5.3.0-alpha.24

5.3.0-alpha.24 (2022-09-17)

Bug Fixes

• query aggregation pipeline cannot handle value of type Date when directAccess: true (#8167) (e424137)

5.3.0-alpha.23

5.3.0-alpha.23 (2022-09-17)

Bug Fixes

• liveQuery with containedIn not working when object field is an array (#8128) (1d9605b)

5.3.0-alpha.22

5.3.0-alpha.22 (2022-09-16)

Bug Fixes

• brute force guessing of user sensitive data via search patterns (GHSA-2m6g-crv8-p3c6) (#8146) [skip release] (4c0c7c7)
• push notifications badge doesn't update with Installation beforeSave trigger (#8162) (3c75c2b)

5.2.5

5.2.5 (2022-09-02)

Bug Fixes

• brute force guessing of user sensitive data via search patterns; this fixes a security vulnerability in which internal and protected fields may be used as query constraints to guess the value of these fields and obtain sensitive data (GHSA-2m6g-crv8-p3c6) (#8144) (e39d51b)

4.10.14

4.10.14 (2022-09-02)

Bug Fixes

• brute force guessing of user sensitive data via search patterns; this fixes a security vulnerability in which internal and protected fields may be used as query constraints to guess the value of these fields and obtain sensitive data (GHSA-2m6g-crv8-p3c6) (#8143) (634c44a)

5.3.0-alpha.21

5.3.0-alpha.21 (2022-08-05)

Bug Fixes

• internal indices for classes _Idempotency and _Role are not protected in defined schema (#8121) (c16f529)

5.3.0-alpha.20

5.3.0-alpha.20 (2022-07-22)

Bug Fixes

• security upgrade undici from 5.6.0 to 5.8.0 (#8108) (4aa016b)

5.3.0-alpha.19

5.3.0-alpha.19 (2022-07-03)

Bug Fixes

• certificate in Apple Game Center auth adapter not validated [skip release] (#8058) (75af9a2)
• graphQL query ignores condition equalTo with value false (#8032) (7f5a15d)
• invalid file request not properly handled [skip release] (#8062) (4c9e956)
• protected fields exposed via LiveQuery (GHSA-crrq-vr9j-fxxh) [skip release] (#8076) (9fd4516)

5.2.4

5.2.4 (2022-06-30)

Bug Fixes

• protected fields exposed via LiveQuery; this removes protected fields from the client response; this may be a breaking change if your app is currently expecting to receive these protected fields (GHSA-crrq-vr9j-fxxh) (#8074) (#8073) (309f64c)

4.10.13

4.10.13 (2022-06-30)

Bug Fixes

• protected fields exposed via LiveQuery; this removes protected fields from the client response; this may be a breaking change if your app is currently expecting to receive these protected fields (GHSA-crrq-vr9j-fxxh) (#8074) (054f3e6)