Commit Graph

4390 Commits

Author SHA1 Message Date
dependabot[bot]
dfea561f44 refactor: Upgrade ansi-regex from 3.0.0 to 5.0.1 (#8967) 2024-03-02 15:36:32 +01:00
Manuel
0613174b34 ci: Add dependabot config to use proper commit prefix in PR title (#8968) 2024-03-02 14:56:21 +01:00
Parse Platform
dbe8b72d8a refactor: Security upgrade @apollo/server from 4.9.2 to 4.9.3 (#8964) 2024-03-02 14:38:26 +01:00
semantic-release-bot
9293ce8ca5 chore(release): 7.0.0-alpha.22 [skip ci]
# [7.0.0-alpha.22](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.21...7.0.0-alpha.22) (2024-03-02)

### Features

* Switch GraphQL server from Yoga v2 to Apollo v4 ([#8959](https://github.com/parse-community/parse-server/issues/8959)) ([105ae7c](105ae7c8a5))
2024-03-02 01:07:38 +00:00
Onur
105ae7c8a5 feat: Switch GraphQL server from Yoga v2 to Apollo v4 (#8959) 2024-03-02 02:06:47 +01:00
semantic-release-bot
01c97f7ab7 chore(release): 7.0.0-alpha.21 [skip ci]
# [7.0.0-alpha.21](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.20...7.0.0-alpha.21) (2024-03-01)

### Bug Fixes

* Deny request if master key is not set in Parse Server option `masterKeyIps` regardless of ACL and CLP ([#8957](https://github.com/parse-community/parse-server/issues/8957)) ([a7b5b38](a7b5b38418))

### BREAKING CHANGES

* A request using the master key will now be rejected as unauthorized if the IP from which the request originates is not set in the Parse Server option `masterKeyIps`, even if the request does not require the master key permission, for example for a public object in a public class class. ([a7b5b38](a7b5b38))
2024-03-01 17:37:52 +00:00
EhsanParsania
a7b5b38418 fix: Deny request if master key is not set in Parse Server option masterKeyIps regardless of ACL and CLP (#8957)
BREAKING CHANGE: A request using the master key will now be rejected as unauthorized if the IP from which the request originates is not set in the Parse Server option `masterKeyIps`, even if the request does not require the master key permission, for example for a public object in a public class class.
2024-03-01 18:37:07 +01:00
semantic-release-bot
5452c8f41f chore(release): 7.0.0-alpha.20 [skip ci]
# [7.0.0-alpha.20](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.19...7.0.0-alpha.20) (2024-03-01)

