Parse Platform
dbe8b72d8a
refactor: Security upgrade @apollo/server from 4.9.2 to 4.9.3 ( #8964 )
2024-03-02 14:38:26 +01:00
semantic-release-bot
9293ce8ca5
chore(release): 7.0.0-alpha.22 [skip ci]
...
# [7.0.0-alpha.22](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.21...7.0.0-alpha.22 ) (2024-03-02)
### Features
* Switch GraphQL server from Yoga v2 to Apollo v4 ([#8959 ](https://github.com/parse-community/parse-server/issues/8959 )) ([105ae7c ](105ae7c8a5 ))
2024-03-02 01:07:38 +00:00
Onur
105ae7c8a5
feat: Switch GraphQL server from Yoga v2 to Apollo v4 ( #8959 )
2024-03-02 02:06:47 +01:00
semantic-release-bot
01c97f7ab7
chore(release): 7.0.0-alpha.21 [skip ci]
...
# [7.0.0-alpha.21](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.20...7.0.0-alpha.21 ) (2024-03-01)
### Bug Fixes
* Deny request if master key is not set in Parse Server option `masterKeyIps` regardless of ACL and CLP ([#8957 ](https://github.com/parse-community/parse-server/issues/8957 )) ([a7b5b38 ](a7b5b38418 ))
### BREAKING CHANGES
* A request using the master key will now be rejected as unauthorized if the IP from which the request originates is not set in the Parse Server option `masterKeyIps`, even if the request does not require the master key permission, for example for a public object in a public class class. ([a7b5b38 ](a7b5b38 ))
2024-03-01 17:37:52 +00:00
EhsanParsania
a7b5b38418
fix: Deny request if master key is not set in Parse Server option masterKeyIps regardless of ACL and CLP ( #8957 )
...
BREAKING CHANGE: A request using the master key will now be rejected as unauthorized if the IP from which the request originates is not set in the Parse Server option `masterKeyIps`, even if the request does not require the master key permission, for example for a public object in a public class class.
2024-03-01 18:37:07 +01:00
semantic-release-bot
5452c8f41f
chore(release): 7.0.0-alpha.20 [skip ci]
...
# [7.0.0-alpha.20](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.19...7.0.0-alpha.20 ) (2024-03-01)
### Bug Fixes
* Improve PostgreSQL injection detection; fixes security vulnerability [GHSA-6927-3vr9-fxf2](https://github.com/parse-community/parse-server/security/advisories/GHSA-6927-3vr9-fxf2 ) which affects Parse Server deployments using a Postgres database ([#8961 ](https://github.com/parse-community/parse-server/issues/8961 )) ([cbefe77 ](cbefe770a7 ))
2024-03-01 15:53:21 +00:00
Manuel
cbefe770a7
fix: Improve PostgreSQL injection detection; fixes security vulnerability [GHSA-6927-3vr9-fxf2]( https://github.com/parse-community/parse-server/security/advisories/GHSA-6927-3vr9-fxf2 ) which affects Parse Server deployments using a Postgres database ( #8961 )
2024-03-01 16:52:05 +01:00
dependabot[bot]
9c85e63354
refactor: Bump es5-ext from 0.10.62 to 0.10.63 ( #8953 )
2024-02-27 14:42:32 +01:00
Parse Platform
ab58eee0de
refactor: Upgrade uuid from 9.0.0 to 9.0.1 ( #8950 )
2024-02-27 14:08:08 +01:00
Parse Platform
ec5a8ccbfd
refactor: Upgrade redis from 4.6.11 to 4.6.13 ( #8948 )
2024-02-27 00:21:45 +01:00
Parse Platform
763738c92b
refactor: Upgrade otpauth from 9.2.1 to 9.2.2 ( #8951 )
2024-02-26 22:44:46 +01:00
Parse Platform
6579e8254c
refactor: Upgrade ws from 8.15.1 to 8.16.0 ( #8952 )
2024-02-26 22:18:13 +01:00
Manuel
f5d6fc98e7
refactor: Upgrade ldapjs from 2.3.3 to 3.0.7 ( #8947 )
2024-02-26 21:05:10 +01:00
Parse Platform
68b745a604
