Commit Graph

3603 Commits

Author SHA1 Message Date
dblythy
caee281bc5 fix: allow LiveQuery on Parse.Session (#7554) 2021-10-08 17:24:33 +02:00
dblythy
484c2e81ca fix: improve security by deprecating creating users with public access by default (#7319) 2021-10-08 05:24:20 +02:00
Snyk bot
2b5bf2261b refactor: upgrade graphql-relay from 0.8.0 to 0.9.0 (#7605)
Snyk has created this PR to upgrade graphql-relay from 0.8.0 to 0.9.0.

See this package in npm:
https://www.npmjs.com/package/graphql-relay

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=referral&page=upgrade-pr
2021-10-06 01:44:45 +02:00
Snyk bot
20cb3333ab fix: upgrade ws from 8.2.1 to 8.2.2 (#7598)
Snyk has created this PR to upgrade ws from 8.2.1 to 8.2.2.

See this package in npm:
https://www.npmjs.com/package/ws

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: Manuel <5673677+mtrezza@users.noreply.github.com>
2021-10-01 01:18:41 +02:00
dblythy
d90c1591ad test: fix failing tests after removal of session token (#7599) 2021-09-30 13:41:04 +02:00
Manuel
b86e3bfbb5 ci: add manual docker image release (#7597) 2021-09-30 05:06:43 +02:00
dblythy
834ae366f9 Merge pull request from GHSA-7pr3-p5fm-8r9x
* fix: strip sessionToken on _User LiveQuery

* delete authData

* add changelog

* Update package.json

* Update CHANGELOG.md

* add changes

* Update ParseLiveQuery.spec.js

Co-authored-by: Manuel <5673677+mtrezza@users.noreply.github.com>
2021-09-30 04:52:12 +02:00
Snyk bot
bcbc035627 fix: upgrade graphql from 15.5.2 to 15.5.3 (#7596)
Snyk has created this PR to upgrade graphql from 15.5.2 to 15.5.3.

See this package in npm:
https://www.npmjs.com/package/graphql

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=referral&page=upgrade-pr

Co-authored-by: Manuel <5673677+mtrezza@users.noreply.github.com>
2021-09-30 04:49:13 +02:00
Manuel
c9633c1566 ci: bump environments (#7594)
* add issue bot for prs

* Update CHANGELOG.md

* Update issue-bot.yml

* bump MongoDB 5.0.2 to 5.0.3

* bump MongoDB 4.4.8 to 4.4.9

* bump MongoDB 4.2.16 to 4.2.17

* bump node 14.17.6 to 14.18.0
2021-09-29 17:09:49 +02:00
dependabot[bot]
0fa8f5e27b chore(deps): bump object-path from 0.11.7 to 0.11.8 (#7585) 2021-09-22 15:18:44 +02:00
Snyk bot
dee4d96627 fix: upgrade graphql from 15.5.1 to 15.5.2 (#7587) 2021-09-22 09:49:39 +02:00
Snyk bot
c3da2908fa fix: upgrade ws from 7.5.3 to 8.2.1 (#7580)
Snyk has created this PR to upgrade ws from 7.5.3 to 8.2.1.

See this package in npm:
https://www.npmjs.com/package/ws

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2021-09-19 15:05:08 +02:00
dblythy
8ed94421e6 fix: add support for descending sorting of full text search (#7496) 2021-09-15 16:15:08 +02:00
Manuel
e9e3be1df8 ci: add node engine check (#7574)
* add issue bot for prs

* Update CHANGELOG.md

* Update issue-bot.yml

* replace node 15 with node 16

* Update CHANGELOG.md

* use node 16 as default node version

* ignore node 15 in ci self-check

* bumped madge for node deprecation DEP0148

* ci: add node engine check

* lint

* bump node engine

* Update ci.yml

* revert unnecessary changes

* Update CHANGELOG.md

* Update ci.yml
2021-09-14 16:29:56 +02:00
Manuel
3e4d1ecbf3 ci: bump mongodb (#7568)
* add issue bot for prs

* Update CHANGELOG.md

* Update issue-bot.yml

* bump ci
2021-09-14 15:48:37 +02:00
dblythy
0225340ccb refactor: allow ES import for cloud string if package type is module (#7560)
* allow module import for Parse Cloud

