Files
kami-parse-server/changelogs/CHANGELOG_alpha.md
semantic-release-bot b2fe087a02 chore(release): 5.3.0-alpha.26 [skip ci]
# [5.3.0-alpha.26](https://github.com/parse-community/parse-server/compare/5.3.0-alpha.25...5.3.0-alpha.26) (2022-09-17)

### Bug Fixes

* sorting by non-existing value throws `INVALID_SERVER_ERROR` on Postgres ([#8157](https://github.com/parse-community/parse-server/issues/8157)) ([3b775a1](3b775a1fb8))
2022-09-17 18:49:17 +00:00

35 KiB

5.3.0-alpha.26 (2022-09-17)

Bug Fixes

  • sorting by non-existing value throws INVALID_SERVER_ERROR on Postgres (#8157) (3b775a1)

5.3.0-alpha.25 (2022-09-17)

Bug Fixes

  • updating object includes unchanged keys in client response for certain key types (#8159) (37af1d7)

5.3.0-alpha.24 (2022-09-17)

Bug Fixes

  • query aggregation pipeline cannot handle value of type Date when directAccess: true (#8167) (e424137)

5.3.0-alpha.23 (2022-09-17)

Bug Fixes

  • liveQuery with containedIn not working when object field is an array (#8128) (1d9605b)

5.3.0-alpha.22 (2022-09-16)

Bug Fixes

  • brute force guessing of user sensitive data via search patterns (GHSA-2m6g-crv8-p3c6) (#8146) [skip release] (4c0c7c7)
  • push notifications badge doesn't update with Installation beforeSave trigger (#8162) (3c75c2b)

5.3.0-alpha.21 (2022-08-05)

Bug Fixes

  • internal indices for classes _Idempotency and _Role are not protected in defined schema (#8121) (c16f529)

5.3.0-alpha.20 (2022-07-22)

Bug Fixes

  • security upgrade undici from 5.6.0 to 5.8.0 (#8108) (4aa016b)

5.3.0-alpha.19 (2022-07-03)

Bug Fixes

  • certificate in Apple Game Center auth adapter not validated [skip release] (#8058) (75af9a2)
  • graphQL query ignores condition equalTo with value false (#8032) (7f5a15d)
  • invalid file request not properly handled [skip release] (#8062) (4c9e956)
  • protected fields exposed via LiveQuery (GHSA-crrq-vr9j-fxxh) [skip release] (#8076) (9fd4516)

5.3.0-alpha.18 (2022-06-17)

Bug Fixes

  • auto-release process may fail if optional back-merging task fails (#8051) (cf925e7)

5.3.0-alpha.17 (2022-06-17)

Bug Fixes

  • errors in GraphQL do not show the original error but a general Unexpected Error (#8045) (0d81887)
  • websocket connection of LiveQuery interrupts frequently (#8048) (03caae1)

5.3.0-alpha.16 (2022-06-11)

Bug Fixes

  • live query role cache does not clear when a user is added to a role (#8026) (199dfc1)

5.3.0-alpha.15 (2022-06-05)

Bug Fixes

  • interrupted WebSocket connection not closed by LiveQuery server (#8012) (2d5221e)

5.3.0-alpha.14 (2022-05-29)

Features

  • align file trigger syntax with class trigger; use the new syntax Parse.Cloud.beforeSave(Parse.File, (request) => {}), the old syntax Parse.Cloud.beforeSaveFile((request) => {}) has been deprecated (#7966) (c6dcad8)

5.3.0-alpha.13 (2022-05-28)

Features

  • selectively enable / disable default authentication adapters (#7953) (c1e808f)

5.3.0-alpha.12 (2022-05-20)

Bug Fixes

  • afterSave trigger removes pointer in Parse object (#7913) (47d796e)

5.3.0-alpha.11 (2022-05-18)

Features

  • replace GraphQL Apollo with GraphQL Yoga (#7967) (1aa2204)

5.3.0-alpha.10 (2022-05-09)

Features

5.3.0-alpha.9 (2022-05-07)

Bug Fixes

  • depreciate allowClientClassCreation defaulting to true (#7925) (38ed96a)

5.3.0-alpha.8 (2022-05-06)

Features

5.3.0-alpha.7 (2022-04-25)

