
 
 ## Notifications
@@ -262,7 +261,7 @@ Features:
 
 Available for:
 
-[

](https://github.com/cap-js/notifications#readme)
+[{style="height:2.5em; display:inline; margin:0 0.2em;"}](https://github.com/cap-js/notifications#readme)
 
 
 ## Telemetry 
@@ -289,9 +288,8 @@ Telemetry data can be exported to [SAP Cloud Logging](https://help.sap.com/docs/
 
 Available for:
 
-[

](https://github.com/cap-js/telemetry#readme)
-[

](../java/operating-applications/observability#open-telemetry)
-
+[{style="height:2.5em; display:inline; margin:0 0.2em;"}](https://github.com/cap-js/telemetry#readme)
+[{style="height:3em; display:inline; margin:0 0.2em;"}](../java/operating-applications/observability#open-telemetry)
 
 
 ## CAP Operator for Kubernetes {#cap-operator-plugin}
@@ -302,8 +300,8 @@ This is where the CAP Operator **plugin** is very useful, as it provides an easy
 
 Available for:
 
-[

](https://github.com/cap-js/cap-operator-plugin#readme)
-

+[{style="height:2.5em; display:inline; margin:0 0.2em;"}](https://github.com/cap-js/cap-operator-plugin#readme)
+{style="height:3em; display:inline; margin:0 0.2em;"}
 
 
 
diff --git a/tools/cds-editors.md b/tools/cds-editors.md
index c653f9f7f..ca5632e54 100644
--- a/tools/cds-editors.md
+++ b/tools/cds-editors.md
@@ -384,8 +384,7 @@ A **CAP Notebook** is a [Custom Notebook in Visual Studio Code](https://code.vis
 The cell inputs/outputs are especially useful at later points in time when the project's details have long been forgotten. In addition, notebooks are a good way to share, compare, and also reproduce projects.
 
 * If you are new to CAP Notebooks, try out the notebooks based on our documentation. When available for a given page, these are accessible via the "Download Notebook" button on the top of the screen and enable you to try things out on your local machine, for example the [Getting Started in a Nutshell](../get-started/in-a-nutshell) guide.
-
-  

+   {width="800px" style="width:800px; box-shadow: 1px 1px 5px #888888"}
 
 * To see which features are available in a CAP Notebook, open our [CAP Notebook page](#cap-notebooks-page): 
F1 → *CDS: Open CAP Notebooks Page*
 
diff --git a/tools/cds-lint/index.md b/tools/cds-lint/index.md
index 98dd68670..89e97bfa6 100644
--- a/tools/cds-lint/index.md
+++ b/tools/cds-lint/index.md
@@ -37,7 +37,7 @@ To catch issues in CDS models and the CDS environment early, CAP provides an [ES
 
 
 
-

+{width="130px" class="ignore-dark"}