2026 Commits

Author SHA1 Message Date
semantic-release-bot
c9333dd7bc chore(release): 7.5.4 [skip ci]
## [7.5.4](https://github.com/parse-community/parse-server/compare/7.5.3...7.5.4) (2025-11-05)

### Bug Fixes

* Uploading a file by providing an origin URL allows for Server-Side Request Forgery (SSRF); fixes vulnerability [GHSA-x4qj-2f4q-r4rx](https://github.com/parse-community/parse-server/security/advisories/GHSA-x4qj-2f4q-r4rx) ([#9904](https://github.com/parse-community/parse-server/issues/9904)) ([8bbe3ef](8bbe3efbcf))
2025-11-05 13:46:12 +00:00
semantic-release-bot
6096449cf6 chore(release): 7.5.3 [skip ci]
## [7.5.3](https://github.com/parse-community/parse-server/compare/7.5.2...7.5.3) (2025-07-10)

### Bug Fixes

* Data schema exposed via GraphQL API public introspection (GHSA-48q3-prgv-gm4w) ([#9820](https://github.com/parse-community/parse-server/issues/9820)) ([c10f4ac](c10f4ac97b))
2025-07-10 02:25:53 +00:00
Parse Platform
0f2aa28381 refactor: Upgrade pg-promise from 11.10.2 to 11.14.0 (#9817) 2025-07-09 12:27:54 +02:00
Parse Platform
378798f789 refactor: Upgrade @babel/eslint-parser from 7.27.1 to 7.27.5 (#9810) 2025-07-04 00:10:40 +02:00
Parse Platform
46821e40c9 refactor: Upgrade @apollo/server from 4.12.0 to 4.12.1 (#9801) 2025-06-22 14:40:39 +02:00
Parse Platform
31b6298193 refactor: Upgrade semver from 7.7.1 to 7.7.2 (#9797) 2025-06-14 01:39:32 +02:00
Parse Platform
cad69ddf8e refactor: Upgrade @babel/eslint-parser from 7.27.0 to 7.27.1 (#9774) 2025-05-28 20:32:21 +02:00
Parse Platform
b324a73026 refactor: Upgrade graphql from 16.10.0 to 16.11.0 (#9764) 2025-05-25 02:57:44 +02:00
Parse Platform
8a15d14cd9 refactor: Upgrade mongodb from 6.13.0 to 6.16.0 (#9757) 2025-05-14 11:15:43 +02:00
Parse Platform
40f9d8a338 refactor: Upgrade @apollo/server from 4.11.2 to 4.12.0 (#9741) 2025-05-03 02:09:47 +02:00
Parse Platform
a975ad0a27 refactor: Upgrade ws from 8.18.0 to 8.18.1 (#9733) 2025-04-23 13:28:27 +01:00
Parse Platform
3de5cc57b9 refactor: Upgrade @babel/eslint-parser from 7.26.5 to 7.27.0 (#9718) 2025-04-16 10:47:36 +01:00
semantic-release-bot
a1d65896cd chore(release): 7.5.2 [skip ci]
## [7.5.2](https://github.com/parse-community/parse-server/compare/7.5.1...7.5.2) (2025-03-21)

### Bug Fixes

* Authentication provider credentials are usable across Parse Server apps; fixes security vulnerability [GHSA-837q-jhwx-cmpv](https://github.com/parse-community/parse-server/security/advisories/GHSA-837q-jhwx-cmpv) ([#9668](https://github.com/parse-community/parse-server/issues/9668)) ([2ff9c71](2ff9c71030))
2025-03-21 09:51:13 +00:00
Parse Platform
1e22d4a269 refactor: Upgrade @graphql-tools/schema from 10.0.13 to 10.0.18 (#9636) 2025-03-18 09:30:52 +01:00
Parse Platform
b163d1beb7 refactor: Upgrade mongodb from 6.12.0 to 6.13.0 (#9638) 2025-03-17 00:40:38 +01:00
Parse Platform
9e31e5f332 refactor: Upgrade graphql from 16.9.0 to 16.10.0 (#9641) 2025-03-16 20:02:02 +01:00
semantic-release-bot
b50f704e0a chore(release): 7.5.1 [skip ci]
## [7.5.1](https://github.com/parse-community/parse-server/compare/7.5.0...7.5.1) (2025-03-14)

### Bug Fixes

* Security upgrade node from 20.18.2-alpine3.20 to 20.19.0-alpine3.20 ([#9646](https://github.com/parse-community/parse-server/issues/9646)) ([9fc0bfb](9fc0bfbe3e))
2025-03-14 10:18:25 +00:00
semantic-release-bot
b2df7417cf chore(release): 7.5.0 [skip ci]
# [7.5.0](https://github.com/parse-community/parse-server/compare/7.4.0...7.5.0) (2025-03-12)

