joe/kami-parse-server
Public Access
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,403 Commits 2 Branches 18 Tags
ad680bd312e2289636919b277a47c823e4dbef60
Commit Graph

3403 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
semantic-release-bot
ad680bd312 chore(release): 4.10.11 [skip ci] 
## [4.10.11](https://github.com/parse-community/parse-server/compare/4.10.10...4.10.11) (2022-06-17)

### Bug Fixes

* certificate in Apple Game Center auth adapter not validated; this fixes a security vulnerability in which authentication could be bypassed using a fake certificate; if you are using the Apple Gamer Center auth adapter it is your responsibility to keep its root certificate up-to-date and we advice you read the security advisory ([GHSA-rh9j-f5f8-rvgc](https://github.com/parse-community/parse-server/security/advisories/GHSA-rh9j-f5f8-rvgc)) ([145838d](145838d2d9))
 2022-06-17 16:38:16 +00:00
Manuel
145838d2d9 fix: certificate in Apple Game Center auth adapter not validated; this fixes a security vulnerability in which authentication could be bypassed using a fake certificate; if you are using the Apple Gamer Center auth adapter it is your responsibility to keep its root certificate up-to-date and we advice you read the security advisory ([GHSA-rh9j-f5f8-rvgc](https://github.com/parse-community/parse-server/security/advisories/GHSA-rh9j-f5f8-rvgc)) 2022-06-17 18:24:13 +02:00
Manuel Trezza
8580a524eb fix CI timeout 2022-06-17 17:57:22 +02:00
Manuel Trezza
53afafa13f Update gcenter.js 2022-06-17 17:30:54 +02:00
Manuel Trezza
c411c48d49 Create game_center.pem 2022-06-17 16:19:25 +02:00
Manuel Trezza
07786c1666 fix adapter 2022-06-17 16:19:25 +02:00
semantic-release-bot
b00b0410e6 chore(release): 4.10.10 [skip ci] 
## [4.10.10](https://github.com/parse-community/parse-server/compare/4.10.9...4.10.10) (2022-05-01)

### Bug Fixes

* authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter (GHSA-qf8x-vqjv-92gr) ([#7963](https://github.com/parse-community/parse-server/issues/7963)) ([1930a64](1930a64e9c))
 2022-05-01 00:48:05 +00:00
Manuel
1930a64e9c fix: authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter (GHSA-qf8x-vqjv-92gr) (#7963) 2022-05-01 02:46:57 +02:00
semantic-release-bot
cd354b77a6 chore(release): 4.10.9 [skip ci] 
## [4.10.9](https://github.com/parse-community/parse-server/compare/4.10.8...4.10.9) (2022-03-28)

### Bug Fixes

* security upgrade @parse/push-adapter from 3.4.1 to 4.1.2 ([#7897](https://github.com/parse-community/parse-server/issues/7897)) ([3d80ee5](3d80ee5ec3))
 2022-03-28 02:57:17 +00:00
Snyk bot
3d80ee5ec3 fix: security upgrade @parse/push-adapter from 3.4.1 to 4.1.2 (#7897) 2022-03-28 04:56:02 +02:00
semantic-release-bot
bf88869578 chore(release): 4.10.8 [skip ci] 
## [4.10.8](https://github.com/parse-community/parse-server/compare/4.10.7...4.10.8) (2022-03-24)

### Bug Fixes

* sensitive keyword detection may produce false positives ([#7883](https://github.com/parse-community/parse-server/issues/7883)) ([d347613](d34761369e))
 2022-03-24 01:50:33 +00:00
Manuel
d34761369e fix: sensitive keyword detection may produce false positives (#7883) 2022-03-24 02:49:39 +01:00
Manuel
02f88f433e docs: add details to changelog (#7842) 2022-03-12 00:39:01 +01:00
semantic-release-bot
7c844772ea chore(release): 4.10.7 [skip ci] 
## [4.10.7](https://github.com/parse-community/parse-server/compare/4.10.6...4.10.7) (2022-03-11)