refactor: Upgrade follow-redirects from 1.15.4 to 1.15.5 ( #8946 )
2024-02-26 01:21:01 +01:00
dependabot[bot]
94846cd4de
refactor: Bump ip from 1.1.5 to 2.0.1 ( #8941 )
2024-02-25 02:26:48 +01:00
Parse Platform
1d80aa25e3
refactor: Upgrade winston from 3.8.2 to 3.11.0 ( #8939 )
2024-02-24 23:30:06 +01:00
Parse Platform
597a9c3163
refactor: Upgrade semver from 7.5.2 to 7.5.4 ( #8940 )
2024-02-24 17:29:20 +01:00
dependabot[bot]
1f6dadbb81
refactor: Upgrade ip from 1.1.5 to 2.0.1 ( #8936 )
2024-02-22 20:39:23 +01:00
Parse Platform
ac7399b226
refactor: Upgrade jwks-rsa from 2.1.5 to 3.1.0 ( #8926 )
2024-02-18 14:27:31 +01:00
Parse Platform
9001df5063
refactor: Upgrade @parse/fs-files-adapter from 1.2.2 to 2.0.1 ( #8925 )
2024-02-18 13:16:20 +01:00
semantic-release-bot
a6d574ede6
chore(release): 7.0.0-alpha.19 [skip ci]
...
# [7.0.0-alpha.19](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.18...7.0.0-alpha.19 ) (2024-02-15)
### Features
* Node process exits with error code 1 on uncaught exception to allow custom uncaught exception handling ([#8894 ](https://github.com/parse-community/parse-server/issues/8894 )) ([70c280c ](70c280ca57 ))
### BREAKING CHANGES
* Node process now exits with code 1 on uncaught exceptions, enabling custom handlers that were blocked by Parse Server's default behavior of re-throwing errors. This change may lead to automatic process restarts by the environment, unlike before. ([70c280c ](70c280c ))
2024-02-15 23:19:24 +00:00
Onur
70c280ca57
feat: Node process exits with error code 1 on uncaught exception to allow custom uncaught exception handling ( #8894 )
...
BREAKING CHANGE: Node process now exits with code 1 on uncaught exceptions, enabling custom handlers that were blocked by Parse Server's default behavior of re-throwing errors. This change may lead to automatic process restarts by the environment, unlike before.
2024-02-16 00:18:29 +01:00
Parse Platform
e73bc517a8
refactor: Upgrade redis from 4.6.6 to 4.6.11 ( #8880 )
2024-02-15 13:24:46 +01:00
Parse Platform
25796537f4
refactor: Upgrade ws from 8.13.0 to 8.15.1 ( #8878 )
2024-02-15 13:09:23 +01:00
Parse Platform
efc5897f0b
refactor: Upgrade lru-cache from 9.1.1 to 10.1.0 ( #8877 )
2024-02-15 12:48:31 +01:00
Corey
5202212b0b
refactor: Remove deprecated bcrypt-nodejs package ( #8902 )
2024-02-15 12:08:39 +01:00
Parse Platform
c604657a27
refactor: Upgrade otpauth from 9.1.2 to 9.2.1 ( #8879 )
2024-02-15 03:31:37 +01:00
Corey
514c2377e0
refactor: Upgrade pg-promise from 11.5.0 to 11.5.4 ( #8900 )
2024-02-15 02:51:55 +01:00
Corey
dfd1aee7dd
docs: Update testing against Postgres locally ( #8906 )
2024-02-15 02:32:58 +01:00
semantic-release-bot
af686f31da
chore(release): 7.0.0-alpha.18 [skip ci]
...
# [7.0.0-alpha.18](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.17...7.0.0-alpha.18 ) (2024-02-15)
### Features
* Deprecation DEPPS6: Authentication adapters disabled by default ([#8858 ](https://github.com/parse-community/parse-server/issues/8858 )) ([0cf58eb ](0cf58eb8d6 ))
### BREAKING CHANGES
* Authentication adapters are disabled by default; to use an authentication adapter it needs to be explicitly enabled in the Parse Server authentication adapter option `auth.<provider>.enabled: true` ([0cf58eb ](0cf58eb ))
2024-02-15 00:28:56 +00:00
Onur
0cf58eb8d6
feat: Deprecation DEPPS6: Authentication adapters disabled by default ( #8858 )
...