### Bug Fixes

* LiveQueryServer crashes using cacheAdapter on disconnect from Redis 4 server ([#9615](https://github.com/parse-community/parse-server/issues/9615)) ([0769215](0769215d4c))
* Push adapter not loading on some versions of Node 22 ([#9525](https://github.com/parse-community/parse-server/issues/9525)) ([5447c22](5447c222c8))
* Security upgrade node from 20.17.0-alpine3.20 to 20.18.2-alpine3.20 ([#9597](https://github.com/parse-community/parse-server/issues/9597)) ([6114cd9](6114cd9792))

### Features

* Add support for MongoDB `databaseOptions` keys `minPoolSize`, `connectTimeoutMS`, `socketTimeoutMS`, `autoSelectFamily`, `autoSelectFamilyAttemptTimeout` ([#9577](https://github.com/parse-community/parse-server/issues/9577)) ([20f2071](20f2071591))
2025-03-12 23:52:28 +00:00
Parse Platform
1364988f45 refactor: Upgrade semver from 7.6.3 to 7.7.1 (#9639) 2025-03-13 00:51:29 +01:00
Parse Platform
79204f73f4 refactor: Upgrade @babel/eslint-parser from 7.25.9 to 7.26.5 (#9609) 2025-02-12 22:48:52 +01:00
Parse Platform
6cf28762ae refactor: Upgrade @graphql-tools/merge from 9.0.15 to 9.0.17 (#9589) 2025-02-05 19:32:35 +01:00
Parse Platform
74dfc4e9bf refactor: Upgrade @graphql-tools/merge from 9.0.14 to 9.0.15 (#9544) 2025-01-16 16:25:20 +01:00
Parse Platform
ae16aba2cd refactor: Upgrade mime from 4.0.4 to 4.0.6 (#9546) 2025-01-16 14:36:24 +01:00
semantic-release-bot
2cebb88989 chore(release): 7.4.0 [skip ci]
# [7.4.0](https://github.com/parse-community/parse-server/compare/7.3.0...7.4.0) (2024-12-23)

### Bug Fixes

* `Parse.Query.distinct` fails due to invalid aggregate stage 'hint' ([#9295](https://github.com/parse-community/parse-server/issues/9295)) ([5f66c6a](5f66c6a075))
* Security upgrade cross-spawn from 7.0.3 to 7.0.6 ([#9444](https://github.com/parse-community/parse-server/issues/9444)) ([3d034e0](3d034e0a99))
* Security upgrade fast-xml-parser from 4.4.0 to 4.4.1 ([#9262](https://github.com/parse-community/parse-server/issues/9262)) ([992d39d](992d39d508))
* Security upgrade node from 20.14.0-alpine3.20 to 20.17.0-alpine3.20 ([#9300](https://github.com/parse-community/parse-server/issues/9300)) ([15bb17d](15bb17d871))

### Features

* Add support for MongoDB 8 ([#9269](https://github.com/parse-community/parse-server/issues/9269)) ([4756c66](4756c66cd9))
* Add support for PostGIS 3.5 ([#9354](https://github.com/parse-community/parse-server/issues/9354)) ([8ea3538](8ea35382db))
* Add support for Postgres 17 ([#9324](https://github.com/parse-community/parse-server/issues/9324)) ([fa2ee31](fa2ee3196e))
* Upgrade @parse/push-adapter from 6.7.1 to 6.8.0 ([#9489](https://github.com/parse-community/parse-server/issues/9489)) ([286aa66](286aa664ac))
2024-12-23 14:48:00 +00:00
semantic-release-bot
a579eebe79 chore(release): 7.4.0-beta.1 [skip ci]
# [7.4.0-beta.1](https://github.com/parse-community/parse-server/compare/7.3.0...7.4.0-beta.1) (2024-12-23)

### Bug Fixes

* `Parse.Query.distinct` fails due to invalid aggregate stage 'hint' ([#9295](https://github.com/parse-community/parse-server/issues/9295)) ([5f66c6a](5f66c6a075))
* Security upgrade cross-spawn from 7.0.3 to 7.0.6 ([#9444](https://github.com/parse-community/parse-server/issues/9444)) ([3d034e0](3d034e0a99))
* Security upgrade fast-xml-parser from 4.4.0 to 4.4.1 ([#9262](https://github.com/parse-community/parse-server/issues/9262)) ([992d39d](992d39d508))
* Security upgrade node from 20.14.0-alpine3.20 to 20.17.0-alpine3.20 ([#9300](https://github.com/parse-community/parse-server/issues/9300)) ([15bb17d](15bb17d871))

### Features

* Add support for MongoDB 8 ([#9269](https://github.com/parse-community/parse-server/issues/9269)) ([4756c66](4756c66cd9))
* Add support for PostGIS 3.5 ([#9354](https://github.com/parse-community/parse-server/issues/9354)) ([8ea3538](8ea35382db))
* Add support for Postgres 17 ([#9324](https://github.com/parse-community/parse-server/issues/9324)) ([fa2ee31](fa2ee3196e))
* Upgrade @parse/push-adapter from 6.7.1 to 6.8.0 ([#9489](https://github.com/parse-community/parse-server/issues/9489)) ([286aa66](286aa664ac))
2024-12-23 14:11:14 +00:00
semantic-release-bot
3b6ef038b1 chore(release): 7.4.0-alpha.7 [skip ci]
# [7.4.0-alpha.7](https://github.com/parse-community/parse-server/compare/7.4.0-alpha.6...7.4.0-alpha.7) (2024-12-16)

### Features

* Upgrade @parse/push-adapter from 6.7.1 to 6.8.0 ([#9489](https://github.com/parse-community/parse-server/issues/9489)) ([286aa66](286aa664ac))
2024-12-16 18:42:18 +00:00
dependabot[bot]
286aa664ac feat: Upgrade @parse/push-adapter from 6.7.1 to 6.8.0 (#9489) 2024-12-16 19:41:19 +01:00
dependabot[bot]
7bd76be7b2 refactor: Bump @graphql-tools/schema from 10.0.12 to 10.0.13 (#9490) 2024-12-16 15:33:33 +01:00
dependabot[bot]
5b079575ce refactor: Bump @graphql-tools/merge from 9.0.12 to 9.0.14 (#9488) 2024-12-16 14:05:29 +01:00
dependabot[bot]
e1a3b51a07 refactor: Bump @graphql-tools/utils from 10.6.2 to 10.6.3 (#9484) 2024-12-13 19:22:23 +01:00
dependabot[bot]
ce62a9b8de refactor: Bump @graphql-tools/schema from 10.0.11 to 10.0.12 (#9486) 2024-12-13 17:11:18 +01:00
dependabot[bot]
b0aecda4ed refactor: Bump @apollo/client from 3.12.2 to 3.12.3 (#9485) 2024-12-13 16:39:22 +01:00
dependabot[bot]
05e2471409 refactor: Bump lint-staged from 15.2.10 to 15.2.11 (#9482) 2024-12-11 19:28:28 +01:00
dependabot[bot]
02cd5a39b4 refactor: Bump mongodb from 6.11.0 to 6.12.0 (#9481) 2024-12-11 17:27:35 +01:00
dependabot[bot]
7db9ca0249 refactor: Bump @graphql-tools/merge from 9.0.11 to 9.0.12 (#9476) 2024-12-10 22:57:31 +01:00
dependabot[bot]
2f56a57e4e refactor: Bump @node-rs/bcrypt from 1.10.5 to 1.10.7 (#9480)
ot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-10 22:15:49 +01:00
dependabot[bot]
b6aaa1e09a refactor: Bump @babel/cli from 7.25.9 to 7.26.4 (#9475) 2024-12-10 20:39:22 +01:00
dependabot[bot]
9a660b98de refactor: Bump @graphql-tools/schema from 10.0.10 to 10.0.11 (#9477) 2024-12-10 11:44:18 +01:00
Manuel
d097929e1c ci: Fix invalid MongoDB version ranges for tests (#9474) 2024-12-09 01:18:57 +01:00
Parse Platform
6146777151 refactor: Security upgrade express from 4.21.1 to 4.21.2 (#9473) 2024-12-08 12:57:51 +01:00
dependabot[bot]
30d1e007b6 refactor: Bump @graphql-tools/utils from 10.6.1 to 10.6.2 (#9471) 2024-12-08 11:04:32 +01:00
dependabot[bot]
0825f46650 refactor: Bump @apollo/client from 3.11.10 to 3.12.2 (#9472) 2024-12-08 01:43:14 +01:00
dependabot[bot]
0a8f569697 refactor: Bump @graphql-tools/schema from 10.0.9 to 10.0.10 (#9465) 2024-12-03 11:15:53 +01:00
dependabot[bot]
f75bec9e75 refactor: Bump @graphql-tools/utils from 10.5.6 to 10.6.1 (#9461) 2024-11-30 17:56:44 +01:00
dependabot[bot]
7242a4f6a3 refactor: Bump @graphql-tools/merge from 9.0.9 to 9.0.11 (#9462) 2024-11-30 11:37:49 +01:00
dependabot[bot]
d9c59cc6ab refactor: Bump mongodb from 6.10.0 to 6.11.0 (#9457) 2024-11-28 18:40:34 +01:00
dependabot[bot]
e9ff8c7c5c refactor: Bump @graphql-tools/schema from 10.0.8 to 10.0.9 (#9455) 2024-11-23 20:57:50 +00:00
dependabot[bot]
ef33ac3207 refactor: Bump husky from 9.1.6 to 9.1.7 (#9451) 2024-11-21 19:55:15 +01:00
dependabot[bot]
2ba374fe04 refactor: Bump @parse/push-adapter from 6.7.0 to 6.7.1 (#9452) 2024-11-21 17:59:48 +01:00
dependabot[bot]
b20a1c745c refactor: Bump yaml from 2.6.0 to 2.6.1 (#9446) 2024-11-20 20:36:32 +01:00