v0.9.12

0.9.12 (2026-06-09)

Features

• diagnose: SAPDiagnose action=cds_testcases — CDS test-case scaffolding (#351) (b54ccd0)
• read: generic server-driven object read — SAPRead DESD/EVTB/DTSC/CSNM/EVTO/COTA (#356) (ce3dacc)
• write: server-driven object write — SAPWrite create/update/delete + SAPActivate (DESD/EVTB/DTSC/CSNM/EVTO/COTA) (#362) (0c7f0a6)
• xsuaa: raise default refresh-token-validity to 30 days (#383) (8e0ee71)

Bug Fixes

• handlers: harden tool-arg validation against GPT/OpenAI schema pollution (#363) (138d89c)
• security: close scope-router privilege escalation and bind OAuth state to client_id (#352) (ba0a21b)
• security: enforce allowedPackages ceiling on activation and change_package (#357) (2a1135e)
• security: XSUAA redirect-uri allowlist for the shared default client (#358) (d204eb8)
• write: emit pak:recordChanges so transportable package creation works on SAP_BASIS 816 (#375) (00e4197)
• write: thread logon user into adtcore:responsible (#380) (3f8dc12)

Tests

• close slow baseline and server coverage gaps (#367) (3968296)
• migrate SAP CI to A4H 2025 (#365) (d22392d)
• split slow SAP test profiles (#364) (c63346d)
• tighten integration skip hygiene (#353) (bdca845)
• tighten live cleanup and skip telemetry (#359) (94551af)