Bug Fixes

  • security upgrade @parse/fs-files-adapter from 1.2.1 to 1.2.2 (#7948) (20fc4e2)

5.3.0-alpha.6 (2022-04-11)

Bug Fixes

  • peer dependency mismatch for GraphQL dependencies (#7934) (b7a1d76)

5.3.0-alpha.5 (2022-04-09)

Bug Fixes

  • security upgrade moment from 2.29.1 to 2.29.2 (#7931) (6b68593)

5.3.0-alpha.4 (2022-04-04)

Bug Fixes

  • custom database options are not passed to MongoDB GridFS (#7911) (a72b384)

5.3.0-alpha.3 (2022-03-27)

Features

5.3.0-alpha.2 (2022-03-27)

Bug Fixes

  • security upgrade parse push adapter from 4.1.0 to 4.1.2 (#7893) (ef56e98)

5.3.0-alpha.1 (2022-03-27)

Features

5.2.1-alpha.2 (2022-03-26)

Performance Improvements

  • reduce database operations when using the constant parameter in Cloud Function validation (#7892) (48bd512)

5.2.1-alpha.1 (2022-03-26)

Bug Fixes

  • return correct response when revert is used in beforeSave (#7839) (f63fb2b)

5.2.0-alpha.3 (2022-03-24)

Bug Fixes

  • security bump minimist from 1.2.5 to 1.2.6 (#7884) (c5cf282)

5.2.0-alpha.2 (2022-03-24)

Bug Fixes

  • sensitive keyword detection may produce false positives (#7881) (0d6f9e9)

5.2.0-alpha.1 (2022-03-23)

Features

  • improved LiveQuery error logging with additional information (#7837) (443a509)

5.0.0-alpha.29 (2022-03-12)

Features

BREAKING CHANGES

  • This requires Node.js version >=12.22.10. (5ace99d)

5.0.0-alpha.28 (2022-03-12)

Bug Fixes

  • security vulnerability that allows remote code execution (GHSA-p6h4-93qp-jhcm) (#7844) (e569f40)

5.0.0-alpha.27 (2022-03-12)

Reverts

5.0.0-alpha.26 (2022-02-25)

Bug Fixes

  • package.json & package-lock.json to reduce vulnerabilities (#7823) (5ca2288)

5.0.0-alpha.25 (2022-02-23)

Bug Fixes

5.0.0-alpha.24 (2022-02-10)

Bug Fixes

  • security upgrade follow-redirects from 1.14.7 to 1.14.8 (#7801) (70088a9)

5.0.0-alpha.23 (2022-02-06)

Bug Fixes

  • server crash using GraphQL due to missing @apollo/client peer dependency (#7787) (08089d6)

5.0.0-alpha.22 (2022-02-06)

Features

  • upgrade to MongoDB Node.js driver 4.x for MongoDB 5.0 support (#7794) (f88aa2a)

BREAKING CHANGES

  • The MongoDB GridStore adapter has been removed. By default, Parse Server already uses GridFS, so if you do not manually use the GridStore adapter, you can ignore this change. (f88aa2a)

5.0.0-alpha.21 (2022-01-25)

Features

  • add Cloud Code context to ParseObject.fetch (#7779) (315290d)

5.0.0-alpha.20 (2022-01-22)

Bug Fixes

5.0.0-alpha.19 (2022-01-22)

Bug Fixes

5.0.0-alpha.18 (2022-01-13)

Bug Fixes

  • security upgrade follow-redirects from 1.14.6 to 1.14.7 (#7769) (8f5a861)

5.0.0-alpha.17 (2022-01-13)

Bug Fixes

5.0.0-alpha.16 (2022-01-02)

Features

5.0.0-alpha.15 (2022-01-02)

Features

  • support postgresql protocol in database URI (#7757) (caf4a23)

5.0.0-alpha.14 (2022-01-02)

Features

  • support relativeTime query constraint on Postgres (#7747) (16b1b2a)

5.0.0-alpha.13 (2021-12-08)

Bug Fixes

  • node engine compatibility did not include node 16 (#7739) (ea7c014)

5.0.0-alpha.12 (2021-12-06)

Bug Fixes

  • adding or modifying a nested property requires addField permissions (#7679) (6a6248b)

5.0.0-alpha.11 (2021-11-29)