* Update .babelrc

* catch esm error

* Update ParseServer.js

* add tests

* Update CHANGELOG.md

* Update CloudCode.spec.js

Co-authored-by: Manuel <5673677+mtrezza@users.noreply.github.com>
2021-09-14 14:10:37 +02:00
Manuel
fdb7dfba9f docs: update commit message (#7570)
* add issue bot for prs

* Update CHANGELOG.md

* Update issue-bot.yml

* Update CONTRIBUTING.md
2021-09-13 11:55:26 +02:00
Manuel
16e9a6f201 docs: add angular commit (#7567)
* add issue bot for prs

* Update CHANGELOG.md

* Update issue-bot.yml

* Update CONTRIBUTING.md
2021-09-10 23:55:50 +02:00
dependabot[bot]
1c626d50b5 chore(deps): bump axios from 0.21.1 to 0.21.4 (#7566)
Bumps [axios](https://github.com/axios/axios) from 0.21.1 to 0.21.4.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/master/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v0.21.1...v0.21.4)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-09-10 17:08:34 +02:00
Lukáš Smilek
b185fad695 Additional explication for expireInactiveSessions in ParseServerOptions (#7552)
* Update docs.js

Additional explication for `expireInactiveSessions`

* Update index.js

Additional explication for `expireInactiveSessions`

* Update docs.js

correcting spelling error

* Update index.js

correcting spelling error

* Update Definitions.js

Co-authored-by: Manuel <5673677+mtrezza@users.noreply.github.com>
2021-09-10 15:49:20 +02:00
Manuel
429b959964 docs: Introduce deprecation ID for reference in comments and online search (#7562)
* add issue bot for prs

* Update CHANGELOG.md

* Update issue-bot.yml

* Update DEPRECATIONS.md

* Update CHANGELOG.md
2021-09-09 13:09:17 +02:00
Manuel
7807d6343d ci: Fix docker hub push (#7556)
* add issue bot for prs

* Update CHANGELOG.md

* Update issue-bot.yml

* fix docker run
2021-09-07 18:02:40 +02:00
Manuel
41f0a1de43 ci: update docker image building (#7555)
* add issue bot for prs

* Update CHANGELOG.md

* Update issue-bot.yml

* Update docker-publish.yml
2021-09-07 16:42:28 +02:00
Corey
24e9bdc639 ci: Fix docker image pushing to Docker Hub (#7548)
* add actions file

* nit

* add multi-platform

* add buildx

* reduce platforms

* remove arm7

* add back arm7

* add missing archs

* remove failing image

* add back in linux/s390x

* switch image name to parse-server

* remove failing images

* nit spelling

* Nit

* add comment about nightly builds
2021-09-07 14:35:03 +02:00
Manuel
5ab974dcd4 refactor: remove parse issue bot (#7544)
* add issue bot for prs

* Update CHANGELOG.md

* Update issue-bot.yml

* refactor: remove parse issue bot
2021-09-04 05:12:28 +02:00
Manuel
24188a39a7 refactor: remove restricted session field (#7543)
* add issue bot for prs

* Update CHANGELOG.md

* Update issue-bot.yml

* remove session restriction artifacts

* Update CHANGELOG.md

* Update CHANGELOG.md
2021-09-04 03:03:46 +02:00
Manuel
27832453e2 refactor: clean code (#7542)
* add issue bot for prs

* Update CHANGELOG.md

* Update issue-bot.yml

* reformat code
2021-09-03 01:23:15 +02:00
dependabot[bot]
6ad3e6f8ad chore(deps): bump object-path from 0.11.5 to 0.11.7 (#7535) 2021-09-02 14:41:44 +02:00
Manuel
6f77bb436e ci: bump ci environment (#7539)
* add issue bot for prs

* Update CHANGELOG.md

* Update issue-bot.yml

* bump node 14.17.5 to 14.17.6

* bump node 12.22.5 to 12.22.5

* Update CHANGELOG.md
2021-09-02 14:12:36 +02:00
Manuel
f1da29f9c9 chore: bump package version to 4.10.3 (#7537)
* add issue bot for prs

* Update CHANGELOG.md

* Update issue-bot.yml

* bumped package version
2021-09-02 13:08:52 +02:00
Antonio Davi Macedo Coelho de Castro
308668c894 Merge pull request from GHSA-xqp8-w826-hh6x
* Added a test case that triggers the query parameter crash