BREAKING CHANGE: Authentication adapters are disabled by default; to use an authentication adapter it needs to be explicitly enabled in the Parse Server authentication adapter option `auth.<provider>.enabled: true`
2024-02-15 01:28:09 +01:00
semantic-release-bot
0e9b6d69ef
chore(release): 7.0.0-alpha.17 [skip ci]
...
# [7.0.0-alpha.17](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.16...7.0.0-alpha.17 ) (2024-02-15)
### Features
* Deprecation DEPPS8: Parse Server option `allowExpiredAuthDataToken` defaults to `false` ([#8860 ](https://github.com/parse-community/parse-server/issues/8860 )) ([e29845f ](e29845f8da ))
### BREAKING CHANGES
* Parse Server option `allowExpiredAuthDataToken` defaults to `false`; a 3rd party authentication token will be validated every time the user tries to log in and the login will fail if the token has expired; the effect of this change may differ for different authentication adapters, depending on the token lifetime and the token refresh logic of the adapter ([e29845f ](e29845f ))
2024-02-15 00:08:37 +00:00
Onur
e29845f8da
feat: Deprecation DEPPS8: Parse Server option allowExpiredAuthDataToken defaults to false ( #8860 )
...
BREAKING CHANGE: Parse Server option `allowExpiredAuthDataToken` defaults to `false`; a 3rd party authentication token will be validated every time the user tries to log in and the login will fail if the token has expired; the effect of this change may differ for different authentication adapters, depending on the token lifetime and the token refresh logic of the adapter
2024-02-15 01:07:35 +01:00
semantic-release-bot
bbda8d2ed6
chore(release): 7.0.0-alpha.16 [skip ci]
...
# [7.0.0-alpha.16](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.15...7.0.0-alpha.16 ) (2024-02-14)
### Features
* Deprecation DEPPS9: LiveQuery `fields` option is renamed to `keys` ([#8852 ](https://github.com/parse-community/parse-server/issues/8852 )) ([38983e8 ](38983e8e9b ))
### BREAKING CHANGES
* LiveQuery `fields` option is renamed to `keys` ([38983e8 ](38983e8 ))
2024-02-14 23:32:04 +00:00
Onur
38983e8e9b
feat: Deprecation DEPPS9: LiveQuery fields option is renamed to keys ( #8852 )
...
BREAKING CHANGE: LiveQuery `fields` option is renamed to `keys`
2024-02-15 00:31:15 +01:00
semantic-release-bot
359b66f9d1
chore(release): 7.0.0-alpha.15 [skip ci]
...
# [7.0.0-alpha.15](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.14...7.0.0-alpha.15 ) (2024-02-14)
### Features
* Deprecation DEPPS7: Remove deprecated Cloud Code file trigger syntax ([#8855 ](https://github.com/parse-community/parse-server/issues/8855 )) ([4e6a375 ](4e6a375b51 ))
### BREAKING CHANGES
* Cloud Code file trigger syntax has been aligned with object trigger syntax, for example `Parse.Cloud.beforeDeleteFile'` has been changed to `Parse.Cloud.beforeDelete(Parse.File, (request) => {})'` ([4e6a375 ](4e6a375 ))
2024-02-14 21:55:18 +00:00
Onur
4e6a375b51
feat: Deprecation DEPPS7: Remove deprecated Cloud Code file trigger syntax ( #8855 )
...
BREAKING CHANGE: Cloud Code file trigger syntax has been aligned with object trigger syntax, for example `Parse.Cloud.beforeDeleteFile'` has been changed to `Parse.Cloud.beforeDelete(Parse.File, (request) => {})'`
2024-02-14 22:54:30 +01:00
semantic-release-bot
df3d0bc82d
chore(release): 7.0.0-alpha.14 [skip ci]
...