Bug Fixes

5.0.0-alpha.10 (2021-11-29)

Bug Fixes

5.0.0-alpha.9 (2021-11-27)

Bug Fixes

  • unable to use objectId size higher than 19 on GraphQL API (#7627) (ed86c80)

5.0.0-alpha.8 (2021-11-18)

Features

BREAKING CHANGES

  • Removes official Node 15 support which has reached it end-of-life date. (45cc58c)

5.0.0-alpha.7 (2021-11-12)

Bug Fixes

  • node engine range has no upper limit to exclude incompatible node versions (#7692) (573558d)

5.0.0-alpha.6 (2021-11-10)

Reverts

  • refactor: allow ES import for cloud string if package type is module (b64640c)

5.0.0-alpha.5 (2021-11-01)

Features

5.0.0-alpha.4 (2021-10-31)

Features

5.0.0-alpha.3 (2021-10-29)

Bug Fixes

  • combined and query with relational query condition returns incorrect results (#7593) (174886e)

5.0.0-alpha.2 (2021-10-27)

Bug Fixes

  • setting a field to null does not delete it via GraphQL API (#7649) (626fad2)

BREAKING CHANGES

  • To delete a field via the GraphQL API, the field value has to be set to null. Previously, setting a field value to null would save a null value in the database, which was not according to the GraphQL specs. To delete a file field use file: null, the previous way of using file: { file: null } has become obsolete. (626fad2)

5.0.0-alpha.1 (2021-10-12)

Breaking Changes

  • Improved schema caching through database real-time hooks. Reduces DB queries, decreases Parse Query execution time and fixes a potential schema memory leak. If multiple Parse Server instances connect to the same DB (for example behind a load balancer), set the Parse Server Option databaseOptions.enableSchemaHooks: true to enable this feature and keep the schema in sync across all instances. Failing to do so will cause a schema change to not propagate to other instances and re-syncing will only happen when these instances restart. The options enableSingleSchemaCache and schemaCacheTTL have been removed. To use this feature with MongoDB, a replica set cluster with change stream support is required. (Diamond Lewis, SebC) #7214
  • Added file upload restriction. File upload is now only allowed for authenticated users by default for improved security. To allow file upload also for Anonymous Users or Public, set the fileUpload parameter in the Parse Server Options (dblythy, Manuel Trezza) #7071
  • Removed parse-server-simple-mailgun-adapter dependency; to continue using the adapter it has to be explicitly installed (Manuel Trezza) #7321
  • Remove support for MongoDB 3.6 which has reached its End-of-Life date and PostgreSQL 10 (Manuel Trezza) #7315
  • Remove support for Node 10 which has reached its End-of-Life date (Manuel Trezza) #7314
  • Remove S3 Files Adapter from Parse Server, instead install separately as @parse/s3-files-adapter (Manuel Trezza) #7324
  • Remove Session field restricted; the field was a code artifact from a feature that never existed in Open Source Parse Server; if you have been using this field for custom purposes, consider that for new Parse Server installations the field does not exist anymore in the schema, and for existing installations the field default value false will not be set anymore when creating a new session (Manuel Trezza) #7543
  • ci: add node engine version check (Manuel Trezza) #7574

Notable Changes

  • Alphabetical ordered GraphQL API, improved GraphQL Schema cache system and fix GraphQL input reassign issue (Moumouls) #7344
  • Added Parse Server Security Check to report weak security settings (Manuel Trezza, dblythy) #7247
  • EXPERIMENTAL: Added new page router with placeholder rendering and localization of custom and feature pages such as password reset and email verification (Manuel Trezza) #7128
  • EXPERIMENTAL: Added custom routes to easily customize flows for password reset, email verification or build entirely new flows (Manuel Trezza) #7231
  • Added Deprecation Policy to govern the introduction of breaking changes in a phased pattern that is more predictable for developers (Manuel Trezza) #7199
  • Add REST API endpoint /loginAs to create session of any user with master key; allows to impersonate another user. (GormanFletcher) #7406
  • Add official support for MongoDB 5.0 (Manuel Trezza) #7469
  • Added Parse Server Configuration enforcePrivateUsers, which will remove public access by default on new Parse.Users (dblythy) #7319

