Bump the minor-patch group across 1 directory with 4 updates

[dependabot]

Bumps the minor-patch group with 4 updates in the /ams-cap-nodejs-bookshop directory: @sap/ams, @sap/xssec, @cap-js/cds-test and @sap/cds-dk.

Updates @sap/ams from 3.8.0 to 3.9.0

Updates @sap/xssec from 4.13.3 to 4.15.0

Updates @cap-js/cds-test from 1.0.1 to 1.0.2

Changelog

Sourced from @​cap-js/cds-test's changelog.

[1.0.2] - 2026-08-04

Fixed

• Buffer request bodies are no longer serialized via JSON.stringify()
• In chest-powered tests, inspectPort configuration will be passed to node:test.run(...) when debugging
• In chest-powered tests, concurrency of node:test.run(...) will be limitted to 1 to enable debugging

Commits

• 1304e9d fix: pass debug flag to runner (#96)
• 540bc36 Bump @​cap-js/sqlite from 2.4.0 to 3.0.2 (#102)
• 4f150df fix(naxios): send Buffer request bodies as raw bytes (#103)
• 4d6ca38 feat: remove sleep API (#98)
• 6d8eac9 chore: open dependency to cap-js/sqlite 3 (#94)
• 7456cb5 fix: fulfilled and rejected can be awaited (#93)
• fa7721a Bump qs from 6.15.1 to 6.15.2 in the npm_and_yarn group across 1 directory (#91)
• 7c833de fix: .to.be.fullfilled/rejected must return this (#92)
• 0f1a65c Bump @​cap-js/sqlite from 2.2.0 to 2.4.0 (#88)
• 90e6cf5 Temporarily reverting cds.test --with-mocks
• Additional commits viewable in compare view

Updates @sap/cds-dk from 10.0.6 to 10.0.7

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions