Commit Graph

5096 Commits

Author SHA1 Message Date
dependabot[bot]
b42a0ee61d refactor: Bump winston from 3.17.0 to 3.19.0 (#10023) 2026-01-29 20:29:19 +01:00
semantic-release-bot
2457da9e15 chore(release): 9.2.0-alpha.4 [skip ci]
# [9.2.0-alpha.4](https://github.com/parse-community/parse-server/compare/9.2.0-alpha.3...9.2.0-alpha.4) (2026-01-29)

### Features

* Upgrade mongodb from 6.20.0 to 7.0.0 ([#10027](https://github.com/parse-community/parse-server/issues/10027)) ([14b3fce](14b3fce203))
9.2.0-alpha.4
2026-01-29 12:52:21 +00:00
dependabot[bot]
14b3fce203 feat: Upgrade mongodb from 6.20.0 to 7.0.0 (#10027) 2026-01-29 13:51:32 +01:00
dependabot[bot]
73e21e77c7 refactor: Bump bcryptjs from 3.0.2 to 3.0.3 (#10022) 2026-01-27 20:09:50 +01:00
Manuel
c015864293 docs: Simplify PR template (#10026) 2026-01-27 18:07:02 +01:00
semantic-release-bot
f2babb2ac4 chore(release): 9.2.0-alpha.3 [skip ci]
# [9.2.0-alpha.3](https://github.com/parse-community/parse-server/compare/9.2.0-alpha.2...9.2.0-alpha.3) (2026-01-27)

### Features

* Upgrade to parse 8.0.3 and @parse/push-adapter 8.2.0 ([#10021](https://github.com/parse-community/parse-server/issues/10021)) ([9833fdb](9833fdb111))
9.2.0-alpha.3
2026-01-27 17:02:53 +00:00
Manuel
9833fdb111 feat: Upgrade to parse 8.0.3 and @parse/push-adapter 8.2.0 (#10021) 2026-01-27 18:01:57 +01:00
dependabot[bot]
dc866bed3b refactor: Bump lodash from 4.17.21 to 4.17.23 (#10016) 2026-01-25 19:46:36 +01:00
dependabot[bot]
906ccc3e29 refactor: Bump lodash-es from 4.17.21 to 4.17.23 (#10015) 2026-01-25 19:25:54 +01:00
dependabot[bot]
5c00a6ab1b refactor: Bump typescript-eslint from 8.33.1 to 8.53.0 (#10011) 2026-01-25 18:58:41 +01:00
dependabot[bot]
5d28fcba0c refactor: Bump @babel/core from 7.27.4 to 7.28.6 (#10012) 2026-01-25 18:58:15 +01:00
semantic-release-bot
db3cbb2113 chore(release): 9.2.0-alpha.2 [skip ci]
# [9.2.0-alpha.2](https://github.com/parse-community/parse-server/compare/9.2.0-alpha.1...9.2.0-alpha.2) (2026-01-24)

### Bug Fixes

* MongoDB timeout errors unhandled and potentially revealing internal data ([#10020](https://github.com/parse-community/parse-server/issues/10020)) ([1d3336d](1d3336d128))
9.2.0-alpha.2
2026-01-24 23:15:52 +00:00
Manuel
1d3336d128 fix: MongoDB timeout errors unhandled and potentially revealing internal data (#10020) 2026-01-25 00:15:01 +01:00
semantic-release-bot
1b5bd2f754 chore(release): 9.2.0-alpha.1 [skip ci]
# [9.2.0-alpha.1](https://github.com/parse-community/parse-server/compare/9.1.1...9.2.0-alpha.1) (2026-01-24)

### Features

* Add option `databaseOptions.clientMetadata` to send custom metadata to database server for logging and debugging ([#10017](https://github.com/parse-community/parse-server/issues/10017)) ([756c204](756c204220))
9.2.0-alpha.1
2026-01-24 21:45:25 +00:00
Copilot
756c204220 feat: Add option databaseOptions.clientMetadata to send custom metadata to database server for logging and debugging (#10017) 2026-01-24 22:44:38 +01:00
dependabot[bot]
ba3e7602e6 refactor: Bump redis from 4.7.0 to 5.10.0 (#9994) 2026-01-17 22:09:44 +01:00
dependabot[bot]
82e0d3ace1 refactor: Bump commander from 13.1.0 to 14.0.2 (#9992) 2026-01-17 19:52:59 +01:00
Manuel
69da47284c docs: Add frozen LTS branch info to CONTRIBUTING guide (#10008) 2026-01-16 05:05:27 +01:00
dependabot[bot]
774cc54f81 refactor: Bump @semantic-release/github from 11.0.2 to 11.0.3 (#9789) 2025-12-25 14:23:57 +01:00
semantic-release-bot
b3725faee2 chore(release): 9.1.1 [skip ci]
## [9.1.1](https://github.com/parse-community/parse-server/compare/9.1.0...9.1.1) (2025-12-16)

### Bug Fixes

* Server-Side Request Forgery (SSRF) in Instagram auth adapter [GHSA-3f5f-xgrj-97pf](https://github.com/parse-community/parse-server/security/advisories/GHSA-3f5f-xgrj-97pf) ([#9988](https://github.com/parse-community/parse-server/issues/9988)) ([fbcc938](fbcc938b5a))
9.1.1
2025-12-16 01:34:54 +00:00
Manuel
519d798781 build: Release (#9990) 2025-12-16 02:34:01 +01:00
GitHub Actions
9f98d3999c empty commit to trigger CI 2025-12-16 01:32:07 +00:00
semantic-release-bot
3d395b3ce5 chore(release): 9.1.1-alpha.1 [skip ci]
## [9.1.1-alpha.1](https://github.com/parse-community/parse-server/compare/9.1.0...9.1.1-alpha.1) (2025-12-16)

### Bug Fixes

* Server-Side Request Forgery (SSRF) in Instagram auth adapter [GHSA-3f5f-xgrj-97pf](https://github.com/parse-community/parse-server/security/advisories/GHSA-3f5f-xgrj-97pf) ([#9988](https://github.com/parse-community/parse-server/issues/9988)) ([fbcc938](fbcc938b5a))
9.1.1-alpha.1
2025-12-16 01:25:34 +00:00
Manuel
fbcc938b5a fix: Server-Side Request Forgery (SSRF) in Instagram auth adapter [GHSA-3f5f-xgrj-97pf](https://github.com/parse-community/parse-server/security/advisories/GHSA-3f5f-xgrj-97pf) (#9988) 2025-12-16 02:24:37 +01:00
semantic-release-bot
2e06fa1139 chore(release): 9.1.0 [skip ci]
# [9.1.0](https://github.com/parse-community/parse-server/compare/9.0.0...9.1.0) (2025-12-14)

### Bug Fixes

* Cross-Site Scripting (XSS) via HTML pages for password reset and email verification [GHSA-jhgf-2h8h-ggxv](https://github.com/parse-community/parse-server/security/advisories/GHSA-jhgf-2h8h-ggxv) ([#9985](https://github.com/parse-community/parse-server/issues/9985)) ([3074eb7](3074eb70f5))

### Features

* Add option `logLevels.signupUsernameTaken` to change log level of username already exists sign-up rejection ([#9962](https://github.com/parse-community/parse-server/issues/9962)) ([f18f307](f18f3073d7))
* Add support for custom HTTP status code and headers to Cloud Function response with Express-style syntax ([#9980](https://github.com/parse-community/parse-server/issues/9980)) ([8eeab8d](8eeab8dc57))
* Log more debug info when failing to set duplicate value for field with unique values ([#9919](https://github.com/parse-community/parse-server/issues/9919)) ([a23b192](a23b192466))
2025-12-14 15:49:33 +00:00
Manuel
8c4d67a0fe build: Release (#9987) 2025-12-14 16:48:45 +01:00
GitHub Actions
ae0781d0ac empty commit to trigger CI 2025-12-14 15:41:22 +00:00
semantic-release-bot
0e308feaa7 chore(release): 9.1.0-alpha.4 [skip ci]
# [9.1.0-alpha.4](https://github.com/parse-community/parse-server/compare/9.1.0-alpha.3...9.1.0-alpha.4) (2025-12-14)

### Features

* Log more debug info when failing to set duplicate value for field with unique values ([#9919](https://github.com/parse-community/parse-server/issues/9919)) ([a23b192](a23b192466))
9.1.0-alpha.4
2025-12-14 15:40:04 +00:00
Rahul Lanjewar
a23b192466 feat: Log more debug info when failing to set duplicate value for field with unique values (#9919) 2025-12-14 16:39:17 +01:00
semantic-release-bot
98a42e5277 chore(release): 9.1.0-alpha.3 [skip ci]
# [9.1.0-alpha.3](https://github.com/parse-community/parse-server/compare/9.1.0-alpha.2...9.1.0-alpha.3) (2025-12-14)

### Bug Fixes

* Cross-Site Scripting (XSS) via HTML pages for password reset and email verification [GHSA-jhgf-2h8h-ggxv](https://github.com/parse-community/parse-server/security/advisories/GHSA-jhgf-2h8h-ggxv) ([#9985](https://github.com/parse-community/parse-server/issues/9985)) ([3074eb7](3074eb70f5))
9.1.0-alpha.3
2025-12-14 14:45:10 +00:00
Manuel
3074eb70f5 fix: Cross-Site Scripting (XSS) via HTML pages for password reset and email verification [GHSA-jhgf-2h8h-ggxv](https://github.com/parse-community/parse-server/security/advisories/GHSA-jhgf-2h8h-ggxv) (#9985) 2025-12-14 15:44:04 +01:00
semantic-release-bot
7028e0385c chore(release): 9.1.0-alpha.2 [skip ci]
# [9.1.0-alpha.2](https://github.com/parse-community/parse-server/compare/9.1.0-alpha.1...9.1.0-alpha.2) (2025-12-14)

### Features

* Add support for custom HTTP status code and headers to Cloud Function response with Express-style syntax ([#9980](https://github.com/parse-community/parse-server/issues/9980)) ([8eeab8d](8eeab8dc57))
9.1.0-alpha.2
2025-12-14 14:25:39 +00:00
Copilot
8eeab8dc57 feat: Add support for custom HTTP status code and headers to Cloud Function response with Express-style syntax (#9980) 2025-12-14 15:24:51 +01:00
semantic-release-bot
c500fc46db chore(release): 9.1.0-alpha.1 [skip ci]
# [9.1.0-alpha.1](https://github.com/parse-community/parse-server/compare/9.0.0...9.1.0-alpha.1) (2025-12-14)

### Features

* Add option `logLevels.signupUsernameTaken` to change log level of username already exists sign-up rejection ([#9962](https://github.com/parse-community/parse-server/issues/9962)) ([f18f307](f18f3073d7))
9.1.0-alpha.1
2025-12-14 01:00:49 +00:00
Lucas
f18f3073d7 feat: Add option logLevels.signupUsernameTaken to change log level of username already exists sign-up rejection (#9962) 2025-12-14 01:59:56 +01:00
Manuel
3b38dff6ca docs: Clarify wording in DEPRECATIONS table (#9983) 2025-12-14 01:36:47 +01:00
semantic-release-bot
532a461d30 chore(release): 9.0.0 [skip ci]
# [9.0.0](https://github.com/parse-community/parse-server/compare/8.6.0...9.0.0) (2025-12-14)

### Bug Fixes

* Upgrade to GraphQL Apollo Server 5 and restrict GraphQL introspection ([#9888](https://github.com/parse-community/parse-server/issues/9888)) ([87c7f07](87c7f076eb))