* rest.js: validate the explain parameter to keep the nodejs driver from throwing an uncatchable exception and crashing the server (see https://jira.mongodb.org/browse/NODE-3463)
RestQuery.js: Check whether explain mode is enabled not by "!== true", but by the "!" operator. explain can have string values.
Added tests that validate correct behaviour on different explain values

* Refactor the new tests

* Simplify the new tests
Also do a sanity check on the explain results

* Test refactor

* Exclude queryPlannerExtended as it is not supported by the testing environment
  Simplifies the tests

* Restrict the changes to mongodb
  Moved the verification of the explain value from rest.js to MongoStorageAdapter.js
  Also restricted the relevant unit tests to mongodb

* Added changelog entry

* reformat changelog entry

* Update CHANGELOG.md

Co-authored-by: Kartal Kaan Bozdoğan <kartalkaanbozdogan@gmail.com>
Co-authored-by: Manuel <5673677+mtrezza@users.noreply.github.com>
2021-09-02 12:46:48 +02:00
Manuel
1e0d408ca3 ci: remove issue bot for PRs (#7531)
* add issue bot for prs

* Update CHANGELOG.md

* Update issue-bot.yml

* removing bot for prs
2021-08-27 21:18:11 +02:00
Manuel
5d31997f26 ci: add issue bot for PRs (#7530) 2021-08-27 20:51:48 +02:00
Manuel
26009563d8 refactor: uniform issue templates across repos (#7528)
* Update ---1-report-an-issue.md

* Update CHANGELOG.md
2021-08-27 17:06:44 +02:00
Manuel
4a0b4ebc34 ci(bot): add issue bot (#7523) 2021-08-26 19:19:20 +02:00
Snyk bot
dee5a13a85 fix: upgrade ldapjs from 2.3.0 to 2.3.1 (#7524)
Snyk has created this PR to upgrade ldapjs from 2.3.0 to 2.3.1.

See this package in npm:
https://www.npmjs.com/package/ldapjs

See this project in Snyk:
https://app.snyk.io/org/acinader/project/8c1a9edb-c8f5-4dc1-b221-4d6030a323eb?utm_source=github&utm_medium=upgrade-pr
2021-08-25 11:32:40 +02:00
Manuel
36619fb646 fix typo in issue template 2021-08-25 02:01:44 +02:00
Manuel
2f557f86b2 removed text in README that is in DEPRECATIONS 2021-08-24 01:41:40 +02:00
Manuel
826d55c1b6 clarified deprecation plan 2021-08-24 01:39:53 +02:00
Manuel
05dd11f08d consolidated deprecations (#7516) 2021-08-24 01:36:52 +02:00
Manuel
c0d7ac0f68 Merge release 4.10.2 (#7515)
* bump version

* Update CHANGELOG.md
2021-08-24 01:21:03 +02:00
Manuel
f5f608ccf5 Merge release 4.10.1 (#7511)
* Update CHANGELOG.md

* bump version

* bumped mongodb@3.6.11
2021-08-24 00:56:40 +02:00
Manuel
b1de21a89a ci(changelog): add changelog reminder (#7512)
* Update ci.yml

* Update CHANGELOG.md

* Update ci.yml

* Update ci.yml
2021-08-24 00:50:49 +02:00
Snyk bot
a967e79219 fix: upgrade pg-promise from 10.10.2 to 10.11.0 (#7510) 2021-08-22 10:45:32 +02:00
Snyk bot
65c967a4c4 fix: package.json & package-lock.json to reduce vulnerabilities (#7509) 2021-08-22 10:25:47 +02:00
Manuel
f3854f9354 improved pr template checkbox instructions 2021-08-21 12:41:58 +02:00
Manuel
517d8ae240 improved issue template checkbox instruction 2021-08-21 12:41:33 +02:00
Manuel
66cb0f05b0 Merge v4.10.0 into master (#7505)
* bump version

* Update CHANGELOG.md
2021-08-20 11:57:09 -07:00
Manuel
c6fb88c298 adapt for master merge (#7501) 2021-08-18 15:22:52 -07:00
Manuel
e28fdef489 fixed minor changelog typos 2021-08-18 19:11:49 +02:00