### Bug Fixes

* Improve PostgreSQL injection detection; fixes security vulnerability [GHSA-6927-3vr9-fxf2](https://github.com/parse-community/parse-server/security/advisories/GHSA-6927-3vr9-fxf2) which affects Parse Server deployments using a Postgres database ([#8961](https://github.com/parse-community/parse-server/issues/8961)) ([cbefe77](cbefe770a7))
2024-03-01 15:53:21 +00:00
Manuel
cbefe770a7 fix: Improve PostgreSQL injection detection; fixes security vulnerability [GHSA-6927-3vr9-fxf2](https://github.com/parse-community/parse-server/security/advisories/GHSA-6927-3vr9-fxf2) which affects Parse Server deployments using a Postgres database (#8961) 2024-03-01 16:52:05 +01:00
dependabot[bot]
9c85e63354 refactor: Bump es5-ext from 0.10.62 to 0.10.63 (#8953) 2024-02-27 14:42:32 +01:00
Parse Platform
ab58eee0de refactor: Upgrade uuid from 9.0.0 to 9.0.1 (#8950) 2024-02-27 14:08:08 +01:00
Parse Platform
ec5a8ccbfd refactor: Upgrade redis from 4.6.11 to 4.6.13 (#8948) 2024-02-27 00:21:45 +01:00
Parse Platform
763738c92b refactor: Upgrade otpauth from 9.2.1 to 9.2.2 (#8951) 2024-02-26 22:44:46 +01:00
Parse Platform
6579e8254c refactor: Upgrade ws from 8.15.1 to 8.16.0 (#8952) 2024-02-26 22:18:13 +01:00
Manuel
f5d6fc98e7 refactor: Upgrade ldapjs from 2.3.3 to 3.0.7 (#8947) 2024-02-26 21:05:10 +01:00
Parse Platform
68b745a604 refactor: Upgrade follow-redirects from 1.15.4 to 1.15.5 (#8946) 2024-02-26 01:21:01 +01:00
dependabot[bot]
94846cd4de refactor: Bump ip from 1.1.5 to 2.0.1 (#8941) 2024-02-25 02:26:48 +01:00
Parse Platform
1d80aa25e3 refactor: Upgrade winston from 3.8.2 to 3.11.0 (#8939) 2024-02-24 23:30:06 +01:00
Parse Platform
597a9c3163 refactor: Upgrade semver from 7.5.2 to 7.5.4 (#8940) 2024-02-24 17:29:20 +01:00
dependabot[bot]
1f6dadbb81 refactor: Upgrade ip from 1.1.5 to 2.0.1 (#8936) 2024-02-22 20:39:23 +01:00
Parse Platform
ac7399b226 refactor: Upgrade jwks-rsa from 2.1.5 to 3.1.0 (#8926) 2024-02-18 14:27:31 +01:00
Parse Platform
9001df5063 refactor: Upgrade @parse/fs-files-adapter from 1.2.2 to 2.0.1 (#8925) 2024-02-18 13:16:20 +01:00
semantic-release-bot
a6d574ede6 chore(release): 7.0.0-alpha.19 [skip ci]
# [7.0.0-alpha.19](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.18...7.0.0-alpha.19) (2024-02-15)

### Features

* Node process exits with error code 1 on uncaught exception to allow custom uncaught exception handling ([#8894](https://github.com/parse-community/parse-server/issues/8894)) ([70c280c](70c280ca57))

### BREAKING CHANGES

* Node process now exits with code 1 on uncaught exceptions, enabling custom handlers that were blocked by Parse Server's default behavior of re-throwing errors. This change may lead to automatic process restarts by the environment, unlike before. ([70c280c](70c280c))
2024-02-15 23:19:24 +00:00
Onur
70c280ca57 feat: Node process exits with error code 1 on uncaught exception to allow custom uncaught exception handling (#8894)
BREAKING CHANGE: Node process now exits with code 1 on uncaught exceptions, enabling custom handlers that were blocked by Parse Server's default behavior of re-throwing errors. This change may lead to automatic process restarts by the environment, unlike before.
2024-02-16 00:18:29 +01:00
Parse Platform
e73bc517a8 refactor: Upgrade redis from 4.6.6 to 4.6.11 (#8880) 2024-02-15 13:24:46 +01:00
Parse Platform
25796537f4 refactor: Upgrade ws from 8.13.0 to 8.15.1 (#8878) 2024-02-15 13:09:23 +01:00
Parse Platform
efc5897f0b refactor: Upgrade lru-cache from 9.1.1 to 10.1.0 (#8877) 2024-02-15 12:48:31 +01:00
Corey
5202212b0b refactor: Remove deprecated bcrypt-nodejs package (#8902) 2024-02-15 12:08:39 +01:00
Parse Platform
c604657a27 refactor: Upgrade otpauth from 9.1.2 to 9.2.1 (#8879) 2024-02-15 03:31:37 +01:00
Corey
514c2377e0 refactor: Upgrade pg-promise from 11.5.0 to 11.5.4 (#8900) 2024-02-15 02:51:55 +01:00
Corey
dfd1aee7dd docs: Update testing against Postgres locally (#8906) 2024-02-15 02:32:58 +01:00
semantic-release-bot
af686f31da chore(release): 7.0.0-alpha.18 [skip ci]
# [7.0.0-alpha.18](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.17...7.0.0-alpha.18) (2024-02-15)

### Features

* Deprecation DEPPS6: Authentication adapters disabled by default ([#8858](https://github.com/parse-community/parse-server/issues/8858)) ([0cf58eb](0cf58eb8d6))

### BREAKING CHANGES

* Authentication adapters are disabled by default; to use an authentication adapter it needs to be explicitly enabled in the Parse Server authentication adapter option `auth.<provider>.enabled: true` ([0cf58eb](0cf58eb))
2024-02-15 00:28:56 +00:00
Onur
0cf58eb8d6 feat: Deprecation DEPPS6: Authentication adapters disabled by default (#8858)
BREAKING CHANGE: Authentication adapters are disabled by default; to use an authentication adapter it needs to be explicitly enabled in the Parse Server authentication adapter option `auth.<provider>.enabled: true`
2024-02-15 01:28:09 +01:00
semantic-release-bot
0e9b6d69ef chore(release): 7.0.0-alpha.17 [skip ci]
# [7.0.0-alpha.17](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.16...7.0.0-alpha.17) (2024-02-15)

### Features

* Deprecation DEPPS8:  Parse Server option `allowExpiredAuthDataToken` defaults to `false` ([#8860](https://github.com/parse-community/parse-server/issues/8860)) ([e29845f](e29845f8da))

### BREAKING CHANGES

* Parse Server option `allowExpiredAuthDataToken` defaults to `false`; a 3rd party authentication token will be validated every time the user tries to log in and the login will fail if the token has expired; the effect of this change may differ for different authentication adapters, depending on the token lifetime and the token refresh logic of the adapter ([e29845f](e29845f))
2024-02-15 00:08:37 +00:00
Onur
e29845f8da feat: Deprecation DEPPS8: Parse Server option allowExpiredAuthDataToken defaults to false (#8860)
BREAKING CHANGE: Parse Server option `allowExpiredAuthDataToken` defaults to `false`; a 3rd party authentication token will be validated every time the user tries to log in and the login will fail if the token has expired; the effect of this change may differ for different authentication adapters, depending on the token lifetime and the token refresh logic of the adapter
2024-02-15 01:07:35 +01:00
semantic-release-bot
bbda8d2ed6 chore(release): 7.0.0-alpha.16 [skip ci]
# [7.0.0-alpha.16](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.15...7.0.0-alpha.16) (2024-02-14)

### Features

* Deprecation DEPPS9: LiveQuery `fields` option is renamed to `keys` ([#8852](https://github.com/parse-community/parse-server/issues/8852)) ([38983e8](38983e8e9b))

### BREAKING CHANGES

* LiveQuery `fields` option is renamed to `keys` ([38983e8](38983e8))
2024-02-14 23:32:04 +00:00
Onur
38983e8e9b feat: Deprecation DEPPS9: LiveQuery fields option is renamed to keys (#8852)
BREAKING CHANGE: LiveQuery `fields` option is renamed to `keys`
2024-02-15 00:31:15 +01:00
semantic-release-bot
359b66f9d1 chore(release): 7.0.0-alpha.15 [skip ci]
# [7.0.0-alpha.15](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.14...7.0.0-alpha.15) (2024-02-14)

### Features

* Deprecation DEPPS7: Remove deprecated Cloud Code file trigger syntax ([#8855](https://github.com/parse-community/parse-server/issues/8855)) ([4e6a375](4e6a375b51))

### BREAKING CHANGES

* Cloud Code file trigger syntax has been aligned with object trigger syntax, for example `Parse.Cloud.beforeDeleteFile'` has been changed to `Parse.Cloud.beforeDelete(Parse.File, (request) => {})'` ([4e6a375](4e6a375))
2024-02-14 21:55:18 +00:00
Onur
4e6a375b51 feat: Deprecation DEPPS7: Remove deprecated Cloud Code file trigger syntax (#8855)
BREAKING CHANGE: Cloud Code file trigger syntax has been aligned with object trigger syntax, for example `Parse.Cloud.beforeDeleteFile'` has been changed to `Parse.Cloud.beforeDelete(Parse.File, (request) => {})'`
2024-02-14 22:54:30 +01:00
semantic-release-bot
df3d0bc82d chore(release): 7.0.0-alpha.14 [skip ci]
# [7.0.0-alpha.14](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.13...7.0.0-alpha.14) (2024-02-14)

