Switch the view gate on, and bring CI up to the conventions

[oblomov-dev]

Part of an audit across all thirteen abap2UI5 repositories. This one is the outlier in a good way: its views were already on z2ui5_cl_ui5_view_builder, so nothing here needed porting. What it did not have was a gate reading them.

Two real defects, found the moment one ran

src/00/z2ui5_cl_cci_sample_05.clas.abap
  102:21  error  sap.ui.core.Item key binds {BCID} relatively, but the control has no
                 binding context — the model resolves it against nothing and the
                 control renders empty                relative-binding-without-context
  104:21  error  sap.ui.core.Item text binds {TEXT} relatively, but the control has no
                 binding context …                    relative-binding-without-context

Plus four non-released-api warnings (the vendored AJSON copy in the core's src/00/01, which is internal and renamed without notice), two binding-type-mismatch on sap.m.StepInput where a character field is bound to a float property, and one layout hint. Nine findings in a repository whose CI was green.

They are recorded in abap2ui5lint-baseline.json rather than fixed here — fixing a binding is an app change and belongs in its own pull request. The baseline counts them and never lists them; a new finding fails the gate, and an entry whose finding is gone is stale and fails too, so the file only shrinks.

The render gate stays off

Deliberately, and this is the one repository where that is the right call — the header of check.yml has said so all along. The render gate loads every control from the UI5 distribution, and the controls this repository exists to ship (z2ui5_cci.cc.SignaturePad and the rest) are not in it: a custom control is invisible to UI5 metadata by definition. abap2ui5lint.jsonc now says it in the config, with that reason, instead of it being implicit in a workflow comment.

The property gate reads every view regardless — 12 files, 11 views, 197 controls of 32 types.

CI

• The linter runs as a job in the existing check workflow, next to abaplint.
• check was missing — CONVENTIONS §3 asks every repository for check and test, and this one had only test. npm run check runs lint, the view gate and the Node tests.
• Actions pinned to a commit SHA with the version in a trailing comment, and Dependabot grouping the updates.
• The first SECURITY.md, AGENTS.md, CLAUDE.md and CONTRIBUTING.md this repository has had.

A note for sql-console

That repository named z2ui5_cl_cc_spreadsheet — the name this one used before the move to the cci namespace — and has not compiled since. sql-console#24 moves it onto z2ui5_cl_cci_spreadsheet=>render( ), so the tag is owned here rather than hand-built there, which is what let the two drift apart.

Verification

npm run check passes; the view gate reports 12 files, 0 failing.

---

Generated by Claude Code

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.