# [7.0.0-alpha.14](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.13...7.0.0-alpha.14 ) (2024-02-14)
### Bug Fixes
* GraphQL file upload fails in case of use of pointer or relation ([#8721 ](https://github.com/parse-community/parse-server/issues/8721 )) ([1aba638 ](1aba6382c8 ))
2024-02-14 20:45:38 +00:00
Antoine Cormouls
1aba6382c8
fix: GraphQL file upload fails in case of use of pointer or relation ( #8721 )
2024-02-14 21:44:42 +01:00
semantic-release-bot
6f21195980
chore(release): 7.0.0-alpha.13 [skip ci]
...
# [7.0.0-alpha.13](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.12...7.0.0-alpha.13 ) (2024-02-14)
### Bug Fixes
* Docker image not published to Docker Hub on new release ([#8905 ](https://github.com/parse-community/parse-server/issues/8905 )) ([a2ac8d1 ](a2ac8d133c ))
2024-02-14 20:06:15 +00:00
Corey
a2ac8d133c
fix: Docker image not published to Docker Hub on new release ( #8905 )
2024-02-14 21:05:20 +01:00
semantic-release-bot
27ad6f476a
chore(release): 7.0.0-alpha.12 [skip ci]
...
# [7.0.0-alpha.12](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.11...7.0.0-alpha.12 ) (2024-02-14)
### Features
* Add support for Node 20, drop support for Node 14, 16 ([#8907 ](https://github.com/parse-community/parse-server/issues/8907 )) ([ced4872 ](ced487246e ))
### BREAKING CHANGES
* Removes support for Node 14 and 16 ([ced4872 ](ced4872 ))
2024-02-14 18:57:59 +00:00
Corey
ced487246e
feat: Add support for Node 20, drop support for Node 14, 16 ( #8907 )
...
BREAKING CHANGE: Removes support for Node 14 and 16
2024-02-14 19:56:49 +01:00
semantic-release-bot
104990b52a
chore(release): 7.0.0-alpha.11 [skip ci]
...
# [7.0.0-alpha.11](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.10...7.0.0-alpha.11 ) (2024-01-22)
### Features
* Add support for Postgres 16 ([#8898 ](https://github.com/parse-community/parse-server/issues/8898 )) ([99489b2 ](99489b22e4 ))
### BREAKING CHANGES
* Removes support for Postgres 11 and 12 ([99489b2 ](99489b2 ))
2024-01-22 18:59:08 +00:00
Corey
99489b22e4
feat: Add support for Postgres 16 ( #8898 )
...
BREAKING CHANGE: Removes support for Postgres 11 and 12
2024-01-22 19:58:08 +01:00
semantic-release-bot
655e2c41f0
chore(release): 7.0.0-alpha.10 [skip ci]
...
# [7.0.0-alpha.10](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.9...7.0.0-alpha.10 ) (2024-01-17)
### Features
* Add password validation via POST request for user with unverified email using master key and option `ignoreEmailVerification` ([#8895 ](https://github.com/parse-community/parse-server/issues/8895 )) ([633a9d2 ](633a9d25e4 ))
2024-01-17 16:43:59 +00:00
Manuel
633a9d25e4
feat: Add password validation via POST request for user with unverified email using master key and option ignoreEmailVerification ( #8895 )
2024-01-17 17:43:04 +01:00
semantic-release-bot
abdba68380
chore(release): 7.0.0-alpha.9 [skip ci]
...
# [7.0.0-alpha.9](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.8...7.0.0-alpha.9 ) (2024-01-15)
### Bug Fixes
* Server crashes when receiving an array of `Parse.Pointer` in the request body ([#8784 ](https://github.com/parse-community/parse-server/issues/8784 )) ([66e3603 ](66e36039d8 ))
2024-01-15 15:03:58 +00:00
Ziv Chen
66e36039d8
fix: Server crashes when receiving an array of Parse.Pointer in the request body ( #8784 )
2024-01-15 16:02:57 +01:00
semantic-release-bot
038b7a978b
chore(release): 7.0.0-alpha.8 [skip ci]
...
# [7.0.0-alpha.8](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.7...7.0.0-alpha.8 ) (2024-01-15)
### Bug Fixes
* Incomplete user object in `verifyEmail` function if both username and email are changed ([#8889 ](https://github.com/parse-community/parse-server/issues/8889 )) ([1eb95ae ](1eb95aeb41 ))
2024-01-15 14:45:47 +00:00