### Features

* Deprecation DEPPS10: Encode `Parse.Object` in Cloud Function and remove option `encodeParseObjectInCloudFunction` ([#9973](https://github.com/parse-community/parse-server/issues/9973)) ([a2d3dbe](a2d3dbe972))
* Deprecation DEPPS11: Replace `PublicAPIRouter` with `PagesRouter` ([#9974](https://github.com/parse-community/parse-server/issues/9974)) ([8f877d4](8f877d42c0))
* Deprecation DEPPS113: Config option `enableInsecureAuthAdapters` defaults to `false` ([#9982](https://github.com/parse-community/parse-server/issues/9982)) ([22d4622](22d4622230))
* Deprecation DEPPS12: Database option `allowPublicExplain` defaults to `false` ([#9975](https://github.com/parse-community/parse-server/issues/9975)) ([c1c7e69](c1c7e6976d))
* Increase required minimum MongoDB version to `7.0.16` ([#9971](https://github.com/parse-community/parse-server/issues/9971)) ([7bb548b](7bb548bf81))
* Increase required minimum Node version to `20.19.0` ([#9970](https://github.com/parse-community/parse-server/issues/9970)) ([633964d](633964d32e))
* Increase required minimum version to Postgres `16`, PostGIS `3.5` ([#9972](https://github.com/parse-community/parse-server/issues/9972)) ([7483add](7483add739))
* Update route patterns to use path-to-regexp v8 syntax ([#9942](https://github.com/parse-community/parse-server/issues/9942)) ([fa8723b](fa8723b3d1))
* Upgrade to @parse/push-adapter 8.1.0 ([#9938](https://github.com/parse-community/parse-server/issues/9938)) ([d5e76b0](d5e76b01db))
* Upgrade to parse 8.0.0 ([#9976](https://github.com/parse-community/parse-server/issues/9976)) ([f9970d4](f9970d4bb2))

### BREAKING CHANGES

* This release changes the config option `enableInsecureAuthAdapters` default to `false` (Deprecation DEPPS13). ([22d4622](22d4622))
* This release changes the MongoDB database option `allowPublicExplain` default to `false` (Deprecation DEPPS12). ([c1c7e69](c1c7e69))
* This release replaces `PublicAPIRouter` with `PagesRouter` (Deprecation DEPPS11). ([8f877d4](8f877d4))
* This release encodes `Parse.Object` in Cloud Function and removes option `encodeParseObjectInCloudFunction` (Deprecation DEPPS10). ([a2d3dbe](a2d3dbe))
* This releases increases the required minimum version to Postgres `16`, PostGIS `3.5`. ([7483add](7483add))
* Route pattern syntax across cloud routes and rate-limiting now use the new path-to-regexp v8 syntax; see the [migration guide](https://github.com/parse-community/parse-server/blob/alpha/9.0.0.md) for more details. ([fa8723b](fa8723b))
* This releases increases the required minimum MongoDB version to `7.0.16`. ([7bb548b](7bb548b))
* Upgrade to Apollo Server 5 and GraphQL express 5 integration; GraphQL introspection now requires using `masterKey` or setting `graphQLPublicIntrospection: true`. ([87c7f07](87c7f07))
* This releases increases the required minimum Node version to `20.19.0`. ([633964d](633964d))
2025-12-14 00:34:25 +00:00
Manuel
247c14c5db build: Release (#9984) 2025-12-14 01:33:36 +01:00
GitHub Actions
31e7afec12 empty commit to trigger CI 2025-12-14 00:27:08 +00:00
semantic-release-bot
b717ea343c chore(release): 9.0.0-alpha.11 [skip ci]
# [9.0.0-alpha.11](https://github.com/parse-community/parse-server/compare/9.0.0-alpha.10...9.0.0-alpha.11) (2025-12-14)

### Features

* Deprecation DEPPS113: Config option `enableInsecureAuthAdapters` defaults to `false` ([#9982](https://github.com/parse-community/parse-server/issues/9982)) ([22d4622](22d4622230))

### BREAKING CHANGES

* This release changes the config option `enableInsecureAuthAdapters` default to `false` (Deprecation DEPPS13). ([22d4622](22d4622))
2025-12-14 00:24:45 +00:00
Manuel
22d4622230 feat: Deprecation DEPPS113: Config option enableInsecureAuthAdapters defaults to false (#9982)
BREAKING CHANGE: This release changes the config option `enableInsecureAuthAdapters` default to `false` (Deprecation DEPPS13).
2025-12-14 01:24:00 +01:00
semantic-release-bot
b05771f48a chore(release): 9.0.0-alpha.10 [skip ci]
# [9.0.0-alpha.10](https://github.com/parse-community/parse-server/compare/9.0.0-alpha.9...9.0.0-alpha.10) (2025-12-12)