Other Changes

  • Support native mongodb syntax in aggregation pipelines (Raschid JF Rafeally) #7339
  • Fix error when a not yet inserted job is updated (Antonio Davi Macedo Coelho de Castro) #7196
  • request.context for afterFind triggers (dblythy) #7078
  • Winston Logger interpolating stdout to console (dplewis) #7114
  • Added convenience method Parse.Cloud.sendEmail(...) to send email via email adapter in Cloud Code (dblythy) #7089
  • LiveQuery support for $and, $nor, $containedBy, $geoWithin, $geoIntersects queries (dplewis) #7113
  • Supporting patterns in LiveQuery server's config parameter classNames (Nes-si) #7131
  • Added requireAnyUserRoles and requireAllUserRoles for Parse Cloud validator (dblythy) #7097
  • Support Facebook Limited Login (miguel-s) #7219
  • Removed Stage name check on aggregate pipelines (BRETT71) #7237
  • Retry transactions on MongoDB when it fails due to transient error (Antonio Davi Macedo Coelho de Castro) #7187
  • Bump tests to use Mongo 4.4.4 (Antonio Davi Macedo Coelho de Castro) #7184
  • Added new account lockout policy option accountLockout.unlockOnPasswordReset to automatically unlock account on password reset (Manuel Trezza) #7146
  • Test Parse Server continuously against all recent MongoDB versions that have not reached their end-of-life support date, added MongoDB compatibility table to Parse Server docs (Manuel Trezza) #7161
  • Test Parse Server continuously against all recent Node.js versions that have not reached their end-of-life support date, added Node.js compatibility table to Parse Server docs (Manuel Trezza) 7161
  • Throw error on invalid Cloud Function validation configuration (dblythy) #7154
  • Allow Cloud Validator options to be async (dblythy) #7155
  • Optimize queries on classes with pointer permissions (Pedro Diaz) #7061
  • Test Parse Server continuously against all relevant Postgres versions (minor versions), added Postgres compatibility table to Parse Server docs (Corey Baker) #7176
  • Randomize test suite (Diamond Lewis) #7265
  • LDAP: Properly unbind client on group search error (Diamond Lewis) #7265
  • Improve data consistency in Push and Job Status update (Diamond Lewis) #7267
  • Excluding keys that have trailing edges.node when performing GraphQL resolver (Chris Bland) #7273
  • Added centralized feature deprecation with standardized warning logs (Manuel Trezza) #7303
  • Use Node.js 15.13.0 in CI (Olle Jonsson) #7312
  • Fix file upload issue for S3 compatible storage (Linode, DigitalOcean) by avoiding empty tags property when creating a file (Ali Oguzhan Yildiz) #7300
  • Add building Docker image as CI check (Manuel Trezza) #7332
  • Add NPM package-lock version check to CI (Manuel Trezza) #7333
  • Fix incorrect LiveQuery events triggered for multiple subscriptions on the same class with different events #7341
  • Fix select and excludeKey queries to properly accept JSON string arrays. Also allow nested fields in exclude (Corey Baker) #7242
  • Fix LiveQuery server crash when using $all query operator on a missing object key (Jason Posthuma) #7421
  • Added runtime deprecation warnings (Manuel Trezza) #7451
  • Add ability to pass context of an object via a header, X-Parse-Cloud-Context, for Cloud Code triggers. The header addition allows client SDK's to add context without injecting _context in the body of JSON objects (Corey Baker) #7437
  • Add CI check to add changelog entry (Manuel Trezza) #7512
  • Refactor: uniform issue templates across repos (Manuel Trezza) #7528
  • ci: bump ci environment (Manuel Trezza) #7539
  • CI now pushes docker images to Docker Hub (Corey Baker) #7548
  • Allow afterFind and afterLiveQueryEvent to set unsaved pointers and keys (dblythy) #7310
  • Allow setting descending sort to full text queries (dblythy) #7496
  • Allow cloud string for ES modules (Daniel Blyth) #7560
  • docs: Introduce deprecation ID for reference in comments and online search (Manuel Trezza) #7562
  • refactor: deprecate Parse.Cloud.httpRequest; it is recommended to use a HTTP library instead. (Daniel Blyth) #7595
  • refactor: Modernize HTTPRequest tests (brandongregoryscott) #7604
  • Allow liveQuery on Session class (Daniel Blyth) #7554