### Bug Fixes

* GraphQL file upload fails in case of use of pointer or relation ([#8721](https://github.com/parse-community/parse-server/issues/8721)) ([1aba638](1aba6382c8))
2024-02-14 20:45:38 +00:00
Antoine Cormouls
1aba6382c8 fix: GraphQL file upload fails in case of use of pointer or relation (#8721) 2024-02-14 21:44:42 +01:00
semantic-release-bot
6f21195980 chore(release): 7.0.0-alpha.13 [skip ci]
# [7.0.0-alpha.13](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.12...7.0.0-alpha.13) (2024-02-14)

### Bug Fixes

* Docker image not published to Docker Hub on new release ([#8905](https://github.com/parse-community/parse-server/issues/8905)) ([a2ac8d1](a2ac8d133c))
2024-02-14 20:06:15 +00:00
Corey
a2ac8d133c fix: Docker image not published to Docker Hub on new release (#8905) 2024-02-14 21:05:20 +01:00
semantic-release-bot
27ad6f476a chore(release): 7.0.0-alpha.12 [skip ci]
# [7.0.0-alpha.12](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.11...7.0.0-alpha.12) (2024-02-14)

### Features

* Add support for Node 20, drop support for Node 14, 16 ([#8907](https://github.com/parse-community/parse-server/issues/8907)) ([ced4872](ced487246e))

### BREAKING CHANGES

* Removes support for Node 14 and 16 ([ced4872](ced4872))
2024-02-14 18:57:59 +00:00
Corey
ced487246e feat: Add support for Node 20, drop support for Node 14, 16 (#8907)
BREAKING CHANGE: Removes support for Node 14 and 16
2024-02-14 19:56:49 +01:00
semantic-release-bot
104990b52a chore(release): 7.0.0-alpha.11 [skip ci]
# [7.0.0-alpha.11](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.10...7.0.0-alpha.11) (2024-01-22)

### Features

* Add support for Postgres 16 ([#8898](https://github.com/parse-community/parse-server/issues/8898)) ([99489b2](99489b22e4))

### BREAKING CHANGES

* Removes support for Postgres 11 and 12 ([99489b2](99489b2))
2024-01-22 18:59:08 +00:00
Corey
99489b22e4 feat: Add support for Postgres 16 (#8898)
BREAKING CHANGE: Removes support for Postgres 11 and 12
2024-01-22 19:58:08 +01:00
semantic-release-bot
655e2c41f0 chore(release): 7.0.0-alpha.10 [skip ci]
# [7.0.0-alpha.10](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.9...7.0.0-alpha.10) (2024-01-17)

### Features

* Add password validation via POST request for user with unverified email using master key and option `ignoreEmailVerification` ([#8895](https://github.com/parse-community/parse-server/issues/8895)) ([633a9d2](633a9d25e4))
2024-01-17 16:43:59 +00:00
Manuel
633a9d25e4 feat: Add password validation via POST request for user with unverified email using master key and option ignoreEmailVerification (#8895) 2024-01-17 17:43:04 +01:00
semantic-release-bot
abdba68380 chore(release): 7.0.0-alpha.9 [skip ci]
# [7.0.0-alpha.9](https://github.com/parse-community/parse-server/compare/7.0.0-alpha.8...7.0.0-alpha.9) (2024-01-15)

### Bug Fixes

* Server crashes when receiving an array of `Parse.Pointer` in the request body ([#8784](https://github.com/parse-community/parse-server/issues/8784)) ([66e3603](66e36039d8))
2024-01-15 15:03:58 +00:00