### Bug Fixes

* security vulnerability that allows remote code execution (ghsa p6h4 93qp jhcm) ([#7841](https://github.com/parse-community/parse-server/issues/7841)) ([886bfd7](886bfd7cac))
 2022-03-11 23:20:36 +00:00
Manuel
886bfd7cac fix: security vulnerability that allows remote code execution (ghsa p6h4 93qp jhcm) (#7841) 2022-03-12 00:19:31 +01:00
Manuel
318c20319a ci: fix changelog file path (#7835) 2022-03-08 02:49:18 +01:00
Manuel
6f25ea93fb ci: add manual docker release workflow (#7809) 2022-02-13 00:16:02 +01:00
semantic-release-bot
cd41626625 chore(release): 4.10.6 [skip ci] 
## [4.10.6](https://github.com/parse-community/parse-server/compare/4.10.5...4.10.6) (2022-02-12)

### Bug Fixes

* update graphql dependencies to work with Parse Dashboard ([#7658](https://github.com/parse-community/parse-server/issues/7658)) ([350ecde](350ecdee59))
 2022-02-12 16:08:06 +00:00
Frans Bouwmeester
350ecdee59 fix: update graphql dependencies to work with Parse Dashboard (#7658) 2022-02-12 17:07:04 +01:00
semantic-release-bot
b465f7bade chore(release): 4.10.5 [skip ci] 
## [4.10.5](https://github.com/parse-community/parse-server/compare/4.10.4...4.10.5) (2022-02-12)

### Bug Fixes

* security upgrade follow-redirects from 1.13.0 to 1.14.8 ([#7803](https://github.com/parse-community/parse-server/issues/7803)) ([611332e](611332ea33))
 2022-02-12 15:42:56 +00:00
Manuel
d7f2bb49d4 ci: disable auto-release dry-run 2022-02-12 16:41:32 +01:00
Manuel
4bd13088e1 docs: fix changelog typo 2022-02-12 16:37:58 +01:00
Snyk bot
611332ea33 fix: security upgrade follow-redirects from 1.13.0 to 1.14.8 (#7803) 2022-02-12 16:31:29 +01:00
Manuel
65c13febf5 ci: fix release automation workflow typo 2022-02-12 16:16:20 +01:00
Manuel
adf7d928de ci: add release automation (#7807) 2022-02-12 16:14:28 +01:00
Frans Bouwmeester
065facdc53 test: fix failing tests on 4.x LTS branch (#7661) 2021-10-30 19:19:54 +02:00
dblythy
4ac4b7f710 Merge pull request from GHSA-7pr3-p5fm-8r9x
Some checks failed
docker / build (push) Has been cancelled
Details 
* fix: LQ deletes session token

* add 4.10.4

* add changes
 2021-09-30 04:52:12 +02:00
Manuel
6683cd96b6 fix docker run (#7557) 2021-09-07 18:18:30 +02:00
Manuel
ef2ec21355 ci: update docker image building (#7553) 
* docker

* Update docker-publish.yml

* Update docker-publish.yml
 2021-09-07 16:44:48 +02:00
Manuel
c71ae7d478 chore(release): 4.10.3 (#7538) 2021-09-02 13:01:27 +02:00
Kartal Kaan Bozdoğan
6ae5835b19 Merge pull request from GHSA-xqp8-w826-hh6x 
* Backport the advisory fix

* Added a 4.10.3 section to CHANGELOG
 2021-09-02 12:46:48 +02:00
Manuel
0bfa6b7cc1 Release 4.10.2 (#7513) 
* move graphql-tag from devDependencies to dependencies (#7183)

* bump version

* Update CHANGELOG.md
 2021-08-24 00:46:39 +02:00
Manuel
0be0b87b2d bump version 2021-08-23 13:57:55 +02:00
Manuel
f3133acf21 Release 4.10.1 (#7508) 
* bump parse 3.3.0

* Update CHANGELOG.md

* update user test (PR #7464)

* fix Twitter API oauth Error (PR #7370)

* bumped dependencies

* Revert "bumped dependencies"

This reverts commit 97ad83dd15eee379d9b258f02ac14e4950415835.

