6.0.0-alpha.23

6.0.0-alpha.23 (2023-01-08)

Features

• Access the internal scope of Parse Server using the new maintenanceKey; the internal scope contains unofficial and undocumented fields (prefixed with underscore _) which are used internally by Parse Server; you may want to manipulate these fields for out-of-band changes such as data migration or correction tasks; changes within the internal scope of Parse Server may happen at any time without notice or changelog entry, it is therefore recommended to look at the source code of Parse Server to understand the effects of manipulating internal fields before using the key; it is discouraged to use the maintenanceKey for routine operations in a production environment; see access scopes (#8212) (f3bcc93)

BREAKING CHANGES

• Fields in the internal scope of Parse Server (prefixed with underscore _) are only returned using the new maintenanceKey; previously the masterKey allowed reading of internal fields; see access scopes for a comparison of the keys' access permissions (#8212) (f3bcc93)

6.0.0-alpha.22

6.0.0-alpha.22 (2023-01-08)

Features

• Adapt verifyServerUrl for new asynchronous Parse Server start-up states (#8366) (ffa4974)

BREAKING CHANGES

• The method ParseServer.verifyServerUrl now returns a promise instead of a callback. (ffa4974)

6.0.0-alpha.21

6.0.0-alpha.21 (2023-01-06)

Features

• Add request rate limiter based on IP address (#8174) (6c79f6a)

6.0.0-alpha.20

6.0.0-alpha.20 (2023-01-06)

Features

• Add Node 19 support (#8363) (a4990dc)

6.0.0-alpha.19

6.0.0-alpha.19 (2023-01-05)

Features

• Remove deprecation DEPPS1: Native MongoDB syntax in aggregation pipeline (#8362) (d0d30c4)

BREAKING CHANGES

• The MongoDB aggregation pipeline requires native MongoDB syntax instead of the custom Parse Server syntax; for example pipeline stage names require a leading dollar sign like $match and the MongoDB document ID is referenced using _id instead of objectId (#8362) (d0d30c4)

6.0.0-alpha.18

6.0.0-alpha.18 (2023-01-05)

Bug Fixes

• The client IP address may be determined incorrectly in some cases; this fixes a security vulnerability in which the Parse Server option masterKeyIps may be circumvented, see GHSA-vm5r-c87r-pf6x (#8372) (892040d)

BREAKING CHANGES

• The mechanism to determine the client IP address has been rewritten; to correctly determine the IP address it is now required to set the Parse Server option trustProxy accordingly if Parse Server runs behind a proxy server, see the express framework's trust proxy setting (#8372) (892040d)

6.0.0-alpha.17

6.0.0-alpha.17 (2022-12-22)

Features

• Upgrade Node Package Manager lock file package-lock.json to version 2 (#8285) (ee72467)

BREAKING CHANGES

• The Node Package Manager lock file package-lock.json is upgraded to version 2; while it is backwards with version 1 for the npm installer, consider this if you run any non-npm analysis tools that use the lock file (#8285) (ee72467)

6.0.0-alpha.16

6.0.0-alpha.16 (2022-12-21)

Features

• Asynchronous initialization of Parse Server (#8232) (99fcf45)

BREAKING CHANGES

• This release introduces the asynchronous initialization of Parse Server to prevent mounting Parse Server before being ready to receive request; it changes how Parse Server is imported, initialized and started; it also removes the callback serverStartComplete; see the Parse Server 6 migration guide for more details (#8232) (99fcf45)

6.0.0-alpha.15

6.0.0-alpha.15 (2022-12-20)

Bug Fixes

• Nested objects are encoded incorrectly for MongoDB (#8209) (1412666)

BREAKING CHANGES

• Nested objects are now properly stored in the database using JSON serialization; previously, due to a bug only top-level objects were serialized, but nested objects were saved as raw JSON; for example, a nested Date object was saved as a JSON object like { "__type": "Date", "iso": "2020-01-01T00:00:00.000Z" } instead of its serialized representation 2020-01-01T00:00:00.000Z (#8209) (1412666)

6.0.0-alpha.14

6.0.0-alpha.14 (2022-12-16)

Features

• Write log entry when request with master key is rejected as outside of masterKeyIps (#8350) (e22b73d)