### Features

* Upgrade to @parse/push-adapter 8.1.0 ([#9938](https://github.com/parse-community/parse-server/issues/9938)) ([d5e76b0](d5e76b01db))
2025-12-12 20:47:09 +00:00
Antoine Cormouls
d5e76b01db feat: Upgrade to @parse/push-adapter 8.1.0 (#9938) 2025-12-12 21:46:17 +01:00
dependabot[bot]
4476d886a1 refactor: Bump form-data from 4.0.4 to 4.0.5 (#9978) 2025-12-12 21:27:45 +01:00
semantic-release-bot
67e651d8b8 chore(release): 9.0.0-alpha.9 [skip ci]
# [9.0.0-alpha.9](https://github.com/parse-community/parse-server/compare/9.0.0-alpha.8...9.0.0-alpha.9) (2025-12-12)

### Features

* Deprecation DEPPS12: Database option `allowPublicExplain` defaults to `false` ([#9975](https://github.com/parse-community/parse-server/issues/9975)) ([c1c7e69](c1c7e6976d))

### BREAKING CHANGES

* This release changes the MongoDB database option `allowPublicExplain` default to `false` (Deprecation DEPPS12). ([c1c7e69](c1c7e69))
2025-12-12 20:07:56 +00:00
Manuel
c1c7e6976d feat: Deprecation DEPPS12: Database option allowPublicExplain defaults to false (#9975)
BREAKING CHANGE: This release changes the MongoDB database option `allowPublicExplain` default to `false` (Deprecation DEPPS12).
2025-12-12 21:07:07 +01:00
semantic-release-bot
a4c8d9efe0 chore(release): 9.0.0-alpha.8 [skip ci]
# [9.0.0-alpha.8](https://github.com/parse-community/parse-server/compare/9.0.0-alpha.7...9.0.0-alpha.8) (2025-12-12)

### Features

* Deprecation DEPPS11: Replace `PublicAPIRouter` with `PagesRouter` ([#9974](https://github.com/parse-community/parse-server/issues/9974)) ([8f877d4](8f877d42c0))

### BREAKING CHANGES

* This release replaces `PublicAPIRouter` with `PagesRouter` (Deprecation DEPPS11). ([8f877d4](8f877d4))
2025-12-12 19:56:31 +00:00
Manuel
8f877d42c0 feat: Deprecation DEPPS11: Replace PublicAPIRouter with PagesRouter (#9974)
BREAKING CHANGE: This release replaces `PublicAPIRouter` with `PagesRouter` (Deprecation DEPPS11).
2025-12-12 20:55:39 +01:00
semantic-release-bot
1d31406233 chore(release): 9.0.0-alpha.7 [skip ci]
# [9.0.0-alpha.7](https://github.com/parse-community/parse-server/compare/9.0.0-alpha.6...9.0.0-alpha.7) (2025-12-12)

### Features

* Deprecation DEPPS10: Encode `Parse.Object` in Cloud Function and remove option `encodeParseObjectInCloudFunction` ([#9973](https://github.com/parse-community/parse-server/issues/9973)) ([a2d3dbe](a2d3dbe972))

### BREAKING CHANGES

* This release encodes `Parse.Object` in Cloud Function and removes option `encodeParseObjectInCloudFunction` (Deprecation DEPPS10). ([a2d3dbe](a2d3dbe))
2025-12-12 19:47:21 +00:00
Manuel
a2d3dbe972 feat: Deprecation DEPPS10: Encode Parse.Object in Cloud Function and remove option encodeParseObjectInCloudFunction (#9973)
BREAKING CHANGE: This release encodes `Parse.Object` in Cloud Function and removes option `encodeParseObjectInCloudFunction` (Deprecation DEPPS10).
2025-12-12 20:46:35 +01:00