* bump @parse/push-adapter 3.4.1

* bump jwks-rsa@1.12.3

* bump mongodb@3.6.11

* bump ws@7.5.3

* changed logging for circular obj (PR #7457)

* Update CHANGELOG.md
 2021-08-23 13:53:33 +02:00
Manuel
7e1da90bb2 added changelog 2021-08-20 19:56:37 +02:00
Manuel
0e3cae5c67 audit fix 2021-08-20 19:24:01 +02:00
Manuel
f0d5232443 bumped version 2021-08-20 19:20:04 +02:00
Manuel
a3483d82c8 fix changelog skip 4.5.1 2021-08-18 23:03:09 +02:00
Manuel
3c42584f59 4.5.2 2021-08-18 22:54:51 +02:00
Manuel
97b1dcad3b revert to version 4.5.0 for testing 2021-08-18 22:52:54 +02:00
Manuel
3a5c38d2e4 revert to version 4.5.0 for testing 2021-08-18 22:49:06 +02:00
Manuel
93d643e3eb change to RestWrite.createSession 2021-08-18 22:42:24 +02:00
Manuel
1306da7454 Merge pull request from GHSA-23r4-5mxp-c7g5 2021-08-18 22:24:29 +02:00
Antonio Davi Macedo Coelho de Castro
3c00bcd791 Release 4.5.0 (#7070) 
* Release 4.5.0

* Update CHANGELOG.md

Co-authored-by: Tom Fox <13188249+TomWFox@users.noreply.github.com>

* Improve braking change note

* Create a breaking changes sub-section

* Add release action

Co-authored-by: Tom Fox <13188249+TomWFox@users.noreply.github.com>
 2020-12-14 19:29:06 -08:00
Diamond Lewis
033a0bd443 Fix Prettier (#7066) 2020-12-13 11:19:04 -06:00
Antonio Davi Macedo Coelho de Castro
d4948572a8 Update parse to 2.19.0 (#7060) 2020-12-11 12:40:32 -08:00
dependabot[bot]
43d9af847b chore(deps): bump ini from 1.3.5 to 1.3.7 (#7057) 
Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.7.
- [Release notes](https://github.com/isaacs/ini/releases)
- [Commits](https://github.com/isaacs/ini/compare/v1.3.5...v1.3.7)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2020-12-10 13:39:30 -08:00
Snyk bot
d20b03c7e6 [Snyk] Upgrade mongodb from 3.6.2 to 3.6.3 (#7026) 
* fix: upgrade mongodb from 3.6.2 to 3.6.3

Snyk has created this PR to upgrade mongodb from 3.6.2 to 3.6.3.

See this package in npm:
https://www.npmjs.com/package/mongodb

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr

* Bump mongo to 4.4.0

* fix tests

* disable fast fail

* fix fail fast

* revert changes

* await tests and wait for replication

Co-authored-by: Diamond Lewis <findlewis@gmail.com>
 2020-12-10 10:02:26 -08:00
Snyk bot
4267e9bd5b fix: upgrade ldapjs from 2.2.1 to 2.2.2 (#7056) 
Snyk has created this PR to upgrade ldapjs from 2.2.1 to 2.2.2.

See this package in npm:
https://www.npmjs.com/package/ldapjs

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
 2020-12-09 19:46:11 -08:00
Zach Goldberg
abdfe61b82 Properly handle serverURL and publicServerUrl in Batch requests #6980 (#7049) 
* fix: detect if the caller is accessing us via local or parse for batch requests (#6980)

* chore: minor cleanup from PR
 2020-12-09 14:16:24 -06:00