6.5.2

6.5.2 (2024-03-02)

Bug Fixes

• Security upgrade @parse/push-adapter from 5.1.0 to 5.1.1 (#8975) (0fa0aab)

6.5.1

6.5.1 (2024-03-02)

Bug Fixes

• Security upgrade @parse/push-adapter from 5.0.2 to 5.1.0 (#8972) (bba24dd)

7.0.0-alpha.21

7.0.0-alpha.21 (2024-03-01)

Bug Fixes

• Deny request if master key is not set in Parse Server option masterKeyIps regardless of ACL and CLP (#8957) (a7b5b38)

BREAKING CHANGES

• A request using the master key will now be rejected as unauthorized if the IP from which the request originates is not set in the Parse Server option masterKeyIps, even if the request does not require the master key permission, for example for a public object in a public class class. (a7b5b38)

7.0.0-alpha.20

7.0.0-alpha.20 (2024-03-01)

Bug Fixes

• Improve PostgreSQL injection detection; fixes security vulnerability GHSA-6927-3vr9-fxf2 which affects Parse Server deployments using a Postgres database (#8961) (cbefe77)

6.5.0

6.5.0 (2024-03-01)

Bug Fixes

• Improve PostgreSQL injection detection; fixes security vulnerability GHSA-6927-3vr9-fxf2 which affects Parse Server deployments using a Postgres database (#8960) (a6e6549)

7.0.0-alpha.19

7.0.0-alpha.19 (2024-02-15)

Features

• Node process exits with error code 1 on uncaught exception to allow custom uncaught exception handling (#8894) (70c280c)

BREAKING CHANGES

• Node process now exits with code 1 on uncaught exceptions, enabling custom handlers that were blocked by Parse Server's default behavior of re-throwing errors. This change may lead to automatic process restarts by the environment, unlike before. (70c280c)

7.0.0-alpha.18

7.0.0-alpha.18 (2024-02-15)

Features

• Deprecation DEPPS6: Authentication adapters disabled by default (#8858) (0cf58eb)

BREAKING CHANGES

• Authentication adapters are disabled by default; to use an authentication adapter it needs to be explicitly enabled in the Parse Server authentication adapter option auth.<provider>.enabled: true (0cf58eb)

7.0.0-alpha.17

7.0.0-alpha.17 (2024-02-15)

Features

• Deprecation DEPPS8: Parse Server option allowExpiredAuthDataToken defaults to false (#8860) (e29845f)

BREAKING CHANGES

• Parse Server option allowExpiredAuthDataToken defaults to false; a 3rd party authentication token will be validated every time the user tries to log in and the login will fail if the token has expired; the effect of this change may differ for different authentication adapters, depending on the token lifetime and the token refresh logic of the adapter (e29845f)

7.0.0-alpha.16

7.0.0-alpha.16 (2024-02-14)

Features

• Deprecation DEPPS9: LiveQuery fields option is renamed to keys (#8852) (38983e8)

BREAKING CHANGES

• LiveQuery fields option is renamed to keys (38983e8)

7.0.0-alpha.15

7.0.0-alpha.15 (2024-02-14)

Features

• Deprecation DEPPS7: Remove deprecated Cloud Code file trigger syntax (#8855) (4e6a375)

BREAKING CHANGES

• Cloud Code file trigger syntax has been aligned with object trigger syntax, for example Parse.Cloud.beforeDeleteFile' has been changed to Parse.Cloud.beforeDelete(Parse.File, (request) => {})' (4e6a375)